Multiple Alerts getting raised for same Error

Question

Hi All,
I have a Management Pack Which will will trigger an Exe. The Exe takes an input and that input is being provided as a parameter from the MP. Whenever the exe raises throws an error an event in the event viewer and also  we are raising an Alert.
Now suppose say there are 3 inputs for which the Exe has to run. Now the Exe failed for Input 1 and passed for the rest 2. Since we have a exe failure we are raising an  event and firing an alert. But in the SCOM alerts i see 3 alerts with the Source
Name as all the three inputs, but the error message and all other stuff are remaining the same
Am I missing out on anything here?
Any Help in this regard is much appreciated
Regards, Mahadev Sundeep Maruvada

Answer 1

<?xml version="1.0" encoding="utf-8"?><ManagementPack ContentReadable="true" SchemaVersion="2.0" OriginalSchemaVersion="2.0" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
<Manifest>
<Identity>
<ID>AlertTestMP</ID>
<Version>1.0.0.36</Version>
</Identity>
<Name>AlertTestMP</Name>
<References>
<Reference Alias="Windows">
<ID>Microsoft.Windows.Library</ID>
<Version>7.5.8501.0</Version>
<PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
</Reference>
<Reference Alias="Health">
<ID>System.Health.Library</ID>
<Version>7.0.8432.0</Version>
<PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
</Reference>
<Reference Alias="System">
<ID>System.Library</ID>
<Version>7.5.8501.0</Version>
<PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
</Reference>
</References>
</Manifest>
<TypeDefinitions>
<EntityTypes>
<ClassTypes>
<ClassType ID="SDMonitoringSyntheticTest.SDDepot" Accessibility="Public" Abstract="false" Base="Windows!Microsoft.Windows.ApplicationComponent" Hosted="true" Singleton="false" Extension="false">
<Property ID="ServerDetails" Type="string" AutoIncrement="false" Key="true" CaseSensitive="false" MaxLength="256" MinLength="0" Required="false" Scale="0" />
<Property ID="SDType" Type="string" AutoIncrement="false" Key="false" CaseSensitive="false" MaxLength="256" MinLength="0" Required="false" Scale="0" />
</ClassType>
<ClassType ID="SDMonitoringSyntheticTest.SDWatcher" Accessibility="Internal" Abstract="false" Base="Windows!Microsoft.Windows.LocalApplication" Hosted="true" Singleton="false" Extension="false">
<Property ID="SDType" Type="string" AutoIncrement="false" Key="false" CaseSensitive="false" MaxLength="256" MinLength="0" Required="false" Scale="0" />
</ClassType>
</ClassTypes>
<RelationshipTypes>
<RelationshipType ID="SDMonitoringSyntheticTest.SDWatcher_To_SDDepot_Relationship" Accessibility="Internal" Abstract="false" Base="System!System.Hosting">
<Source ID="Source" MinCardinality="0" MaxCardinality="2147483647" Type="SDMonitoringSyntheticTest.SDWatcher" />
<Target ID="Target" MinCardinality="0" MaxCardinality="2147483647" Type="SDMonitoringSyntheticTest.SDDepot" />
</RelationshipType>
</RelationshipTypes>
</EntityTypes>
</TypeDefinitions>
<Monitoring>
<Discoveries>
<Discovery ID="SourceDepot.SDMonitoringSyntheticTest.SDWatcherDiscovery" Enabled="true" Target="Windows!Microsoft.Windows.Computer" ConfirmDelivery="true" Remotable="true" Priority="Normal">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryClass TypeID="SDMonitoringSyntheticTest.SDWatcher">
<Property TypeID="SDMonitoringSyntheticTest.SDWatcher" PropertyID="SDType" />
</DiscoveryClass>
</DiscoveryTypes>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.FilteredRegistryDiscoveryProvider">
<ComputerName>
$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$
</ComputerName>
<RegistryAttributeDefinitions>
<RegistryAttributeDefinition>
<AttributeName>AppExists</AttributeName>
<Path>Software\SDSynthetic\SDServers</Path>
<PathType>0</PathType>
<AttributeType>0</AttributeType>
</RegistryAttributeDefinition>
<RegistryAttributeDefinition>
