SCOM 2012 Event ID 21006 and 21016

I'm having a connection issue with a newly created gateway server to my management server, that sits in an untrusted DMZ. I have been able to get one gateway working from the DMZ but the one in question is receiving;
Event ID 21006 : The OpsMgr Connector could not connect to frw0725.gecio.corp.net:5723. The error code is 11004L(The requested
name is valid, but no data of the requested type was found.). Please verify there is network connectivity, the server is running and has registered it's listening port, and there are no firewalls blocking traffic to the destination.
Event ID 21016 : OpsMgr was unable to set up a communications channel to frw0725.gecio.corp.net and there are no failover hosts.
Communication will resume when frw0725.gecio.corp.net is available and communication from this computer is allowed.
I have performed the following actions and verifications;
Services have been restarted on both servers
certimport has been completed and gatewayapproval has been completed.
I was able to telnet from MS to GW and from GW to MS, so connection through the firewall is ok.
DNS appears to be ok, ping’s issued from both servers and they resolve to the correct IP address, however they timeout which is expected
Event ID 20053 is being received stating that the OpsMgr Connector has loaded the specified authentication certificate successfully.
I checked the serial number for the personal certificate against what is listed in the registry (reversed) and it matches.
The Private Key is in place and the cert path is correct
I also verified in HKLM\Software\Microsoft\Microsoft Operations manager\3.0\Agent Management Groups\" that the correct configuration is being picked up
I'm looking for some additional guidance or suggestions on what else I can check to get this gateway to show monitored from teh console. Thanks for the help.

Please check if the certificate was stored in the GW server Computer Personal Store when you first installed it.
Asuming that the certificate is ok since it is actually working in another GW, perhaps the certificate is in the wrong store (Current User Personal store instead of
Computer's personal store). In that case you only need to move the certificate to the right store and run momcertimport.exe again. Check Link Below for a detailed step-by-step
If you still want to clear certificates from the server's personal store, you can do it through both certificates mmc snap-in or certutil.exe -delstore command line
Also you may want to check this great Step by Step article about installing an OpsMgr GW server:
http://blogs.technet.com/b/pfesweplat/archive/2012/10/15/step-by-step-walkthrough-installing-an-operations-manager-2012-gateway.aspx
Regards

Similar Messages

SCOM 2012 - Event ID 6024 (Launching Restart Health Service. Health Service exceeded Process\Handle Count or Private Bytes threshhold.)

I am getting event ID 6024 (LaunchRestartHealthService.js : Launching Restart Health Service. Health Service exceeded Process\Handle Count or Private Bytes threshhold.) within an interval ranging from 12-17 minutes.
I am using SCOM (2012 SP1 and 2012 R2) on Windows Server (2008 R2 / 2012 / 2012 R2).
This issue is occurring only on agent managed computer (acting as proxy and discover managed objects on other computers setting is enabled) which i am using for monitoring my device. All discovery scripts (powershell) and monitors are targeted on this agent
managed computer.
There are total 80 discoveries and 900 monitors. 55 discoveries and 550 monitors are enabled by default and rest all are disabled.
I am seeing event id 6024 frequently only on agent managed computer. Can anyone help me to resolve this issue.
Thanks,
Mukul

To fix issue 6024, you can follow below steps:
1. Open SCOM console. Go to Monitors -> Agent -> Entity Health -> Performance -> Health Service Performance -> Health Service State.
2. Double click Health Service Handle Count Threshold monitor and go to Overrides page.
3. Click Override -> For a specific object of Class: Agent. Select the affected SCOM agent QMXServer.
4. Check on the parameter Agent Performance Monitor Type - Threshold. Change the default value 2000 to an appropriate value, like 4000. You can check the Health service handle count alert in SCOM console to get the value when the alert is generated. You
can also launch the health explorer against QMXServer to check the value when the monitor state is changed from healthy to critical.
Also you can refer below links
http://blogs.technet.com/b/omx/archive/2013/10/17/health-service-restarts-on-service-manager-servers-with-scom-agents.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

