Hi All
Can we schedule maintenance mode for CPU alerts for particular time everyday, for one particular server.
Regards
Madhavi
↧
Scheduling maintenance mode for CPU alerts
↧
SCOM Reporting with GMSA Accounts
Hi all,
I have recently gone through the migration of my scom environment onto GMSA accounts. and all was successful except for reporting.
When i attempt to configure report server configuration services database connection all seems well except the web pages cannot load. and I receive the error below
The report server cannot open a connection to the report server database. The log on failed. (rsReportServerDatabaseLogonFailed)Get Online HelpThe user name or password is incorrect. (Exception from HRESULT: 0x8007052E)
if i reconfigure the database connection to use the original account all works OK.
my report server database exists on a different server in the same domain
i checked the SQL Permissions in SSMS and for both the GMSA and the normal account and they were identical , the GMSA accounts is permissioned to all management servers in the domain along with the SQL Server hosting the databases and the reporting server
and was receiving the below error in the SSRS RSManagement Logs
Could not impersonate the user. LogonUser returned error code 1326
i resorted to completely deleting the report server databases and uninstalled both scom reporting and SSRS reporting.
a fresh install with the use of only the GMSA account again rendered the web page inaccessible with logon issues.
so i reconfigured to use the previous account and SSRS configures OK.
Has anyone successfully used GMSA Accounts with scom reporting ?
could anyone kindly ratify it isn't just me ?
or do i really need to take this to the SSRS forums ?
Richard Scott
↧
↧
Agentless monitoring in remotre domain through gateway
Hi all,
We have a OP 2007 R2 installed, with a gateway in a untrusted AD forest.
When using agents in this untrusted forest all is fine.
When we try to use agentless monioring in this untrusted domain, WMI cannot be monitored because of constant access denied messages such as
Module was unable to connect to namespace '\\server\ROOT\CIMV2'
This has happened 3 times since this instance was loaded.
HRESULT: 0x80070005
Details: Access is denied.
One or more workflows were affected by this.
Workflow name: Microsoft.SystemCenter.DiscoverWindowsClientComputer
We have entered credentials for the foreign domain when selecting the management action account for the machine, and have specified that it should report via the SCOM gateway.
1) The RMS does not have firewall access at all to this machine. In agentless monitoring, are the WMI quesries sent from the RMS or the specified proxy (in this case, the gateway server) ?
2) If they are sent from the gateway, what credentials are used? It doesnt appear to be the action account.
Thanks
↧
SQL query to show Alerts raised by Groups
Hi all,
I am creating a PowerBI dashboard to show alerts generated from monitors assigned to specific groups.
Does anyone know what query to run or table to target to show alerts from Groups?
Saiyad Rahim
↧
Monitoring Hyper-V Cluster Memory and CPU
Hi,
We have a bit complex monitoring scenario. We got 4 Hyper-V Windows boxes in cluster. We need to monitor Cluster's Memory and CPU. We also need to monitor host memory, CPU, and CSV (dsik space) but I believe, that's will not be huge issue but Cluster's overall moemory and CPU will be a challenge.
We need the alerts when cluster memory and CPU utlization cross 90%. Additionaly we will also need a monthly report that shows the following table columns for hosts individually and cluster:
Physical CPU
vCPU Allocated
Subscription %
VMS Hosted
Avg CPY Performance
Utilization (30 days)
Memory (GB)
Average Memory (30 days)
Average memory % utilization (30 days)
We do have SCVMM management pack but I think it also lacks aggregatting the data for the cluster.
Can anyone give some headstart in this regard?
Be Vanmost!
↧
↧
SCOM 2016 - Workgroup
Hi All,
We have SCOM 2016 server and we wanted to manage workgroup servers via SCOM.
