Alert commandline ConsoleTask Criteria syntax

Hi,
I have alerts generated by rules and monitors. This alerts may or may not contain additional data in its CustomField1: URL to a web page with some details.
I have created an alert command line console task (and category) in my Management Pack.
This task opens an URL from alert's CustomField1 in default web browser. I can easy pass this value to the task arguments just using $CustomField1$ syntax:
<ManagementPackFragment SchemaVersion="2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
<Categories>
<Category ID="MyMP.OpenUrlTaskCategory" Target="MyMP.OpenUrlTask" Value="System!System.Internal.ManagementPack.ConsoleTasks.Alert" />
</Categories>
<Presentation>
<ConsoleTasks>
<ConsoleTask ID="MyMP.OpenUrlTask" Accessibility="Internal" Enabled="true" Target="MyMP.MyClass" RequireOutput="false">
<Assembly>MyMP.OpenUrlTaskAssembly</Assembly>
<Handler>ShellHandler</Handler>
<Parameters>
<Argument Name="WorkingDirectory" />
<Argument Name="Application">cmd.exe</Argument>
<Argument>/c "start "" "$CustomField1$"</Argument>
</Parameters>
</ConsoleTask>
</ConsoleTasks>
</Presentation>
<Resources>
<Assembly ID="MyMP.OpenUrlTaskAssembly" Accessibility="Internal" FileName="MyMP.OpenUrlTask" HasNullStream="true" QualifiedName="MyMP.OpenUrlTask" />
</Resources>
</ManagementPackFragment>
Task works fine, it opens a link in default browser. But now I want to use optional <Criteria> for my Console Task to show it only if CustomField1 actually is not empty and contains something that starts with 'http://'
I have no idea how to access Alert's CustomField1 value in the Criteria XPath expression. I have tried a lot of options with $CustomField1$, /CustomField1, /Property[Name='CustomField1'] and so on. But it seems that Alert schema is not so primitive.
What is a valid syntax in the Criteria to verify that Alert's CustomField1 is not empty and matches some pattern (I believe XPath function fn:starts-with() should work when I can correctly get the value)? MSDN example is not very descriptive in this case.
Thank you for any help.
Andrey.

Juke, thank you for the answer.
I have read MSDN examples and I know how does XPath work. The question is a bit deeper: I want to show my console task only for alerts that satisfies the following conditions:
1. targeted to specific monitoring class from my pack (or, if possible, generated by specific rules)
2. containing URL in it's CustomField1
My current code is based on
this MSDN example (that is actually related to SCSM, not SCOM). There is also another MSDN article related to SCOM SDK (here I can specify consoletask category using "Category"
attribute) but it doesn't work at all (can't be compiled with VSAE - it says that "Category" attribute is not valid)
Anyway, now with my code (from the first message in thread) I see the console task for
any Alert in SCOM (even for Alerts that are not related to MyMP.MyClass objects, e.g. for Alerts targeted to Windows Computer and so on). I believe that correct <Criteria> should help me to fix it.
The question is: Is it possible to somehow reach selected Alert's properties (e.g. CustomField1) using XPath in criteria? To do it I should know serialized Alert's schema.
Also: why do I see this task in the SCOM console for all alerts but not only for alerts generated against MyClass? As you can see I have specified "target" attribute for the task. MyClass is based on ApplicationComponent
Thank you

Similar Messages

  • SQL query for custom alert view

    I have created a custom alert view and scoped to show alerts related to group of servers.
    Alert view Criteria: Resolution State - New, Severity - Warning and Critical, Group - "Group 1"
    I am trying to query the Operations Manager database to show the alerts with same criteria using below query.
    select MonitoringObjectName, ResolutionState, Priority, Severity, TimeRaised, TimeAdded, TimeResolved, AlertStringName, AlertStringDescription from AlertView where ResolutionState = '0' AND (Severity = '2' or Severity = '1')
    AND
    MonitoringObjectId IN (select TargetObjectId from RelationshipGenericView
    where SourceObjectDisplayName = 'Group 1')
    in Console i see both warning and critical alerts where as in SQL query output i see only critical alerts.  Could you please correct if I am using wrong query. also please share your suggessions if i am completely wrong on this.
    Kind Regards,
    Bommi
    ~Bommi

    your query looks perfectly fine. Are you sure if the alerts you see in the console are of the 'Resolution State =0' (New). It might be the case where the alert have moved to a fidderent resolution state.
    Also, take a sample warming alert from console, query for the same in DB and check the Severity value. If it is '2'.
    Regards,
    Saravanan

  • View db alerts generated in planning book A from within planning book B?