NOT RESOLVED - SCOM 2012 R2 - App Advisor and App Diagnostics Issue

Hi there!
Here is our scenario: SCOM 2012 R2 is deployed in the environment
SCOM - Management Server and SCOM Management Console.
SQLOD - SQL 2012 Operational Database
SQLDW - SQL 2012 Data Warehouse Database, SQL Reporting Services, SCOM Reporting, SCOM Web Console.
Problem: SCOM Administrator is able to open SCOM Application Advisor, SCOM Application Diagnostics and SCOM Web Console from any computer only after the SCOM Application Advisor, SCOM Application Diagnostics and SCOM Web Console are opened
from SQLDW (i.e. after opening them from the place where they were originally installed). The errors message prompts to retry after adding the user to the proper groups for SCOM Application Advisor and SCOM Application Diagnostics. SCOM Web Console prompts
the user to login.
Workaround: Open SCOM Application Advisor, SCOM Application Diagnostics and SCOM Web Console on SQLDW (i.e. after opening them from the place where they were originally installed) and everything works fine.
Question: What is causing the issue and how to fix it?
Many thanks, in advance!

I followed the article and it did not fix the issue.
Here are additional details:
There is only one user who does not experience the issue and it is a user under whose credentials the SCOM was installed AND that user has to login from the local network. If this users tries to connect over VPN he receives the same error.
Here are errors when Test1 user logs in:
Application Advisor (Enabled authentication: Windows Authentication, Forms Authentication, ASP.NET Impersonation):
Authentication error
User account: DOMAINNAME\Test1
This user account does not have sufficient rights to use Application Advisor.
Ask your administrator to add this user account to the Operations Manager Report Operators role, and then try again.
Application Diagnostics (Enabled authentication: Windows Authentication, Forms Authentication):
Access denied
User account: DOMAINNAME\Test1
This user account does not have sufficient rights to use Application Diagnostics.
Ask your administrator to add this user account to the Operations Manager Application Monitoring Operators role, and then try again.
Operations Manager Web Console (Enabled authentication: Windows Authentication):
Prompted for credentials with error:
The user credentials are invalid or user does not have permissions to access the application.
Please provide the following information to the support engineer if you have to contact Microsoft Help and Support :
Microsoft.EnterpriseManagement.Presentation.Security.ConnectionSessionAccessDeniedException: The user access is denied.
This error reappears no matter whose credentials are entered. Even the SCOM Installer's credentials generate Error 3 when entered at the time when Test1 user is logged on.
App Pools:
OperationsManager - 4.0; Integrated; ApplicationPoolIdentity; 1 application
OperationsManagerAppMonitoring - 4.0; Classic; NetworkService; 2 applications
OperationsManagerMonitoring View - 2.0; Classic; NetworkService; 1 application
Added *://*.domain.local zone to the trusted zone in the Internet Explorer.
Please help!!!!

SCOM 2012 Event Log Alarming

I currently am using a Unit Monitor - Windows Events - Simple Event Detection - Windows Event Reset Monitor.
This monitor looks for event ID 3003 and looks for "Down" or "Up". This will open or close an alert depending on its operational status.
The question/problem I am having is....the application i am monitoring always writes events under event ID 3003. If I have multiple devices go down at the same time and then go down or come up in a different order, how can I get scom to differentiate
between the events so its properly opening and closing the correct alerts?
Your help or ideas are greatly appreciated.
Thanks!

