operations manager

Forums: Re: Bulk Maintenance mode script from CSV

Tue, 10 Nov 2009 14:12:25 GMT

Hi Pete, only saw this now. Will update my profile etc - and yeah, message me please:)

Forums: SCOM/SCCM Coexist?

Tue, 10 Nov 2009 13:54:17 GMT

I'm looking for info regarding whether SCOM R2 and SCCM R2 can coexist on the same server and SQL instance. Has anyone tried or come across any official statement regarding installing both products on the same hardware? Specifically my environment is a dedicated SQL server, 2005 SP2 and a second server running the SCOM application components. My plan would to be load SCCM app components on the same app server and install the database in the same SQL instance if possible.

Blog: OpsMgr: Most Common Alerts Report (rule and monitor generated) with Powershell FINALLY

Tue, 10 Nov 2009 14:50:20 GMT

Recently in a forum thread, we had another discussion on the now age old problem: Creating an OpsMgr Top Alerts Reports based on repeat count tell you which rules are noisy is easy, but what about the top monitor-generated alerts?

In the past, we would use T-SQL to get this, as shown here

SELECT  [AlertName], [Severity] ,[RaisedDateTime] ,[SiteName] ,[RepeatCount] ,[DBCreatedDateTime] 
FROM [OperationsManagerDW].[Alert].[vAlert]
WHERE ( RaisedDateTime BETWEEN DATEADD(HH, DATEDIFF(HH, GETDATE(), getutcdate()), @startdate) AND DATEADD(HH, DATEDIFF(HH, GETDATE(), getutcdate()), @en

I was pleased to see that Tenchuu (Andreas Z) has yet again brought a new answer to an old problem with his Top Alerts Reports, Powershell Edition. Great work Tenchuu!

Top Alerts Report, Powershell Edition

Instructions for Use: Save in notepad with a .ps1 extension and run from OpsMgr Command Shell Prompt

#Create Datatable

$AlertTable = New-Object System.Data.DataTable "AlertTable"

$AlertTable.Columns.Add((New-Object System.Data.DataColumn ID,([string])))

$AlertTable.Columns.Add((New-Object System.Data.DataColumn Name,([string])))

$AlertTable.Columns.Add((New-Object System.Data.DataColumn AlertCount,([int])))

$AlertTable.Columns.Add((New-Object System.Data.DataColumn IsMonitorAlert,([string])))

foreach ($Alert in (Get-Alert))

{    

    #Check if Alert exists already.

    $AlertExists = $false  

    foreach ($Row in $AlertTable.Rows)

    {

        if ($Row.ID -eq $Alert.MonitoringRuleId.ToString())

        {    

            $AlertExists = $true

            #In case it does, we just merge the Repeatcount

            $Row.AlertCount = $Row.AlertCount + ($Alert.RepeatCount + 1)    

        }

    } 

    if ($AlertExists)

    {

    }

    else

    {

        #If the Alert doesn't exist, we add it to the DataTable.

        $NewRow = $AlertTable.NewRow()

        $NewRow.ID = $Alert.MonitoringRuleId.ToString()

        $NewRow.Name = $Alert.Name

        $NewRow.AlertCount = ($Alert.RepeatCount + 1)

        $NewRow.IsMonitorAlert = $Alert.IsMonitorAlert

        $AlertTable.Rows.Add($NewRow)

    }

}

$AlertTable = ($AlertTable | sort AlertCount -Descending)

$AlertTable | format-table -AutoSize | select-object -first 10

sdfsdf

RSS | TWITTER

Forums: Re: Problem Installing Operations Manager 2007 Reporting

Tue, 10 Nov 2009 04:28:32 GMT

Hi There,

I have the same symptom when installing SCOM reporting services, the installation will run through quite happily until about 3/4's of the way through (while'st "Removing backup files") and then presume to rollback the installation after which I am presented with a Log file stating to look for "Value 3". It does not mention SSL/HTTPS in my log file however (or any logical reason why the install failed for that matter), so I don't think my issue is related to ssl, I'd appreciate some input though... Our setup is SQL 2005SP3 on Win2008 (x64) with SQL reporting services, the SCOM SDK (2007 R2) is on a different server, all patched to the latest and greatest.

