SCOM 2012 - Disk alerts

Hi,
I am getting some weird alerts on disk space like the one below which make no sense at all. I do see alerts for C:, D: etc but this type (below) make no sense.
Can anyone interpret what SCOM is trying to report here? (And how to fix this).
Thx very much,
John Bradshaw
The disk
\\?\Volume{c3f603b0-d948-11e0-bfa8-806e6f6e6963} on computer MYSERVER is running out of disk space

Since the latest windows OS MP, I believe so. So maybe you guys recently imported the newest one?
Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

Similar Messages

SCOM 2012 SMS Alert Notification

Hi,
I am using SCOM 2012 and I have a requirement of SMS Alert. but the issue that I am facing here is I have a Single Virtual Box for SCOM 2012, and what ever I experienced from SCOM 2007 physical was I had to configure a Modem through the USB device
few years back..
now I have to configure the SMS notification on a Virtual Box of SCOM 2012...
any idea ? what could be done ?
Regards, Owais

Hi,
I think you need to make the SMS modem work with the virtual machine first. Then, configure the notification in SCOM consol.
How to Enable a Text Message (SMS) Notification Channel
http://technet.microsoft.com/en-us/library/hh212811.aspx
Thanks.
Nicholas Li
TechNet Community Support

SCCM 2012 integration with SCOM 2012 - Disable Alerts during patching

Have SCCM 2012 R2 and SCOM 2012 R2 and use the Software Update Patching process for servers. When using the checkbox to "Disable Operations Manager Alerts when this program runs" option have noticed on completion of the job and the target
server is rebooted, a scheduled task appears for a short time titled "SCOM 2007 Agent Resume Task". The task disappears and there is no history to view.
Is this a legacy naming convention from 2007 world when the maintenance mode is turned off from the SCCM patching process?
How do I see the actual code behind the SCCM and SCOM integration with Maintenance mode to validate it.

SCCM should use the following SCOM SDK to do that.
http://msdn.microsoft.com/en-us/library/bb437532.aspx
That's incorrect. There is no API or method to put an OpsMgr agent into maintenance mode on the client itself -- maintenance mode is a centrally controlled feature of OpsMgr. The API/code sample you linked is performing that activity on the management server
which assumes you know the management server name and have permissions to carry out the action -- neither of which is fulfilled by the ConfigMgr agent.
The ConfigMgr agent pauses the OpsMgr client agent service and also unloads the workflows from the OpsMgr agent (it only did the first part in ConfigMgr 2007). This effectively puts the agent in Maintenance Mode (although to my knowledge this is not directly
reflected in the OpsMgr console).
Jason | http://blog.configmgrftw.com

SCOM 2012 R2 Alert Suppression

Is there a way to build a set of rules around the Alert Suppression feature. For example if a custom alert is triggered more than 5 times in 10 minutes, I want to suppress that alert for the next hour.
Is this possible?
Paul Arbogast

Hi,
I understand that you want to enable alert suppression after alert is triggered 5 times in 10 minutes, I have to say that I don't think this can be done.
As Alert suppression can only be enabled when the rule is created. You cannot enable alert suppression by using an override. So you should re-create the rule if you want to enable suppression.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

SCOM 2012 - Disable Alerts for a few servers

Hi,
I have about 8 servers and i need to disbale a monitor, how do i do this?
Is there a way i can select the monitor from the agent and then disable it?
thank you in advance :)
Kelly

Find out what the "target" of the monitor is. Create an instance group containing the target class for those servers. If you can do this dynamically based on naming convention or OU, then cool. If not, then you might have to
add them individually. Then override for a group, as the person said before.
Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

SCOM 2012 issue with disk space alert generation

we have installed SCOM 2012 newly , after that we have imported Windows Operating system MP's. However customization(Override) of alerts, everything is working fine except not receiving low
disk space alerts.
Is there any particular reason why we are not receiving low disk space alerts?

