SCOM 2012 file monitoring

Hello,
I have a requirement to monitor the folder and alert needs to be triggered if *trace* file present. If the trace file present there should be some issue and that owner needs to be alerted from SCOM that the file is present in the specific folder.
May i know the way to achieve this?
Regards,
Vijay

You may create time script monitor and the script is similar to
Dim fs, f, foldername,fd
set oAPI=CreateObject("MOM.ScriptAPI")
set oBag=oAPI.CreatePropertyBag()
Set fs = CreateObject("Scripting.FileSystemObject")
   foldername="c:\temp" 
   status="OK"
    Set fd = fs.Getfolder(foldername)
    for each f in fd.files
             if instr(f.name,"trace") then
                 status="NOT OK"
                exit for
            end if
    next   
 Call oBag.AddValue("Status",status)
 Call oAPI.Return(oBag)
IN this example, I assume the monitor file is c:\temp and the trace flle with file name "*trace*"
Roger

Similar Messages

  • SCOM 2012 Linux Monitoring - RPCBIND, RPCIDMAP, RPCSTAT services not running

    We are running SCOM 2012 SP1 and added a test Linux server running Red Hat Enterprise 6.3.  SCOM is reporting that the server is in Critical health because the following three services are not running.
    1) Process Rpcbind Service Health - Rpcbind Mapper Not Running
    2) Process Rpcidmap Service Health - NFSv4 ID Name Mapper Not Running
    3) Process Rpcstat Service Health - NSM Status Monitor Not Running
    My question is that are these services required to be running in order for SCOM to monitor the Linux servers properly?  If yes, can you please give brief explaination as to why so I can explain that to our Linux Administrator.  The Linux Administrator
    is saying that we do not run these services on any of the Linux servers because they are not needed.  If infact these services are not needed, how can I have SCOM ignore the critical error messages?  Thanks

    Yup, generally running. I'm assuming you've done a basic install of RHEL 6. All processes listed above are enabled by default on a RHEL 6 install if you take the default settings. If someone is just getting started you can pretty much guarantee
    they will do a basic install of RHEL 6 and this will not be an issue.
    Could it be done better... sure but at what point do you stop? We could discover all services running on the system and start monitoring them out of the box but what are important and what are not to each customer? The idea is to give you some basic monitoring
    on a default install based on what each OS provider starts on a "default" install. If this does not suite your needs SCOM is very configurable and adding a custom service monitor is very easy to configure along with disabling existing ones.
    If you'd like to provide feedback on this feel free to open a support ticket with Microsoft and file what we call a 'Design Change Request' [DCR]. We go though these prior to starting each update to SCOM. No guarantee it will get fixed/changed as we do have
    priorities but we are listening.
    Regards,
    -Steve

  • SCOM 2012 Network Monitoring Does Not Show Servers

    We are testing out the network monitoring piece in SCOM 2012 but for some reason it never does show the servers.  We have a test switch with a monitored server connected directly to it but after the discovery completes it doesn't show the server as
    being connected.  The switch in question is a Juniper and if you look at the diagram view for the device it does show all of the ports under "not monitored" and the Processor and Memory under "Healthy."  The following event sequence shows up in the
    "Network Discovery Progress Events" view:
    Full Discovery Started for 1 request(s)
    Proceeding to discover all systems in repository
    Probing <<IP Address 1>>
    Probing <<IP Address 2>>
    Probing completed for <<IP Address 2>>
    PostProcessing started
    Probing completed for <<IP Address 1>>
    PostProcessing completed
    Switch::<<IP Address 2>> discovered successfully
    Switch::<<IP Address 1>> discovered successfully
    Discovery Completed / Devices discovered: 2 / Windows computers filtered: 0 / Devices in pending list: 0 / Devices excluded: 0
    No devices were found in filtered list after discovery
    Start processing connections to computers
    Finished processing connections to computers. Number of connections made: 0
    I've been trying to find some documentation on any other settings that are required to get network monitoring to work as advertised but so far I have struck out.  Help!