The only option is create a event monitor for every devices which spot the event id 3003, event source, I assume that event source is the indication of which device generate the event, and event description is "Up" or "Down". This means
that you should has 10 rules if you has 10 devices, 20 rules f you has 20 devices.
Roger

SCOM 2012 R2 WebConsole hangs and crashes all IE8 windows

Hi,
Running SCOM 2012 R2 WebConsole on a couple of monitoring desktops in as much as no one touches them. Every now and then the WebConsole just hangs (not responding). When you close the session it closes all the other open IE8 sessions too.
Any ideas or where to look to get an idea?
SCOM 2012 R2 WebConsole
Windows XP
IE8 8.0.6001.18702
Silverlight 5.1.30514.0
Thanks,
Sean

Hi,
For this issue, we may need to collect crash dump file for IE:
http://blogs.technet.com/b/perfguru/archive/2007/11/15/how-to-troubleshoot-internet-explorer-crashes-and-hangs.aspx
http://blogs.technet.com/b/markrussinovich/archive/2010/06/01/3335060.aspx
In addition, if possible, you can try to re-install the web console and check the result.
Regards,
Yan Li
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

SCOM 2012 event id 10801 cluster disks don't discovered.

Hello.
I have errors in Operations Manager log:
Discovery data couldn't be inserted to the database. This could have happened because of one of the following reasons:
    - Discovery data is stale. The discovery data is generated by an MP recently deleted.
    - Database connectivity problems or database running out of space.
    - Discovery data received is not valid.
The following details should help to further diagnose:
DiscoveryId: 5a84ee62-20c2-46a2-10b9-3dedaff65df6
HealthServiceId: 3aeaca7c-48de-c0fc-0441-ffd5ef7aa7c3
Microsoft.EnterpriseManagement.Common.DiscoveryDataInvalidRelationshipTargetException,The relationship target specified in the discovery data item is not valid.
Relationship target ID: 2478193e-1a5f-4087-1b5f-95459123321e
Rule ID: 5a84ee62-20c2-46a2-10b9-3dedaff65df6
Instance:
<?xml version="1.0" encoding="utf-16"?><RelationshipInstance TypeId="{acfe2f40-0a73-6764-21a5-bf59c41b2844}" SourceTypeId="{00000000-0000-0000-0000-000000000000}" TargetTypeId="{00000000-0000-0000-0000-000000000000}"><Settings
/><SourceRole><Settings><Setting><Name>5c324096-d928-76db-e9e7-e629dcc261b1</Name><Value>SQL-01</Value></Setting><Setting><Name>af13c36e-9197-95f7-393c-84aa6638fec9</Name><Value>\\.\PHYSICALDRIVE18</Value></Setting></Settings></SourceRole><TargetRole><Settings><Setting><Name>5c324096-d928-76db-e9e7-e629dcc261b1</Name><Value>PDC-S-SQL-01.sibgenco.local</Value></Setting><Setting><Name>af13c36e-9197-95f7-393c-84aa6638fec9</Name><Value>Disk
#18, Partition #0</Value></Setting></Settings></TargetRole></RelationshipInstance>.
SQL-01 is server with clusters disks, and cluster disks are don't discovered.

Hi,
Hope the below articles can be helpful:
Cluster resource groups are not monitored! Is there anything I can do?
http://blogs.msdn.com/b/mariussutara/archive/2008/05/03/cluster-resource-groups-are-not-monitored-is-there-anything-i-can-do.aspx
Event ID 10801 and 33333 in Operations Manager log
http://www.itbl0b.com/2014/02/event-id-10801-33333-operations-manager-log.html#.U-QwunmKBes
Please Note: Since site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information the web.
Regards, Yan Li

SCOM 2012 - Event log analyzing?

Hey all,
I am new in scom and have a question about event logs. it is possible to analyze the event logs of servers or can it only use for monitoring of events ?
Did anybody have more information about that?
Please help and thanks in advice.