Hi,
Did you reach the threashold both for free % and free Mb? Both needs to be reached before you will get an alert.
For more information, please review the link below:
Logical Disk Free Space Monitor
http://blogs.technet.com/b/jonathanalmquist/archive/2009/04/04/logical-disk-free-space-monitor.aspx?CommentPosted=true
Operations Manager 2012: Monitoring Logical Disk Free Space
http://tmitegypt.wordpress.com/2012/10/22/operations-manager-2012-monitoring-logical-disk-free-space/
Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Creating SCOM 2012 Logical Disk Space Availability View

Hi Everyone,
I am looking to create a SCOM 2012 Logical Disk Space Availability View and having a little trouble finding documentation on how to do this. It would be really handy to see all of the servers being monitored and how much free space they have all in one view.
Has anyone created a view like this before.
Thanks in advance for all your help.
JD

Hi,
Below are some blogs that will help you to understand more about disk space monitoring
Writing monitors to target Logical or Physical Disks
http://blogs.technet.com/b/kevinholman/archive/2009/11/24/writing-monitors-to-target-logical-or-physical-disks.aspx
OpsMgr: Logical Disk free space alerts don’t show percent and MB free values in the alert description
http://blogs.technet.com/b/kevinholman/archive/2011/11/17/opsmgr-logical-disk-free-space-alerts-don-t-show-percent-and-mb-free-values-in-the-alert-description.aspx
Thanks.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Logical Disk space on a virtual Computer (not a Server) in SCOM 2012

Hello all-
   I have a sort of unique situation for our SCOM environment. We are already doing logical disk space monitoring on all of our SERVERS with no issues. Now we have one user who requires monitoring on their computer. This is really
a virtual workstation, as opposed to a real computer.   Since it's virtual, it's really online all the time.    Whether its right or wrong, they are using this virtual workstation sort of as a server. Anyway, they want me to
monitor the disk space for the C drive on this virtual computer. I'm having difficulty setting up such a monitor on a computer like that...
I got the SCOM agent installed onto the computer. SCOM is reporting it as being "Healthy".   Now how can I define a logical disk space monitor for it?   I attempt to create a monitor:   Windows Performance Counters,
Static Thresholds, Single Threshold. Then how can I direct the monitor at the C drive on the computer? I have to fill in the Object, Counter and Instanace. Normally I would click on the
Select button, then I would type in the server name and hit Enter and it would bring up all the objects it will allow me to monitor. Unfortunately it doesn't let me type in the computer name and hit enter in the same way. When I
do so, it says "The network path was not found". If I click on the
... button next to the Computer field, it brings me to a Select Computer screen. In here, I am type in the computer name and then I click
Check Name and it does appear to find it, and it underlines the computer's name.    So I then click
OK to bring me back to the previous screen where it presents me with the same "The network path was not found" error immediately. So I can't seem to navigate to the computer in SCOM and select the C drive, as I would be able
to for a server.
I tried to sort of force it in, instead of browsing for the computer and selecting the C drive. I simply put
LogicalDisk in for the Object then Free Megabytes for the Counter, then
C: for the Instance (as shown in the attached screen print.
Then I just applied my new rule to the computer via SCOM. I don't get any error messages when setting it up that way, but it certainly doesn't work.
So with all that said, can anyone help me out setting up a logical disk space monitoring for a COMPUTER in SCOM 2012 SP1 please? Please let me know if you need any more information!

Thanks, that would probably do it, I'm going to keep that as my backup plan. However, my current feeling is that it might be a bit overkill to install a whole management pack, when all I want to do is monitor a single C drive on a single workstation.
The rest of the monitors in the management pack I wouldn't have any interest it.   Let me ask you a question maybe you will know the answer to... Shouldn't I be able to monitor that drive even without that management pack installed?   I
mean some combination of settings for the Logical Disk Space rule in that management pack works for computers/workstations. Shouldn't I be able to reproduce that one single rule without the management pack? Does anyone have that management pack
installed? Could you possibly look at the Client OS Logical Disk Space rule and send me some screen shots or something?   Or am I missing something? Is the management pack needed for other reasons in order to monitor this?

How to configure windows services alerts in SCOM 2012 for all agent servers. For eg, Terminal Services, Netlogon, RPC etc..

