False Alert

We are using Spiceworks from last 5 Months. It was working fine. We never receive false alert. But from last one month we Continuously getting false alert. Like:- 2 servers is offline from last 10 minutes or something else.
This topic first appeared in the Spiceworks Community

did you see this -
https://social.technet.microsoft.com/Forums/en-US/97873970-89f2-4069-83d7-7b5d2126781e/web-application-template-template-content-match?forum=systemcenterrom
Thanks, S K Agrawal

Similar Messages

Anyconnect 3.1 Captive Portal False Alert Stops Users Connecting.

Hi All,
I am having problems with a customer's ASA 5505 with Anyconnect 3.1 - it is generating captive portal false-alerts which are stopping users from connecting.
This issue began when I upgraded from Anyconnect 2.4 to 3.1, and it appears like this: A user downloads and installs the Anyconnect client and is able to connect fine, to begin with. However, once they reboot their computer and try to reconnect, the VPN session will not come up and they receive the error message below.
"The service provider in your current location is restricting access to the internet. You need to log on with the service provider before you can establish a VPN session. You can try this by visiting any website with your browser."
Reading other posts, it seems this message appears when a captive portal is restricting internet access. It must be a false alert in this case as there is nothing of the sort here. Apparently, Anyconnect 3.1 can generate a false alert like so if the name of the firewall's SSL certificate doesn't match the CName listed on the Client Profile. I've set this up to match, to no avail.
Although users can connect by reauthenticating through the SSL VPN login web page, I am stumped as to how to get rid of this captive portal error that pops up when they try to use the Anyconnect client.
Any advice would be appreciated, just let me know what extra details to post if needed.
Many thanks,
Josh Campbell

Hi Joshua,
The below information could be located at
www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect31/administration/guide/ac03vpn.html
False Captive Portal Detection
AnyConnect can falsely assume it is in a captive portal in the following situations.
•If AnyConnect attempts to contact an ASA with a certificate containing an incorrect server name (CN), then the AnyConnect client will think it is in a "captive portal" environment.
To prevent this, make sure the ASA certificate is properly configured. The CN value in the certificate must match the name of the ASA server in the VPN client profile.
•If there is another device on the network before the ASA, and that device responds to the client's attempt to contact an ASA by blocking HTTPS access to the ASA, then the AnyConnect client will think it is in a "captive portal" environment. This situation can occur when a user is on an internal network, and connects through a firewall to connect to the ASA.
If you need to restrict access to the ASA from inside the corporation, configure your firewall such that HTTP and HTTPS traffic to the ASA's address does not return an HTTP status. HTTP/HTTPS access to the ASA should either be allowed or completely blocked (also known as black-holed) to ensure that HTTP/HTTPS requests sent
There is also a bug filed for this. Just for your reference,
CSCud17825 - Anyconnect captive portal
Regards,
Srikanth K S.

False alerts from LELA

I keeping alerts from LELA stating that I have no internet connection when my internet connection is working fine. Any ideas?

Uninstall LELA and your false alerts will go away.

False alert on content match-web application

Hi,
I have few web applications configured in which I am monitoring for an alert if the content does not matches with a defined string. I have been getting false alert alerts from the monitor, when I manually check the webpage for content match, the string is
present there.
How can I troubleshoot, this issue.

did you see this -
https://social.technet.microsoft.com/Forums/en-US/97873970-89f2-4069-83d7-7b5d2126781e/web-application-template-template-content-match?forum=systemcenterrom
Thanks, S K Agrawal

False alerts from EnterPrise Manager

Hi All,
Please help in addressing this issue:
I have configured monitoring and alerts for OVD in Enterprise manager and I have been getting false alerts on OVD being down.
Below is my notification alert configuration:
General:
Rule Name: OVD Down
Public: No
Availability:
Up: No
Down: Yes
Corrective Actions on target down: No
Agent Unreachalbe: Yes
Agent Unreachable Resolved: No
Metric Error Detected: Yes
Metric Error Resolved: No
Blackout Started: Yes
Blackout Ended: No
No Metrics I have added, No Policies, No job types and no methods.
My first thought that I have "Metric Error Detected" but I haven't added any metrics. So, I change it No (without restarting EM) but same false results.
Not sure if I have to restart the EM after changing notificaiton rule.
Please help.
Regards,
Sunny

Uninstall LELA and your false alerts will go away.

Why do false alert get triggerd in PI?