If you dump those logs on a server with a SCOM agent, you can create a monitor that will use the log reader module to parse through the log to find matching data and raise alerts. The logs reader provider has a few different types of files it can read.
Check it out.
http://social.technet.microsoft.com/Forums/systemcenter/en-US/aa3ad3b8-9a28-48c2-959a-cb628db1d647/text-log-monitorrule-and-cleared-logfile?forum=operationsmanagerauthoring
Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

Update rollup 2 for SCOM 2012 R2 broke sharepoint and visio 2010 SCOM integration

I just applied UR2 to my test environment and I find that it has broken my SharePoint webpart, webconsole, and visio integration? What's the fix? I receive "Secure Store Service did not performed the operation."
from the dashboard web part, and "The server failed to process the request" from the VSW.
B. Wright

Hi,
Did you follow the article http://support.microsoft.com/kb/2929891 to install the UR2?
In the article:
We recommend that you install this update rollup package by following these steps in the given order:
Install the update rollup package on the following server infrastructure:
Management server or servers
Gateway servers
Web console server role computers
Operations console role computers
Apply SQL scripts (see installation information).
Manually import the management packs.
Apply the agent update to manually installed agents, or push the installation from the Pending view in the Operations console.
Please check whether your operation manager server works well. Please check the event logs for more related information to help to troubleshoot this issue.
Regards,
Yan Li
Regards, Yan Li

SCOM 2012 R2 Management Servers and SQL Server Availability Groups

My team is in the middle of rolling out a brand new install of System Center Operations Manager 2012 R2.
I have set up a SQL Server Availability group that is spread across multiple subnets and installed the initial management server per
here.
As I have gone through attaching new management servers, I have noticed disturbing behavior. When the AG fails over to another node, the management servers will lose connectivity unless I either recycle the service or it fails back to the original
node. This is not a security issue as I have set up permissions. It says it cannot connect to the database anymore at all.
Has anyone else seen this behavior? Is there a setting I am missing somewhere?
Thanks for your help.
Dale

Hi Dale,
What about ApplicationIntent\Readonly?
http://msdn.microsoft.com/en-us/library/hh205662(v=vs.110).aspx
Still thinking about DNS, may be this could be for your case:
http://www.sqlservercentral.com/Forums/Topic1449216-2799-1.aspx
Natalya

SCOM 2012 Microsoft.SystemCenter.HealthServiceWatcher and NetbiosComputerName

Alerts generated by Microsoft.SystemCenter.HealthServiceWatcher don't have the NetbiosComputerName field populated.
Is there anyway to get this field populated?
Alerts include:
Failed to Connect to Computer
Health Service Heartbeat Failure
Thanks,
Darren

This class is not hosted by Windows Computer, which provides the Netbios Computer Name field, and there really is no way to get this populated unless you run some sort of external process with command channel or SCORCH.
These are the properties available on that class:
PS>c:\scripts\getclasspath_2012.ps1 Microsoft.SystemCenter.HealthServiceWatcher
TARGET CLASS Microsoft.SystemCenter.HealthServiceWatcher
                                 HealthServiceId
                                 HealthServiceName
BASE CLASS PATH for Microsoft.SystemCenter.HealthServiceWatcher
System.Perspective
System.LogicalEntity
System.ConfigItem
                                 ObjectStatus
                                 AssetStatus
                                 Notes
HOST CLASS for Microsoft.SystemCenter.HealthServiceWatcher
Microsoft.SystemCenter.HealthServiceWatchersGroup
                                 WatcherGroupName
                                 RMSPrincipalName
BASE CLASS PATH for Microsoft.SystemCenter.HealthServiceWatchersGroup
System.Group
System.LogicalEntity
System.ConfigItem
                                 ObjectStatus
                                 AssetStatus
                                 Notes
                 *Not Hosted*
Jonathan Almquist | SCOMskills, LLC (http://scomskills.com)

