Creating an efficient, management presentable corporate dashboard

January 17, 2014, 6:29 am

≫ Next: Error 1324 when installing SCOM gateway

≪ Previous: alert "Power sub-system degraded or failed" won't close automatically after power restores

With distributed applications, SCOM has so much potential to provide valuable overview dashboards. The two main options are, out of the box, pretty bad.

1. SLD - extremely limited

2. Visio - complicated to setup, slow, requires a lot of work in sharepoint to trim the excess sharepoint junk out of the way, terrible looking default dashboards (when you export a visio diagram, by default you get a diagram 4 miles wide among other problems), and tweaking this initial terrible view is extremely time consuming for a single dashboard. We're planning on around 20 dashboards for critical application ecosystems.

Is there an alternative to these? I like the IDEA behind coretech http://www.coretech.dk/products/dashboard-scom/ and Squared-UP http://www.squaredup.com/content/dashboards but the online demos for these are both very limited- seems like these are one-man startups that have a great idea, but not a lot of depth.

SAVision also has some options- but it looks like you have to have your executives load a full scom console. A simple, quick loading web dashboard without a lot of extra components is the goal.

I've seen some nice work from Catapult Systems and In-Front consulting, but those seem to be custom engagements. Is this the only way to go for what I'm looking for?

Thanks for any input on how to make SCOM a reasonable dashboard choice where I'm not going to spend days at a time getting it to look decent and something quick and attractive I wouldn't be embarrassed to show to a executive.

↧

Error 1324 when installing SCOM gateway

January 26, 2014, 11:28 pm

≫ Next: Power Shell failed to run

≪ Previous: Creating an efficient, management presentable corporate dashboard

Hi!

I get this error when I try to reinstall av crashed Gateway. Any ideas?

Thanks in advance

best regards
Rune Haugen
Norway

↧

Power Shell failed to run

January 26, 2014, 8:47 pm

≫ Next: SCOM 2012: Agent Proxy not enabled.

≪ Previous: Error 1324 when installing SCOM gateway

Hello colleagues.

Now I have a problem with SCOM 2012 R2. For multiple virtual machines with Windows Server 2012 appears alert "Power Shell failed to run". And he swears to "Get-WindowsFeature" cmdlet.

The script line:

 if ((Get-WindowsFeature ADRMS).Installed) {

$DHCP = Get-WindowsFeature DHCP

Tell me where to
look forthe error?

↧

SCOM 2012: Agent Proxy not enabled.

April 8, 2013, 4:23 pm

≫ Next: How to change the Network Device name or Display Name in SCOM 2012?

≪ Previous: Power Shell failed to run

I am seeing Critical Severity alerts on my SCOM 2012 Server stating:

"The agent was not able to submit data on behalf of another computer because agent proxy is not enabled. Details:Health service ( 0C43A2D6-628F-D150-9553-8EABFECA600C ) should not generate data about this managed object ( 716D31EF-F34C-A4E3-1A16-3B8B75E85C0D )."

I have about 8 servers with this error. All of which have had Proxy turned on in SCOM ( Administration -> Agent Managed -> <agents in question> -> Properties -> Security Tab -> Checked "Allow this agent to act as a proxy...". All of these servers are on the same domain as the SCOM server (we only have 1 domain).

Thanks,

↧

How to change the Network Device name or Display Name in SCOM 2012?

January 27, 2014, 7:36 am

≫ Next: Scom 2012 Sp1 Monitoring AD Groups Event Based

≪ Previous: SCOM 2012: Agent Proxy not enabled.

Hi All,

I have managed to get all my network devices to show up in SCOM 2012 using SNMP. So far, so good - they all report in as healthy (apart from the Cisco ASA that disappears every 15 mins? - buts that's another matter).

My problem is that I hate the way that the devices are listed in the Network Devices monitoring pane. There seems to be no rhyme or reason to the way these entries appear in this list. For example I have 2 identical switches, both listed in the DNS the same way, both have exactly the same name format listed on the devices themselves. One switch however is listed as SWITCH1 whereas the other is listed a switch2.domain.co.uk. Why is one in uppercase and does not include the fqdn and the other lowercase and does?! I've tried resetting the switches and setting them up identically, deleting and recreating the DNS records and rediscovering the devices each time. This is a similar story with the UPS units, routers and loadbalancers too - everything shows up differently. OK, so I know that this is not going to affect the way the system works and is purely 'cosmetic' but like most system administrators I get very anal about things like this! Especially if I don't understand what's causing it.

I'm hoping another sys admin out there has experienced this and knows how to change it as its driving me crazy and making my reports look very sloppy!

Thanks for any help!