Hi All,
There are no fauiler in messges, but enormous alerts are getting triggered every 7days for particular interface in PI.
Can someone tell me why does happen?
Regards,
Madhu

Hi Adithya,
Could you please check if you have given the exact sender service/Interface in alert rules instead of * . Some times this might be the reason to trigger false alerts.
Clarify:was this false alert raiding from begining or it started triggering all of sudden?
Regards,
Naveen

Cluster monitoring false alerts

I have a cluster in monitoring which has many shared disks in monitoring.
Recently I have been receiving false alerts for 2 of the disks for low disk space with every poll & secondly the disks labelling seems to be wrong as per the actual labeling.
Is there a way in which I can manually change the disks labeling or with any hotfix?

Hi,
Have you imported New Base OS MP 6.0.7026.0? It fixed bug 'Cluster Disk Free Space Percent' and Cluster Disk Free Space MB' monitors generate alerts with bad descriptions when the volume label of a cluster disk is empty.
http://blogs.technet.com/b/kevinholman/archive/2013/05/09/opsmgr-mp-update-new-base-os-mp-6-0-7026-0.aspx
Niki Han
TechNet Community Support

SCOM DFS Backlog count is giving FALSE alert

Hi ;
I've created a backlog count monitor using a 2 state monitor ( which I got from http://arbappy.blogspot.hk/2012/04/create-scom-2007-r2-monitor-to-alert-on.html )
It is used to monitor 70 of our DFS servers.
The monitor should be working under this rule :-
1) if backlog count is greater or equal to 5000 files , status become unhealthy(critical) and alert is generated.
2) if backlog is less than 5000 , status is healthy and no alert is generated.
I have configured the subscription only to send critical alerts.
Problem is that I do get alert for healthy status and it happens only to some servers.On top, it is random. Today could be X server , tomorrow could be Y . Both are healthy ( which meant having less than 5000 files.) . It seems the rule is not working really
well. Any help is much appreciated.
Cheers
megat