Dashboards Problem after SCOM 2012 Inplace Upgrade- Missing Stored Procedures

Dears,<o:p></o:p>
After finishing SCOM 2012 in place Upgrade I face a problem on Performance and Service level dashboards, the Upgrade has been finished successfully as shown below
But after I start Dashboards configuration I receive below errors
After troubleshooting I see an error in Event viewer beside the errors on Snapshots above said that
Fault Detail is equal to could not find stored procedure
so I compared Stored Procedures under SCOM data warehouse database with another SCOM 2012 installation (different customer) and i see a lot of Missing Stored Procedures
(all Stored Procedures start with 'SDK.Microsoft_SystemCenter_Visualization are missing)
Here i am stuck, I don’t know what I can do, I have some ideas but i don't know if its will work.<o:p></o:p>
My ideas are:<o:p></o:p>
1. Repair SCOM 2012 Installation (does the repair option will repair the databases)
2. Re import Default SCOM Management packs like (Microsoft.SystemCenter.Visualization.Library.mpb) (does MP contains Stored procedures in the Database)<o:p></o:p>
3. Install Rollup Update (may during installation it will create missing Stored Procedures)
4. Move Stored Procedures from other SCOM server installation
Please advise its strange issue
Appreciate Your help
Note:<o:p></o:p>
Everything is work correctly regarding Raising alerts , generate reports , servers state , reset and recalculate health state, installing and ininstalling agents and others.

Hi,
Could you post the error message in forum directly? This snapshot it too fuzzy to know what the exactly meaning is.
Alex Zhao
TechNet Community Support

Update agent from SCoM 2007 to SCOM 2012

Expets,
We have SCOM 2007 R2 CU7on 1 server.
we installed another single SCOM 2012 r2 on another server.
when i push the agent from the SCOM 2012 to machine still monitored by SCOM 2007, the machine appear in pending management under device management under setting
tab
but when i remove the SCOM 2007 manualy, there is no problem and the installing of SCOM 2012 agent done successfully
any way to make SCOM 2012 agent automatically without remove SCOM 2007 agent ?
Ahmad Samir | MCSE 2003 | MCTS: Exchange 2010, MCTS: Lync 2010. MCTS: SCOM 2007

Hi,
If SCOM 2012 and SCOM 2007 R2 belong to the same management group, then you are trying to make your agents multi-homing, and if so, just discovery them and push agent to them should work.
Here is a similar thread, please go through it:
http://social.technet.microsoft.com/Forums/en-US/c6d15d7f-1779-47ea-a437-bc6ab00e2f64/upgrading-scom-2007-r2-to-scom-2012?forum=operationsmanagergeneral
And we may need to logon to one agent and check its event viwer for operation manager log for more details.
Regards,
Yan Li
Regards, Yan Li

How to enable default disabled linux monitor on scom 2012 r2

hello,
I have scom 2012 r2 environment and i have imported 'SCOM 2012 R2 MP linux and Unix '.then installed agent on one of linux redhat6 machine.it got installed successfully but next how to get data in following highlighted portion except these am getting data
in all the portion.

To enable disabled rule,you can run below script by write MP name and class that you want to enable it
$MP
= Get-SCOMManagementPack
-displayname "Managment pack name"
| `
where {$_.Sealed
-eq $False}
$Class
= Get-SCOMClass
-DisplayName "rule name"
$Rule
= Get-SCOMRule
-DisplayName "*Events/sec"
Enable-SCOMRule -Class
$Class -Rule
$Rule -ManagementPack
$MP -Enforce
For more details, you can refer below link
http://www.systemcentercentral.com/opsmgr-2012-disabling-rules-and-monitors-in-bulk-in-powershell/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

SCOM 2012 SP1 UR4 management servers grey state

Hi,
My SCOM environment is made up of the below :-
SCOM 2012 SP1 UR4.
3 SCOM Management Servers all on Windows 2008 R2 SP1.
Shared SQL 2008 cluster with 2 Windows nodes also on same OS.
Just recently all our SCOM management servers have been flipping in and out from grey to green state. Gateways/agents all look ok as showing green. Alerting from agents appears normal as can see lots of them in console.
Have flushed the health state cache folder on all 3 SCOM MS's and still the same issue.
Appreciate any help on this one.

