Service Monitor Not Alerting

I have a service monitor setup to monitor up down of a service. The service yesterday starting to terminate and restart it self but the monitor is not catching that it is going down. The monitor works fine we we take it down manually. I think the restart
is happening too quickly. Has anyone seen something like this and is there a fix for it?

Hi,
The default frequency of the basic service monitor is 60 Seconds if I have it in mind correctly so you may not got an alert for every service restart.
If you want to get an alert for every service restart you may have to use an Event Monitor to check the Service Start/Stop Events.
Have a look on this thread also:
http://www.systemcentercentral.com/forums-archive/topic/question-about-the-poll-time-of-the-basic-service-monitor/
Cheers,
Christoph
Blog: http://blog.cmaresch.at/ Twitter:
LinkedIn:
XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Similar Messages

Windows Service Monitor - False Alerts

Scenario : We have a custom Service Monitor that is created long back and enabled for all Servers. I just noted that the service is not present in all servers except few. I also noticed that there are some Overrides for 5 servers which does
not make any sense to me as it was overridden to enable this monitor.
Issue : Now the issue is, I got alerts for 5 servers for which the service is not installed at all. How is that possible ?
S.Arun Prasath HP ARDE TEAM

HOw to you create this service monitor?
You can create your service monitor either
1) From Authoring workspace --> Management pack Templates --> Windows services
http://www.bictt.com/blogs/bictt.php/2011/03/17/scom-monitoring-a-service-part3
OR
2) Authoring workspace --> Monitors
http://www.bictt.com/blogs/bictt.php/2011/03/17/scom-monitoring-a-service-part2
You understanding is correct if you using method 1) to create service monitor. Otherwise, you should enable the monitor for computer which has te service present.
Roger

Snmp monitor not alerting on failure to access.

using snmp probes it works fine reads the oid values and alerts if the value is of the correct value but if the devices is just down I get nothing it shows as unhealthy within network devices but it does not send an alert, what did I do wrong.
thanks
tr

Welcome to SCOM,
Sorry for all the Redacting; looks like some sort of super secret document.
If you pull up your network device(s) are the responsiveness monitors enabled, and green? These should trip when you device goes offline. It looks like the default configuration is to only alert on the parent node 'Network Device Responsiveness',
and once the node comes back online the alert would clear.
You could setup a subscription for this, and I think it would produce the results you're looking for.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Nathan Foreman
www.Practice2Perfect.com

Displaying hostname in Basic Service Monitor alerts

Hi all,
I've created a new Unit Monitor (specifically, a Basic Service Monitor) to alert when a particular service I stopped on any server in a group that I've defined. When I stop the service to test the alert, I don't see the affected server's hostname anywhere in
the alert. I see the source is set to the name of the group. This isn't all that useful, as I have to check every server until I find the one that the alert was generated for.
I've tried changing values in the Alert Description on the monitor, but haven't had any success here. It seems to me like the answer should be pretty obvious, but I'm stumped.
Thanks!

First - monitors or rules targeting groups is a
bad practice.
http://blog.scomskills.com/best-practices-targeting-intro/
Also, getting hostname in the alert is a
discovery issue.
http://blogs.technet.com/b/jonathanalmquist/archive/2010/06/18/why-does-source-not-show-me-the-computer-name-that-generated-the-alert.aspx
Jonathan Almquist | SCOMskills, LLC (http://scomskills.com)

Service Monitoring in SCOM which triggers an alert after a wait time

Hi ,
I have a requirement to amend on of our services monitors to alert after waiting for 3 minutes after the service goes down.
Is this possible using SCOM or do we need to script this.
Please advise.
Jesty

For configure that using script, you can refer below link
http://blogs.technet.com/b/fesiro/archive/2012/11/26/how-to-configure-command-notification-in-scom-2012-with-powershell-script.aspx
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Service monitoring is not showing all the services when i create a service monitor under Management pack templates.