SCOM reporting was on this server (but non-functional) so I uninstalled it and now I am unable to reinstall it, SQL reporing services seems to be fine and I can browse to the Reports web page without issues. I performed a ResetSRS.exe and checked SQL reporting services before installing. If someone can tell me how to upload the log I will do so....

Any help would be appreciated,

Thanks,

RV

Blog: ReSearch This! KB - Replication has been aborted

Tue, 10 Nov 2009 01:17:02 GMT

Alert: Replication has been aborted

Issue: A schema change was made but it was unable to replicate out successfully throughout the environment.

Resolution: Determined that one domain controller was running at 100% processor usage. Stopped the application causing the issue, and re-ran the schema change. Used this article: http://support.microsoft.com/kb/556086/en-us?spid=3198 for details on how to determine the current schema version throughout the environment.

Submitted By: Cameron Fuller (MVP)

Blog: ReSearch This! KB - Two replication partners have an inconsistent view of the FSMO role holders

Tue, 10 Nov 2009 01:15:32 GMT

Alert: Two replication partners have an inconsistent view of the FSMO role holders

Issue: The Schema master was moved from one server to another server in the environment. These alerts occurred as the change was replicated throughout the environment.

Resolution: Closed the alerts as this move was planned and the alerts stopped occurring after a couple of hours.

Submitted By: Cameron Fuller (MVP)

Blog: ReSearch This! KB - RPC latency is above the threshold

Tue, 10 Nov 2009 01:12:16 GMT

Alert: RPC latency is above the threshold

Issue: One Exchange server in the environment was reporting this frequently and automatically closing itself as part of the IS RPC Latency Monitor alert monitor. Per the product knowledge these commonly occur due to issues communicating with the Active Directory service or due to disk bottlenecks. This specific server is experiencing high disk queue lengths on the C drive and both storage group drives.

Resolution: For this server we could not upgrade it and it is scheduled for replacement with new mailbox servers. As a result we configured an override for this object of class: Exchange IS Service and set the new threshold to 100 from the default value of 50 to minimize the number of alerts on this issue on this server. This override value will vary depending upon what the actual daily average is for this particular server which can be determined by right-clicking on the alert, opening the performance view and seeing the RPC Averaged Latency counter over a period of time.

Submitted By: Cameron Fuller (MVP)

Forums: RE: Clustered OPDB with replication or log shipping

Mon, 09 Nov 2009 22:51:47 GMT

If by "fishy", you mean incorrect, then yes. On the MS site, it says this:

Typically, when mirroring is used with clustering, the principal server and mirror server both reside on clusters, with the principal server running on the failover clustered instance of one cluster and the mirror server running on the failover clustered instance of a different cluster. You can establish a mirroring session in which one partner resides on the failover clustered instance of a cluster and the other partner resides on a separate, unclustered computer, however.

http://technet.microsoft.com/en-us/library/ms191309.aspx

Forums: RE: Warnings when doing a failover on RMS cluster

Mon, 09 Nov 2009 22:44:10 GMT

Your error appears on the OpsMgr 2007 Support Team Blog.

http://blogs.technet.com/operationsmgr/archive/2009/08/27/opsmgr-2007-event-id-29106-failed-to-connect-to-an-ipc-port-access-is-denied.aspx

This posts says:

Cause

This can occur if the OpsMgr SDK Service and the OpsMgr Config Service are running under different credentials.

Resolution

Make Sure the OpsMgr SDK Service and OpsMgr Config Service are configured to run using the same credentials.

Forums: RE: Substitution Variable options when formatting a notification message

Mon, 09 Nov 2009 22:06:29 GMT

Thank you Pete. This is very helpful.

Forums: RE: Substitution Variable options when formatting a notification message

Mon, 09 Nov 2009 21:36:33 GMT

There is the XML Cheat Sheet for OpsMgr that will give you some options.

http://www.systemcentercentral.com/Portals/0/TabID/147/IndexID/7369/Default.aspx

And similar options from Kevin Holman.

