Hi,

I have got the below alert  from scom. can anyone help me on this. early response would be highly appreciated. 

Service: MsDtsServer120

Error: 0x80070005

Details: Access is denied.



One or more workflows were affected by this.


Workflow name: Microsoft.SQLServer.2014.IntegrationServices.ServiceMonitor

Instance name: MsDtsServer120

Regards,

Arjun Kumar

Hi,

I am usind command channel in my SCOM 2012R2 infrastructure to send notifications to service Now for generation of tickets.

I want to know if I can send detailed report, for eg. - If CPU utilization of a server is high then an alert will be generated. Now I want that alert to have the details like which running service in that server is utilizing how much of CPU (as its not possible for me to login in to the server to check this, if CPU utilization is more than 95%).

Is it possible to get these details in the alert. Please advise. Thanks in advance..!!

Aakash Saxena

Hello,

I created a PowerShell Grid View to get specific alerts based on several criteria (like MP source) not available in standard State View.

But I would like to know, if there is a way to get associated Alert object tasks on right pane ? There is no task at this moment because I use "$DataObject = $ScriptContext.CreateInstance("xsd://foo!bar/baz")" which is not based on any known class. Or maybe you know the class I can target ? Like for example, Windows computer "$dataObject=$ScriptContext.CreateFromObject($relatedItem)" where relateditem is an instance of a Windows Computer class.

Or maybe add a function when you right click on object (like Refresh function).

Best regards.

Hi everyone,

I've been working on this issue for a while and I am still no closer to finding out what the problem is.  If anybody can offer any other advice or things to check, I'm all ears.

I'm running SCOM 2012 R2 with UR2, and the Cluster Management Pack v6.0.7063.0

My problem is on one particular batch of cluster servers where I am getting the following error.

Name: Operations Manager failed to run a WMI query for WMI events

Alert Description:

Module was unable to enumerate the WMI data

Error: 0x800706ba

Details: The RPC server is unavailable

Workflow name: Microsoft.Windows.Cluster.Node.StateMonitoring

Instance Name: servername.domain.local

Instance ID: {instance_id}

Management group: SCOM_Management_Grp_Name

I am getting this alert regardless of whether I run the Windows Cluster Action Account as Local System, or as a domain user with full local admin privileges on all the cluster nodes.

When looking at the management pack and the workflow in particular (Microsoft.Windows.Cluster.Node.StateMonitoring), I can see that it's trying to accessMSCluster_Node in the root\MSCLUSTER WMI namespace.

This is the workflow for your information...

<UnitMonitor> ID="Microsoft.Windows.Cluster.Node.StateMonitoring" Accessibility="Public" Enabled="onEssentialMonitoring" Target="ClusLibrary!Microsoft.Windows.Cluster.Node" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="ClusLibrary!Microsoft.Windows.Cluster.CheckState" ConfirmDelivery="false"><Category>AvailabilityHealth</Category><AlertSettings AlertMessage="Microsoft.Windows.Cluster.Node.StateMonitoring.AlertMessage"><AlertOnState>Warning</AlertOnState><AutoResolve>true</AutoResolve><AlertPriority>Normal</AlertPriority><AlertSeverity>MatchMonitorHealth</AlertSeverity><AlertParameters><AlertParameter1>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1><AlertParameter2>$Target/Property[Type="ClusLibrary!Microsoft.Windows.Cluster.Node"]/ClusterName$</AlertParameter2></AlertParameters></AlertSettings><OperationalStates><OperationalState ID="Success" MonitorTypeStateID="Online" HealthState="Success" /><OperationalState ID="Warning" MonitorTypeStateID="Partial" HealthState="Warning" /><OperationalState ID="Error" MonitorTypeStateID="NotOnline" HealthState="Error" /></OperationalStates><Configuration><ClusterObjectName>$Target/Property[Type='ClusLibrary!Microsoft.Windows.Cluster.Node']/NodeName$</ClusterObjectName><PollInterval>60</PollInterval><ClusterObjectClass>MSCLUSTER_Node</ClusterObjectClass><OnlineExpression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery></ValueExpression><Operator>Equal</Operator><ValueExpression><Value Type="String">0</Value></ValueExpression></SimpleExpression></OnlineExpression><OnlineExpressionOnDemand><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='State']</XPathQuery></ValueExpression><Operator>Equal</Operator><ValueExpression><Value Type="String">0</Value></ValueExpression></SimpleExpression></OnlineExpressionOnDemand><PartialExpression><Or><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery></ValueExpression><Operator>Equal</Operator><ValueExpression><Value Type="String">2</Value></ValueExpression></SimpleExpression></Expression><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery></ValueExpression><Operator>Equal</Operator><ValueExpression><Value Type="String">3</Value></ValueExpression></SimpleExpression></Expression></Or></PartialExpression><PartialExpressionOnDemand><Or><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='State']</XPathQuery></ValueExpression><Operator>Equal</Operator><ValueExpression><Value Type="String">2</Value></ValueExpression></SimpleExpression></Expression><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='State']</XPathQuery></ValueExpression><Operator>Equal</Operator><ValueExpression><Value Type="String">3</Value></ValueExpression></SimpleExpression></Expression></Or></PartialExpressionOnDemand><NotOnlineExpression><And><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery></ValueExpression><Operator>NotEqual</Operator><ValueExpression><Value Type="String">0</Value></ValueExpression></SimpleExpression></Expression><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery></ValueExpression><Operator>NotEqual</Operator><ValueExpression><Value Type="String">2</Value></ValueExpression></SimpleExpression></Expression><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='EventNewState']</XPathQuery></ValueExpression><Operator>NotEqual</Operator><ValueExpression><Value Type="String">3</Value></ValueExpression></SimpleExpression></Expression></And></NotOnlineExpression><NotOnlineExpressionOnDemand><And><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='State']</XPathQuery></ValueExpression><Operator>NotEqual</Operator><ValueExpression><Value Type="String">0</Value></ValueExpression></SimpleExpression></Expression><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='State']</XPathQuery></ValueExpression><Operator>NotEqual</Operator><ValueExpression><Value Type="String">2</Value></ValueExpression></SimpleExpression></Expression><Expression><SimpleExpression><ValueExpression><XPathQuery Type="String">Property[@Name='State']</XPathQuery></ValueExpression><Operator>NotEqual</Operator><ValueExpression><Value Type="String">3</Value></ValueExpression></SimpleExpression></Expression></And></NotOnlineExpressionOnDemand><WMIFields>Name, State</WMIFields></Configuration></UnitMonitor>