Hi All,
I am using SCOM 2007 R2 CU4 in my environment. I want to do a service monitoring on specific agents. When i try creating this service monitor which comes under the Management pack template when i select the service which i want to monitor it does not
show all the services in the drop down.
For example - I have Windows audio service which is present on the machine, But it is not showing in the service list.
So from the services stating from "W" i see only 5 in SCOM and in services.msc in the Agent i see more than 5.
Below is the screen shot.
Can any one please help.
Gautam.75801

Hi Yan Li,
So based on your above suggestion, If the services are already managed / monitored by a specific
management pack those services will not appear here in the Wizard while creating this type of a Management pack object alert right ?
If that is the case why does not the same reflect here in the operations console in the Services monitor
TAB ?
Gautam.75801

SQL MP - System Center Management Health Service Credentials Not Found Alert Message

Hi Dears,
I have read so many open cases, but I could not find solution to my situation...
Error: System Center Management Health Service Credentials Not Found Alert Message
Desc are 1 of those 2:
An account specified in the Run As profile "Microsoft.SQLServer.SQLDiscoveryAccount" cannot be resolved.
An account specified in the Run As profile "Microsoft.SQLServer.SQLDefaultAccount" cannot be resolved.
Okay, I am fine, I verify the RunAs account configuration and yes this is the problem... I was able to solve it for those SQL running servicec account using domain user account, I created the run as account, and assoistte it with SQL profiles,
and it is fine....
BUT, what about my 8 SQL Servers running SQL Service Account under System and Network accounts,
so how Can I add this coz I cannot target all objects,so what shall I target (Object Health Service or WHAT)?
Please I need it step by step coz I am not able to handle this issue....
Thank you Guys

Hi,
If you have not distributed the Run As Account to a system, but we discovered SQL on it, you will see the error message.
This condition may have occurred because the account is not configured to be distributed to this computer. To resolve this problem, please distribute the account to this computer if appropriate. You can refer to the following blog to distribute the Run As
credential.
Niki Han
TechNet Community Support

Setting up service monitoring on a group of servers, but only alerting when the service is down on all servers

Hey All -
I have the need to monitor one service that exist on 3 servers, but the service only runs on one of the servers at a time, and the servers are not set up as a cluster. Any ideas around how to accomplish this?

Hi,
Create a service monitor as previously described and then create a distributed application and add the new service monitor for all servers to a component group. Then set the health rollup to Best state of any member - I think that should work...
Further details around DA's
http://thoughtsonopsmgr.blogspot.co.uk/2011/06/distributed-applications-das-part-ii.html
http://social.technet.microsoft.com/Forums/systemcenter/en-US/9e932038-32c6-4403-8489-1535de4214be/distributed-applications-health-rollup?forum=operationsmanagerauthoring
Hope this helps..

Alert: [LYNC] 'Lync Server Web Conferencing' NT Service is not running.

We keep getting this below Alert and everytime this happens, Conferencing would disconnect and connect back again. Current setup as below. We are on latest CU November 2014.
Server 2013 Pools - 2 pools
Each Pool has 5 front end servers with 2 back end servers mirrored.
Unable to find anything from best analyser, Ports have been validated. Any idea how to resolve this ?
Alert: [LYNC] 'Lync Server Web Conferencing' NT Service is not running.
Source: LS Data Conferencing Component [FE Server]
Path: FE Server
Last modified by: System
Last modified time: 11/24/2014 9:41:23 AM Alert description: 'Lync Server Web Conferencing (RTCDATAMCU)' NT Service is not running. To restart the service, run 'net start RTCDATAMCU' from a command-line window.
Whenever above alert is triggered, there is a corresponding application alert as below.
.Net runtime
Application: DataMCUSvc.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an internal error in the .NET Runtime at IP 00007FFAC2A91020 (00007FFAC2A90000) with exit code 80131506.
Application Error
Faulting application name: DataMCUSvc.exe, version: 5.0.8308.0, time stamp: 0x5050e3de
Faulting module name: clr.dll, version: 4.0.30319.34014, time stamp: 0x52e0b86c
Exception code: 0xc0000005
Fault offset: 0x0000000000001020
Faulting process id: 0x303c
Faulting application start time: 0x01d00621fefd0760
Faulting application path: C:\Program Files\Microsoft Lync Server 2013\Web Conferencing\DataMCUSvc.exe
Faulting module path: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\clr.dll
Report Id: ca360fe4-73e7-11e4-80ca-001b21bfd144
Faulting package full name:
Faulting package-relative application ID:

