Forums

Escalation Question

SW64 — Wed, 30 May 2012 16:28:13 GMT

Hello,

I am working on with SCOM 2012. Aa part of this implementation I have setup some simple escalation. For example:

Alert immediately if any logical drive is more than 95% full
Alert to the team leader if the alert stays in a "New" state for more than 2 hours

And this works exactly as expected. However, it means that the team leader gets events after hours and on weekends when no one is really involved anyway. Is there a way to configure the team leader's subscription so that it only runs from 7am - 5pm M-F in such a way that when it "comes online" in the morning it will alert on anything that is older than 4 hours?

TIA

Re: Escalation Question

Pete Zerger — Thu, 31 May 2012 02:44:17 GMT

And SCOrch with Derdack MessageMaster (which includes an IP for SCOrch) is the ultimate in centralized messaging, escalation and mgmt from mobile devices.

Re: Escalation Question

Naeblis — Thu, 31 May 2012 01:35:18 GMT

Glad I could help :)

Re: Escalation Question

SW64 — Thu, 31 May 2012 01:28:25 GMT

Yup, I'm thinking that Scorch is the answer. As I pose the escalation questions here they get more complicated and clearly the need here is for a decision engine not just simple escalation.

GUIDS in Reporting Database

Ryan — Wed, 30 May 2012 11:29:53 GMT

Hi Guys
We have an external company doing custom reporting on my SCOM Reporting Database, so they are extracting data directly from OperationsManagerDW.
They're seeing lotsa of GUIDS in certain fields. When I run a report from SCOM on the same criteria , I dont see any GUIDS.

Is this normal behaviour ?

Thanks

Re: GUIDS in Reporting Database

Naeblis — Thu, 31 May 2012 00:57:58 GMT

What fields? But yes in my expierance GUIDs do not show up in the reports

Re: Escalation Question

Naeblis — Thu, 31 May 2012 00:55:15 GMT

Scorch?

Re: locall admin and scom2012 admin

Naeblis — Thu, 31 May 2012 00:53:41 GMT

You can edit the scom Admins group after install. I am pretty sure this was done to prevent people from locking them selves out of scom. After install you can remove the builtin\administrators group from scom admins

locall admin and scom2012 admin

daniel hobbs — Wed, 30 May 2012 14:21:42 GMT

installing sc2012 it now no longer asks for an AD security group for SCOM admins but uses members of the local administrators group
i thought Ms where stopping this , as in sql2008.

so all server support and accounts requiring local admin are now full scom admin

whaaaat ?

can anyone give a valid reason for removing specific AD groups scom administrators

sheeeesh

SCOM 2012 cannot monitor SCSM2012 ?

daniel hobbs — Wed, 30 May 2012 14:30:17 GMT

installed sc2012 and then attempted to load an agent on 2 system center service manager servers with no luck reading some blogs it seems that they are incompatible as they are actually the same basic product with a top layer wrapper that makes them what they are

again whaaat!

microsofts enterprise service desk cannot be monitrored by its enterpise service monitor

or im i going mad .....?

just the same as a a new enterprise flagship SC2012 product that is based entirely on SQl server that cannot use the best new feature of SQL2012 --always on

do MS understand what our customers say to us ....and how frustrated we are in trying to sell and promote these products

Re: SCOM 2012 cannot monitor SCSM2012 ?

Naeblis — Thu, 31 May 2012 00:50:17 GMT

To make it even worse you cannot install an agent if the SCSM console is installed. MS official response. Agentless monitoring

Resource Pool management for Network Monitoring

JGifford — Wed, 30 May 2012 22:45:31 GMT

In the OpsMgr 2012 Deployment Guide - Planning - Considerations when Designing a Management Group for Network Monitoring is states.

Network monitoring in System Center 2012 – Operations Manager requires its own separate resource pool.

Create a resource pool dedicated to network management; add dedicated management servers into the newly created resource pool, then remove the dedicated management server from any other resource pool -- e.g., the "All Management Servers pool”.

My question is.

How do I remove a server from the "All Management Server pool"?

