Own SCOM alert

I have an application and some of the application events need to be send as an alert.
We are using SCOM and I would like to send these alerts using SCOM.
Unfortunately these events are not part of any standard management pack.
Any help of references should be great help.

Hi
As I understand you would like to create alerts from certain Events e.g. Windows Events. You either can create a rule or a Monitor
http://technet.microsoft.com/en-us/library/hh457603.aspx . You can create alerts from different sources like here
http://technet.microsoft.com/en-us/library/hh457593.aspx . As I mentioned, if you would like to create an alert from a Windows Event you could try to create an Event Monitor
http://technet.microsoft.com/en-us/library/hh457559.aspx like a Manual reset
http://technet.microsoft.com/en-us/library/hh457598.aspx .
If you would like to create a rule I suggest starting here
http://technet.microsoft.com/en-us/library/cc180957.aspx .
If you Need to Monitor a log file from an application I suggest use the NiCE Log File Library
http://stefanroth.net/2014/02/24/scom-2012-nice-log-file-library-mp-monitoring-robocopy-log-file/
In all cases the server needs to be monitored (have SCOM agent installed).
Cheers,
Stefan
Blog: http://blog.scomfaq.ch

Similar Messages

  • Recovery from a SCOM alert - ORCH or task - best practice?

    Hi - wonder if anybody in the "real world" can give me any guidance on this?
    I look after SCOM and have traditionally been tasked with creating recovery scripts for certain custom alerts. I am also involved in the ORCH sphere but not totally responsible. We seem to be creating recovery in SCOM still but not ORCH.
    I would have thought that the idea would be best to monitor for the SCOM alert in ORCH and use the flexibility of the latter to do checks and do a fix.
    Are you limited in ORCH to how many alerts you can monitor or is there reasons to still do in SCOM? Just wondering which way we should really be heading?
    thanks

    I would suggest you keep using both. Recovery scripts in scom work just fine for basic recovery procedures that are performed locally on the monitored node. It is a simple, thus quite reliable framework for responding to incidents. However,
    if your recovery procedure is complex and involves coordination of multiple activities running on different systems, then Orchestrator will be the right tool to handle it.
    Gleb.

  • Mapping information to SCOM Alert "Path" field through the connector

    Hello,
    We are using the Oracle Enterprise Manager connector (link to the guide: http://docs.oracle.com/cd/E11857_01/install.111/e14736/toc.htm) to send events from OEM to SCOM.
    According to the Oracle connector documentation, the Target host parameter from OEM can be mapped with one of the SCOM Alert custom fields paramaters.
    The issue is that we need to have this parameter mapped with the SCOM Alert Path field instead of Custom field.
    Is it possible from the SCOM side to accept custom values and assign them to Alert Path field through the connectors?
    Thank you a lot in advance!

    Hi 
    Alert path is read only property for alert, you can not change this parameter. you can use custom field(1 to 9) or Ticket Id for alert.
    Regards
    sridhar v

  • SCOM Alerts Connector run as failed

    Hi
    I have setup the SCOM alerts connector in SCSM but after that i starts to get wernings in scom on servers there are in a difrent domain. 
    werning: 
    Description:
    The Health Service cannot verify the future validity of the RunAs account Domain1\SCOMAlertsConnectorUser for management group SCOMMG01. The error is Logon failure: the user has not been granted the requested
    logon type at this computer.(1385L). 
    SCSM and scom is in domain1
    the servers i got the werning on is in Domain2
    what can i do to fix this?

    The connectors runas account must be administrator in SCOM (as I recall). Is that the case for Domain2?
    Cheers,
    Anders Spælling
    Senior Consultant
    Blog:  
    Twitter:   LinkedIn:
    Please remember to 'Propose as answer' if you find a reply helpful

  • SCOM Alert Connector - not updating the start time and finish time

    When I am monitoring the status of connectors in service manager console, I found that for SCOM Alert Connector the Start Time and Finish Time are not updating. Previously it was updated daily. As of now, service manager is working fine but would like
    to check will it create any issues? Even I have cliked on Synchronize Now, but there is no update. Please guide me on this to trouble shoot further? Thanks.