    Hi,
    I have a db alert macro implemented as a default macro in one of our SNP planning books/data view. This is correctly generating db alerts per the criteria coded into the macro. In Alert Monitor, the database alerts show the planning book (book A) and data view (view 1) from which the alerts were generated.
    The planners monitoring this specific alert do not have/should not have access to planning book A and data view 1,  but will have access to a different planning book (B)/data view (2) within the same planning area.
    Is it possible to generate a db alert from a default macro residing in planning book A, data view 1 but have the db alert as viewed in Alert Monitor display a different planning book (B), data view (2) so that when the user launches Supply Network Planning by right clicking on the db alert, the user is taken to planning book B, data view 2 with the alert selection loaded?
    In short, I need to generate db alerts via a default macro in one planning book/data view but must enable planners who monitor these alerts to do so in a different planning book, data view -- all within the same planning area.
    I saw an earlier thread (id 4517019) that seemed to indicate this was possible to assign db alerts generated in one planning book to another planning book,  but it was not clear how to implement this. We are on APO version 4.0. In the macro's Alert/status element properties I do see a section called 'Different Source' which allows me to specify a different planning book and macro. However, I do not understand how this is meant to be used and whether this will be useful to me.
    I would appreciate any help you can offer.
    Thanks!
    - Heidi

    Saradha,
    Thank you for your reply! I checked the various versions of SAP help and found that only as of Release SCM 4.1 can you assign the alerts that are generated in a planning book/ data view to another planning book/data view via the mechanism you explained.  That tells me that perhaps in SCM 4.0 there is no straightforward way of doing this.
    In 4.0, when I double click the macro alert element I see different attributes - one of them is in a section titled 'Different Source' and contains to fields - one that allows you to specify a planning book and the other to specify a macro in that planning book. I'm experimenting with that now to better understand what it's purpose is. If you have any idea, please let me know. Otherwise, thanks very much for your response!
    Thanks,
    - Heidi

  • Dbms-alerts

    I regeisted an alert using the following syntax in oracle
    DECLARE
    msg VARCHAR2 (10) := NULL;
    status VARCHAR2 (10) := NULL;
    BEGIN
    DBMS_ALERT.REGISTER('ALERT1234');
    LOOP
    EXIT WHEN (msg IS NOT NULL);
    DBMS_ALERT.waitone ('ALERT1234', msg, status, 10);
    END LOOP;
    END;
    and in another session I am execution ithe below code .
    BEGIN
    DBMS_ALERT.signal ('ALERT1234', 'hai');
    END;
    But both sessions are in blocked state .
    Can you please let me know how to solve this contention

    BEGIN
    DBMS_ALERT.signal ('ALERT1234', 'hai');
    END;You need to issue commit
    BEGIN
        DBMS_ALERT.signal ('ALERT1234', 'hai');
        COMMIT;
    END;The document is very clear on that
    <pre>
    SIGNAL Procedure
    This procedure signals an alert. The effect of the SIGNAL call only occurs when
    the transaction in which it is made commits. If the transaction rolls back, SIGNAL has no effect.
    All sessions that have registered interest in this alert are notified. If the interested
    sessions are currently waiting, they are awakened. If the interested sessions are not currently waiting,
    they are notified the next time they do a wait call.
    Multiple sessions can concurrently perform signals on the same alert. Each session, as it signals the alert,
    blocks all other concurrent sessions until it commits. This has the effect of serializing the transactions.
    </pre>

  • Javafx script alerts in Internet explorer

    Hi ,
    I'm getting about 4-6 script alerts in internet explorer when i load the javafx applet in browser.Following is the code i',m using to load the javafx applet.
    <script>
                                                                    javafx(
                                                                        archive: "/sisJars/VideoPlayer.jar",
                                                                        width: 646,
                                                                        height: 375,
                                                                        code: "com.sis.recordit.jfx.player.Main",
                                                                        name: "Player",
                                                                        id: "Player",
                                                                        jnlp_href : "/jnlp/videoPlayer.jnlp",
                                                                        xyz: "abc"
                                                                </script>It would be very helpful if someone suggests the possible cause of error.
    Thanks in advance