I can confirm that I am able to browse the MSCluster_Node class locally, as well as remotely using WMIEXPLORER and WBEMTEST,however it only works when I set the Authentication Level toPacket Privacy.  If I do not select Packet Privacy, a WMI event log error 5605 is logged on the remote servers application log that says...

The root\mscluster namespace is marked with the RequiresEncryption flag.  Access to this namespace might be denied if the script or application does not have the appropriate authentication level.  Change the authentication level to Pkt_Privacy and run the script or application again.

I can confirm that all firewalls are turned off, and there are no firewalls between the management servers and the agents in question.  AV exclusions have been done and appear to be in place.  The nodes are all Windows 2008 R2 with SP1.  As far as I can tell there is plenty of memory available on each of the nodes in question (50%+) of RAM is available. 

If I manually run the "Discover the Windows Server 2008 R2 Cluster Components" task in the Cluster Service State section of the management pack in the Monitoring Pane in the console, on the nodes in question - the discovery runs successfully.

Does anybody have any other ideas or suggestions I could try?

Many thanks in advance,

Noel.

http://www.dreamension.net

My system has SCOM 2012 (no SP1, no R2). I have completed step in below.

- import TomCat  MP

- deploy BeanSpy (no authen version) to TomCat, the web is https, it uses SSL certificate issued by internal Microsoft CA. I have added Trust Root to my computer and service account.

- run NewJEEAPPServer.ps1

The result, 

- work function, I can see performance and deep monitored profiles in SCOM monitoring

- does work function, not thing in application and configurations.

Investigation

- I see error message in EventViewer\Operation Manger saying, "HTTPGet.vbs: HTTP communication failed with: https://xxxx -SendError - -2146697191". I have copy https://xx to open in IE. It can open in IE.

Has anyone success configuring this MP share your tip and trick? Or, can anyone please advise the solution to fix?

Thank you in advance,

Naruphon

___________________________________________________ Naruphon blog: http://www.vm360degree.com

Hi,

is it possible to monitor  WAN Links bandwith utilization (between our Branch Offices and our Main Office)  like MRTG with SCOM 2012 R2 ?

we have Cisco routers in place and I added them to our network monitoring... this works fine, but now I want to give our network guys the ability to have a dashboard or so which shows the bandwith utilization ...

thanks

Klaus

All,

I've got an environment that is failing to alert on the "failed to connect to computer" / "Computer not reachable" monitor under the SystemCenter.Agent.WatchersGroup. I've gone in and found there is an override "for this monitor" to set alerting to false. When I attempt to delete that override, I get the error "cannot modify a sealed management pack".

Was there some sort of MP update for agents or health service that imported a new sealed MP and wrote this somewhere else or something like that? I need to get this monitor alerting again and can't figure out why I can't delete the override. 

Any insight is greatly appreciated. 

THANKS!

Hello

We are in process of creating a low priority alerting and overrides. We have a group 'Low priority group', for which for every object that is inside the group any critical alert should be considered as 'low priority'. I understand that for this we would have to override every active monitor, but the question is - when adding members to the group, should I add all discovered objects (like 'ConfigurationManager Client', 'ManagementService', 'HealthServiceWatcher' etc. or are they contained within 'Windows.Computer' (or maybe they are contained within 'HealthService' objects or not contained at all))?