    Hi,
    Based on my research, the Start Time and Finish Time values are not updated when an alert connector is synchronized. These values are only updated when alert data is transferred between Operations Manager 2007 and Service
    Manager.
    More details, please refer to the link below:
    http://technet.microsoft.com/en-us/library/hh495609.aspx
    In addition, here is a blog about troubleshooting for SCSM and SCOM alert connector:
    http://blogs.technet.com/b/servicemanager/archive/2010/04/14/troubleshooting-tips-for-your-scsm-scom-alert-connector.aspx
    Regards,
    Yan Li
    Regards, Yan Li

  • SCSM to SCOM Alert Connector Error

    Hello,
    Long story short, the SCSM admin created an Alert Connector between SCSM and SCOM, then uninstalled SCSM and started over.  That means I had an orphaned SCSM connector in SCOM.
    In order to set up a new connection, I followed the instructions found in Kevin Holman's blog post:
    http://blogs.technet.com/b/kevinholman/archive/2012/09/28/opsmgr-2012-how-to-delete-an-old-product-connector.aspx
    Now, when I try to re-create a new Alert Connector, I get this error:
    "Found at least one other alert connector in Operations Manager.  Alerts may not be routed as expected if multiple connectors subscribe to the same alert."
    I checked the SCOM server to make sure there were no orphaned connectors by running this SQL code against the OperationsManager database:
    Aside from the copious number of SCVMM connectors, there were six connectors.  Of those six, the previous SCSM connector is marked as "IsDeleted":
    Next, I checked the "Microsoft.SystemCenter.Notifications.Internal" management pack to verify that there are no orphaned subscriptions.  The ONLY alert referenced is for the "Advisor Data Connector".
    At this point, my questions are as follows:
    1) Will the System Center Advisor (now renamed Azure Operational Insights) connector cause the warning message I listed above when setting up an Alert Connector in SCSM?
    2) Is there another orphaned entry in SCOM that I need to check for and remove before setting up the SCSM alert connector? 

    Hi,
    I would like to suggest you remove the subscription that was orphaned. When remove a connector we should remove the subscriptions first.
    And here is a similar thread
    SCSM 2012 Cannot create SCOM Alert Connector        
    https://social.technet.microsoft.com/Forums/en-US/a5d0b921-bb0a-43b8-99ca-8b0112ab3bf0/scsm-2012-cannot-create-scom-alert-connector?forum=connectors                         
    Regards,
    Yan Li
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

  • Multiple SCOM Alerts for the same unique Windows Event

    Multiple SCOM Alerts are being raised for a single Windows event.
    For e.g., below is the event :
    Date and Time: Description:
    12/15/2014 5:15:36 PM Initiating move for database 'xxxdb02' (FromServer=xxxdagnode1.dt.inc, ToServer=, MoveComment=<Null>)
    Log Name:
    Microsoft-Exchange-HighAvailability/Operational
    Source:
    Microsoft-Exchange-HighAvailability
    Event Number:
    306
    Level:
    4
    Logging Computer:
    xxxdagnode1.dt.inc
    User:
    NT AUTHORITY\SYSTEM
    Event Data:
    < DataItem type =" System.XmlData " time =" 2014-12-15T17:15:37.9848250-05:00 " sourceHealthServiceId =" 261D34BA-3596-ABCF-3728-B5A0AC035D90 " >
    < UserData >
    < EventXML >
      < UniqueId > 2014.12.15.05.15.35.285#9#xxxdagnode2#4d0ce477-5f5c-4304-8c59-292a4a8ca809 </ UniqueId >
      < DatabaseName > xxxdb02 </ DatabaseName >
      < DatabaseGuid > 4d0ce477-5f5c-4304-8b59-292a4a8ca809 </ DatabaseGuid >
      < ActiveServer > XXXDAGNODE1.dt.inc </ ActiveServer >
      < ActionCategory > Move </ ActionCategory >
      < ActionInitiator > Automatic </ ActionInitiator >
      < ActionReason > StoreStopped </ ActionReason >
      < AmRole > PAM </ AmRole >
      < PAMServer > xxxdagnode2.dt.inc </ PAMServer >
      < MountFlags > None </ MountFlags >
      < DismountFlags > SkipCacheFlush </ DismountFlags >
      < MountdialOverride > None </ MountdialOverride >
      < FromServer > xxxdagnode1.dt.inc </ FromServer >
      < TargetServer />
      < TryOtherHealthyServers > True </ TryOtherHealthyServers >
      < SkipValidationChecks > None </ SkipValidationChecks >
      < MoveComment > <Null> </ MoveComment >
      </ EventXML >
      </ UserData >
      </ DataItem >
    But three alerts were raised for this event.
    I double checked with the Unique ID for the Windows Event.
    Also the Duplicate alerts show the Same event in the 'Alert Context' field.
    My environment:
    3 SCOM 2012 R2 UR3 Management Servers.
    1 SQL DB Server
    Service Manager Connector is configured for Alert Sync. However this issue also affect the alerts that are not synced.
    Anybody else faced this issue?

