Quantcast
Channel: Operations Manager - General forum
Viewing all 11941 articles
Browse latest View live

OpsMgr 2012 R2 Design Considerations

$
0
0

Hi, 

I have a customer who currently has two installations of OpsMgr running in two separate datacenters in different geographic locations. The reason they did this was because the link from one DC to the other is around 40mbps and is unreliable and gets flooded easily. Each datacenter has its own servers and network devices that are connected.

They want to see if they can get rid of one of their OpsMgr environments to lower administrative overheads by running all Mgmts servers from 1 DC to monitor all servers and network devices in both geographic locations. 

1. If they are to do this what are the data latency requirements between the two datacenters? Is there offical MS documentation on this. I can only find references in the forums?

2. Also is it recommended to put a gateway server in the 2nd datacenter so that it compresses and sends the data back in a compressed fashion to the db?

3. If we were to go with the gateway server in the 2nd datacenter how would the agents be deployed?

4. Again if we were to go with gateway servers is there a way to enroll all the servers automatically with certs required?

Thanks in advance


Anyone has Older version of Management Pack for LYNC server 2013 ?

$
0
0

Hi mate,

I need to perform a test on MP rollback/upgrade in my test environment. Anyone has Older version of  Management Pack for LYNC server 2013 ?  best if i could get version : 5.0.8308.871. 

i have only the latest version 8308.956

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~HELP~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Migration from SCOM 2007 to SCOm 2012/2016

$
0
0

Hi All,

I am looking to migrate scom 2007 to scom 2012/2016 , any pointers to start, planning guide will help.

Thanks in advance.

How to Configure Text Messaging

$
0
0

Hello,

I am running SCOM 2012 R2 and I have been trying to configure alerts by text.  I have read articles that say I need a special modem and a SIM card.  Other articles simply say to create an SMS subscription.  Is there any article that explains what I need to setup text alerts in its entirety?

OperationsManagerDW Grooming

$
0
0

Hi!

I wonder if someone knows when OperationsManagerDW grooming is running, the time on the day? The time information when OperationsManager grooming is running.

SCOM missed to generate Alert notification for an alert for a specific Agent

$
0
0

Hi All,

We encountered a strange issue.

We have 2 Agents in SCOM which generated an alert for a specific custom event it captured

Server1
Server2

The email notifications were working fine as well.

Below is the issue it happened

Server 1 generated 30 Alerts from past 3 days
Server 2 generated around 20 alerts from past 3 days

Server 1's All the email notification was received.
Server 2' Email notification was not received for 2 days but the alerts were present in the SCOM Console.


Both the subscriptions of these are the same.

There were 2 email ID's added to this subscription, Seems both dint receive for Server 2 but received for Server 1

There is no trace of SMTP channel / email server issue
No events pointing to subscription issue
No Alerts pointing to Failed to send notification to "Specific subscriber" during this time
No trace of any thing

Did any one encounter such type of issue, If Yes how did you guy solve this issue.


Gautam.75801

SCOM 2012 - Don't see new members in "View Group Members..."

$
0
0

Hello everyone!

I've got following issue: I created my group where at beginning I added explicit Members (two winServ2012). Next, I created SLT (Service Level Tracking) and it works fine. After some time, I added new member to group. The problem is, it doesn't display in"View Group Members..." and Service Level Objects..

I'm attaching sreenshots.

I will waiting for your response.

Regards,
AErot

SNMP Trap Monitoring question

$
0
0

Hi all,

I have been configuring SCOM 2012 SNMP Trap monitoring since 2013 and I understand and solved most problem ppl encountered over the years, however this one totally got me clueless.

here is the case, my customer wants to proof that two 100% same SNMP Trap from two different sources can be distinguished and then able to raise two different SCSM ticket base on the source.

I am pretty sure this can be done easily at first, because theoretically after discovering two different network devices, I can put them into different groups and configure dedicated SNMP Trap alert rule for them. 

To simulate this, my customer setup like this:

1x HP OVO sending SNMP Trap periodically to both SCOM and a WhatsUpGold setup

1x WhatsUpGold 2017, listen to the HP OVO Trap and then pass the trap unmodified to SCOM

the SCOM successfully discover the HPOVO and WhatsUpGold server (Windows Server)

Then I created two SNMP Alert Rules, without specifying OID, which means the alert will be triggered by all incoming SNMP Trap, each rule configured override targeting HPOVO and WhatsUpGold respectively.

Also, I removed the Version tag from the MP to reimported it

Time to test, however, the result does not come out as expected.

