False Alerts from Cluster Server Logical Disk Monitor

Hi All,
I have a cluster server & on one of its server there are 10 cluster disk.
Today from no where since last 5 hours I have been getting critical alerts for Cluster Disk - Free Space Monitor (MB) with every poll, when the threshold is well above the defined in this monitor.
After few mins when this critical alert gets resolved, I get a warning alert from Cluster Disk - Free Space Monitor (%). In this case also the threshold is well above.
Also, this issue with just this disk & all other disks perfectly fine. Kindly help.

I'm not sure which version of MP you have but the following link may help which have a bug fix for same:
http://technet.microsoft.com/en-us/library/dd262079.aspx

Similar Messages

  • Windows Server 2008 R2 Logical Disk monitor is not listed in SCOM 2012

    Dear Experts,
    I tried to create an override of Logical Disk space threshold value changes on one of Windows 2008 R2 OS, But unable to find the respective monitor of 'Windows Server 2008 R2 Logical Disk' monitor in the scope, But I can see Windows Server 2008 Logical
    Disk monitor is there and if I do right-click create override the monitor for particular specific of Windows server 2008 computers then the Windows 2008 R2 computer is not displaying there. Finally I found Windows Server 2008 R2 Logical Disk monitor is
    missing ?
    Can you please help me to achieve this ?
    Saravana Raja

    Hi,
    Same issue/question in this thread:
    https://social.technet.microsoft.com/Forums/en-US/15f634e2-57d7-4f57-b579-61e5ee6a01a2/monitor-hard-drive-space-windows-2008-r2?forum=operationsmanagergeneral
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Custom Logical Disk monitor incorrectly flapping between healthy and unhealthy

    One of the clients Ops Mgr 2012 SP1 UR8 environments I am supporting has had some custom logical disk monitoring setup; there are 5 groups dynamically populated by logical drives depending on their size (1st group has small drives up to the last group with
    very large drives). There is a 'Warning' and 'Critical' Monitor setup per server OS version, the Monitors are not Enabled. There are Overrides applied to each group to enable the Monitor and apply a threshold - different threshold for each group.
    During some BAU tuning I could see that some of the above Monitors were appearing as Top-Talking alerts. Further investigation showed that alerts were being triggered by drives that momentarily dropped below the applied threshold. I re-created the Monitors
    from 'Simple Threshold' to 'Consecutive Samples' and set the 'Number of Samples' to 6 @ 3 minute intervals.
    What I am seeing is that alerts from the above Monitors are still appearing as Top Talkers. When I check the Health Explorer of repeating alerts I can see the disk space is staying the same, below the applied threshold but the health is turning healthy then
    back to unhealthy. I have confirmed each noisy Object has the expected threshold as per its dynamic group allocation and have also confirmed the drives are not fluctuating above and below the threshold. One thing I have noticed is that some drives Performance
    View is patchy - lots of dotted lines between the coloured lines.
    Its almost like the Monitor moves a Logical Disk Object into unhealthy state in the correct (and expected) manner, then it somehow picks up an incorrect threshold which is below the current usage level. This moves it into a healthy state only for the
    whole process to repeat. For example: Drive X: on a server is very large, the Group that it sits in has a threshold of 102400MB, its current usage is ~stable at 45500MB. Looking in Health Explorer I can see 3:01pm green state/ 45573 last sampled value/ # of
    samples 1 | 3:16pm yellow state/ 45573/ 6 samples | 3:34pm green state/ 45572/ 1 samples | 3:49pm yellow state/ 45571/ 6 samples | 4:01pm green state/ 45425/ 1 sample etc etc.
    I'm scratching my head on this one and would appreciate any suggestions or assistance.
    Thanks
    BT