1. About the different time stamp, I think because the server is located on a different time zone from the RMS. The server is 2 hours earlier .
2. Backlogcountfile is property of replicationconnection ? I guess so. Nevertheless could you advise to confirm that.
3. Below is the XML which I managed to export.
<ManagementPack ContentReadable="true" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<Manifest>
    <Identity>
      <ID>RWDFSBACKLOGMONITORINGSCRIPTSMMO</ID>
      <Version>1.0.0.0</Version>
    </Identity>
    <Name>RW_DFS_BACKLOG_MONITORING_SCRIPTS_MMO</Name>
    <References>
      <Reference Alias="MicrosoftWindowsDfsReplication6063210">
        <ID>Microsoft.Windows.DfsReplication</ID>
        <Version>6.0.6321.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="MicrosoftWindowsLibrary6172210">
        <ID>Microsoft.Windows.Library</ID>
        <Version>6.1.7221.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="SystemLibrary6172210">
        <ID>System.Library</ID>
        <Version>6.1.7221.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="SystemCenter">
        <ID>Microsoft.SystemCenter.Library</ID>
        <Version>6.1.7221.61</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
      <Reference Alias="Health">
        <ID>System.Health.Library</ID>
        <Version>6.1.7221.0</Version>
        <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
      </Reference>
    </References>
</Manifest>
<Monitoring>
    <Monitors>
      <UnitMonitor ID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc" Accessibility="Public" Enabled="false" Target="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection" ParentMonitorID="Health!System.Health.AvailabilityState"
Remotable="true" Priority="Normal" TypeID="MicrosoftWindowsLibrary6172210!Microsoft.Windows.TimedScript.ThreeStateMonitorType" ConfirmDelivery="false">
        <Category>Custom</Category>
        <AlertSettings AlertMessage="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc_AlertMessageResourceID">
          <AlertOnState>Error</AlertOnState>
          <AutoResolve>true</AutoResolve>
          <AlertPriority>High</AlertPriority>
          <AlertSeverity>Error</AlertSeverity>
          <AlertParameters>
            <AlertParameter1>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/ReplicationGroupName$</AlertParameter1>
            <AlertParameter2>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/ReplicatedFolderName$</AlertParameter2>
            <AlertParameter3>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/SendingMemberName$</AlertParameter3>
            <AlertParameter4>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/ReceivingMemberName$</AlertParameter4>
            <AlertParameter5>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/BacklogCount$</AlertParameter5>
            <AlertParameter6>$Target/Property[Type="SystemLibrary6172210!System.Entity"]/DisplayName$</AlertParameter6>
          </AlertParameters>
        </AlertSettings>
        <OperationalStates>
          <OperationalState ID="UIGeneratedOpStateId751249f015634144b909f400c3106b84" MonitorTypeStateID="Success" HealthState="Success" />
          <OperationalState ID="UIGeneratedOpStateId7c713b8c8aa44c518dbc05007f38b71e" MonitorTypeStateID="Warning" HealthState="Warning" />
          <OperationalState ID="UIGeneratedOpStateIdcda0005310e9480dba2726cc8fc9e1d3" MonitorTypeStateID="Error" HealthState="Error" />
        </OperationalStates>
        <Configuration>
          <IntervalSeconds>60</IntervalSeconds>
          <SyncTime />
          <ScriptName>RW-DFS-SCRIPT-MMO.vbs</ScriptName>
          <Arguments>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/BacklogCount$</Arguments>
          <ScriptBody>Set oArgs = WScript.Arguments
numbers=oArgs(0)
Dim oAPI, oBag
Set oAPI = CreateObject("MOM.ScriptAPI")
Set oBag = OAPI.CreatePropertyBag()
Call oBag.AddValue("BackLogCountFile",numbers)
Call oAPI.Return(oBag)</ScriptBody>
          <TimeoutSeconds>1200</TimeoutSeconds>
          <ErrorExpression>
            <SimpleExpression>
              <ValueExpression>
                <XPathQuery Type="String">Property[@Name='BackLogCountFile']</XPathQuery>
              </ValueExpression>
              <Operator>GreaterEqual</Operator>
              <ValueExpression>
                <Value Type="String">5000</Value>
              </ValueExpression>
            </SimpleExpression>
          </ErrorExpression>
          <WarningExpression>
            <And>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">Property[@Name='BackLogCountFile']</XPathQuery>
                  </ValueExpression>
                  <Operator>GreaterEqual</Operator>
                  <ValueExpression>
                    <Value Type="String">100</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">Property[@Name='BackLogCountFile'] </XPathQuery>
                  </ValueExpression>
                  <Operator>Less</Operator>
                  <ValueExpression>
                    <Value Type="String">5000</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
            </And>
          </WarningExpression>
          <SuccessExpression>
            <And>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">Property[@Name='BackLogCountFile']</XPathQuery>
                  </ValueExpression>
                  <Operator>GreaterEqual</Operator>
                  <ValueExpression>
                    <Value Type="String">0</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">Property[@Name='BackLogCountFile']</XPathQuery>
                  </ValueExpression>
                  <Operator>Less</Operator>
                  <ValueExpression>
                    <Value Type="String">100</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
            </And>
          </SuccessExpression>
        </Configuration>
      </UnitMonitor>
      <UnitMonitor ID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc" Accessibility="Public" Enabled="true" Target="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection" ParentMonitorID="Health!System.Health.AvailabilityState"
Remotable="true" Priority="Normal" TypeID="MicrosoftWindowsLibrary6172210!Microsoft.Windows.TimedScript.TwoStateMonitorType" ConfirmDelivery="false">
        <Category>Custom</Category>
        <AlertSettings AlertMessage="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc_AlertMessageResourceID">
          <AlertOnState>Error</AlertOnState>
          <AutoResolve>true</AutoResolve>
          <AlertPriority>High</AlertPriority>
          <AlertSeverity>MatchMonitorHealth</AlertSeverity>
          <AlertParameters>
            <AlertParameter1>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/ReplicationGroupName$</AlertParameter1>
            <AlertParameter2>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/ReplicatedFolderName$</AlertParameter2>
            <AlertParameter3>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/SendingMemberName$</AlertParameter3>
            <AlertParameter4>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/ReceivingMemberName$</AlertParameter4>
            <AlertParameter5>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/BacklogCount$</AlertParameter5>
            <AlertParameter6>$Target/Property[Type="SystemLibrary6172210!System.Entity"]/DisplayName$</AlertParameter6>