Event id: 7011 - Was your server recently patched (Installed by any automatic updates) ?
IS SCCM Configured in your MS? If Yes disable and check?
Is Windows update service running ? Stop if for one or two days and check if this issue still appears
Reference threads:
http://social.technet.microsoft.com/Forums/en-US/b86e5a3d-0c2e-4d5e-9d3d-905da91fc982/scom-2012-event-id-7011-service-control-manager-error-when-fep-definition-updates-apply?forum=configmanagersecurity
http://stefanroth.net/2012/09/26/scom-2012-event-id-7011-service-control-manager-error/
Solution also available in: http://technet.microsoft.com/en-us/library/cc756319(v=ws.10).aspx
===========================================
For Event id 20026 -
1. Does your Operationsmanager database have enough space ? Check that first.
What is you DB size ?
How much is the free space left ?
2. Was there any resent change in the SCOM Action accoutn password ? Or has the password expired. Try re entering the SCOM Action password by re directing your self to Administration tab --> Run as Config -- > Accounts --> SCOM Action account.
The description would be - This is the user account under which all rules run by default on the agent.
Right click and go to properties and re enter the account name and password there and check.
Refer the below screen shot
Check this article as well:
http://social.technet.microsoft.com/Forums/systemcenter/en-US/102d443c-db0e-4bf2-b0d6-31d7f9328537/all-agents-greyed-out-multiple-event-errors-with-ids-20026-20028?forum=operationsmanagergeneral
============================================
Event id : 11904 - As per my knowledge appears due to incorrect Alrting string display name selected in any Rule or monitor.
Also the description what you pasted in Event id : 11904 says Microsoft.SystemCenter.HealthService.ActionAccountConfigured.Error as highlighted below.
Suggest to re enter the action account password and tell the results.
Also is the Healthservice on the MS running using System account or Domain account ?
=================================================================
Description : The Microsoft Operations Manager Expression filter Module failed to query the delivered item, item was dropped.
Property Expression: Reachability/State
Error : 0XC00EE22
One or more workflows were affected by this. Workflow
name: Microsoft.SystemCenter.HealthService.ActionAccountConfigured.Error
Gautam.75801

Which type of SQL DB do I need for SCOM 2012?

Hello everyone,
We would like to install a SCOM 2012 Server for reporting and alerting of our Exchange and Lync Server.
Our guys from database management asks me, what type of SQL DB do I need. "An SQL DB with 100GB" shouldn't be enough :-( I'm not very familiar with SQL.
So, which informations could be missing?
Thanks in advance and best regards
Daniel
Beste Grüße

Daniel,
usually Standard Edition is enough and included in the SCOM (agent) license.
Here you find more about requirements:
https://technet.microsoft.com/en-us/library/dn249696.aspx
SQL specific:
Check for updates and hotfixes for Microsoft SQL Server. See
SQL Server in System Center 2012 R2.
Operations Manager does not support hosting its databases or SQL Server Reporting Services on a 32-bit edition of SQL Server.
Using a different version of SQL Server for different Operations Manager features is not supported. The same version should be used for all features.
For SQL Server collation settings, see
SQL Server in System Center 2012 R2
The SQL Server Agent service must be started, and the startup type must be set to automatic.
The db_owner role for the operational database must be a domain account. If you set the SQL Server Authentication to Mixed mode, and then try to add a local SQL Server login on the operational database, the Data Access service will not be able to start.
For information about how to resolve the issue, see
System Center Data Access Service Start Up Failure Due to SQL Configuration Change
If you plan to use the Network Monitoring features of System Center 2012 R2 Operations Manager, you should move the tempdb database to a separate disk that has multiple spindles. For more information, see
tempdb Database.
You should have a look at the sizing calculator:
http://download.microsoft.com/download/C/A/6/CA60425C-950B-456E-986C-C5F2FCD5668D/System%20Center%202012%20Operations%20Manager%20Sizing%20Helper%20Tool%20v1.xls
Good luck,
Patrick
Please remember to click “Mark as Answer” on the post that helped you.
Patrick Seidl (System Center and Private Cloud)
Website: http://www.syliance.com
Blog: http://www.systemcenterrocks.com

SCOM 2012 Event ID 21006 and 21016

Similar Messages

Maybe you are looking for