    I have included the dtfx.js file in the html head block.
    Regarding line number, i'm just getting alert with the message "syntax error" but i cannot see any line number.so i'm not sure if i provided the information you asked.If this is not what you asked, please let me know what to provide ,so that i can provide with the information you need

  • Portal monitoring and alerting - Industry standard

    Hi All,
    We wanted to put up alert system for Portal. We have the standard set of alerts set which is being taken care by CCMS, also have the solution manager diagnostics set for portal and other systems. What we want is the client side monitoring which could be http response time and if it exceeds the threshold will alert us. Remember the alerting is major criteria here else the monitoring can be performed by diagnostics which we are doing on regular basis.
    Is there a indusrty standard available for portal for such alerts? I am currently analysing 2/3 other products for the same. I want to take an advise from you all that what product is being used at your end and what are the benefits over Solman and CCMS.
    Please let me know.
    Regrdas,
    Pankaj

    Hello Pankaj
    You might want to look into EEM (End-user Experience Monitoring) for SAP Solution Manager which has lots of information available (demo, video) on SAP SDN on the following URL:
    [http://wiki.sdn.sap.com/wiki/display/EEM/Home]
    In short it enables you to record actions of end-users and then monitor those actions (response times and so on) of what your users normally perform during daily tasks and by doing that getting the technical view on what users are experiencing to be slow.
    Kind regards
    Tom

  • Product Alerts status

    Is the Product Alerts report static, or does it get updated over time?

    The Product Alerts report is a very sophisticated and dynamic report that leverages the data known about devices, and correlates this against Cisco announced alerts to create a report that allows a customer to easily identify which devices are impacted by which published alerts or vulnerabilities.
    Alerts and the criteria that defines vulnerable devices are dynamic. 
    There can be scenarios where the criteria can be updated by Cisco as more is learned regarding a vulnerability.  Hence, it is possible that the affected devices associated with an alert can change over time. 
    This can result in more devices being reported as affected as Cisco continues to evaluate the impact of a vulnerability.
    More information on Cisco’s security policy is here: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy.html

  • SCOM 2012 SP1 - Automating alert ownsership with command channel notification: the command keeps executing

    Hello everyone,
    here is the context: one of my client wants that, when a SCOM operator changes the resolution state of an alert to a specific resolution state "XYZ", the alert's ownership is automatically set to this user's AD Account.
    What I did:
    a PoSh script that takes the alert ID as a parameter, extracts the user ID from the alert's history - get-scomalerthistory - and sets the alert's owner field with this ID - set-scomalert -owner.
    a command channel running the script
    a subscription that triggers for alert with the specific resolution state "XYZ"
    It works great the first time - when the user sets the alert to XYZ state. Problems come right after this as it seems that modifying the alert in anyway - via GUI or script - will trigger the subscription once again.
    So, in fact, I need the subscription to trigger only when the alert CHANGES its resolution state to XYZ.
    Does anyone have an idea about this ?
    Reagrds,
    P. Augras

    Hi, it's predictable behavior as your script updates the alert property but alert property matches criteria specified. So one of methods is to change the resolution state in script to another state, something like XYZProcessed.

  • Do we have any method to list out the servers that are critical and the component/monitor causing the server to turn into critical state in SCOM 2012

    Hello Team,
    We are monitoring 1000 servers in our environment and out of 1000 servers, we have approximately 100 servers showing as critical state on the server state view.
    We can get the critical servers list from SCOM console, but we are not able to get the information about the component responsible for the server to be critical. Using Health explorer to find the root cause for 100 servers is really impossible and time consuming.
    Do we have any method to list out the servers that are critical and the component/monitor causing the server to turn into critical state?
    Advance thanks for your help.
    Regards,
    Dinesh
    Thanks &amp; Regards, Dinesh

    Hi,
    As far as I know alerts with severity as criticla may cause windows computer in a critical state, we can try below code to find all critical alerts:
    get-alert -criteria 'ResolutionState=0 AND Severity=2' | select Name,ResolutionState,TimeRaised | export-csv c:\Alerts.txt
    Criteria Syntax http://msdn.microsoft.com/en-us/library/bb437603.aspx
    Values to use.
    Resolution State 
    Severity Values for Alerts
    0       =   New
    0 = INFORMATIONAL
    255   =   Closed
    1 = WARNING
    2 = CRITICAL
    Hope this helps.
    Regards,
    Yan Li
    Regards, Yan Li