    Thanks for the reply. It is not just one server / drive this is happening on. I am seeing it on everything; once they go into an unhealthy state they periodically go healthy and back again with no change in disk free space. Just to elaborate on how it is
    setup; a Monitor has been created for each OS version (2003, 2008 and 2012) and a separate Monitor for Warning and Critical so 6 Monitors in total. Looking at the Warning Monitors; they are created with a threshold of 5120MB for 6 samples and set to disabled.
    The following groups have been created and the following thresholds added:
    Group 1 (less than 60GB size): override added to enable. This group will then pick up the 5120MB threshold.
    Group 2 (60 – 250GB size): override added to enable and override added for 10240MB threshold
    Group 3 (250 – 500GB size): override added to enable and override added for 20480MB threshold
    Group 4 (500 – 1TB size): override added to enable and override added for 51200MB threshold
    Group 5 (>1TB size): override added to enable and override added for 102400MB threshold
    One drive I was looking at was in Group 2 (threshold of 10240MB), it was staying at approx. 8500MB but periodically going into healthy state then after 10mins (6 polls @ 2min intervals) back to unhealthy. This process repeats once or twice per day.
    I am wondering if the Object is somehow picking up the threshold of the Monitor (5120MB) then going back to its correct overridden threshold. I have setup some test groups and monitors in a lab and will review the results over the coming days.
    When the monitors were setup as 'Simple Threshold' this worked fine but were noisy due to drives spiking downwards. It was only when I re-wrote them as 'Consecutive Samples over Threshold' Monitors that this issue has started occurring.
    Thanks

  • Target drives for specific groups - Logical Disk Monitoring

    I want to target different drives and thresholds for logical disk monitoring. I want to be able to place the server in a group and monitor the drives accordingly. Can this be done? How would you go about doing it?

    couple of ways you can go about this:
    1. Place the servers into a group and apply the necessary overrides to the logical disk monitors
    2. If you don't want the same threshold applied to all the drives on the same server create a new group and add the  specific drives to the group and then apply the necessary overrides to the group for logical disk monitors.
    3. If you don't want the same threshold applied to all the drives you could also create a dynamic group ie all D: for servers and then apply the overrides to that group.
    example of this see: https://social.technet.microsoft.com/Forums/systemcenter/en-US/c2719fb1-9298-435a-8bf9-3c92d4b34f85/making-groups-of-logical-disk?forum=operationsmanagergeneral
    Cheers,
    Martin
    Blog:
    http://sustaslog.wordpress.com 
    LinkedIn:
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • Logical Disk monitoring - Overrides galore?

    Hi all!
    We have a number of systems with differing needs for storage thresholds.  The defaults work the majority of time, but there are a number of 'buckets' our disks need.  For example, some disks might warrant an error at 5GB free, 10GB free, or even
    25GB free.  Let's pretend the percentages aren't important for now.
    Just to be clear, is it correct that I would need to create 2 (system / non-system) * 3 (2003, 2008, 2012) = 6 overrides for every single bucket I want (and make no mistake, we need way more than 3)?
    This seems absurd.  I can handle dumping the appropriate logical disks into buckets based on PowerShell or some other programmatic method.  Creating
    overrides seems a bit more complicated.  Is there not a simpler way to do this?
    I'm comfortable using PowerShell, but the 600 line example above seems like a pretty steep requirement for a very basic and common task (that is cumbersome and delay ridden when using the SCOM console).
    Please tell me there is an easier way to create overrides for logical disk space monitoring!

    I run into the same questions and problems with most customers. What I always suggest is to give the power to the server and/or application owners. This can be accomplished a few different ways, and I have done this by using a registry entry or by using
    a file on the root of each disk.
    For example, everyone gets default thresholds for disk monitoring. If the server owner wants different thresholds for a disk on their server(s), then they would create a csv file on the root of each disk in which they want different thresholds (or create
    a registry entry with similar threshold configuration).
    If you modify the built-in disk monitor by checking whether this particular file is present, then read the file to get the custom thresholds and bypass the default thresholds for monitoring that particular disk. The built-in disk monitoring script is pretty
    long, but if you know a little VBscript then you should be able to figure out where to add more logic to retrieve custom thresholds based on csv file or registry information.
    You will need to put this monitor in a new pack (for example, Windows 2008 Operating System Extended), and disable the unit monitor in the vendor pack. This would end up being 2 new "extended" packs if you were to also do this for Windows Server
    2012.
    This will effectively remove the responsibility from the SCOM admin to manage hundreds (or more) disk monitoring thresholds, and place the responsibility into the hands of the server owner. This has worked quite well in any environment I've work in.
    Jonathan Almquist | SCOMskills, LLC (http://scomskills.com)

  • False alerts from LELA

    I keeping alerts from LELA stating that I have no internet connection when my internet connection is working fine. Any ideas?