Only Trap from HPOVO able to trigger alert

Here is what I done during troubleshooting

1. double check the community string is correct (I had experience that the trap sending side uses a different comm string)

2. I use network monitor 3.4 and captured that the SNMP Traps are sent from both HPOVO and WhatsUpGold, with a slight time difference (1more hop for WhatsUpGold), the parameters are 100% the same and both are v1 traps.

3. The server is not busy before this is a testing environment.

4. I used trapgen.exe at WhatsUpGold Server to fire empty traps to SCOM, surprisingly, it can trigger alerts there!!

5. I even delete the HPOVO from SCOM and still no alerts from WhatsUPGold traps.

6. Last step, I stopped the traps from HPOVO, but still alerts can't be triggered by WhatsUpGold Traps.

Please help

Thank you very much

Andrew


SCOM 2007 : Not able to Reset Health in Health Explorer

$
0
0
Hi All,

Not able to Reset Health in Health Explorer, Showing Calculating the Health State of the following monitor and gets hang and it wont respond also.
MNYash

Operations Manager Failed to Access the Windows Event Log

$
0
0

Hi,

Recently i am observing below two alerts in my SCOM console like below, Any idea how we can resolve these alerts

The Windows Event Log Provider is still unable to open the Active Directory Web Services event log on computer 'XXX'.
The Provider has been unable to open the Active Directory Web Services event log for 577440 seconds.

And 

The Windows Event Log Provider is still unable to open the DFS Replication event log on computer 'TRCC12060.bir.local'.
The Provider has been unable to open the DFS Replication event log for 720 seconds.

Lync 2013 IM Notification Channel Failure

$
0
0

SCOM 2012 SP1 CU 3

Lync 2013

SCOM Server : Server 2012

Lync Server:  Server 2012 R2

 

Followed all the instructions in both of the article below.  I know it is at least partially working because when I typed in the wrong addresses (on accident in both the channel setup and the subscription setup) SCOM generated an alert saying that the address was incorrect and it couldn’t complete the request when an alert was generated.  But now the only thing that happens is the errors below.

http://lyncuc.blogspot.com/2012/10/system-center-operation-manager-with.html

http://opsmgrunleashed.wordpress.com/2012/02/24/enabling-instant-messaging-notifications-in-system-center-2012-operations-manager/

 

The following errors occur with both UCMA 3.0 & 4.0 installed (I have tried both versions)

 

IM Channel Settings

IM Server:  Server FQDN

Return Address:  sip:OpsMgrLync@domain.com

Protocol: TLS

Authentication:  NTLM

Port:  5061

Format:  Default

 

Steps to Reproduce:

Create Notification Channel

Add IM Notification to Subscriber

Add Subscription

 

Force generate an alert (stopping IIS website on a dev server).  Email alert is generated.  Lync Notification is not.

 

Operations Manager Log

Event ID 4509

The constructor for the managed module type "Microsoft.EnterpriseManagement.HealthService.Modules.Notification.Sip.SipNotificationTransportModule" threw an exception. This module was running in rule "Subscription454d3dbb_0bd6_45eb_83d3_f0f6f45520ec" running for instance "Alert Notification Subscription Server" with id:"{E07E3FAB-53BC-BC14-1634-5A6E949F9230}" in management group "NFM".

 

 The exception text is:

 Microsoft.EnterpriseManagement.HealthService.ModuleException: Could not load file or assembly 'Microsoft.Rtc.Collaboration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified. ---> System.IO.FileNotFoundException: Could not load file or assembly 'Microsoft.Rtc.Collaboration, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified.

   at Microsoft.EnterpriseManagement.HealthService.Modules.Notification.Sip.SipNotificationTransportModule.BuildTransport(XPathNavigator configuration)

   at Microsoft.EnterpriseManagement.HealthService.Modules.Notification.NotificationTransportModuleBase`3.ReadConfiguration(XPathNavigator configuration)

   at Microsoft.EnterpriseManagement.HealthService.Modules.Notification.NotificationModuleBase`1.ReadConfiguration(XmlReader configuration)

   at Microsoft.EnterpriseManagement.HealthService.Modules.Instrumentation.InstrumentedModuleBase`1..ctor(ModuleHost`1 moduleHost, XmlReader& configuration, Byte[] previousState)