Hi,
Did the issue also happen before updating to the latest CU?
Please make sure you have installed the latest service pack for the Microsoft .NET Framework
Please try to change part of Lync service to start as “Automatic (Delayed Start)”, restart FE Servers and then test again.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

When i try syncing my phone a alert message pops up saying "this iphone cannot be used because the apple moblie device service has not started" what do i do?

when i try syncing my phone a alert message pops up saying "this iphone cannot be used because the apple moblie device service has not started" what do i do?

Read here:
http://support.apple.com/kb/TS1567

Issue in Global Services Monitor GSM

Dear all,
I'm facing a problem in Global Services Monitor.
The Resources pool contains 4 Management Servers; 2 old and 2 recently installed.
The GSM was installed and was working normally on the old Management Servers.
But, after increasing the number of management servers to be 4 instead of two, the problem appeared.
The GSM is firing alerts on the new MS's and their state are critical (old 2 servers are healthy).
The alert description is as below:
Global Service Monitor Modules: Failed to discover Global Service Monitor locations.
Failure step: 'Couldn't get the ACS endpoint from discovery service. SubscriptionId: 'a6846da0-e5d7-4bea-ab13-836d89364b60', OutsideInServiceBaseUri: 'https://gsm-prod.systemcenter.microsoft.com/''
Message: 'Could not establish trust relationship for the SSL/TLS secure channel with authority 'gsm-prod.systemcenter.microsoft.com'.'
Details: 'System.ServiceModel.Security.SecurityNegotiationException: Could not establish trust relationship for the SSL/TLS secure channel with authority 'gsm-prod.systemcenter.microsoft.com'. ---> System.Net.WebException: The underlying connection was closed:
Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)
at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
at System.Net.ConnectStream.WriteHeaders(Boolean async)
--- End of inner exception stack trace ---
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
--- End of inner exception stack trace ---
Server stack trace:
at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.SystemCenter.Cloud.SharedLibrary.Discovery.IDiscovery.GetEndpoints(String subscriptionId)
at Microsoft.SystemCenter.Cloud.SharedLibrary.Discovery.DiscoveryHelper.<>c__DisplayClass1.<DiscoverAcsEndpoint>b__0(IDiscovery service)
at Microsoft.SystemCenter.Cloud.SharedLibrary.RestCallHelper.ExecuteRestCall[TContract](Uri endpointUri, WebProxy webProxy, String accessToken, RestMethod`1 method)
at Microsoft.SystemCenter.Cloud.SharedLibrary.Discovery.DiscoveryHelper.DiscoverAcsEndpoint(String subscriptionId, Uri outsideInServiceBaseUri, WebProxy proxy)
at Microsoft.SystemCenter.Cloud.OutsideInUnitModule.DiscoveryWriteActionModule.Execute()'
Any clue?
Regards,
Khaled A. Hamad