Hi,
I need to configure different windows services alerts in SCOM 2012. Below are some of the windows services I need to monitor through SCOM.
Serivce: Windows Management Instrumentation
Service: Netlogon
Service: Remote Procedure Call (RPC)
Service: Server Service
Service: Terminal Services
Service: Windows Time
Service: Workstation
Service : WWW Publishing Service
Could some one please assist or share me the details, how to configure these services for windows agent servers.
Thanks..
Regards, Rajeev Parambil

Hi,
A certain set of services are monitored by default on all agents:
DNS Client
DHCP Client
RPC
Workstation
Server
For all the other services you could create a service monitor.
A nice blog series outlining this process can be found here: http://www.bictt.com/blogs/bictt.php/2011/03/16/scom-monitoring-a-service-part1
It's doing common things uncommonly well that brings succes. Check out my SCOM link blog:
SCOM link blog

Only Alert Data is not being inserted in SCOM 2012 Data Warehouse database

Hi All,
Alert data is not getting inserted into SCOM Data Warehouse database since 10 days though I could see latest Performance data in DW DB. No changes were made as far I know on SCOM servers or DB's. I had this issue few months back
and got resolved by executing a qiery to create an entry for Data Warehouse Synchronisation server entry.
Now I have checked the discovered inventory and could see an entry present and it is healthy. Still, latest Alert data is not getting inserted into DW DB. Please help me out.
http://social.technet.microsoft.com/Forums/en-US/2dac4f45-4911-40dc-a220-702993188832/alert-data-is-not-present-in-scom-2012-data-warehouse-database-since-two-weeks?forum=operationsmanagergeneral
Regards, Suresh

Hi,
Generally, data warehouse store a long-term data, and by default, it would keep 400 days data, I suggest check your configuration:
How to Configure Grooming Settings for the Reporting Data Warehouse Database
http://technet.microsoft.com/en-us/library/hh212806.aspx
Alex Zhao
TechNet Community Support

SCOM 2012 SP1 - PowerShell Script failed to run - 3 alerts appear after every reboot of the SCOM Server

Brand new SCOM 2012 SP1 install with Update Rollup 1 applied
Single server, local SQL install, SQL Server 2012 SP1
Hyper-V VM running on Server 2012. VM has 8GB Ram, single vCPU
Going through initial management pack importing and configuration, at this point I have the Windows Server 2012 and SQL 2012 MP's installed.
See screenshot
http://i.imgur.com/l0Molh1.png
I am getting the following alerts in my SCOM console and cannot find a resolution to fix the issue. I don't want to set an override, as an override will prevent the PowerShell alert in other instances, where I might want to receive an alert.
Looking at the alert description, it states "The Data Access service is either not running or not yet initialized"
The SCOM Console launches and responds fine, and I get no other errors. I check the Data Access service and it is online. I have left the system alone for a couple of hours and no other errors. I then closed those alerts and restarted the
server, and they came right back in, so I know that this is something that is happening at either server startup of during the start of the SCOM services.
Is it possible that SCOM is trying to execute these scripts and the Data Access service has not come online yet?
Has anyone else come across this before?

Please try the method in the following thread:
Note: As there is operations related to Registry, please perform a backup before doing this.
OpsMgr 2012 - Power Shell Script failed to run
http://social.technet.microsoft.com/Forums/de-DE/systemcenterde/thread/4be37f8d-1e7b-450c-8cb9-f1e95f3b2bd0/
Thanks.
Nicholas Li
TechNet Community Support

Alert data is not present in SCOM 2012 Data Warehouse database since two weeks

Alert data is not present in SCOM 2012 Data Warehouse database since a week though I could see Performance data for the latest dates. Old Alert data is present but I think the latest Alert data is not being inserted to Data warehouse. No activity was done
on the day from where we are missing data.
I could see 31554 events on all my Management servers and this proves that Data Insertion is happening. I am not sure why only Alert data is missing (or not getting inserted) in DW database. I am trying to use SQL queries to fetch the data as I dont have reporting
currently. The same query is working for other dates, so there is no issue with this query.
I have noticed that I could see the Alert Data present in SCOM OperationsmNager Db but NOT present in OperationsManagerDW database.
In SCOM 2007, data will be inserted in both Ops DB and DW simultaneously. I believe the same methodology in 2012 too.
Please help me to fetch Alert data from DW. Any suggestion pls?
Regards, Suresh

Hi,
Generally, data warehouse store a long-term data, and by default, it would keep 400 days data, I suggest check your configuration:
How to Configure Grooming Settings for the Reporting Data Warehouse Database
http://technet.microsoft.com/en-us/library/hh212806.aspx
Alex Zhao
TechNet Community Support

How can I add SCOM 2012 Alert Context within a SCOM Alert When using a cusom powershell script in a two state monitor?