    Hi,
    It seems like that you are using rule to monitor this event, unlike monitors, rules can continue to send alerts as long as the condition that caused the alert persists or repeats. Depending on what the rule is checking for, a single issue could possibly
    generate a huge number of alerts. To prevent the noise of too many alerts, alert suppression can be enabled for a rule.
    More details, please check article below:
    http://technet.microsoft.com/en-us/library/hh212847.aspx
    Regards,
    Yan Li
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

  • XCmd Service - SCOM alert - Unpredictable state

    Hey folks,
    I keep get a SCOM alert for an unpredictable state for the xcmd service.
    It says:
    The xCmd Service service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    This is only happening on our Server 2008 and 2008 R2 machines.
    Been googling around and cant find a fix. Anyone have an idea?

    Have you checked the product knowledge of the alert? It gives you the answer you are looking for:
    Summary
    This rule generates an alert when the Service Control Manager detects that a service has started with an invalid configuration. It is important to note that even though the Service Control Manager detected an invalid configuration, the service still started
    successfully.
    The service may not be running as expected and may behave in an unpredictable manner. Additionally, the service may not be able to be restarted until the issue is resolved.
    Sample Event:
    This rule generates an alert whenever any of the following events occur and are recorded in the System Event Log:
    The %1 service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    The Service Control Manager encountered an error that has undone a configuration change to the %1 service. The service's %2 is currently in an unpredictable state. If you do not correct this configuration, you may not be able to restart the %1 service or
    you may encounter other errors. To ensure that the service is configured properly, use the Services snap-in in MMC.
    •
    Source: Service Control Manager; Event ID: 7030The %1 service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
    •
    Source: Service Control Manager; Event ID: 7037The Service Control Manager encountered an error that has undone a configuration change to the %1 service. The service's %2 is currently in an unpredictable state. If you do not correct this configuration, you
    may not be able to restart the %1 service or you may encounter other errors. To ensure that the service is configured properly, use the Services snap-in in MMC.
    Causes
    This alert is generated whenever any of the following conditions occur:
    •
    The service is configured to run interactively but system policy is configured to prevent services from running in this mode.
    •
    An error occurred while attempting to configure the service.
    Resolutions
    There are two possible resolutions for this alert. Refer to the event that generated the alert and select the appropriate set of resolution steps.
    Event ID: 7030
    To resolve this alert, consult with a subject matter expert or the vendor to determine if the service must run interactively on the desktop. If not, follow these steps:
    •
    Open the Services MMC snap-in.
    •
    Double-click the appropriate Service and open that service’s property sheet.
    •
    Click the Log On tab.
    •
    Clear the Allow service to interact with desktop check box.
    If the service must run interactively, you will need to change the “Allow service to interact with desktop” system policy. To do this, perform the following steps:
    HKLM\System\CCC\Control\Windows
    0 - Enabled
    1 - Disabled
    •
    Open the Registry Editor.
    •
    Navigate to the registry value “NoInteractiveServices” at:HKLM\System\CCC\Control\Windows
    •
    Set the value from “0” to “1” 0 - Enabled1 - Disabled
    •
    Open the Services MMC snap-in.
    •
    Select the appropriate Service and restart it.
    Event ID: 7037
    Resolve this alert by doing the following:
    •
    Open the Services MMC snap-in.
    •
    Double-click the appropriate service and open that service’s property sheet.
    •
    Click each of the tabs and verify that the configuration information is appropriate. Update any configuration fields that have incorrect or corrupted data in them.
    •
    Restart the service and check the event log to determine whether another instance of event 7037 has occurred. If not, the issue has been resolved.
    •
    If a new instance of event 7037 occurs, use Sc.exe to examine the service’s advanced configuration settings and then update them as appropriate. Use the
    qc and config commands within Sc.exe to view and configure the service.
    Regards,
    Marc Klaver
    http://jama00.wordpress.com/