Hi
Is there any requirement to install the Microsoft Root Certificate on the server where SCOM console is working? Shall I need to purchase Windows Azure Subscription also for GSM? Please let me know.
The scenario is - I have one SCOM server (Including all the server roles on the single server) and other server where VMM server and SCOM console is installed. I have installed GSM Management Packs on the SCOM server and configured one Web Availability Monitor
to be monitored from external servers (e.g. Chicago).
I am getting the below error:-
Log Name: Operations Manager
Source: Health Service Modules Ex
Date: 9/11/2014 7:14:26 PM
Event ID: 10001
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SCOMCLOUD.abc.in
Description:
Global Service Monitor Modules: Failed step: 'Couldn't get the ACS endpoint from discovery service. SubscriptionId: '1f156904-532e-416f-b570-1141438392a3', OutsideInServiceBaseUri: 'https://gsm-prod.systemcenter.microsoft.com/''. Diagnostic context: RequestId
= '0fe72d85-989c-4c1b-89c1-1f4b641c1578', New ConfigHash = '65afc4b6-c18d-5e68-56d3-482e2db1851a', '1' tests, Last ConfigHash = '00000000-0000-0000-0000-000000000000'. Exception: 'There was no endpoint listening at https://gsm-prod.systemcenter.microsoft.com/DiscoveryService/1f156904-532e-416f-b570-1141438392a3/Endpoints
that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.'
One or more workflows were affected by this.
Workflow name: Microsoft.SystemCenter.Omonline.OutsideIn.Discovery.ConfigUploaderRule
Instance name: Global Service Monitor
Instance ID: {298CB0DA-4453-EFD2-A7AC-C2E8F2F7100D}
Management group: SCOMGROUP
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Health Service Modules Ex" />
<EventID Qualifiers="0">10001</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-09-11T13:44:26.000000000Z" />
<EventRecordID>149790</EventRecordID>
<Channel>Operations Manager</Channel>
<Computer>SCOMCLOUD.abc.in</Computer>
<Security />
</System>
<EventData>
<Data>SCOMGROUP</Data>
<Data>Microsoft.SystemCenter.Omonline.OutsideIn.Discovery.ConfigUploaderRule</Data>
<Data>Global Service Monitor</Data>
<Data>{298CB0DA-4453-EFD2-A7AC-C2E8F2F7100D}</Data>
<Data>Failed step: 'Couldn't get the ACS endpoint from discovery service. SubscriptionId: '1f156904-532e-416f-b570-1141438392a3', OutsideInServiceBaseUri: 'https://gsm-prod.systemcenter.microsoft.com/''. Diagnostic context: RequestId = '0fe72d85-989c-4c1b-89c1-1f4b641c1578',
New ConfigHash = '65afc4b6-c18d-5e68-56d3-482e2db1851a', '1' tests, Last ConfigHash = '00000000-0000-0000-0000-000000000000'. Exception: 'There was no endpoint listening at https://gsm-prod.systemcenter.microsoft.com/DiscoveryService/1f156904-532e-416f-b570-1141438392a3/Endpoints
that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.'</Data>
<Data>Global Service Monitor Modules</Data>
<Data>Couldn't get the ACS endpoint from discovery service. SubscriptionId: '1f156904-532e-416f-b570-1141438392a3', OutsideInServiceBaseUri: 'https://gsm-prod.systemcenter.microsoft.com/'</Data>
<Data>RequestId = '0fe72d85-989c-4c1b-89c1-1f4b641c1578', New ConfigHash = '65afc4b6-c18d-5e68-56d3-482e2db1851a', '1' tests, Last ConfigHash = '00000000-0000-0000-0000-000000000000'</Data>
<Data>There was no endpoint listening at https://gsm-prod.systemcenter.microsoft.com/DiscoveryService/1f156904-532e-416f-b570-1141438392a3/Endpoints that could accept the message. This is often caused by an incorrect address or SOAP action.
See InnerException, if present, for more details.</Data>
<Data>System.ServiceModel.EndpointNotFoundException: There was no endpoint listening at https://gsm-prod.systemcenter.microsoft.com/DiscoveryService/1f156904-532e-416f-b570-1141438392a3/Endpoints that could accept the message. This is often
caused by an incorrect address or SOAP action. See InnerException, if present, for more details. ---> System.Net.WebException: The remote name could not be resolved: 'gsm-prod.systemcenter.microsoft.com'
at System.Net.HttpWebRequest.GetResponse()
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
--- End of inner exception stack trace ---
Server stack trace:
at System.ServiceModel.Channels.HttpChannelUtilities.ProcessGetResponseWebException(WebException webException, HttpWebRequest request, HttpAbortReason abortReason)
at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.WaitForReply(TimeSpan timeout)
at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Microsoft.SystemCenter.Cloud.SharedLibrary.Discovery.IDiscovery.GetEndpoints(String subscriptionId)
at Microsoft.SystemCenter.Cloud.SharedLibrary.Discovery.DiscoveryHelper.<>c__DisplayClass1.<DiscoverAcsEndpoint>b__0(IDiscovery service)
at Microsoft.SystemCenter.Cloud.SharedLibrary.RestCallHelper.ExecuteRestCall[TContract](Uri endpointUri, WebProxy webProxy, String accessToken, RestMethod`1 method)
at Microsoft.SystemCenter.Cloud.SharedLibrary.Discovery.DiscoveryHelper.DiscoverAcsEndpoint(String subscriptionId, Uri outsideInServiceBaseUri, WebProxy proxy)
at Microsoft.SystemCenter.Cloud.OutsideInUnitModule.ConfigUploaderWriteActionModule.Execute()</Data>
</EventData>
</Event>
Any HELP would be really Appreciated.
Thanks in advance.
Abhinav | MCTS-Server Virtualization