    Sorry Matt - you did say that very clearly in your previous post. I'll try and do better this time ;-)
    From here:
    http://technet.microsoft.com/en-us/library/hh212935.aspx
    From here:
    http://blogs.technet.com/b/momteam/archive/2011/09/20/what-gets-monitored-with-system-center-operations-manager-2012-network-monitoring.aspx
    "An agent computer that is directly connected to a device will have the connecting interface added to this group.  For this to work the management group must have the Windows Operating System management pack for the agent’s operating system, the Windows 
    Client Network Discovery management pack and the Windows Server Network Discovery management pack. The full discovery of the agent’s operating system has to be completed including the discovery of the agent’s network adapters. Then when network  discovery
    runs for the device it should stitch the port on the device to the network adapter on the computer and add the port to this group."
    So possibly:
    - check the management packs specified are imported
    - check the the agents network adapters have been discovered
    From here -
    http://technet.microsoft.com/en-us/library/hh212935.aspx - it is also possible to do this for non-scom monitored servers.
    "Ports that are connected to a computer are not monitored; only ports that connect to other network devices are monitored. You can monitor a port that is connected to a computer that is not agent-managed in the same management group by adding the port to
    the Critical Network Adapters Group."
    Cheers
    Graham
    Regards Graham New System Center 2012 Blog! -
    http://www.systemcentersolutions.co.uk
    View OpsMgr tips and tricks at
    http://systemcentersolutions.wordpress.com/

  • How to use SCOM 2012 R2 Monitoring the standalone Windows Server

    Greetings,
    I want to use SCOM 2012 R2 to monitoring the standalone Windows Server that does not joined the domain. would you please guide me how to configure it.
    Thanks
    Frank@Hiweb 冯立超@瀚博资讯

    I found the answer, as following:
    http://pkjayan.wordpress.com/2010/05/17/agent-managed-non-trusted-servers-without-gateway/
    and
    http://blogs.technet.com/b/stefan_stranger/archive/2012/04/17/monitoring-non-domain-members-with-om-2012.aspx
    Frank@Hiweb 冯立超@瀚博资讯

  • SCOM 2012 URL monitoring for IIS 6 & IIS7.5

    Hi, Could someone pls guide me how to create url monitoring for iis 6 & 7.5 windows servers.
    Regards, Rajeev Parambil

    PLease refer to this
    http://technet.microsoft.com/en-us/library/hh881883
    IIS 7.0 MP
    http://www.microsoft.com/en-hk/download/details.aspx?id=9815
    http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=19445
    Roger

  • Does SCOM 2012 monitor "Persona File Handles"?

    Hi,
    I have query whether SCOM 2012 can monitor "Persona File Handles"? Plan is for monitoring threshold limit of 3 lacs file handles on HVDs. If it can be monitored, the alert should be triggered only when it reaches 3 lacs file handles.
    We have SCOM 2012 SP1
    Please answer asap.
    Thanks,
    Naren.
    Thanks & regards, Naren.

    I would suggest you look into the veeam MP for VMWare http://www.veeam.com/management-pack-system-center-resources.html
    I'm not to familiar with "Persona
    File Handles"  but if there's a command you can run to check it then it can be scripted and thus monitored by a custom monitor.
    Cheers,
    Martin
    Blog:
    http://sustaslog.wordpress.com 
    LinkedIn:
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • Monitor Dell Powerconnect Switches/Routers using SCOM 2012

    Hello,
    We are trying to find a way to monitor approximately 20-25 Dell Powerconnect switches/routers (models 5324,5424,5448,5548,6224,6024) through SCOM 2012.
    Using SCOM network discovery we are able to get all Dell Powerconnect switches listed, but we are unable to get a network node dashboard, nor vicinity view 1 or 2 hops further. We are able to only see connected network printers and some serial/ethernet devices
    we have.
    In addition, SCOM 2012 seems to be able to recognize the model of only Dell Powerconnect 5224 switches. We have found that on the SCOM management server the "C:\Program Files\System Center 2012\Operations Manager\Server\NetworkMonitoring\conf\discovery\oid2type_Dell.conf"
    only lists Dell Powerconnect 5224 switches as well as several models from the 3000 series.
    We have contacted Dell PRO support, but their reply was that there is no management pack for SCOM available for their networking devices.
    Would it be recommended to use http://xsnmp.codeplex.com/ on SCOM 2012 to monitor those switches and get a network digram view or are there any plans to include those MIBs in a future CU or SP of SCOM 2012? 

