Hi all,
I have seen a lot of articles where users have either overridden the above Monitor to FALSE to stop it from alerting or they have create some fake Event Log on a server to solve etc.
I have a situation where this is coming up and it is actually complaining about not being able to find a Application Event Log on a SQL Cluster Name:
Description:
"The Windows Event Log Provider is still unable to open the Application event log on computer 'MyDomainCITRIXCL.contoso.com'. The Provider has been unable to open the Application event log for 720 seconds. Most recent error details: The RPC server is unavailable.
One or more workflows were affected by this. Workflow name: MomUIGeneratedRuleab290a5dffd74c1cb43a2152a568fc16 Instance name: MyDomainCITRIXCL.contoso.com Instance ID: {DB391E8B-85ED-3208-F9EB-F5F67283A22B} Management group: MyDomainSCOM "
Is this even possible or SCOM is just being dumb again?
Is there a best approach for this error?
Should I override and set to FALSE or is there some permissions that need to be setup somewhere.
Please note that the SCOM Action account is already Local Admin on Server 1 and Server 2 for the this Cluster.
Any assistance will be appreciated.
Regards
SR
Saiyad Rahim