    Uninstall LELA and your false alerts will go away.

  • False alerts from EnterPrise Manager

    Hi All,
    Please help in addressing this issue:
    I have configured monitoring and alerts for OVD in Enterprise manager and I have been getting false alerts on OVD being down.
    Below is my notification alert configuration:
    General:
    Rule Name: OVD Down
    Public: No
    Availability:
    Up: No
    Down: Yes
    Corrective Actions on target down: No
    Agent Unreachalbe: Yes
    Agent Unreachable Resolved: No
    Metric Error Detected: Yes
    Metric Error Resolved: No
    Blackout Started: Yes
    Blackout Ended: No
    No Metrics I have added, No Policies, No job types and no methods.
    My first thought that I have "Metric Error Detected" but I haven't added any metrics. So, I change it No (without restarting EM) but same false results.
    Not sure if I have to restart the EM after changing notificaiton rule.
    Please help.
    Regards,
    Sunny

    Uninstall LELA and your false alerts will go away.

  • Receiving an automatic notification from Windows Server when disk space is low

    Hello,<o:p></o:p>
    Does Windows Server 2012 R2 have any such functionality built-in to enable monitoring of disk space?
    We have an old VB Script file that sends me an email when disk space gets low.
    Also, the following post discusses the topic regarding Windows Server 2008:
    http://social.technet.microsoft.com/Forums/windowsserver/en-US/c9878861-6ba5-4d3b-b6b0-6e4b33c41853/notification-when-low-disk-space?forum=windowsserver2008r2management
    I was wondering if there was any change regarding this in
    Windows Server 2012 R2 .
    Many thanks.<o:p></o:p>
    Keith<o:p></o:p>
    R K Howard

    Hi,
    Windows Server 2012 stays the same on that topic, you still need some kind of monitoring on your disk space.
    If you don't have a monitoring solution, like for example SCOM, you can for example with powershell do what you earlier did in VB script. Either you have a scheduled task that runs as often as you'd like, or you can utilize something called WMI eventing
    to trigger on an event 'disk low' but thats a bit more complicated.
    See below examples on some example scripts that you could use.
    https://www.simple-talk.com/sysadmin/powershell/disk-space-monitoring-and-early-warning-with-powershell/
    http://technet.microsoft.com/en-us/library/ff730927.aspx
    http://gallery.technet.microsoft.com/6e935887-6b30-4654-b977-6f5d289f3a63Hope
    this helps you!
    //Johan
    Microsoft Certified Trainer
    MCSE: Desktop, Server, Private Cloud, Messaging
    Blog: http://365lab.net

  • Configuring alerts from PM server rather than workstations/servers

    Hi, I was wondering if there was a way to configure alerts so that they were only sent from the PM server rather than the local host?  At the moment we use SMTP which I'd like to re-configure it make this more secure. Are there any other optiosn that we could use? Regards,Al  

    Hello, I don't think it's possible or at least not without using external software. The F-Secure Management Agent (FSMA) runs on the endpoints and creates the alerts there, sending them to an SMTP server and/or PMS. However, there is or there was an "F-Secure Email Reporting VB Script" that uses F-Secure Policy Manager Web Reporting (PMWR) to create MHTML and then send that file via e-mail. Scheduling is based on Windows Scheduling. In more ancient times, there was something called "Policy Manager Reporting Option 5.50" which provided a command-line interface and you could have possibly scripted it. However, that was way before the transition from FSPM shared folder model to the H2 active database took place, so it is now a museum exhibit piece of software I think. Best Regards:Tamas Feher, 2F 2000, Hungary.