    Hi Alex
    Network monitoring has changed from SCOM 2007 R2 to SCOM 2012 so this statement
    "but if this works for SCOM 2007, it should apply to SCOM 2012"
    is not accurate when it comes to network monitoring:
    http://blogs.technet.com/b/momteam/archive/2011/10/24/migrating-operations-manager-2007-network-monitoring.aspx
    Would it be recommended to use http://xsnmp.codeplex.com/ on SCOM 2012? 
    The codeplex solutions for SCOM 2007 R2 will not work on a new \ clean install of SCOM 2012 (if you upgrade from SCOM 2007 R2 they continue to work as legacy devices but you can't add more monitoring).
    SCOM 2012 seems to be able to recognize the model of only Dell Powerconnect 5224 switches
    What do you mean by recoginse? SCOM can discover network devices but there is an "approved" list that allows for extended monitoring:
    http://www.microsoft.com/en-us/download/details.aspx?id=26831
    You should still be able to discover and monitor other devices though:
    http://blogs.technet.com/b/momteam/archive/2011/09/20/what-gets-monitored-with-system-center-operations-manager-2012-network-monitoring.aspx
    Cheers
    Graham
    Regards Graham New System Center 2012 Blog! -
    http://www.systemcentersolutions.co.uk
    View OpsMgr tips and tricks at
    http://systemcentersolutions.wordpress.com/

  • SCOM 2012 monitoring IIS - windows updates generate SCOM alerts

    We are using SCOM 2012 to monitor our environment. There is a logic implemented to suppress alerts (using maintenance mode) when Windows Updates cause system reboot.
    We followed:<o:p></o:p>
    http://operatingquadrant.com/2009/08/15/scom-automatically-starting-maintenance-mode-when-servers-are-rebooted-for-patching/<o:p></o:p>
    Basically when in system event log event id 1074 appears then system is put in Maintenance mode. There is a problem with some IIS web servers - they
    generate a lot of alerts when Windows Updates are installed (e.g. Microsoft Windows Internet Information Services 2003 Application Pool is Unavailable)
    and before windows reboot. In details:
    5:08 AM - Windows update installation in event log (event id 19)e.g. 
    Installation Successful: Windows successfully installed the following update: Security Update for Microsoft .NET Framework 4 on Windows Server 2003, Vista, Windows 7, Server 2008 x86 (KB2972106)
    5:09 AM - SCOM generates alerts: Microsoft Windows Internet Information Services 2003 Application Pool is Unavailable
    5:17 AM - event id 1074: The process winlogon.exe has initiated the restart of computer. SCOM put this server in Maintenance mode.
    After 5:17 AM no more alerts generated by SCOM 
    We cannot change our logic and put system in maintenance mode based on event ID 19 (windows update installation) because there are a
    lot of event ID 19 events generated almost every day. So we do not want to put our server in maintenance mode each time when windows updates are installed. Just when windows update installation cause some IIS features stops. Any idea?