   --- End of inner exception stack trace ---

   at Microsoft.EnterpriseManagement.HealthService.Modules.Instrumentation.InstrumentedModuleBase`1.HandleFatalException(ITraceScope traceScope, Exception error)

   at Microsoft.EnterpriseManagement.HealthService.Modules.Instrumentation.InstrumentedModuleBase`1..ctor(ModuleHost`1 moduleHost, XmlReader& configuration, Byte[] previousState)

   at Microsoft.EnterpriseManagement.HealthService.Modules.Notification.NotificationModuleBase`1..ctor(ModuleHost`1 moduleHost, XmlReader& configuration, Byte[] previousState)

   at Microsoft.EnterpriseManagement.HealthService.Modules.Notification.NotificationTransportModuleBase`3..ctor(ModuleHost`1 moduleHost, XmlReader& configuration, Byte[] previousState)

   at Microsoft.EnterpriseManagement.HealthService.Modules.Notification.Sip.SipNotificationTransportModule..ctor(ModuleHost`1 moduleHost, XmlReader configuration, Byte[] previousState)

 

Event ID 1103

Summary: 1 rule(s)/monitor(s) failed and got unloaded, 1 of them reached the failure limit that prevents automatic reload. Management group "NFM". This is summary only event, please see other events with descriptions of unloaded rule(s)/monitor(s).

 

Running PROCMON on this doesn't find a single thing for that .DLL when using UMCA 4.0

 

However, as described in the article here:  http://social.technet.microsoft.com/Forums/systemcenter/en-US/0dce0c5b-fcec-4ca9-a506-0523088968df/trying-to-send-im-through-scom-2012, if I install UCMA 3.0 and run PROCMON I find the following entries after I take the Steps to Reproduce above. Previously when I had run this I had gotten a ton of PATH NOT FOUND like the one described in that article, but now that I am writing up this article they aren't showing up.  

 

9:33:14.6284984 AM        MonitoringHost.exe        3636        RegOpenKey        HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\v4.0_policy.4.0.Microsoft.Rtc.Collaboration__31bf3856ad364e35        NAME NOT FOUND        Desired Access: Read

9:33:14.6285733 AM        MonitoringHost.exe        3636        RegOpenKey        HKLM\SOFTWARE\Microsoft\Fusion\PublisherPolicy\Default\policy.4.0.Microsoft.Rtc.Collaboration__31bf3856ad364e35        NAME NOT FOUND        Desired Access: Read

 

Thoughts on what I can do to get this working or what might be wrong?


MCITP | VCP4 | VCP5

SCOM 2012 R2 email notifications stop for no reason

$
0
0
For the past year we have had an issue with SCOM 2012 R2 where at completely random times email notifications will stop sending.  The only way to get emails flowing again is to restart the healthservice on the main management server.  As soon as that is done the emails start coming again but all their time stamps are the time the service was restarted so we are getting in accurate email notifications as a result.  

Here is some info about our environment.  Any advice the community can give would be appreciated.  

SCOM 2102 R2 UR7
Server 2012 R2 OS fully patched
3 management servers, 4 gateways for remote sites all Hyper V virtual machines
appx 550 agents

SCOM not providing the alerts

$
0
0

Dears,

I am facing a difficulty in SCOM. I am not getting any alerts in SCOM. This is a new deployment and i have installed the agents in 9 t0 10 servers. Usually after the installation of the agent alerts should be generated.

My SCOM is a different server and SQL is a different server.

SCOM is 2012 R2 and SQL also is 2012.Which all ports needs to be listening from SCOM management server.When i telnet port 5723 from management server to SQL it is not happening. Do we need to have access to the 5723 port where the client is installed.

The SCOM account has got local admin rights on all the servers.

Could you please help me understand which ports needs to be open for management server and the client to have back to back communication.

Thankyou So Much for your help

Regards

Suraj Sreekumar

Prevent SCOM 2007 from discovering databases starting with an underscore

$
0
0

Hi,

We have an issue where we had a SQL Instance that is backed up and verified using NetApp SnapManager for SQL.

Unfortunately we are getting an issue coming up where SnapManager is unable to detach the DB clones used for verification, because SCOM has discovered the DB's and is in effect locking it from being deleted.

I can create an override that prevents databases being discovered for a particular SQL instance, but as this instance is used for logging and creates new DB's now and again, we can't do this.

All of these temp clone DB's names end witn '_Clone', so what I would like to do is create an override that prevents discovery of DB's in a specific instance if the DB name ends with '_Clone'.

Is this possible? If so can someone guide me how to do this?

(I am a SCOM novice)


New SQL MP 6.6.0.0 dashboards do not work - Data can not be displayed due to unavailable stored procedure

$
0
0

I've imported the latest Microsoft System Center Management Pack for SQL Server 6.6.0.0 and imported all the MPs contained, the new dashboards and visualizations do not work in the SCOM console.  This is after 22 hours, and a restart of my RMS and SQL server.  UR7 has also been applied to the management group.

A pop-up saying the "Data can not be displayed due to unavailable stored procedure. Please try to open the Dashboard later or contact the admin.