We dont have AD certificate authority server installed, is there a way we can create self signed certificate from SCOM and configure WG servers
Is that AD CA is mandatory. Please suggest if there is any alternate steps
Regards, Pratap
↧
SCOM 2016 Management Group Alert
My Operations Manager Management Group health is showing in critical state with below error
Alert - Management Configuration Service group failed to perform snapshot synchronization work item for a period of time
Alert Details -
<DataItem type="Microsoft.SystemCenter.ManagementConfiguration.WorkItemStatsDataItem"time ="2020-05-28T05:39:44.0550252Z"sourceHealthServiceId ="******************">
<WorkItemName>SnapshotSynchronization</WorkItemName>
<LastSuccessfulExecutionAgeSeconds>90046</LastSuccessfulExecutionAgeSeconds>
<LastErrorMessage>Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessException: Data access operation failed at Microsoft.EnterpriseManagement.ManagementConfiguration.DataAccessLayer.DataAccessOperation.ExecuteSynchronously(Int32 timeoutSeconds, WaitHandle stopWaitHandle) at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.ExecuteOperationSynchronously(IDataAccessConnectedOperation operation, String operationName) at Microsoft.EnterpriseManagement.ManagementConfiguration.SqlConfigurationStore.ConfigurationStore.StartSnapshot() at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.SnapshotSynchronizationWorkItem.StartSnapshot() at Microsoft.EnterpriseManagement.ManagementConfiguration.Engine.SnapshotSynchronizationWorkItem.ExecuteSharedWorkItem() at Microsoft.EnterpriseManagement.ManagementConfiguration.Interop.SharedWorkItem.ExecuteWorkItem() ----------------------------------- System.Data.SqlClient.SqlException (0x80131904): Sql execution failed. Error 50000, Level 16, State 1, Procedure SnapshotSynchronizationStart, Line 49, Message: Failed to set configuration space lock. Other process uses config space at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction) at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj,
Please help
Rajneesh Kumar
↧
Monitor a Folder in File Server for User Addition/Removal
Have a situation where we have a high security level folder on the File server giving access to a particular Group.
We recently found that some unwanted/authorised Users have been added to this Group granting them access to this folder and subfolders.
How do I set up a Monitor in SCOM to Alert me if a user is Added/Removed from this Folder.
Do i setup monitoring at AD Level since the access Group is from AD or do I monitor from FileServer Level as users can be added explicitly or do I monitor both sides?
I have implemented Monitoring of AD group Modification to monitor Domain Admins group membership additions in SCOM.
I would like to do something similar but not sure where to start off from.
Please note, I do not want to monitor File Sizes or changes to Permissions.
Trying to monitor user addition and removal from a Folder.
Saiyad Rahim
↧
Issue with: An account specified in the Run As profile "Microsoft.SQLServer.SQLDiscoveryAccount" cannot be resolved
Hi,
I only have the production environment and I do not have a laboratory, which is why I cannot carry out any tests, this environment has more than 100 SQL servers in different domains, for this reason configurations were made
using user accounts with privileges in the Database, the detected problem is that we have observed that events appear in the MS related to the fact that the Run As account could not be used ... (An account specified in the Run As profile "Microsoft.SQLServer.SQLDiscoveryAccount"
cannot be resolved ...), in these MS there are no databases, so the account should not be configured.
Looking for how to solve it I have seen that in the Microsoft.SystemCenter.SecureReferenceOverride MP all users appear and it occurs to me that it may be a solution for this case to clean the MP as if it were the Default management pack, that is, open it with an XML editor and delete the lines with the user / server, but as I said previously, I don't have a test server or laboratory environment, so if someone has a less aggressive solution or has done this type of action and it has worked for them, I would appreciate the comments.
Looking for how to solve it I have seen that in the Microsoft.SystemCenter.SecureReferenceOverride MP all users appear and it occurs to me that it may be a solution for this case to clean the MP as if it were the Default management pack, that is, open it with an XML editor and delete the lines with the user / server, but as I said previously, I don't have a test server or laboratory environment, so if someone has a less aggressive solution or has done this type of action and it has worked for them, I would appreciate the comments.