Web Service Security not configured on this component.

Hi Experts,
                       Before configuring the scenario, i went to RWB to check whether the comopnents are in active mode or not.
                              Integration Engine XID
                              Business Process Engine XID
                              Mapping Runtime XID
                              Adapter Engine XID
                              Integration Engines
                      All components are in Green mode Except Integration Engine, The Integration is in yellow mode
                       and shows the following details.
                     Details for 'Is Web service security available?'
                       Web Service Security not configured on this component.
Can you give the solution for this.

Hi,
                  1, While sending idoc from sapR/3 to PI , in r/3 sm58 shows the foll error:
"No service for system SAPQA,client 200 in integration directory"*
                           Even the Bussiness sytem pointing R/3.
From your initial post, it appears that you are using XID system and from above error, I believe you are trying to send the IDoc from QA system. R3 dev will communicate to PI dev, so verify the partner profile and ports in your IDoc Header settings.
                     2, When i execute the tcode sm58 in PI   it shows the following error:
                               "Syntax error in program SAPLSXI_AC_CACHE _REFERESH"
I am kinda confused how come sm58 tcode can show an error for this program, as sm58 is for checking the transactional RFCs and SAPLSXI_AC_CACHE_REFERESH is for XI Cache refresh for Alert Category. Might be some one else can explain this.
                     3, WHEN I EXECUTE THE tcode SXI_CACHE
                                         Under the *STATUS OF RUNTIME CACHE
                                                       Unable to refresh cache contents
                                                       Error during last attempt toreferesh cache
                                                         (red colour triangle leading above both)
Check this SAP Note 764176, might help in your situation.
Worth reading - http://help.sap.com/saphelp_nw04/helpdata/en/0d/28e1c20a9d374cbb71875c5f89093b/frameset.htm
                    4, Still there is no messages in Message monitoring.
Obviously because of error # 1, you are unable to send IDocs, how come you expect messages to reach PI ... strange, isn't it
Hope this helps.
Regards,
Neetesh

How to create Service Monitor - best Way

I have a task at hand :
Creating monitor to alert when a service is stopped.
We are using SCOM 2012
I checked and found various ways to do so http://www.bictt.com/blogs/bictt.php/2011/03/16/scom-monitoring-a-service-part1
My requirement is : there are like 100 such services on 100 different windows computers that i need to monitor.
The services are not common , so 2 computers have the same service , Maybe some service that i need to be monitored be on 2 computers but overall every service is unique.
What is my best option:
1.Create a basic unit monitor and target to Windows computer class ? Create is as disabled ? Override for just the machine that has it.
Will it clutter my Windows Server class health explorer . (How bad is that as per performance)
2.Create a Service monitor using Windows Service templates
Do i have to create 100 target groups , as i have to Target the monitor to specific computer only
Since template service monitor create discoveries , targets etc on its own (Am i going to clutter SCOM with a lot of those) 100
3.Do i create a attribute for each service , so as to extend the windows base class to discover the computer that has specific service (Using registry)
too much work is it and how good of an option is this.
4.MP Authoring ,Create new class discovery based on WMI / Registry to find computer and then target the monitor
What would you do in such a case.