I would like to have this process of classifying as simple as possible so people without much SCOM expertise can easily downgrade the servers themselves, by adding objects to the group.

Thanks in advance for advice on this one

With best regards,

Alex

I want to publish  Visio Dashboards to SharePoint 365 /online

Is this possible ? I have search on the internet and I only find articles about publish it to SharePoint 2010 and 2013.

I see the Web Part.  Under Business Data and Visio Web Access in SharePoint online

I cannot deploy the  Operations Manager web part.

dear,

we faced a very tricky problem where heartbeat failure alert is generating. even the failed to connect alert is not generating.

the scom agent become grayed out, but there is no HB or failed to connect alerts, 

1. there are no overrides to above monitors.

2. agent is windows server system\

3. agent is grayed out for more that 10-15 minutes, scom agents and MS settings are default,

4. event id 20022 is logged in Management server so scom detected that health service is not working, but still why scom does not pick this up and created the alert in console...

5. also checked the health service watcher view, the health service watcher for the agent was critical

6. and yes there are not heartbeat or failed to connect alerts in active/closed alerts as well..

Hi all,

I had configured SCOM and SCVMM integration a couple of years ago and it worked corretly. During the last year i have udgrade my servers to 2008 r2 sp1 and scvmm 2008 r2 to sp1 and harden the server. when i made this changes i checked everything else exept pro tips. Now after 4-5 months after the chages i have made, i notice that the pro tips is not working. Even in 2008 r2 virtual machines view ias not showing anyhtin in SCOM.

Hi,

I try to configure the Office 365 MP 

• Imported the MP 
• Create a Globe Admin account in office 365 portal
• add the Office 365 Subscriptions

First it shows as healthy but after few minutes its turns to critical error

Following are the errors screenshots

Thanks

Hi Team,

i am facing a weird problem and not sure where to start troubleshooting.

Issue: i noticed that heartbeat alerts are not been generated in the console and no alerts also.

when the health service is stopped on an agent we don't receive any heartbeat alerts, we don't see them in the console itself. The agent health state shows green instead of being gray, but we see the Events 20022 on the MS servers saying that the agent is not heartbeating.

RajKumar

we have this scom error on CAS/HUB Exchange server:

21405, ....failed to create System.Discovery.Data, no errors detected in the output.  The process exited with 3221225794

I've checked:

1) Registry Permission. HKEY_CLASSES_ROOT\CLSID\{B54F3741-5B07-11cf-A4B0-00AA004A55E8}\InprocServer32

2) Antivirus. Mailbox use same antivirus and they don't have problems

3) Memory used on these CAS/HUB server: 82%

4) CPU: 15%

Hi All,

I have a requirement to monitor a small network however some of the device listed below are not certified for SCOM 2012 monitoring:

Can someone assist with my questions please?

1) Its unclear to me what data is available out of the box for non certified network devices via SCOM that support RFC 1213/2863 i.e. Is monitoring/reporting available via the various out of the box network reports and dashboards once the non certified devices are discovered? or do you have to create custom SNMP monitors to pull back data first before it can be displayed in the various reports and dashboards? 

2) There appears to be enhanced support i.e. CPU & Memory for Checkpoint Firewalls via Checkpoint Net-SNMP Agent 5.1 however the Checkpoint net snmp agent now appears to be running version 5.4 possibly later.  Can anyone advise if the later 5.x versions of Checkpoint SNMP agent still for work CPU & memory utilization?

3) F5's also seem to have some generic support for CPU & memory utilization can anyone confirm that they are able to get Memory & CPU utilisation for F5 devices that are not classed as certified devices?

4) There is certified support for some devices that are in the same family i.e. Cisco ASR 9006 but no specific support for ASR9001? Can anyone advise if enhance support for Cisco ASR9001 is likely based on how similar the devices are to each other.

5) I'm assuming that even if some of the network devices are not certified it will still be possible to SNMP monitor and report on these devices, but to do this I will have to create custom SNMP monitors using the specific OID's of interest?

Thanks in advance for any responses

Hi,

Somebody on our team added hundreds of entries to the default action account profile in SCOM 2012 R2.  Now it seems like we cant go in and do anything with this profile.  We can even remove any existing run as account mappings to computers because it seems to be to full.   See the image below.

Is there a way to fix this so we can remove all of these?   Thanks in advance.

Thanks Lance

Hi,

Has anyone experienced this issue in your environment before? I have even tried to rebuild the performance counters on this server but the error reappears.

Help please. Thanks.

Hi there,

I have two KMS host servers; however, for some reasons, there is only one server shows up in Monitoring=>Key Management Service=>State. 

Both servers were built in the same way. They are both virtual, and have same cup, hd, and memory. The only different is that one is located in data center, and another is located in our backup site.

I have tried uninstall/repair agent on the one doesn't show in State, changed to maintenance mode, and wait for couple days to change it back, restart SPPSVC.exe, and so on. It still doesn't come up in the State as another one. Please help and thanks.