↧
↧
monitor Exchange MP 2013 untrust domain
Hello!
I installed exchange MP 2013 in my scom 2016 and now monitor 3 exchange servers in trust domain.
I have a trouble with 2 another exchange servers in untrusted domain.
How to add run as account from untrust domain to monitor servers with Exchange MP?
I read Guide for System Center Management Pack for Microsoft Exchange Server 2013, but can't find anything about my question.
↧
Moving SCOM Databases to New Servers (With Same Hostname)
Hi,
Currently we are migrating our virtualization infra to SCVMM(HyperV) from VMWare. And SCOM servers are also part of this migration. The team is not literally migrating the servers but they are creating a clone of it and using that clone image to build the server on new HyperV environment.
We have total 7 SCOM servers as below.
3 Management Servers1 Watcher Node(server) for URL Monitoring
1 Operational DB server (Database - OperationsManager)
1 Data Warehouse server (Databases - OperationsManagerDW, Report Server, ReportServerTempDB)
1 Web & Reporting Server
Out of above 7, we have successfully migrated 2 management servers, 1 watcher node and 1 web server.
Please note that the same hostname is being given to the clone on new HyperV environment, just IP is getting changed and we are update the DNS record for that.
We tried doing same process for Database servers as well but the DB was not coming online. I've gone through these documents and it has many steps.
https://docs.microsoft.com/en-us/system-center/scom/manage-move-opsdb?view=sc-om-2019
https://docs.microsoft.com/en-us/system-center/scom/manage-move-omdwdb?view=sc-om-2019
My question is, if we use the same hostname what all steps are required and I think registry change, ConfigService file update, DB Table update and credential updates are not required in my case. Please let me know if only DB backup and restore will help.
And, please guide me if anything else apart from it which I should take care.
Thanks,
Sajid Ansari
↧
How to determine which services or processes use the most CPU time on a specific server via SCOM?
Hi,
Is it possible via SCOM to determine which services/processes use the most CPU time on a specific server? We are experiencing performance issues with a server and would like to troubleshoot this. We are expecting some services/processes utilizing more CPU than expected. Can we determine which services/processes are causing this?
Using Windows Service and Process Monitoring under Management Pack Template we can only monitor CPU usage of one Service or Process. So this is not an option.
Thanks,
Sreejeet
↧
Windows Server monitoring using snmp
Hello everyone,
I have discovered a windows server using snmp (https://kevinholman.com/2015/12/16/how-to-discover-a-windows-computer-as-a-network-device-in-scom-2012/) and now I want to have two performance rules for memory and cpu usage. I am using snmp mp generator tools which is explained in (https://www.stefanroth.net/2016/06/02/scom-2016-network-monitoring-mp-generator-tool/). It works for discovering windows total memory but I cannot find OID for windows memory usage and don't know how to discover windows memory component and creating a performance rule for memrory usage.
Best Regards,
Alireza
↧
↧
Unable to monitor SQL with Agnostic MP
Hello,
I am in the process of upgrading the SQL MP to the Agnostic SQL MP using Kevin Holman's article (How to transition to the SQL Version Agnostic MP).
I imported the new SQL MP and enabled it only for SQL 2016 instances. From the "Computers" dashboard in the Agnostic MP I can see the servers on which SQL 2016 is installed.
The problem is the MP is unable to discover the SQL instances on these servers. I previously configured Service SID on the old Addendum MP (7.0.0.0) using Kevin Holman's article (SQL MP Run As Accounts – NO LONGER REQUIRED), I tried to configure the Service SID again using the new Addendum MP (7.0.20.0) but I get messages about it being already configured. In the "SQL DB Engine on Windows" dashboard of the new Addendum MP I have "Not monitored" state for all the SQL 2016 instances there (in the old Addendum MP I get "Healthy" state for all SQL 2016 instances).
What can be the problem here?