An example is the windows service monitoring from the Windows Management Packs. Microsoft does not discover any of these services. The MPs discover the Windows 2003 \ 2008 \ 2012 Operating System Class and the basic service monitors are targetted at
this class. This means it is relatively light weight monitoring (less overhead on the agent and less discovery information in the databases) but it does mean that you can't add any of these services to a distributed application or report on their availability.
You don't report on individual monitors but on objects which may have many monitors targetted at them.
Windows Server 2003
ü
Computer Browser Service
ü
DHCP Client Service
ü
DNS Client Service
ü
Plug and Play Service
ü
RPC Service
ü
Server Service
ü
TCP \ IP NetBios Service
ü
Windows Event Log Service
ü
Workstation Service
Windows Server 2008 (including R2)
ü
Computer Browser Service
ü
DHCP Client Service
ü
DNS Client Service
ü
Plug and Play Service
ü
RPC Service
ü
Server Service
ü
TCP \ IP NetBios Service
ü
Windows Event Log Service
ü
Workstation Service
Windows Server 2012
ü
Computer Browser Service
ü
DHCP Client Service
ü
DNS Client Service
ü
Plug and Play Service
ü
RPC Service
ü
Server Service
ü
TCP \ IP NetBios Service
ü
Windows Event Log Service
ü
Workstation Service
If you want to actually report on the availability of this windows service (or add it to a Distributed Application) then you do need to discover it - either via the Authoring Template or authoring your own discoveries.
Only you can decide what you need and you might have a different need for each service depending on what it is doing.
Jonathan Almquist has a good walk through here about how to change service monitoring to allow for consecutive occurrences of a service being unavailable but it is deep authoring.
http://blogs.technet.com/b/jonathanalmquist/archive/2011/06/24/windows-service-monitoring-reduce-false-alerts-part-2.aspx
Regards Graham New System Center 2012 Blog! -
http://www.systemcentersolutions.co.uk
View OpsMgr tips and tricks at
http://systemcentersolutions.wordpress.com/

SBS Manager Service will not start

I seem to have a bit of a problem the SBS manager service will not start at all. I have tried rebuilding the SBS Monitoring database and this did not help. This started happening a few months after a SBS 2008 to SBS 2011 migration, does anyone have any ideas
as I no longer get reporting or alerts.
At first I thought it might have had something to do with permissions but not too sure how to check and what to check apart from the common things, DB permissions, permissions on folders etc but I may have missed something?

Hi,
Regarding the current issue, since you have tried to rebuild the SBS monitoring database without any help, I suggest we could try to refer to the following article this time to see if it works.
FAQ: SBS 2011. The Windows SBS Manager service terminated unexpectedly
http://msmvps.com/blogs/bradley/archive/2013/09/19/the-windows-sbs-manager-service-terminated-unexpectedly.aspx
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support

Services monitored by SCOM 2012

Hi All,
I am using SCOM 2012 SP1 in our environment. I am a bit puzzled about what all services of a windows server are monitored by default in SCOM. I am asking this because recently we have WinRM service stopped on a windows server but no alert get generated in
SCOM. Does I need to manually set up monitoring for this service?
Regards,
Daya

Hi,
The System Center Management Pack for Windows Server Operating System provides the fundamental monitoring basics for computers.
From what I can see, the WinRM service is not monitorred by default.
And I would like to suggest you also download the MP guide for Operating System management pack to get more details:
http://www.microsoft.com/en-hk/download/details.aspx?id=9296
Regards,
Yan Li
Regards, Yan Li

Service Monitor Not Alerting

Similar Messages

Maybe you are looking for