          </AlertParameters>
        </AlertSettings>
        <OperationalStates>
          <OperationalState ID="UIGeneratedOpStateIdd2ce36df64964c848bd1a155c2d3d56b" MonitorTypeStateID="Success" HealthState="Success" />
          <OperationalState ID="UIGeneratedOpStateId77f67a08c47d4d4b9677a854aef66cc9" MonitorTypeStateID="Error" HealthState="Error" />
        </OperationalStates>
        <Configuration>
          <IntervalSeconds>86400</IntervalSeconds>
          <SyncTime>07:40</SyncTime>
          <ScriptName>RW_DFS_TwoBasedLine.vbs</ScriptName>
          <Arguments>$Target/Property[Type="MicrosoftWindowsDfsReplication6063210!Microsoft.Windows.DfsReplication.ReplicationConnection"]/BacklogCount$</Arguments>
          <ScriptBody>Set oArgs = WScript.Arguments
numbers=oArgs(0)
Dim oAPI, oBag
Set oAPI = CreateObject("MOM.ScriptAPI")
Set oBag = OAPI.CreatePropertyBag()
Call oBag.AddValue("BackLogCountFile",numbers)
Call oAPI.Return(oBag)</ScriptBody>
          <TimeoutSeconds>3600</TimeoutSeconds>
          <ErrorExpression>
            <SimpleExpression>
              <ValueExpression>
                <XPathQuery Type="String">Property[@Name='BackLogCountFile']</XPathQuery>
              </ValueExpression>
              <Operator>GreaterEqual</Operator>
              <ValueExpression>
                <Value Type="String">5000</Value>
              </ValueExpression>
            </SimpleExpression>
          </ErrorExpression>
          <SuccessExpression>
            <And>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">Property[@Name='BackLogCountFile']</XPathQuery>
                  </ValueExpression>
                  <Operator>GreaterEqual</Operator>
                  <ValueExpression>
                    <Value Type="String">0</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
              <Expression>
                <SimpleExpression>
                  <ValueExpression>
                    <XPathQuery Type="String">Property[@Name='BackLogCountFile']</XPathQuery>
                  </ValueExpression>
                  <Operator>Less</Operator>
                  <ValueExpression>
                    <Value Type="String">5000</Value>
                  </ValueExpression>
                </SimpleExpression>
              </Expression>
            </And>
          </SuccessExpression>
        </Configuration>
      </UnitMonitor>
    </Monitors>
</Monitoring>
<Presentation>
    <Folders>
      <Folder ID="Folder_dcff3c90ef4740ff97397eb40d82225f" Accessibility="Public" ParentFolder="SystemCenter!Microsoft.SystemCenter.Monitoring.ViewFolder.Root" />
    </Folders>
    <StringResources>
      <StringResource ID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc_AlertMessageResourceID" />
      <StringResource ID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc_AlertMessageResourceID" />
    </StringResources>
</Presentation>
<LanguagePacks>
    <LanguagePack ID="DAN" IsDefault="false">
      <DisplayStrings>
        <DisplayString ElementID="RWDFSBACKLOGMONITORINGSCRIPTSMMO">
          <Name>RW_DFS_BACKLOG_MONITORING_SCRIPTS_MMO</Name>
        </DisplayString>
        <DisplayString ElementID="Folder_dcff3c90ef4740ff97397eb40d82225f">
          <Name>RW_DFS_BACKLOG_MONITORING_SCRIPTS_MMO</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc">
          <Name>RW_DFS-R BACKLOG COUNT MONITOR</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc" SubElementID="UIGeneratedOpStateId751249f015634144b909f400c3106b84">
          <Name>Healthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc" SubElementID="UIGeneratedOpStateIdcda0005310e9480dba2726cc8fc9e1d3">
          <Name>Unhealthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc" SubElementID="UIGeneratedOpStateId7c713b8c8aa44c518dbc05007f38b71e">
          <Name>Degraded</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc_AlertMessageResourceID">
          <Name>Replication Backlog Alert</Name>
          <Description>Incident Team :- Backlog of DFS Server
Replication Group:
{0}
Replicated Folders:
{1}
Sending member:
{2}
Receiving member:
{3}
Backlog Count:
{4}
Display Name : {5}</Description>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc">
          <Name>RW_DFS_Backlog_Count_TwoBasedLine_MMO</Name>
          <Description>This monitor is for Incident Team</Description>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc" SubElementID="UIGeneratedOpStateId77f67a08c47d4d4b9677a854aef66cc9">
          <Name>Unhealthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc" SubElementID="UIGeneratedOpStateIdd2ce36df64964c848bd1a155c2d3d56b">
          <Name>Healthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc_AlertMessageResourceID">
          <Name>RW_DFS_Backlog_Count_TwoBasedLine_MMO</Name>
          <Description>Incident Team :- DFS Backlog Files ( run at 0400 daily)
Replication Group:
{0}
Replicated Folders:
{1}
Sending member:
{2}
Receiving member:
{3}
Backlog Count:
{4}
Display Name : {5}</Description>
        </DisplayString>
      </DisplayStrings>
    </LanguagePack>
    <LanguagePack ID="ENU" IsDefault="false">
      <DisplayStrings>
        <DisplayString ElementID="RWDFSBACKLOGMONITORINGSCRIPTSMMO">
          <Name>RW_DFS_BACKLOG_MONITORING_SCRIPTS_MMO</Name>
        </DisplayString>
        <DisplayString ElementID="Folder_dcff3c90ef4740ff97397eb40d82225f">
          <Name>RW_DFS_BACKLOG_MONITORING_SCRIPTS_MMO</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc">
          <Name>RW_DFS-R BACKLOG COUNT MONITOR</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc" SubElementID="UIGeneratedOpStateId751249f015634144b909f400c3106b84">
          <Name>Healthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc" SubElementID="UIGeneratedOpStateIdcda0005310e9480dba2726cc8fc9e1d3">
          <Name>Unhealthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc" SubElementID="UIGeneratedOpStateId7c713b8c8aa44c518dbc05007f38b71e">
          <Name>Degraded</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor61be896a832e4ffa8868c1e10c6711cc_AlertMessageResourceID">
          <Name>RW_DFS-R BACKLOG_COUNT_MONITOR_MMO</Name>
          <Description>This alert is run every one hour to see any back log. Kindly contact
Megat for further details.</Description>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc">
          <Name>RW_DFS_Backlog_Count_TwoBasedLine_MMO</Name>
          <Description>This monitor is for Incident Team</Description>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc" SubElementID="UIGeneratedOpStateId77f67a08c47d4d4b9677a854aef66cc9">
          <Name>Unhealthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc" SubElementID="UIGeneratedOpStateIdd2ce36df64964c848bd1a155c2d3d56b">
          <Name>Healthy</Name>
        </DisplayString>
        <DisplayString ElementID="UIGeneratedMonitor73d3c5593c8e43ef8ff223d94c1c1ebc_AlertMessageResourceID">
          <Name>RW_DFS_Backlog_Count_TwoBasedLine_MMO</Name>
          <Description>Incident Team :- Backlog of DFS Server_TwoBasedLine
Replication Group:
{0}
Replicated Folders:
{1}
Sending member:
{2}
Receiving member:
{3}
Backlog Count:
{4}
Display Name : {5}</Description>
        </DisplayString>
      </DisplayStrings>
    </LanguagePack>
</LanguagePacks>
</ManagementPack>