Hello, we have a two state monitor and I would like to channel the Alert Context to Alert Description.
The powershell script being used to find the stopped services is pasted below:
$API = new-object -comObject "MOM.ScriptAPI"
$bag = $api.CreatePropertyBag()
$ServiceStatus = Get-WmiObject -class win32_service |where {$_.startmode -eq'Auto'-and $_.State -eq 'Stopped' -and
$_.name -ne 'wuauserv'}
if (!$ServiceStatus) #if there are no automatic services that are stopped, we are healthy.
write-host "good"
$bag.addvalue("State","good")
if ($servicestatus) #if there are any automatic services that are stopped, we are unhealthy.
write-host "bad"
$bag.addvalue("State","bad")
foreach ($service in $servicestatus) #enumerate the stopped services
$bag.addValue("$($Service.Name):","$($Service.state)")
$bag
$API.Return($BAG)
The results of the services that are stopped are being captured in the Alert Context”. How can I pipe the Alert Context to “Alert Description” to obtain a meaningful alert?
Alert Context data:
Property Name                              Property Value
State
bad
clr_optimization_v4.0.30319_32: Stopped
clr_optimization_v4.0.30319_64: Stopped
How can I pipe to Alert Description in SCOM 2012?
Thanks,
Kapil Dham
Kapil Dham

you don't need write-host
you should create
$bag.addvalue("ServiceName1","StateOK")
$bag.addvalue("ServiceName2","StateStopped")
and in alert description you will see
ServiceName1
StateOK
ServiceName2
StateStopped
So try $bag.addValue($Service.Name,$Service.state)
and $Data/Context/Property$

SCOM 2012 monitoring IIS - windows updates generate SCOM alerts

We are using SCOM 2012 to monitor our environment. There is a logic implemented to suppress alerts (using maintenance mode) when Windows Updates cause system reboot.
We followed:<o:p></o:p>
http://operatingquadrant.com/2009/08/15/scom-automatically-starting-maintenance-mode-when-servers-are-rebooted-for-patching/<o:p></o:p>
Basically when in system event log event id 1074 appears then system is put in Maintenance mode. There is a problem with some IIS web servers - they
generate a lot of alerts when Windows Updates are installed (e.g. Microsoft Windows Internet Information Services 2003 Application Pool is Unavailable)
and before windows reboot. In details:
5:08 AM - Windows update installation in event log (event id 19)e.g.
Installation Successful: Windows successfully installed the following update: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2972106)
5:09 AM - SCOM generates alerts: Microsoft Windows Internet Information Services 2003 Application Pool is Unavailable
5:17 AM - event id 1074: The process winlogon.exe has initiated the restart of computer. SCOM put this server in Maintenance mode.
After 5:17 AM no more alerts generated by SCOM
We cannot change our logic and put system in maintenance mode based on event ID 19 (windows update installation) because there are a
lot of event ID 19 events generated almost every day. So we do not want to put our server in maintenance mode each time when windows updates are installed. Just when windows update installation cause some IIS features stops. Any idea?

For issue 1074, You can refer below link
http://theitcrownd.blogspot.com/2012/01/set-up-automatatic-scom-maintenance.html
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Orchestrator/SCOM 2012 and UTC Time for Get Alert

We are currently moving to using Orchestrator to act as a connector between SCOM 2012 and Unicenter for ticket generation. Right now, the runbook that I have built out does the following.
Monitor Date/Time > Format Date/Time > Get Alert
The monitor Date/Time runs every 60 seconds.
Format Date/Time then pulls from a variable that grabs the current time using now(). I then have it adding 4 hours and 55 minutes to the time to set the UTC time to 5 minutes earlier.
Get Alert then looks for all alerts that meet a specific criteria. This includes the time and any alert that was generated within the last 5 minutes, which is why I have it currently set to 4 hours and 55 minutes.
In a few months, that's going to break and I'll have to manually update the format date/time to 5 hours and 55 minutes. What I'm trying to find is a way to do this automatically so the runbook doesn't have to be modified. I'm thinking of using
the 'Activity End Time in UTC' from the Monitor Date/Time but want to see if there's any other easier way of doing it.

Hi again,
If the question is to have a an easy way to get only Alerts not already seen with "Get Alert" before:
Use "Update Alert" and update fields like TicketID or ResoultionState after "Get Alert" and exclude this criteria in the Filter tab of "Get Alert" ...
Regards,
Stefan
www.sc-orchestrator.eu ,
Blog sc-orchestrator.eu

SCOM 2012 - Disk alerts

Similar Messages

Maybe you are looking for