  • Reset monitors all at once with a script

    I am getting numerous SCOM Heath Monitor alerts for the following 2 conditions:
    AD Domain Availability Health Degraded
    AD Site Availability Health Degraded
    I have searched the internet for scripts to reset them each all at once. I have found a couple of scripts and ran them in the SCOM Shell and they say that that are resetting the alerts but in actuality, they don't.
    The scripts I used were found at these 2 sites:
    (url)http://blogs.technet.com/b/ken_brumfield/archive/2010/06/23/making-the-world-greener-one-monitor-at-a-time-_2d00_-reset-scom-monitors-enmasse.aspx(/url)
    (url)http://gallery.technet.microsoft.com/SCOM-2012-Batch-reset-63a17534(/url)
    Does anyone know of a script that actually works for this purpose.

    Use this simple PS, I am using this daily to reset health of closed alerts - please ensure you close the alerts as the script will only detect the closed alerts generated by the monitors
    Works well for my purpose - hope this helps...
    #PS to reset health of closed alerts generated by the monitors older than 7 days
    # Import Operations Manager Module and create Connection 
    Import-Module OperationsManager 
    New-SCOMManagementGroupConnection 
    $alerts=get-scomalert -Criteria "Severity!=0 AND IsMonitorAlert=1 AND ResolutionState=255"| where {$_.LastModified -ge ((get-date).AddDays(-7)).ToUniversalTime()} 
    if ($alerts -is [object]) 
    foreach ($alert in $alerts) 
    $monitoringobject = Get-SCOMClassinstance -id $alert.MonitoringObjectId 
    # Reset Monitor 
    If (($monitoringobject.HealthState -eq "Error") -or ($monitoringobject.HealthState -eq "Warning")) 
    $monitoringobject.ResetMonitoringState() 
    Faizan

  • RSS Feed service on IP Phone

    Hi
    Can someone share with me on how to configure the Stock Quotes Application or RSS Feed for the IP Phone?
    Model:7975G
    CUCM 7.0
    Regards
    Karthik

    PhoneTop Messenger reads RSS weather feed from National Weather Service, and pushes it out to an IP phone group if the issued alert meets a criteria. May be it can be expanded to include other types of RSS feeds. Do you have a specific feed you want to read?

  • HP Storage Management Pack v4.0 for Operations Manager

    Hi everyone,
    I've installed HP StoreFront Manager MP for Microsoft 4.0 (HP Storage Management integration with MS System Center) on a Ops Mgr 2012 R2 Server
    The diagram view of the two P4500 G2 StoreVirtual Appliances are shown without issue.
    However I cannot get any alerts, error alerts, events, warning events showing in the HP Storage or HP StoreVirtual Storage MP folders
    I've  created new alert/event view/criteria "show data related to: HP Storevirtual SNMP trape catcher rule ALL
    But this also shows nothing.
    I've followed the HPStorageManagementPackforSystemCenterUserGuide-4.0.pdf to no avail.
    Any ideas most appreciated.
    Configuration as follows:
    Installed HPStorageManagementPackforSystemCenter.exe on the Ops Mgr 2012 R2 Server:
    SCOM_MP_V4.0_Microsoft_Windows_Server_2003_2008_W32_2008x64_2008_R2_Win_Server_2012_R2_T4282-10516
    https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=System_Center
    Chose the HP Storage MP install option: OpsMgr Server: requires Management Server deployed on this server
    Ticked the "HP StoreVirtual Storage" component
    Executed HP Storage Management Pack User Configuration Tool.exe
    Added the IP of Ops Mgr 2012 R2 management Server
    Added the 2 IPs of the HP StoreVirtual Storage appliances
    Configured SNMP community string as 'public' for each appliance
    It shows two the discovered 2 storage systems
    In Ops Manager 2012 R2
    Authoring / object discoveries, enabled the following rules, saved to a new MP:
    HP StoreVirtual Cache Discovery Rule
    HP StoreVirtual Drive Discovery Rule
    HP StoreVirtual Network Device Discovery Rule
    HP StoreVirtual Power Supply Discovery Rule
    HP StoreVirtual Discovery Rule
    HP StoreVirtual System FAN Discovery Rule
    HP StoreVirtual SNMP Trap Capture Rule
    In the Ops Mgr 2012 R2 Console, the HP StoreVirtual Storage MP Digram View shows the cluster, two p4500 appliances with cache, drives, fans, network devices and power supplies all green
    SNMP on Ops Mgr 2012 R2 Server
    Trap community name public
    Trap destinations
    localhost
    IP of Ops Mgr 2012 R2 server
    Security, send auth trap public community
    Accept SNMP packets from IP hosting the Hp Storevirtual Centralized Management Console
    SNMP and SNMP trap services started
    HP Storage MP server service started
    On the CMC Server SNMP windows service config is:
    Community name public
    Trap destination IP of Ops Mgr 2012 R2 Server
    Security, send auth trap public community
    Accept SNMP packets from any host
    SNMP CMC settings for SAN Management Group
    SNMP general settings, Access control (IPs of Ops Mgr 2012 Server and CMC server)
    Trap recipient (IP of Ops Mgr 2012 R2 Server, SNMP v1)