Rob

↧

Scom 2012 Sp1 Monitoring AD Groups Event Based

January 27, 2014, 5:16 am

≫ Next: Rule but no alert or message about any failure ??? Proxy is not enabled?

≪ Previous: How to change the Network Device name or Display Name in SCOM 2012?

Hello All

I try to monitor some special AD groups (Domain Admin) and also others admin groups.

I followed some older blogs from technet and some mvps.

http://blogs.technet.com/b/wchomak/archive/2009/01/07/general-security-auditing-group-membership-change-notification.aspx

https://blogs.technet.com/b/klince/archive/2011/05/18/how-to-configure-scom-to-monitor-for-changes-to-the-domain-admins-group.aspx

http://blogs.technet.com/b/kevinholman/archive/2009/02/25/authoring-rules-for-windows-2008-events-and-how-to-cheat.aspx

My problem is, when I set the filter for the domain admin groups with "Parameter 3" I didn't recive any events/alerts in scom. But when I set the rule only for the event id 4728 it works without "Parameter 3" and Event Source Security, I will recive all changes from any global group in the domain.

Thanks for help

↧

Rule but no alert or message about any failure ??? Proxy is not enabled?

January 7, 2014, 10:46 am

≫ Next: Schedule Maintenance Mode for One Service

≪ Previous: Scom 2012 Sp1 Monitoring AD Groups Event Based

Hello,

The "Discovery Data Submission Failure" rules are enabled (as it is by default) but I am not getting any alert as stated by the article:

http://jama00.wordpress.com/2010/01/21/setting-agent-proxying/

Alert: Health Service (...) should not operate data about this managed type {...}

I have several Clusters, several Citrix Servers etc... were the Agent do not have the Proxy enabled and I was expecting this alert to come..

Any Health Explorer, View(s) to check if it is properly enabled, ?

Any idea why I am not receiving anything?

No override, I checked.

Thanks,

Dom

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

↧

Schedule Maintenance Mode for One Service

July 22, 2011, 7:06 am

≫ Next: SCOM 2012 SP1 Upgrade

≪ Previous: Rule but no alert or message about any failure ??? Proxy is not enabled?

Can we put one individual service into Maintenance Mode. I can put server(s) into Maintenance Mode. However I'm not sure the best practice to put any individual service into Maintenance Mode. We are using SCOM 2007 R2.

Thanks, Harry :-)

↧

SCOM 2012 SP1 Upgrade

January 27, 2014, 9:27 am

≫ Next: Need a powershell script to place a single windows service in maintenance mode 2007 r2

≪ Previous: Schedule Maintenance Mode for One Service

Hello,

I have a SCOM 2007 R2 CU7 server that I upgraded to SCOM 2012. I am running Windows Server 2008 R2 SP1 and SQL Server 2008 R2 SP2. I tried twice to upgrade it to SCOM 2012 SP1 and it failed both times. In the OpsMgrSetupWizard.log file, I see this error:

: Threw Exception.Type: System.Data.SqlClient.SqlException, Exception Error Code: 0x80131904, Exception.Message: Incorrect syntax near 'MERGE'. You may need to set the compatibility level of the current database to a higher value to enable this feature. See help for the SET COMPATIBILITY_LEVEL option of ALTER DATABASE.
Incorrect syntax near the keyword 'AND'.
Incorrect syntax near the keyword 'THEN'.
[10:58:04]: Error: :StackTrace:   at System.Data.SqlClient.SqlConnection.OnError(SqlException exception, Boolean breakConnection)
   at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning()
   at System.Data.SqlClient.TdsParser.Run(RunBehavior runBehavior, SqlCommand cmdHandler, SqlDataReader dataStream, BulkCopySimpleResultSet bulkCopyHandler, TdsParserStateObject stateObj)
   at System.Data.SqlClient.SqlCommand.RunExecuteNonQueryTds(String methodName, Boolean async)
   at System.Data.SqlClient.SqlCommand.InternalExecuteNonQuery(DbAsyncResult result, String methodName, Boolean sendToPipe)
   at System.Data.SqlClient.SqlCommand.ExecuteNonQuery()
   at Microsoft.EnterpriseManagement.OperationsManager.Setup.DBConfigurationHelper.DBConfiguration.RunSqlCommandsList(IEnumerable`1 sqlCommands)
[10:58:04]: Error: :RunStandardScripts failed with the following exception: : Threw Exception.Type: System.Reflection.TargetInvocationException, Exception Error Code: 0x80131604, Exception.Message: Exception has been thrown by the target of an invocation.
[10:58:04]: Error: :StackTrace:   at System.RuntimeMethodHandle._InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   at System.RuntimeMethodHandle.InvokeMethodFast(IRuntimeMethodInfo method, Object target, Object[] arguments, Signature sig, MethodAttributes methodAttributes, RuntimeType typeOwner)
   at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
   at System.Delegate.DynamicInvokeImpl(Object[] args)
   at Microsoft.EnterpriseManagement.SetupFramework.ActionEngine.Action.Run(String displayStringNamespace, ProgressData progressData, Func`2 progressDelegate)
   at Microsoft.EnterpriseManagement.SetupFramework.ActionEngine.InstallStep.Run(String displayStringNamespace, ProgressData progressData, Func`2 progressDelegate)
[10:58:04]: Error: :Inner Exception.Type: System.Data.SqlClient.SqlException, Exception Error Code: 0x80131604, Exception.Message: Incorrect syntax near 'MERGE'. You may need to set the compatibility level of the current database to a higher value to enable this feature. See help for the SET COMPATIBILITY_LEVEL option of ALTER DATABASE.
Incorrect syntax near the keyword 'AND'.
Incorrect syntax near the keyword 'THEN'.