    For issue 1074, You can refer below link
    http://theitcrownd.blogspot.com/2012/01/set-up-automatatic-scom-maintenance.html
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Mai Ali | My blog: Technical | Twitter:
    Mai Ali

  • Unable to monitor SLES 10 SP4,SLES 11 SP3 and SLES 11 SP2 via SCOM 2012 R2

    Hi ,
    I am unable to get SLES 10 SP4, SLES 11 SP3 and  SLES 11 SP2 under SCOM 2012 R2 monitoring. The PAM ,glibc and openssl are at the right versions.
    Per the documentation SCOM MP for unix/Linux provides monitoring of SUSE Linux Enterprise
    Server 9, SUSE Linux Enterprise Server 10 SP1, and SUSE Linux Enterprise Server 11 operating systems. Does this mean it cannot monitor SP2, SP3 and SP4 for the same Operating systems?
    Plat form not supported is the error which I get.
    Thank you much,

    There should not be any problems with monitoring SLES 10 SP4 or SLES 11 SP2/SP3. If you are getting a "platform not supported" error, it may be that the right management packs have not successfully imported. Can you give more details on when
    you get the error, and the management pack versions that you have installed?  And what Update Rollup (UR) for OpsMgr do you have installed?  The latest is UR4, and the Linux/UNIX management packs for UR4 are here: 
    http://www.microsoft.com/en-hk/download/details.aspx?id=29696 .  Be sure to download the version for "R2".
    Michael Kelley, Lead Program Manager, Open Source Technology Center

  • Text log file Monitor

    Hi Team,
    i have a task to create a log file example SCOM.log, the log has all text entries and the pattern is like below  
    "[0014 20140724 094527069 SCOM E] ProcessDeposits(), DMGATEWAY internal error in plugin: An exception occurred while processing terminal transaction with HostTransactionID: '4143', tracking fact Id: '3' in the Deposit Gateway Processor task 7. The transaction
    will be NOT be re-queued. // "
    we need to monitor anything which has "DMGATEWAY internal error in plugin:" string.
    sometimes we have greater then 10 entries with in few seconds.
    once the log file reaches 10MB all the entries are moved to an archive log file that means the present SCOM.log file is empty and start from line one again.
    any suggestions \ solution will be a great help and also let me know if you need any further information
    -Vrkumar01
    RajKumar

    Hi Raj,
    Have a read through this post it highlights issues with log monitoring:  http://social.technet.microsoft.com/Forums/systemcenter/en-US/827464fd-ff06-495d-8ac6-4a6e337314d3/bug-in-scom-log-file-monitor?forum=operationsmanagergeneral
    Have a look at creating a script monitor to monitor the log file:
    http://www.opsmanager.se/2012/11/06/text-log-monitoring-part-1/
    http://www.opsmanager.se/2012/12/17/text-log-monitoring-in-operations-manager-part-2/
    The issue you are experiencing is a limitation of scom which is documented here:
     http://support.microsoft.com/kb/2691973/en-us
    Snippet  from KB:
    Additional Information
    When monitoring a log file, Operations Manager remembers the last line read within the file (a 'high water mark'). It will not re-read data before
    this point unless the file is deleted and recreated, or renamed and recreated, which will reset the high water mark.
    If a logfile is deleted and recreated with the same name within the same minute, the high water mark will not be reset, and log entries will
    be ignored until the high water mark is exceeded. 
    An implication of this is that log files that are cleared periodically without being renamed and recreated, or deleted and recreated, will not have entries in them processed until the high water mark from before the log is cleared is exceeded.
    Operations Manager cannot monitor 'circular log files' (i.e. log files that get to a certain size or line count, then start writing the newest entries at the beginning of the log) for the same reason. The log file must be deleted or renamed and then recreated,
    or the application configured to write to a new log once the current log is filled.
    Cheers,
    Martin
    Blog:
    http://sustaslog.wordpress.com 
    LinkedIn:
    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

  • SCOM 2012 Global Architecture, One management group or multiple?