  • Vcentre Server 5.5 - Use email alerts from vcentre Server with O365

    Does anyone know how to get this working ? We use O365 and so don't have an onsite server.
    I only have 2 options for configuring email settings in Vcentre Server.
    1) Mail Server 
    2)Mail sender
    Anyone manage to get this working with O365
    Thanks
    This topic first appeared in the Spiceworks Community

    Hey Everyone,I am looking for the best/easiest way to incorporate a BYOD wireless network.This wireless network is solely for student and teacher home/non domain devices. A separate network will be setup for outside guest users. We run Active Directory here so I am thinking radius is the way to go. We have a Cisco WLC 5508 Controller with 3602 APs.I setup a network based on the directions in this link:https://networklessons.com/wireless/peap-and-eap-tls-on-server-2008-and-cisco-wlc/but found it somewhat cumbersome to use when connecting with an iOS device or Android device because of the certificates. What are my other options that might make the process easier? Is there a way to securly set this up without certificates?If certificates are needed will a certificate from a public CA make thejoin process easier for iOS users (we have a...

  • Cluster monitoring false alerts

    I have a cluster in monitoring which has many shared disks in monitoring.
    Recently I have been receiving false alerts for 2 of the disks for low disk space with every poll & secondly the disks labelling seems to be wrong as per the actual labeling.
    Is there a way in which I can manually change the disks labeling or with any hotfix?

    Hi,
    Have you imported New Base OS MP 6.0.7026.0? It fixed bug 'Cluster Disk Free Space Percent' and Cluster Disk Free Space MB' monitors generate alerts with bad descriptions when the volume label of a cluster disk is empty.
    http://blogs.technet.com/b/kevinholman/archive/2013/05/09/opsmgr-mp-update-new-base-os-mp-6-0-7026-0.aspx
    Niki Han
    TechNet Community Support

  • SQL server Analysis Windows service Alerts on cluster nodes

    Hi,
    I was wondering if others may be experiencing the same issue with the SQL Server MP.
    We are monitoring SQL server Analysis Service using monitor SQL Server Analysis Service Windows Service.
    We had overrided “Alert only if service startup type is automatic”
    option to false.
    It will create the false alerts from the other nodes in the cluster on which service is not running, but since it's in clustered configuration, it should not generate alerts from other node as it's running on another node on the same cluster.
    Please share if anyone has been through this issue and any remediation for this kind of issue.
    Regards,
    Daya Ram

    Hi,
    Here is a similar thread for your reference, in the thread, this issue has been confirmed as bug, and the poster provided a work arround for it, please try the work around:
    Problem with the discovery of clustered SQL Server Analysis Services objects
    http://social.technet.microsoft.com/Forums/en-US/ead946fd-38d1-4627-b60d-a5645d3627fb/problem-with-the-discovery-of-clustered-sql-server-analysis-services-objects?forum=operationsmanagergeneral
    Hope this helps.
    Regards,
    Yan Li
    Regards, Yan Li

  • Need to separate drive alerts with Logical Disk Free Space monitoring in SCOM 2012

    I have an interesting need here to separate our SCOM alerts for Logical Disk Free space so that one alert is for OSSystem drives ONLY (C:/D:) and the other monitor alerts on all APP drives only (E:, etc). So far we have had great success using Kevin Holman's
    blog post.
    http://blogs.technet.com/b/kevinholman/archive/2009/11/24/writing-monitors-to-target-logical-or-physical-disks.aspx
    We have overrides set so that the monitors report ONLY the percentage of free space left and ignores any MB threshold. So far so good, the alert comes in that host A reports low disk space on D: at 2.345...% free or host B reports low disk space on F: at
    4.567...% free space etc. Now that we have our monitors working within the Windows Server classes Logical Disk, we need to set these monitors so that one is just for C or D drives with the alert named system Logical Disk Free Space OS Disk Warn and the other
    monitor just reports on E - Z drives (excluding C or D) with the alert named Logical Disk Free Space APP Disk Warn.
    We are very new to SCOM so I made the rookie mistake of creating a dynamic group for all Windows Server 2003 Logical Disk class that only includes Device Name = C or D. But found out too late you cant point a monitor to a group, it has to target a class.
    And using the current monitors we set up with the above blog uses the correct logical disk class, but it doesnt care what instance (device Id = value), it will report low disk space on ANY logical drive. How in the world can we separate and exclude these monitors
    so that one alerts only on OS disks (C and D) and the other only alerts on app disks (E through Z)?