After both failed upgrades, I had to re-install SCOM 2007. How can I get the upgrade to complete? The prerequisites have been installed.

↧

Need a powershell script to place a single windows service in maintenance mode 2007 r2

January 27, 2014, 11:31 am

≫ Next: Creating Monitor Alert

≪ Previous: SCOM 2012 SP1 Upgrade

Hi,

Need a powershell script to place a single windows service in maintenance mode 2007 r2

Thanks,

↧

Creating Monitor Alert

January 27, 2014, 9:58 am

≫ Next: SCOM 2012 RMS emulator windows security log flooded with EventID 4666 and 26401

≪ Previous: Need a powershell script to place a single windows service in maintenance mode 2007 r2

I'm trying to create a monitor so I can receive an alert everytime a specific user tries to successfully/failure to a server.

Under the Event Expression Tab I can enter the Event ID and the Event Source. Is this where I would specify the specific username? Do I put the username under Parameter Name / Equals / Display Name

I'm sure this is simple for you. I am new to SCOM, and am learning it all. Any help would be appreciated. Thanks in advance.

↧

SCOM 2012 RMS emulator windows security log flooded with EventID 4666 and 26401

October 18, 2012, 7:54 pm

≫ Next: Exchange 2010 Alerts

≪ Previous: Creating Monitor Alert

Hello,

My RMS emulator windows security log is flooded with EventID 4666 and 26401 events.

I'm getting over 20 events per second

Is there something that i need to do?

Log Name:      Security
Source:        MOMSDK Service Security
Date:          10/18/2012 10:43:20 PM
Event ID:      26401
Task Category: (3)
Level:         Information
Keywords:      Classic,Audit Failure
User:          domain\username
Computer:      rms
Description:
Data access operation: User_IsAdministrator__Check
Data access method: IsUserAdministrator
User name: domain\username
sessionId: uuid:0b231063-f3fb-4b9f-9872-b88645968fda;id=6

Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          10/18/2012 10:43:20 PM
Event ID:      4666
Task Category: Application Generated
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:
Description:
An application attempted an operation:

Subject:
   Client Name:        username
   Client Domain:        domain

   Client Context ID:   3649027831

Object:
   Object Name:       IsUserAdministrator
   Scope Names:       50585907-7858-4488-ab9c-13e0eaac08be

Application Information:
   Application Name:   Microsoft System Center
   Application Instance ID:   3649001670

Access Request Information:
   Role:           Role
   Groups:           Group
   Operation Name:   User_IsAdministrator__Check (142)

↧

Exchange 2010 Alerts

January 18, 2014, 11:53 am

≫ Next: Error on gateway machine in DMZ with runasprofile VMMServerConnection

≪ Previous: SCOM 2012 RMS emulator windows security log flooded with EventID 4666 and 26401

Hello,

I am receiving a lot of alerts like this:

Alert: Database copies integrity suppression
Resolution state: New
Last modified by: System
Last modified time: 1/17/2014 6:17:08 AM
Source: Mailbox Database Copies Integrity Suppression - SOPEXMB6 (Mailbox) - MCO
Path: 
Last modified by: System
Last modified time: 1/17/2014 6:17:08 AM Alert description: Server 'SOPEXMB6.ad' has integrity suppression errors. Please check the Context field of the alert to see the details.
  Impacted Entities (6):
  Database Copy Integrity: Suppression (MBDB24) - SOPEXMB6 (Mailbox) - MCO, Database Copy (MBDB24) - SOPEXMB6 (Mailbox) - MCO, Database Search Copy Indexed (MBDB24) - SOPEXMB6 (Mailbox) - MCO, Database Copy Integrity: Suppression (MBDB12) - SOPEXMB6 (Mailbox) - MCO, Database Copy (MBDB12) - SOPEXMB6 (Mailbox) - MCO, Database Search Copy Indexed (MBDB12) - SOPEXMB6 (Mailbox) - MCO