Re: Resource Pool management for Network Monitoring

Naeblis — Thu, 31 May 2012 00:47:48 GMT

Short answer, you cannot. You can change the membership of all other pools to manual and remove the applicable servers. however, This is not an option for the all management server resource pool

Document is incorrect

Citrix Netscaler Management Pack

Grimy — Thu, 31 May 2012 00:39:05 GMT

Hi folks,

I've read through the below topic and am experiencing the exact same thing (I already ran through the exact same setup steps) that the other guy did.

http://www.systemcentercentral.com/Forums/ForumPost/tabid/177/indexId/28670/Default.aspx?tag=Forums+Operations_Manager

The Netscaler devices are discovered Network Devices and show up fine but no alerts are received. One question I did have is around the SNMP managers. The Netscaler resides in our DMZ and therefore points to our DMZ-based SCOM Management Agent which in turn points to the DB/RMS Servers. I've set the SNMP manager on the Netscaler to point to this DMZ SCOM box and setup a trap on it.

Anyone had experience setting these up? Management pack attached.

Re: SCOM Agent Not Monitored state

Wilson — Wed, 30 May 2012 21:40:22 GMT

After you delete the health state folder, do you see the new XML file get generated? Does it have a current time-stamp?

SCOM Agent Not Monitored state

HirenTata — Wed, 30 May 2012 11:40:00 GMT

Hi,

from couple of weeks, I m seeing that 50% of my agent is showing in not monitored state in SCOM Console, Thought I have deleted health state from all affected agent, restart RMS server (after deleting health state folder) but still having same issue.

is there anything else i can check

Thanks
Hiren

Re: SCOM Agent Not Monitored state

joedali — Wed, 30 May 2012 20:44:21 GMT

What version/What CU level?

CPU/Memory/Network loading reports from SCOM 2007(SP1)

Krish — Wed, 30 May 2012 14:53:15 GMT

Hi Experts,
Please do me a favor to generate the CPU/Memory/Network Loading report for the servers which are getting monitored in SCOM 2007(SP1) in weekly basics.

RE: CPU/Memory/Network loading reports from SCOM 2007(SP1)

joedali — Wed, 30 May 2012 20:42:17 GMT

Download the latest Windows Core MP (10-18-2011) with the new Utilization report.

Re: Escalation Question

SW64 — Wed, 30 May 2012 17:11:47 GMT

Yeah, I looked through these posts and they seem to skirt my issue. I currently use alert aging to escalate which works quite nicely during business hours. However, if an alert is generated at 6pm I want the Operators to receive an email but I don't expect that they'll do anything with it until the next day (they basically work 8-5). So I want that alert escalated to the Team Leader first thing the next morning so that none of the alerts that occur overnight get missed. Am I missing something with alert aging?

Re: Reporting Refresher

MGoedtel — Wed, 30 May 2012 16:59:21 GMT

With the Availability Report, if you target the Windows Computer object for the system(s) you want to see rollup availability for the contained classes that are inherited from the base class. Meaning if components to Exchange 2007 are hosted on a Windows Server and you target the Availabilty Report against that Windows Computer object representing that server, you will see how the health of the Exchange components influence the overall health of the Windows Computer. Yes if you get granular and target a specific class with that report, then you will only see the availability metrics for that class and any related classes which rollup to it (where applicable).

For questions about report authoring, I would encourage you to review the Report Authoring guide here - http://technet.microsoft.com/en-us/library/dd362600.aspx.

By default there isn't a pre-defined report that allows you to filter on a specific alert name which would return the targeted objects which generated them. I have created a custom one that does just that but I haven't published it yet. For other reports, I have a couple published on my old Microsoft blog here - http://blogs.technet.com/mgoedtel and there are others that are blogged like here - http://blogs.technet.com/b/momteam/archive/2009/03/05/designing-a-custom-performance-report.aspx and here http://blogs.technet.com/b/jonathanalmquist/archive/2011/04/09/report-dataset-samples.aspx. There are many other examples if you search on Operations manager reports...

To assess alert activity, start with the Microsoft Generic Report Library\Most Common Alerts, the Microsoft ODR Report Library\Alerts Per Day, Microsoft ODR Report Library\Most Common Alerts, and System Center Core Monitoring\Data Volume by Management Pack in order to start prioritizing and triaging alert storms as part of an overall management pack tuning process.

Hope that helps get you started.