  • SCOM alerts on disk space C drive only

    Hi,
    My goal is to write a runbook to monitor the SCOM alert on low disk space and then trigger a command to remove a pre-defined list of folders/files on C drive when the free space is below 10%
    On Monitor Alert activity, I have already applied 2 filters
    1. Name Contains Percentage Logic Disk Free Space is low
    2.  Severity Equals Warning (as it has been configured as 10% free space)
    How do I define the filters to trigger this runbook when these new alerts that only happens on C drive
    Thanks,
    Jimmy

    I have tried a filter with  MonitoringObjectDisplayName = C: and  MonitoringObjectDisplayName contains C:, that did not trigger the next activity although I can see that it passed the value of C: to both parameters.
    I am going to try the filter with "Description contains C:" as I did not see the option - "Start with"

  • Dump SCOM Alerts to Text File

    Hi Guys, 
    Is there a way to dump scom alerts to a text file? 
    For example, I have created a monitor to detect a particular eventid. I want to dump this information (date/time, hostname, event description etc.) to a text file instead of the usual email or sms alert. 

    For Export SCOM Alerts to txt files, you can refer below links
    https://marckean.wordpress.com/2012/10/17/export-scom-2010-alerts-to-txtcsv-file-using-powershell/
    http://scug.be/dieter/2011/05/11/scom-dump-alerts-to-text-file-and-mail/
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"Mai Ali | My blog:
    Technical | Twitter:
    Mai Ali

  • Repeat Count not correct in the SCOM "Alert" Report

    Hi Team
    I have an alert 'XYZ' for Server A in my SCOM that has a Repeat Count of 300. I can see that in "All Alerts" on the SCOM console.
    But when I run the report "Alert" from under "Microsoft Generic Report Library" for this server A as object. I see that for alert 'XYZ' repeat count is just 1.
    Is this a known Issue or Bug in SCOM reports.
    Can someone please help me understand why this value is just 1 in SCOM report?
    Thanks, S K Agrawal

    When we run "Alert" SCOM report, [dbo].Microsoft_SystemCenter_DataWarehouse_Report_Library_AlertReportDataGet] is the Stored Procedure that runs in background.
    I analyzed this and found that Repeat Count of an Alert in this Report has a different meaning than the one in the Alert Properties.
    In Reports, Repeat count is the number of alerts that have the same AlertProblemGUID.
    Apparently, Each alert has its own AlertGUID and AlertProblemGUID.
    Hence the Repeat Count in Reports is different.
    Rarely for an alert its AlertGUID and AlertProblemGUID are same.
    Thanks, S K Agrawal

  • Owner field in SCOM Alert Properties

    When you open up the Alert Properties of an Active Alert there is an Owner Field that you can populate with a users email address.  How do you assign owners to a system instead of to an alert so that any system that alerts for anything goes to the
    owner of that device? Does the owner get an email message or do you need to set up something besides assigning the owner email for that to happen?  What is the purpose of this and where is it reference and used within SCOM? 

    Microsoft would probably tell you that "scom monitors services and applications, not servers."  a "windows server" monitored entity contains pretty much every other monitored entity from every other management pack, and in a large
    environment one person is probably not responsible for all of them. see my previous example. I may "own" the physical sharepoint server, but I do not care at all about problems with sharepoint. if I assigned myself as 'owner' of the windows
    server entity, and got notified of every alert on that box, I could get notified on alerts for sharepoint, group policy, sql, the scom agent, IIS, DNS, AD, exchange, any perspectives or synthetic transactions from that machine, etc. when maybe all
    I really care about is the performance/availability of the operating system, memory, CPU, disks, and physical hardware. as a note-mom 2005 monitored "servers" and it was very difficult not to get notified on everything. and it was a beatdown. the
    new way is better.
    also:  in my opinion, notifications have never really been a priority for the scom team, starting with SCOM 2007. we're expected to have someone watching the Alerts view 24/7 with enough knowledge to route alerts to the correct support people, and/or
    have some other process (orchestrator?) routing alerts into some other external ticketing system (service manager?).
    creating groups, subscriptions, and scoped views is the equivalent of assigning an owner.