Thank you
↧
Web URL Availability Monitoring - Transaction Response Time Alerts
We are getting lots of error for response time which is in miliseconds.
Alert description: http://xxxxxx.xxxxxx.xxxxxx has a problem. Please see the alert context tab for details of the failure. The Transaction Response Time was 0.455920835018682 seconds.
On the watcher node - See event :
The HTTP URL Monitoring Module detected that a backlog of processing has happened. It might be an indication of too many URL monitors configured for this watcher node.
How to rectify this situation ?
Amanpreet Singh Bansal
↧
NFS Availability monitoring on AIX, Linux and Solaris servers
Hi,
I want to monitor NFS mount points availability on Cross Platform servers. Using NFS Linux MP mentined in below link, discovery of NFS mount points are discovered and I can enable free space alerting. I want to check how can I monitor NFS mount point AVAILABILITY on Cross platform servers. If a Linux server gets rebooted, there may be a chance that some of the NFS mountpoint dont mount and not noticed. Do we have an MP to monitor this on all flavours of Unix? (Solaris, AIX and Linux atleast)
https://gallery.technet.microsoft.com/NFS-for-Linux-a161c0ec
Regards, Suresh
↧
SCOM 2016 - PKIv3 - Forced to terminate PowerShell script because it ran past the configured timeout
I've been having some trouble with the PKI V3 Management pack, where the discovery scripts are returning errors on some servers:
Event ID 10006 in the Operations Manager Event Log:
Discovery task has timed out.
Discovery name: SystemCenterCentral.Utilities.Certificates.LocalScriptProbe.RootCertificate.Discovery
Instance name: Personal Computer Certificate Store
Management group name: ****
Also some Power Shell script failed to run alerts:
Forced to terminate the following PowerShell script because it ran past the configured timeout 300 seconds.
Script Name: SystemCenterCentral.Utilities.Certificates.Certificate_Verify_Script_V6.ps1
One or more workflows were affected by this.
Workflow name: SystemCenterCentral.Utilities.Certificates.LocalScriptProbe.NonRootCertificate.DiscoveryInstance name: Personal Computer Certificate Store
Instance ID: {F168E521-2C5D-BDBF-A117-32D55CBFEE7B}
I don't quite understand why the Power Shell discovery scripts are failing to return results and timing out ... this explains why deleted certs are not disappearing, new certs aren't being discovered, and perhaps why the state isn't changing.
Anyone able to assist with how I could find out what is going on and how to fix it?
↧
↧
Powershell - Delete an agent
Hi,
I'm trying to write a script to delete an agent from the scom but all i found was get-scomagent <> | uninstall-scomagent
im not trying to uninstall the agent, i want to delete it because the actual server have been deleted.
any official MS powershell script that can be used?
↧
Configure email subscription from custom Management Pack
Using instructions on this page, I created a Web Application Monitor.
Seemed very straightforward. I then needed to configure email alerts for this. So I went to Administration>Notifications>Subscriptions and ran the Notification Subscription Wizard. Under Criteria I chose "created by specific rules of monitors", and then clicked on "specific", to choose the new monitor. The problem and reason for this post is, the new monitor I created does not show up. I use the filter option and use a key word from the monitor name, and get nothing. I can use the same method and find other custom management packs that I've created.
When I created the monitor I saved it to a newly created management pack. I filtered on a keyword from that MP also, and found nothing. In both cases the error message shown when I search is "The provided collection was either null or empty. Parameter name: IDS". What am I doing wrong?
↧
scom upgrade side by side
hi friends ,
i need to upgrade my scom 2012 to 2019 (side by side)
i wanted to know if someone did it and can explain me how to do it on the best side.
what is the upgrade sequence in this situation ( i have 4 ms 2 sql server orchastrator and squerdup)
i read about kevin hollmen's MP for multi homing , and i wanted to know if it works between 2012 and 2019.
Best Regards ,
Matan.
↧