Systems Center Operations Manager false alerts for DFS

Last weekend, SCOM generated 87 alerts for "DFSR-R: Replicated Folder Removed" across 3 different servers. The problem being, those alerts are supposed to be generated when SCOM detects event ID 4010's, however, I checked all 3 servers, and there
were no 4010 events on any of them. Has anyone seen false positives like this? And does anyone have an idea towards preventing them in the future? I'm not even sure where to start troubleshooting this.

Thanks for the suggestion, we actually figured it out this morning. For some reason SCOM wasn't monitoring these 3 servers correctly (and possibly others). The alerts were created from valid 4010 events, though from a month ago in one case, and early last
year in others. However, that's not an issue for us to troubleshoot, we only support a handful of technologies for this customer, and SCOM itself isn't one of them (we just use it for monitoring the technologies we DO support).

Bulletin Board - Message centre false alerts

The TOSHIBA Bulletin Board keeps alerting me to two Messages. However, when I "Open the Bulletin Board" and "Show All Messages" the messages disappear. The process repeats, sometimes daily.

Hello
What messages or alerts you get exactly? Can you post a screenshot? This would be really useful
In my opinion you could also try reinstalling Bulletin Board. Probably its malfunctioning or something else You can download the newest version of this tool on Toshiba website:
http://eu.computers.toshiba-europe.com > Support & Downloads > Download Drivers
Check this!!!

False Alerts from Cluster Server Logical Disk Monitor

Hi All,
I have a cluster server & on one of its server there are 10 cluster disk.
Today from no where since last 5 hours I have been getting critical alerts for Cluster Disk - Free Space Monitor (MB) with every poll, when the threshold is well above the defined in this monitor.
After few mins when this critical alert gets resolved, I get a warning alert from Cluster Disk - Free Space Monitor (%). In this case also the threshold is well above.
Also, this issue with just this disk & all other disks perfectly fine. Kindly help.