    Hi,
    Can you check windows event and see what error message appears?
    I highly recommend you follow the HP Storage Management Pack for System Center User Guide.
    <cite>http://h20628.www2.hp.com/km-ext/kmcsdirect/emr_na-c03112503-1.pdf</cite>
    Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party
    contact information.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Help with completion of Accelerometer and Heel force VI please

    Hi all,
    First off I'm very stressed as regards to trying to complete this full package, let me explain a little further. Essentially I have 3 VI's an EMG VI and Accelerometer (Trunk Tilt) VI and an FSR (Heel Force) VI. The idea behind the VI is to simulate signals received from the aforementioned instruments during a Sit to Stand movement (EMG on the quadriceps, Accelerometer on the chest, FSR on the heels). Firstly the EMG is working fine and I am happy with it. 
    -A full sit to stand movement should take less than 2 seconds. I will add a rough sketch of how the signals should look on one graph. It is required that I place the 3 signals on one graph.
    -The accelerometer VI is not working fully for me and the timing part of the VI is off. I will attach the VI I have completed so far and a sketch of what I would like to have and what I need to have adjustable. 
    -The FSR VI I have so far is very crude and far off from what I need it to look like, I just copied what I have done from the Accelerometer VI. I too will add a picture of what I result I should have and what needs to be adjustable. 
    -Finally I need a sit to stand detector that receives the signals from the graph and alerts when the criteria are met. I will add some pictures which may be of some help.
    Thank you with sincere gratitude if anyone can help me. I'm still learning.
    Kind Regards,
    Mark
    Attachments:
    EMG Finished final.vi ‏903 KB
    Accelerometer updated.vi ‏14 KB
    FSR Possible idea.vi ‏14 KB

    Pictures as promised.
    Kind Regards
    Mark
    Attachments:
    013.jpg ‏1053 KB
    014.jpg ‏1189 KB
    015.jpg ‏1464 KB

  • No sound is played in the earphones to notify of an incoming call

    With the earphones connected, in holster on not, there is no sound played in the earphones when there's an incoming call. The sound is only played in the speaker.
    I do hear notifications in the earphones when there's a new text messages, a notification from Twitter and other applications.
    Is this issue is going to be addressed in the near future, if at all?
    Thank you.

    Wish I had a buck for everytime I've heard a request like this.  In every case where I've heard it in the past, the call center was small, undermanned, and they were trying to overcome these two limitations by trying to (1) see identifying info on calls in the queue, (2) send messages to agents, (3) set off a light and buzzer, etc.
    Agents don't have the ability to see anything but the call they are working on using any of the agent interfaces.  The supervisor desktop has some additional options where you can set a workflow action to alert when certain criteria are met.  If the priority queue alerts when > 0, that might satisify your requirement, but it would NOT tell you WHO the priority caller is.
    Then you have the issue that the agents are all busy, and someone has to dump the call they are working with to take the call in the queue.  Again, there are options to handle this, but you're putting bandaids on a problem.  The bandaids may work with varying degress of success, but it's likely that your organization will never be very happy with how it works.  The real issue you have is most likely a staffing and process problem, and you can only do so much to compensate for that with technology.  