  • Sending an User an email using SCORCH based on a SCOM alert that his/her account was locked out.

    Hi,
    I am interested in finding a solution for the following topic.
    We would like to send an email to an End-User who's Windows Account has been locked-out. Besides the fact there are measures in place to deal with the situation in general (Monitoring by SCOM 2012 R2, looking for eventid:4740) we would like to notify the
    End-User about this event too.
    So, we have SCOM 2012 R2 in place to collect all the necessary information at a central location, if you will. The tricky part is to take the information and create an email containing the email address of the User who's account was locked-out. That information
    resides within the Description of the Event.
    Having asked around basically everyone is pointing to Orchestrator to do the job. Being new to that topic I wonder if someone else has that type of requirement and maybe already found a solution.
    So key is, SCOM collects the information from all DCs, has a rule to identify EventID4740, than Orchestrator comes into play to take that Alert and send out an email to the user, who's name is part of the Event Description.
    Any ideas are greatly appreciated.

    Hello,
    first you need to setup System Center Orchestrator:
    http://technet.microsoft.com/en-us/library/hh420387.aspx . The current version is System Center 2012 R2 Orchestrator.
    You also need to register, deploy and configure the System Center Integration Pack for System Center 2012 Operations Manager (download of the current version:
    http://www.microsoft.com/en-us/download/details.aspx?id=39622&WT.mc). You need to install The OpsMgr Operantion Console on the Orchestrator Runbook Server that it works, or
    http://blog.coretech.dk/jgs/sco-2012-use-operations-manager-integration-pack-without-installing-opsmgr-console-on-runbook-servers/.
    In the event description of 4740 there's the account name not the email address. If the email addresses for the users are maintained in Active Directory register and deploy the Active Directory Integration Pack for System Center 2012 - Orchestrator (also
    located in the download above).
    With that all you can build a Runbook like that:
    Or do you have or want to write a PowerShell-Workflow for that you can use this with Service Management Automation (SMA), contained in the setup of System Center 2012 R2 Orchestrator.
    Regards,
    Stefan
    www.sc-orchestrator.eu ,
    Blog sc-orchestrator.eu

  • How to get SCOM alerts and send single summary email of one's that have breached.

    Hi,
    I'm trying to create a runbook which does as the title suggests, ie I want to get the 'Active' alerts from the console which have breached our SLA, which is No Critical or Warning alerts in resolution state of New for more than 24 hrs, and emails this list
    to an internal Distribution List of all the potential service owners.  Its just intended as a daily email to poke the relevant people not to ignore the console alerts :-)
    I'm able to Get Alerts OK, but from there I'm having diffs.  I have been given a powershell (as I'm no good at Powershell myself) which does the filtering to get the relevant breached alerts, but when I pass output to other activities and ultimately
    to the create/send email, I end up only able to get multiple emails, one be alert which matches the filtering from powershell.  I have appended to a file to check that I can write the alert properties line by line, but for example if Ive 4 alerts then
    I end up with 4 emails - I want one email with each alert detail (severity, Alert name, path,resolutionstate, Days/hrs in breach, Service Owner (custom Field 3) etc).  I have toyed with flattening the output with line breaks and/or commas at various points
    along the activity chain to ftry force a single iteration of te send email but this just messes the format to the point of not being useful.
    So was wondering if anyone could advise if this is possible, esp if able to do it using the standard activities  along with SCOM IP - I'm sure doing it all in powershell it a possible answer but I'm not proficient to do it - unless someone can provide
    said script! :-)
    Another possibility which has crossed my mind is to possible query the OpsMgr DB directly using the Alert ID from Get Alert but haven't tried tht yet.  I think I' stuggling to understand the basic of how the data is passed from activities esp using
    the 'flatten outpout method..  My current runbook has the fllowing activities:
    GetAlert -> Run .Net (powershell for filtering for breaced alerts) -> AppendFile (to Check the alert output) -> Create/Send Email(to send summary email).  What happens is if I have say 4 Breached emails in Console, when I run tester I
    see GetAlert runs Once detail shows it has found 4 alerts), then each activity up the chain runs 4 times so that finally I end up with 4 emails.
    If anyone has any suggestions it would be much appreciated - I can provide any more details/upload pic of current runbook if it helps...
    Thanks...