I'm not sure which version of MP you have but the following link may help which have a bug fix for same:
http://technet.microsoft.com/en-us/library/dd262079.aspx

Windows Service Monitor - False Alerts

Scenario : We have a custom Service Monitor that is created long back and enabled for all Servers. I just noted that the service is not present in all servers except few. I also noticed that there are some Overrides for 5 servers which does
not make any sense to me as it was overridden to enable this monitor.
Issue : Now the issue is, I got alerts for 5 servers for which the service is not installed at all. How is that possible ?
S.Arun Prasath HP ARDE TEAM

HOw to you create this service monitor?
You can create your service monitor either
1) From Authoring workspace --> Management pack Templates --> Windows services
http://www.bictt.com/blogs/bictt.php/2011/03/17/scom-monitoring-a-service-part3
OR
2) Authoring workspace --> Monitors
http://www.bictt.com/blogs/bictt.php/2011/03/17/scom-monitoring-a-service-part2
You understanding is correct if you using method 1) to create service monitor. Otherwise, you should enable the monitor for computer which has te service present.
Roger

False backup / archive alerts after system refresh

We have implemented CCMS on our systems. We recently refreshed our QTS system with a backup of production (PTD). CCMS is now sending alerts for backups and archives. It tells us that the backup and archive did never run.
I checked DB12 and found that there is no data in DB12. This is probably due to the system refresh.
Is there any extra post refresh step that we can do to prevent these false alerts (other than running a full online backup as post refresh step)? Is it possible to export the backup information (tables used by DB12) as pre refresh step and re-import them after the refresh?

Kevin DK wrote:
Will it create issues if we do not delete tables SDBAH and SDBAD during the refresh?
No. BTW, tables are not to be deleted, just the table 'entries'.
Thanks

Alert if document is already open by another user on server

Hi
First off, I know working off servers isn't the best practice because who knows if someone else is making changes to the very file you're supposed to be working on. However, we work directly from our server and the biggest concern is two users both opening and saving changes without being aware they're overwriting another persons work.
Is it possible to run a script upon file open to:
1. check the metadata of the file
2. alert the current user if this is open by someone else, and if this isn't true then to update the metadata to say which user has it open.
File close:
1. remove user information from metadata, so next user opening will not be falsely alerted
A while ago I had some joy with step 1, however step 2 required another save of the file otherwise it's metadata wasn't being picked up by the next user. This in turn meant longer working times because the file would open, then save instantly if it didn't find another users name in the metadata.
Is writing to a log file on the server a better solution which does not require the psd/tiff/eps to be resaved once the curent users info is stored in it?
If this is a better idea is there a way to write into this log, that should Photoshop crash and the regular close script that cleared the log didnt work so to now clear it upon process termination?
Simply put, I want an alert to popup when a file is open by someone else. where this queries the files status or looks at tags placed in the file when i use?
Thanks,
Tom
EDIT: FYI i was using IPTC data store the in use or not in use tags with if clauses containg either alert or save methods.
Message was edited by: thomas.f.elton

Photoshop is not a file editor. I would think that it would simply read in an image file decode and create a document to work on. Most likely it would the close the file for it has no keep to keep it around. Thefore if it had a lock on the file it would be released.
Adobe may have way to work in groups which will enable users to check out and check images back into a shared development project. I have never looked into that do a search. The is also a Adobe Drive preference which I do not check which may be part of sharing

False heartbeat failure error messages

Hello Everyone,
I am receiving false heartbeat failure error messages from all the agents in our environment.All servers are reachable and online at that time. The alerts get auto closed after 2-3 mins without any troubleshooting.
Can you please let me know how can i stop these alerts? We have configured alert emails so support team get notified of these alerts and they think something is wrong with the servers. We have two management servers and 70 agents in our environment.

Since you are receiving false heartbeat alerts for all the agents in your SCOM. There could either be a network problem on the MS servers or the agents. Check the event viewer for any network related errors or if their SCOM Health service keeps restarting
every few minutes. Check out for other errors too on the agents that might point to the cause of these alerts.
Alternatively you can increase the Heartbeat interval (default is 60 seconds) and/or the number of missed heartbeats (default is 3). If the issues get auto resolved then increasing these values to appropriate seconds and counts will not cause false
alerts for you.
Thanks, S K Agrawal

False Alert

Similar Messages

Maybe you are looking for