  • List alerts meeting Management Pack, Severity, and Priority criteria

    Hello,
    As part of our Management Pack Life Cycle Management Process, I need to identify the alerts meeting the following criteria:
    1.      
    Generated from objects hosted by a specific subset of Management Packs (ex.: Windows Server 2003 & Windows Server 2008 (Monitoring))
    2.      
    With a particular subset of “Severities” (ex.: Severity = Critical | Warning)
    3.      
    With a particular subset of “Priorities” (ex.: Priority = High)
    Alert Views
    Though I can scope an alert view by severity & priority, I cannot scope by source Management Pack. 
    I therefore see alerts from all Management Packs! L
    Alert Report
    Though the Alerts report (under
    Microsoft generic Report Library) allows me to scope by Severity & Priority, here too I cannot scope by source Management Pack.
    I guess ideally, I would either:
    1.      
    Create a new report, allowing me to specify the desired criteria; or
    2.      
    Build & run a SQL statement that would extract the information directly from the database
    The problem is that I haven’t yet gained enough experience with OpsMgr to build either of them.
    Looking forward to hearing from someone,
    Larry

    Hi Larry
    Try the following:
    # Name of Root Management Server
    $RMS="XXXXXXXXXXXXXXXX"
    # Initialise OpsMgr Provider
    write-Host
    write-Host "Executing UpdateAlerts.ps1 ..."
    write-Host
    ## prepare OpsMgr shell
    if ((Get-PSSnapin | Where-Object {$_.Name -eq 'Microsoft.EnterpriseManagement.OperationsManager.Client'}) -eq $null) {
    Write-Host
    Write-Host "File loaded."
    Write-Host "Initializing shell for operations manager..."
    Write-Host "Add Microsoft.EnterpriseManagement.OperationsManager.Client snap in."
    Add-PSSnapin Microsoft.EnterpriseManagement.OperationsManager.Client -ErrorAction SilentlyContinue -ErrorVariable Err
    if ($Err) { $(throw write-Host $Err) }
    if ((Get-ManagementGroupConnection | Where-Object {$_.ManagementServerName -eq $RMS}) -eq $null) {
    Write-Host "Connect to Management Server: $RMS"
    New-ManagementGroupConnection $RMS -ErrorAction SilentlyContinue -ErrorVariable Err
    if ($Err) { $(throw write-Host $Err) }
    if ((Get-PSDrive | Where-Object {$_.Name -eq 'Monitoring'}) -eq $null) {
    Write-Host "Create Monitoring drive from Provider."
    New-PSDrive -Name: Monitoring -PSProvider: OperationsManagerMonitoring -Root: \ -ErrorAction SilentlyContinue -ErrorVariable Err
    if ($Err) { $(throw write-Host $Err) }
    Write-Host "Operations manager shell initialized."
    Write-Host
    Set-Location Monitoring:\$RMS
    # Rules - Alert Name, Severity, Priority, Management Pack
    get-alert -criteria 'PrincipalName is not null and ResolutionState = ''0'' and IsMonitorAlert=''False''' |
    select-object name, Severity, Priority, @{Name="ManagementPack"; Expression={((get-rule $_.monitoringruleid).getmanagementpack()).displayname}} |
    Export-csv c:\temp\listalertsfromrules.csv
    # Monitors - Alert Name, Severity, Priority, Management Pack
    get-alert -criteria 'PrincipalName is not null and ResolutionState = ''0'' and IsMonitorAlert=''True''' |
    select-object name, Severity, Priority, @{Name="ManagementPack"; Expression={((get-monitor $_.problemid).getmanagementpack()).displayname }} |
    Export-csv c:\temp\listalertsfrommonitors.csv
    It works for me (at the moment it lists all alerts with resolution state = 0 but you can change the -criteria clause to amend that). You could also add filters for different priorities and severities and I guess add on date ranges ... but lets check the
    base script works for you first!
    Just a few things you'll need to amend in the script:
    1) The RMS is defined in the second line - you'll need to specify your RMS
    2) I have saved the output to a folder c:\temp - either create such a folder or change the file output path
    Let us know how it goes.
    Cheers
    Graham
    View OpsMgr tips and tricks at
    http://systemcentersolutions.wordpress.com/

Maybe you are looking for