<AttributeName>SDType</AttributeName>
<Path>Software\SDSynthetic\SDServers\SDType</Path>
<PathType>1</PathType>
<AttributeType>1</AttributeType>
</RegistryAttributeDefinition>
</RegistryAttributeDefinitions>
<Frequency>600</Frequency>
<ClassId>$MPElement[Name="SDMonitoringSyntheticTest.SDWatcher"]$</ClassId>
<InstanceSettings>
<Settings>
<Setting>
<Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>
<Value>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>
</Setting>
<Setting>
<Name>$MPElement[Name="SDMonitoringSyntheticTest.SDWatcher"]/SDType$</Name>
<Value>$Data/Values/SDType$</Value>
</Setting>
<Setting>
<Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>
<Value>SD Util Depot ($Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetbiosComputerName$)</Value>
</Setting>
</Settings>
</InstanceSettings>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Values/AppExists</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">true</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</DataSource>
</Discovery>
<Discovery ID="SourceDepot.SDMonitoringSyntheticTest.SDWatcher.SDDepotDiscovery" Enabled="true" Target="SDMonitoringSyntheticTest.SDWatcher" ConfirmDelivery="false" Remotable="true" Priority="Normal">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryClass TypeID="SDMonitoringSyntheticTest.SDDepot">
<Property TypeID="SDMonitoringSyntheticTest.SDDepot" PropertyID="ServerDetails" />
<Property TypeID="SDMonitoringSyntheticTest.SDDepot" PropertyID="SDType" />
<Property TypeID="System!System.Entity" PropertyID="DisplayName" />
</DiscoveryClass>
</DiscoveryTypes>
<DataSource ID="PS" TypeID="Windows!Microsoft.Windows.TimedPowerShell.DiscoveryProvider">
<IntervalSeconds>600</IntervalSeconds>
<SyncTime />
<ScriptName>SDSyntheticServerDiscoverDepot.ps1</ScriptName>
<ScriptBody>
param($sourceId,$managedEntityId,$computerName,$SDType)
$api = new-object -comObject 'MOM.ScriptAPI'
$Script:LOG_ERROR = 1
$Script:LOG_WARNING = 2
$Script:LOG_INFORMATION = 4
$Script:ScriptName = "SDMonitoringSyntheticTestSDDiscovery.ps1"
function Write-ErrorInfo([string] $msg)
$api.LogScriptEvent("$ScriptName",1728,$Script:LOG_ERROR,"`r$msg")
function Write-OnlyInfo([string] $msg)
$api.LogScriptEvent("$ScriptName",1727,$Script:LOG_INFORMATION,"`r$msg")
Write-OnlyInfo "in SD servers discovery"
$discoveryData = $api.CreateDiscoveryData(0, $SourceId, $ManagedEntityId)
$SDServerList=Get-ChildItem "HKLM:\SOFTWARE\SDSynthetic\SDServers" | ForEach-Object {Get-ItemProperty $_.pspath}
Foreach ($SDServer in $SDServerList)
$Name = $SDServer.PSChildName
$DisplayName = $SDServer.PSChildName
Write-OnlyInfo $computerName
$ServerDetails =$SDServer.servername+":"+$SDServer.port
$instance = $discoveryData.CreateClassInstance("$MPElement[Name='SDMonitoringSyntheticTest.SDDepot']$")
$instance.AddProperty("$MPElement[Name='Windows!Microsoft.Windows.Computer']/PrincipalName$", $computerName)
$instance.AddProperty("$MPElement[Name='SDMonitoringSyntheticTest.SDDepot']/ServerDetails$", $ServerDetails)
$instance.AddProperty("$MPElement[Name='SDMonitoringSyntheticTest.SDDepot']/SDType$", $SDType)
$instance.AddProperty("$MPElement[Name='System!System.Entity']/DisplayName$", $DisplayName)
$discoveryData.AddInstance($instance)
Write-OnlyInfo "$Name $ServerDetails"
Write-OnlyInfo $discoveryData
$discoveryData
</ScriptBody>
<Parameters>
<Parameter>
<Name>sourceID</Name>
<Value>$MPElement$</Value>
</Parameter>
<Parameter>
<Name>managedEntityID</Name>
<Value>$Target/Id$</Value>
</Parameter>
<Parameter>
<Name>computerName</Name>
<Value>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Value>
</Parameter>
<Parameter>
<Name>SDType</Name>
<Value>$Target/Property[Type="SDMonitoringSyntheticTest.SDWatcher"]/SDType$</Value>
</Parameter>
</Parameters>
<TimeoutSeconds>300</TimeoutSeconds>
</DataSource>
</Discovery>
</Discoveries>
<Monitors>