Alert: Database copies failed on server
Resolution state: New
Last modified by: System
Last modified time: 1/17/2014 6:17:08 AM
Source: Mailbox Database Copies Failed - SOPEXMB6 (Mailbox) - MCO
Path: 
Last modified by: System
Last modified time: 1/17/2014 6:17:08 AM Alert description: Server 'SOPEXMB6.ad' has failed database copies. Please check the Context field of the alert to see the details.
  Impacted Entities (2):
  Database Copy (MBDB24) - SOPEXMB6 (Mailbox) - MCO, Database Copy (MBDB12) - SOPEXMB6 (Mailbox) - MCO

Where should we look? The Exchange is saying "The database is healthy" and there is no more troubleshooting, the rule/monitor is closed and it is coming again later on... sometimes 2-3 minutes after the closing!!!!

Any further action possible to identify the root cause of this reoccurring alerts?

Thanks,
Dom

System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

↧

Error on gateway machine in DMZ with runasprofile VMMServerConnection

January 27, 2014, 12:42 pm

≫ Next: SCOM agent grayed out Email notification

≪ Previous: Exchange 2010 Alerts

Hi, we are getting this error on a gateway machine that is in a untrusted domain (DMZ). Is this caused by how we have our Virtual Machine Manager COnnection Account profile setup? Today its setup to target all objects.

Any suggestions?

An account specified in the Run As profile "Microsoft.SystemCenter.VirtualMachineManager.2012.VMMServerConnectionRunAsProfile" cannot be resolved.

This condition may have occurred because the account is not configured to be distributed to this computer. To resolve this problem, you need to open the Run As profile specified below, locate the account entry as specified by its SSID, and either choose to distribute the account to this computer if appropriate, or change the setting in the profile so that the target object does not use the specified account.
Note: you may use the command shell to get the Run As account display name by its SSID.

Management Group: XYZ Management Group
Run As Profile: Microsoft.SystemCenter.VirtualMachineManager.2012.VMMServerConnectionRunAsProfile

Thanks Lance

↧

SCOM agent grayed out Email notification

November 27, 2011, 10:40 pm

≫ Next: SQL Cluster not monitored

≪ Previous: Error on gateway machine in DMZ with runasprofile VMMServerConnection

Hi All,

we are monitoring in 5000 Agents , Sometime few agents are going to grayed out state . Now we are checking the those grayed out servers using powershell scripting . Is there any way we will get notified if the servers goes to gray state.

Is there any way we will get email notification if agents goes to grayed out state.

↧

SQL Cluster not monitored

January 3, 2014, 3:26 am

≫ Next: SCOM - performance widgets empty

≪ Previous: SCOM agent grayed out Email notification

I have a 2 node SQL Cluster that is not showing me that it is monitoring the DB Engine. I have installed the agent on both nodes and enabled Proxy agent on both nodes. This is a 3 instance SQL Cluster and when into the authoring object discoveries and enabled the override for Multiple discoveries.

I'm running SCOM 2012 R2 and not sure where else to look so that the DB Engine and the databases are monitored.

When I look in the agents health state on both nodes and do a search for *sql*.vbs nothing is found.

Both nodes are running Windows Server 2008 R2 with SP1 and have installed SQL 2008 R2 on all three instances.

Greg Zygadlo

↧

SCOM - performance widgets empty

January 28, 2014, 3:24 am

≫ Next: SCOM server monitoring

≪ Previous: SQL Cluster not monitored

Hi,

does anybody knows this probleme and can help me?

In the SCOM Console we have different dashboards with grid layout and on this grid layout we have performance widgets (for example for monitoring network utilization). From time to time and in the moment the hole time (since about 2 days) all performance widgets does not show any data (no graph, no data in the legend). State or alert widgets are working correctly - performance views also.

I didn't found any usefull hint in the event log.

SCOM version is 2012 R2, but this also happend with 2012 SP1.

Thanks,

Bernd

↧

SCOM server monitoring

January 23, 2014, 5:57 am

≫ Next: How to cancel task which are in Queue state in SCOM console?

≪ Previous: SCOM - performance widgets empty

Hi,

Can we monitor a server through SCOM of which we cant take RDP directly but only by logging in through another server. The server which we want to monitor is also in DMZ .

Thanks

↧