    Hi Kevsharp,
    Quite confusing after reading your question.
    So based on your requirement, What i understand is you need separate alerts for all the drives of the disk is running at low or out of space right ?
    For the above just create a simple performance counter monitor and use the same counters as kevin has used in his blog.
    Now Target: Use Windows server operating system (This will target all the Windows operating system agents in your SCOM. If the specified discovery MP's are installed).
    Set a threshold Below 10% is critical or what ever. You will get the alerts in your console.
    Gautam.75801

  • Windows Server 2012 Logical Disk Free Space (%) Low

    I enabled the monitor "Windows Server 2012 Logical Disk Free Space (%) Low" and configured a low threshold to test. I started to get a bunch of warnings from servers, for example:
    The disk \\?\Volume{ee0222ed-16de-40a5-af89-f95db3fdf5a4} on computer PC is running out of disk space. The value that exceeded the threshold is 11% free space.
    Now I checked on the server, and all the disks have more than 11% free space. Additionally, I don't see any disks with such a name/guid.
    When looking at the additional knowledge of the monitor, I see that it is using the following information:
    Object Name: Logical Disk
    Counter Name: PercentFree 
    My question is where is this disk coming from, and how can I avoid these disks from creating false alarms? When looking in the Windows Server
    From my analyzing the DB, I see that these are the partitions on the server without a volume letter. Any way to avoid getting these discovered and/or alerts, without overriding each one?

    Hi,
    These "strange" disks are called mount points.
    They get discovered by the "Mount Point Discovery Rule".
    Go to your authoring => rules => search for the rule above and disable it.
    If you want to remove all the instances in your environment you need to use Remove-SCOMDisabledClassInstance
    powershell cmdlet.
    More info on the cmdlet can be found here:  http://technet.microsoft.com/en-us/library/hh920257%28v=sc.20%29.aspx
    If you have any more questions please do not hesitate to ask
    It's doing common things uncommonly well that brings succes. Check out my SCOM link blog:
    SCOM link blog

  • SCOM 2007 R2 : Logical Disk Free Space : Did not Alert

    Hello reader ,
                   I know this might be a repeated hearing for you. I have been sitting wit this issue for many hours now. I would like to understand where or what am I missing.
    We have the default 'Logical Disk Space' Monitoring enabled for ALL servers in our environment. In one SQL server, non-system drive(E:) went beyond the warning(2000MB and 10%) and Critical (1000MB and 5%) Threshold.The total space allotted for the Drive
    E: was 79GB. Now the total space left today morning was 698MB. But no alert was triggered.
    I checked the following
    If the  health service watcher was available. - Yes it was.
    If the Space really dropped to 698 - Yes it did. I verified from Performance Report.
    I checked if there are any overrides - Nothing specific found.
    In most of the blogs they said me to check if both criteria was successful - As shown above it is clearly matches.
    Any idea why this alert was not fired ?  
    S.Arun Prasath HP ARDE TEAM

    Thank you Agarwal ! To Answer your Question.
    1) verify the monitor settings again.
    => I did this N number of times.
    2) ensure there are no overrides
    =>  I did this too.
    3) ensure that monitor properties are set for the correct Windows OS (same as that of the server).
    =>What Do you mean here ?. I did not change any settings , it was there by default. No change was done at all.
    4) also confirm that you do not have any other overrides on the two aggregate rollup monitors for "logical disk free space". These aggregate rollup monitors are just below the unit monitor in SCOM console.
    =>Those Aggregate Rollup monitors are disabled. As we already have this unit monitor Enabled. There is no link to Aggregate monitor.
    If all these settings are true, then can you try this. calculate the exact value in both % and MBytes according to your server, put the same values in your monitor through an override and repro the low disk space condition,. you should get an alert.
    => Not so easy to do this in prod. So will keep you posted when this is tested. Looks like this is the only way we can confirm if the alerts are sent.
    S.Arun Prasath HP ARDE TEAM

Maybe you are looking for