<UnitMonitor ID="AlertTestMP.AlertDiscTestMonitor" Accessibility="Internal" Enabled="true" Target="SDMonitoringSyntheticTest.SDDepot" ParentMonitorID="Health!System.Health.EntityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="false">
<Category>AvailabilityHealth</Category>
<AlertSettings AlertMessage="AlertTestMP.AlertDiscTestMonitor.AlertMessage">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Error</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data[Default='']/Context/EventDescription$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success" />
<OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error" />
</OperationalStates>
<Configuration>
<FirstComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
<FirstLogName>Application</FirstLogName>
<FirstExpression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">EventDescription</XPathQuery>
</ValueExpression>
<Operator>ContainsSubstring</Operator>
<Pattern>WSAETIMEDOUT</Pattern>
</RegExExpression>
</Expression>
<Expression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7017</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7015</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7013</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</Expression>
</And>
</FirstExpression>
<SecondComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
<SecondLogName>Application</SecondLogName>
<SecondExpression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>ContainsSubstring</Operator>
<Pattern>$Target/Property[Type="SDMonitoringSyntheticTest.SDDepot"]/ServerDetails$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">EventDescription</XPathQuery>
</ValueExpression>
<Operator>ContainsSubstring</Operator>
<Pattern>executed Successfully</Pattern>
</RegExExpression>
</Expression>
<Expression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7012</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7014</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7016</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</Expression>
</And>
</SecondExpression>
</Configuration>
</UnitMonitor>
</Monitors>
<Overrides>
<MonitorPropertyOverride ID="OverrideForMonitorAlertTestMPAlertDiscTestMonitorForContextSDMonitoringSyntheticTestSDWatcherf3454dfab84141b68e1f7cda55c641f5" Context="SDMonitoringSyntheticTest.SDWatcher" Enforced="false" Monitor="AlertTestMP.AlertDiscTestMonitor" Property="Enabled">
<Value>true</Value>
</MonitorPropertyOverride>
</Overrides>
</Monitoring>
<Presentation>
<StringResources>
<StringResource ID="AlertTestMP.AlertDiscTestMonitor.AlertMessage" />
</StringResources>
</Presentation>
<LanguagePacks>
<LanguagePack ID="ENU" IsDefault="true">
<DisplayStrings>
<DisplayString ElementID="AlertTestMP.AlertDiscTestMonitor">
<Name>AlertDiscTestMonitor</Name>
<Description>Description for the new unit monitor.</Description>
</DisplayString>
<DisplayString ElementID="AlertTestMP.AlertDiscTestMonitor.AlertMessage">
<Name>TestAlertMonitor</Name>
<Description>Event Description: {0}</Description>
</DisplayString>
<DisplayString ElementID="AlertTestMP.AlertDiscTestMonitor" SubElementID="FirstEventRaised">
<Name>FirstEventRaised</Name>
<Description>FirstEventRaised</Description>
</DisplayString>
<DisplayString ElementID="AlertTestMP.AlertDiscTestMonitor" SubElementID="SecondEventRaised">
<Name>SecondEventRaised</Name>
<Description>SecondEventRaised</Description>
</DisplayString>
</DisplayStrings>
</LanguagePack>
</LanguagePacks>
</ManagementPack>
Hi Yan,
Attached is the MP that iam using.
SourceDepot.SDMonitoringSyntheticTest.SDWatcher.SDDepotDiscovery is the class which actually discovers the inputs. As of now there is no probe action to trigger the exe, iam doing it manually, but still i see an alert raised for all of the inputs discovered
even if only 1 input has failed.
Regards, Mahadev Sundeep Maruvada