    Hi Folks,
    I work for a global firm, we have multiple data caters in different regions. America, UK, Australia, China etc etc. We are looking to roll out SCOM 2012 for monitoring all systems. Our environment
    1,000 Windows servers
    All servers on the same Active Directory domain
    10 Mbps links between data centers.
    My question is around whether to use multiple management groups or one?   I’ve seen recommendations for both. For example
    In the Infrastructure Planning and Design guide for SCOM 2012 it is stated:
    “A centralized management model with large remote locations works best with a management group in each region and a local management group (which provides a consolidated view of alerts and status) in the parent location. In this case, the centralized management
    group connects through the software development kit (SDK) and functions as an additional console on each of the connected management groups.”
    However moderators in this forum have stated
    “Each management group has its own set of SQL Servers and Management Servers \ Gateways. It also adds considerably to administrative overhead. I'd try to avoid
    multiple management groups where possible.”
    ” It will get expensive in terms of hardware and software with multiple management groups and you will duplicate a lot of work with regards to overrides”
    “If you go with multiple Management Groups then you would need to add on a fair number of SQL licenses plus additional hardware. “
    “Presumably if I have multiple management groups will that mean I will have to
    create rules for each Management Group- correct. Same
    with overrides. It could add a lot of administrative overhead. “
    It would seem easier to just deploy one management group with the management servers in one datacenter but I’m concerned with performance. I’ve heard
    stories about SCOM deployments architected in this way not performing well because of network latency. i.e admins from all regions besides the region local to the SCOM deployment not wanting to use SCOM because application performance is too slow.
    What would the SCOM experts recommend for this scenario?
    MH

    1) My question is around whether to use multiple management groups or one?
    Factors to consider in determine the number of Management group
     • Scaling
     • Agents separated from their management server by WAN-speed network links
     • Political, administrative or security requirements within the organization requiring separate management groups.
     • A view of AD DS topology required across multiple forests.
     • A dedicated management group required for auditing purposes.
     • Disaster recovery functionality required.
     • Consolidated views of connected management groups required in Operations Manager.
     • Operations Manager integration with the VMM console.
     With refer to your situation
     a) 1,000 Windows servers
     b) All servers on the same Active Directory domain
     c) 10 Mbps links between data centers.
    It is suggest that one Management group is required.
    2) It would seem easier to just deploy one management group with the management servers in one datacenter but I’m concerned with performance
    It is recommend that you should deploy Gateway server in region office which has more than 10 agents.
    • Gateway server reduce network bandwidth utilization. Agents located across WAN links consume network bandwidth, potentially affecting service delivery to and from the remote location. A gateway server can consolidate the traffic.
    Roger

  • How to install SCOM 2012 R2 agent on workgroup Linux machine.

    Hello Experts,
    Please help in installing  SCOM 2012 R2 agent on WorkGroup Linux machine.
    Please provide links for steps process so we can proceed easily for installation without much searching.
    Thanks
    Richa KM

    Hi
    The beauty deploying SCOM agents to Linux Systems is that it does not depend on Kerberos. If the Linux Systems is Domain joined or not does not matter. In both cases the authentication occurs using certificates which are signed by the SCOM Servers. You Need
    just to make sure that:
    Port 22 (SSH) and 1270 (WS-Man) are open / reachable
    DNS works both ways and pointers (reverse look up) is configured.
    Make sure the Linux System Name is same as DNS if not check
    http://stefanroth.net/2014/02/03/scom-linux-agent-deployment-signed-certificate-verification-operation-was-not-successful/
    Make sure you Setup the RunAs account properly
    http://stefanroth.net/2012/03/15/scom-2012-linux-monitoring-lab-part-1-setup-suse-11-1/
    If you consider these points everything should work fine...
    Cheers,
    Stefan
    Blog: http://blog.scomfaq.ch

  • Windows Monitoring Checklists for SCOM 2012 R2

    Hi All,
    We are in SCOM 2007 to 2012 migration stage where we will have to check Windows monitoring with SCOM 2012 that how it works better than 2007, what all new components to be considered and focused. Kindly share if you have any checklists to be verified before
    we proceed further. Usually resources like CPU, Memory, File System and Network Performance, Services, events and logs monitoring would be considered. Help to get if anything I missed to list out here.
    Thanks.
    Regards,
    Raj.