    Hi thanks for the suggestion.  I've tried playing around with the runbook using the Junction activity infront of the sendmail.  It doesnt appear to do anyting in itself (unless I'm not using it correctly).  The only way I can get the email
    to only send once is if I flatten the output from the returned data behaviour - this works if I flatten at the Get Alert stage without the Junction activity or if I use the junction an flatten it then the email fires once.
    However the problem with this is that each field for each alert is written vertically, so if I have 3 alerts returning 3 pieces of returned data I get:
    <Alert1 datafield1>
    <Alert2 datafield1>
    <Alert3 datafield1>
    <Alert1 datafield2>
    <Alert2 datafield2>
    <Alert3 datafield2>
    <Alert1 datafield3>
    <Alert2 datafield3>
    <Alert3 datafield3>
    wereas I wan the dat to appear in horizonally with each alert details on each row as like when written to a file, ie
    <Alert1 datafield1> <Alert1 Datafield2> <Alert1 DataField3>
    <Alert2 datafield1> <Alert2 Datafield2> <Alert2 DataField3>
    <Alert3 datafield1> <Alert3 Datafield2> <Alert3 DataField3>
    Without the use of flatten, the email which fires once for each alert has the data displayed correctly.  So essentially what I'm hoping to get is all returned alert details one per line/row in the body of the email...
    If theres any easy way to do it withing the orchestrator activities would be great.  Otherwise it looks like I might have to try find a powershell or SQL script to pull back alert data.  Cheers...

  • Enabling SCOM Alert Connector in SCSM

    Hi,
    Had a query regarding the Alert Connector in SCOM that forwards alerts in SCOM to SCSM (Service Manager) to create incidents.
    Currently, we had SCOM and SCSM at the same level i.e 2012 SP1. But, in future we might have to upgrade to R2 so is there any compatibility matrix for the SCOM and SCSM versions for the Alert Connector. Like if we had SCOM on Sp1 and SCSM on R2 would it
    affect or the vice-a-versa.
    Regards,
    Daya Ram

    Hi,           
    System Center 2012 – Operations Manager is supported by Service Manager and Service Manager SP1 for connectors and agents. However, only corresponding System Center versions are supported when you register a data source in the Data Warehouse
    workspace.
    System Center 2012 – Operations Manager agents were not supported with System Center 2012 – Service Manager. However, the agent that is automatically installed by System Center 2012 – Service Manager
    SP1 is compatible with System Center 2012 – Operations Manager and System Center 2012 – Operations Manager SP1. 
    More details:
    Operations Manager Considerations in System Center 2012 - Service Manager
    http://technet.microsoft.com/en-us/library/hh524312.aspx
    Regards,
    Yan Li
    Regards, Yan Li

Maybe you are looking for

  • URL link in data element documentation

    Is it possible to create a url link within the documentation of a data element to allow the user to launch the web browser and navigate directly to a specified webpage? Regards Mark Briggs

  • HT202879 How do I fix "the required index.xml file is missing?" when opening Pages documents?

    I can't open any documents from my son's iPad.  Error message: the required index.xml file is missing.  How do I fix this error so that I can open his Pages documents?  Before I ran the latest update as prompted when I opened Pages, I WAS able to ope

  • Problem in refreshing view

    Hi all I have 2 views. base on user selection in 1st view, i m swithing to next view and calling one function in second view based on the user selection in 1st view. But when i go back to the 1st view and again make selection then switch to the secon

  • Camera scratch in nokia n97

    did any one note that's the cover of the main camera of the nokia n97 scratch the lens? please tell me

  • Professionals want the 7D MArk II NOW! Stagnation means decline.

    Canon takes too long to upgrade their models. We can't take Canon serious as a professional brand when they sit like gooses. Are they afraid for competition? Once were trend setters, now competition is closing in. I need to replace my 5D Mark II. I o