Please provide the following information to the support engineer if you have to contact Microsoft Help and Support :

Stored procedure '[sdk].[Microsoft_SQLServer_Visualization_Library_GetDataCenterDashboardData]' wasn't found in Data Warehouse. It usually takes few minutes after importing the Management Pack to populate changes required for Visualization to the Data Warehouse. If this error occurs more then after 24 hours since Management Pack import then contact Operations Manager Administrator.

An error occurred executing the command: [Microsoft.SQLServer.Visualization.Library.DataProviders!DatacenterDashboardDataProvider/GetDatacenterDashboardData] in provider: [Microsoft.SQLServer.Visualization.Library.DataProviders.DatacenterDashboardDataProvider, Microsoft.SQLServer.Visualization.Library.DataProviders, Version=6.6.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]. : StoredProcedureNotAvailable

   at Microsoft.EnterpriseManagement.Presentation.DataAccess.DataProviderCommandMethod.Invoke(CoreDataGateway gateWay, DataCommand command)
   at Microsoft.EnterpriseManagement.Presentation.DataAccess.CoreDataGateway.ExecuteScalarInternal[TResult](DataCommand command)
   at Microsoft.EnterpriseManagement.Presentation.DataAccess.CoreDataGateway.<ExecuteScalarAsync>b__2[TResult](<>f__AnonymousType0`1 data)


B. Wright


SCOM 2012 Disabling Sealed Management Packs

$
0
0

Hi, I need to disable some default MP in scom 2012 as part of testing and its a sealed MP. Could someone pls help me out to share a powershell script for executing the same.

Also I want to know, if I disable this MP, will it allow me to enable in future.

Pls advise..


Regards, Rajeev Parambil

SCOM Network MIB file upload

$
0
0

Dear all,

In SCOM is there any way to upload MIB files  to receive the SNMP traps. 

thanks,

74KMS

Malware Outbreak: Protected Endpoints Watcher

$
0
0

I recieved this alert from scom and need help clearifying where the source is

Alert: Malware Outbreak

Source: Protected Endpoints Watcher

Path: Not Present

Last modified by: System

Last modified time: 9/15/2016 4:40:21 AM Alert description: Forefront Endpoint Protection has detected active malware on more than 5% of your computers.

It is possible that malware is propagating on your computers.  In order to help protect clients, it is suggested that all clients should be updated to use the latest definitions.

If you need to change the number of active threats that trigger this alert, override the relevant parameter in this monitor.

OpInsights agent using way too much CPU

$
0
0

Hello

I run OpInsights free subscription to play around with logs, mostly for educational purpose. I have directly connected my desktop to the Opinsights workspace. What worries me is the amount of CPU processor it is using. I have enabled couple of solutions, including security & audit. What worries me is that I frequently find agent's process consuming 100% CPU. I don't think it really needs that much computational power (Intel I7 6700K, 8 cores @ 4GHz). What can I do to limit the CPU usage so it stays on normal levels? I don't mind if it would hug all 1 CPU. Any ideas how to limit CPU usage for the agent, if I don't have SCOM infrastrcture for my workstation?

SCOM 2012 SP1 - SCSM server not generating alerts in SCOM

$
0
0

Hi,

It has been observed by SCSM team that one of their SCSM servers (ASCSM005) not writing/generating events (viewed through Event Viewer tool) on the server OperationsManager logs since 2 years. Another site server (BSCSM005) is working fine. These 2 servers are under Agentless monitoring.

When checked on SCOM Server Event Viewer under Operations Manager, we could find the below 3 errors (today as well) repeating continuously but, not showing them on SCOM Console. 

Event IDs: 

31903 - 

The Registry Probe could not collect the following attributes from the registry of the computer ASCSM005.

 AdvisorConnectorActivated: 0x80070005 (Access is denied.
)
Version: 0x80070005 (Access is denied.
)
RegisterToManagementGroup: 0x80070005 (Access is denied.
)
 
One or more workflows were affected by this.  

Workflow name: Microsoft.SystemCenter.Advisor.Internal.AdvisorConnectorDiscovery 
Instance name: ASCSM005 
Instance ID: {9XX9XX-XXX} 
Management group: ABCMG

1207 - Rule/Monitor "Microsoft.SystemCenter.Apm.ApmAgent.Discovery" running for remote instance "ASCSM005" with id:"{XXX-XX9}" will be disabled as it is not remotable. Management group "ABCMG".

10000 - A scheduled discovery task was not started because the previous task for that discovery was still executing.

I could see the above event 31903 for BSCSM005 as well.

Please advise, what could be the reason that the event log is not writing the events under Operations Manager on the ASCSM005 server.



Thanks & regards, Naren.

Viewing all 11941 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>