    Hi,
    If you are looking for system requirements for installation of SCOM 2012 R2, please refer to the below link:
    System Requirements: System Center 2012 R2 Operations Manager
    http://technet.microsoft.com/en-us/library/dn249696.aspx
    And more details about how to upgrade from SCOM 2007 R2 to newer version, the below article should be helpful.
    Upgrading from System Center Operations Manager 2007 R2
    http://technet.microsoft.com/en-us/library/hh476934.aspx
    We should import management packs according to your environment and your need. For example, to monitor Windows operating system, we should import Windows operating system management packs.
    To monitor AD, we should import Active Directory corresponding management packs.
    Regards,
    Yan Li
    Regards, Yan Li

  • Bulk URL Monitoring is SCOM 2012 SP1

    Hey Team,
    i need to setup 100 + url monitors in scom 2012 sp1, i came across a term named BULK URL Monitor which suits my requirement. The issue is i am failing to get it to work when i click Bulkmonitor.exe i am gettign the below error and not sure how to resolve
    it.
    System.IO.FileNotFoundException: Could not load file or assembly 'Microsoft.EnterpriseManagement.Core, Version=7.0.5000.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' or one of its dependencies. The system cannot find the file specified.
    File name: 'Microsoft.EnterpriseManagement.Core, Version=7.0.5000.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'
       at Microsoft.EnterpriseManagement.BulkUrlManager.BulkUrlManagerForm..ctor()
       at Microsoft.EnterpriseManagement.BulkUrlManager.Program.Main()
    WRN: Assembly binding logging is turned OFF.
    To enable assembly bind failure logging, set the registry value [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD) to 1.
    Note: There is some performance penalty associated with assembly bind failure logging.
    To turn this feature off, remove the registry value [HKLM\Software\Microsoft\Fusion!EnableLog].
    Any suggestions will be highly appreciated.
    -vrkumar01
    RajKumar

    It worked.
    intially i tried to install in \System Center 2012\Operations Manager\Setup & System Center 2012\Operations Manager\Server both failed but this
    System Center 2012\Operations Manager\Console worked.
    thanks a lot
    -vrkumar01
    RajKumar

  • Need to monitor application folders in scom 2012

    Hi;
    I need to monitor the the size of msmq folder on various windows servers.
    Here the requirement is to monitor the size of respective folders. Most of the files are located at
    C:\Windows\System32\msmq--
    Could someone will help me for configuring these foldes under scom 2012 management servers.
    Thanks..
    Regards, Rajeev Parambil

    Hi,
    We may use script to check file sizes and use the script to create a monitor.
    In addition, hope the below article can be helpful:
    Monitoring File Size with Custom WMI Performance Counter
    http://blogs.msdn.com/b/steverac/archive/2009/08/30/monitoring-file-size-with-custom-wmi-performance-counter.aspx
    Regards,
    Yan Li
    Regards, Yan Li

Maybe you are looking for

  • How to Move My Library to a New Location

    The title is a bit misleading.  This is actually related to a previous discussion I started but never got any feedback on. Here is the situation: I have iTunes Match. For whatever reason, my iTunes library got hopelessly muddled and confused.  Probab

  • Licensed Version of Acrobat XI Pro reverted to trial version

    I've been using Acrobat XI Professional since June 2013 when it was installed on a new laptop from work. For the past few days I've been getting a popup whenever I open an Acrobat file claiming the trial is almost up. Now I cannot open it at all (unl

  • Issue in ADF security

    Hi All, Jdev version: 11.1.1.3.0 I have configured form based ADF security for my ADF application. Also I have created Application roles and associated roles also. In ADF application i have Home.jspx. Once i run the Home.jspx it should open a login.h

  • Quick Look will not play MPEG files

    I know this is possible because before I bought a new hard-drive it worked. I deleted the preferences file and restarted my computer to no avail. Any other ideas? Perian and Flip4Mac are installed. Message was edited by: GDuran144

  • FR cell text question

    Hi there, I'm trying to add cell text into a FR report. Right now, I'm adding a text row under each data row that utilizes the <<CellText()>> formula to display the cell text under each data cell. I have two questions from this... 1) This seems like