For event Rules:

EventDisplayNumber (Event ID):             $Data/EventDisplayNumber$
EventDescription (Description):               $Data/EventDescription$
Publisher Name (Event Source):              $Data/PublisherName$
EventCategory:                                    $Data/EventCategory$
LoggingComputer:                                $Data/LoggingComputer$
EventLevel:                                          $Data/EventLevel$
Channel:                                              $Data/Channel$
UserName:                                           $Data/UserName$
EventNumber:                                      $Data/EventNumber$

For event Monitors:

EventDisplayNumber (Event ID):            $Data/Context/EventDisplayNumber$
EventDescription (Description):              $Data/Context/EventDescription$
Publisher Name (Event Source):             $Data/Context/PublisherName$
EventCategory:                                    $Data/Context/EventCategory$
LoggingComputer:                                $Data/Context/LoggingComputer$
EventLevel:                                         $Data/Context/EventLevel$
Channel:                                             $Data/Context/Channel$
UserName:                                          $Data/Context/UserName$
EventNumber:                                     $Data/Context/EventNumber$

For Repeating Event Monitors:

EventDisplayNumber (Event ID):              $Data/Context/Context/DataItem/EventDisplayNumber$
EventDescription (Description):                $Data/Context/Context/DataItem/EventDescription$
Publisher Name (Event Source):              $Data/Context/Context/DataItem/PublisherName$
EventCategory:                                      $Data/Context/Context/DataItem/EventCategory$
LoggingComputer:                                  $Data/Context/Context/DataItem/LoggingComputer$
EventLevel:                                            $Data/Context/Context/DataItem/EventLevel$
Channel:                                                $Data/Context/Context/DataItem/Channel$
UserName:                                             $Data/Context/Context/DataItem/UserName$
EventNumber:                                         $Data/Context/Context/DataItem/EventNumber$

Performance Threshold Monitors:

Object (Perf Object Name):                    $Data/Context/ObjectName$
Counter (Perf Counter Name):                $Data/Context/CounterName$
Instance (Perf Instance Name):              $Data/Context/InstanceName$
Value (Perf Counter Value):                   $Data/Context/Value$

Service Monitors:

Service Name                         $Data/Context/Property[@Name='Name']$
Service Dependencies             $Data/Context/Property[@Name='Dependencies']$
Service Binary Path                $Data/Context/Property[@Name='BinaryPathName']$
Service Display Name             $Data/Context/Property[@Name='DisplayName']$
Service Description                 $Data/Context/Property[@Name='Description']$

Logfile Monitors:

Logfile Directory :                  $Data/Context/LogFileDirectory$
Logfile name:                        $Data/Context/LogFileName$
String:                                  $Data/Context/Params/Param[1]$

Logfile rules:

Logfile Directory:                   $Data/EventData/DataItem/LogFileDirectory$
Logfile name:                        $Data/EventData/DataItem/LogFileName$
String:                                  $Data/EventData/DataItem/Params/Param[1]$

Notifications:

$Data/Context/DataItem/AlertId$                                       The AlertID GUID
$Data/Context/DataItem/AlertName$                                   The Alert Name
$Data/Context/DataItem/Category$                                    The Alert category
$Data/Context/DataItem/CreatedByMonitor$                       True/False
$Data/Context/DataItem/Custom1$                                     CustomField1
$Data/Context/DataItem/Custom2$                                    CustomField2
$Data/Context/DataItem/Custom3$                                    CustomField3
$Data/Context/DataItem/Custom4$                                    CustomField4
$Data/Context/DataItem/Custom5$                                    CustomField5
$Data/Context/DataItem/Custom6$                                     CustomField6
$Data/Context/DataItem/Custom7$                                     CustomField7
$Data/Context/DataItem/Custom8$                                     CustomField8
$Data/Context/DataItem/Custom9$                                     CustomField9
$Data/Context/DataItem/Custom10$                                  CustomField10
$Data/Context/DataItem/DataItemCreateTime$                      UTC Date/Time of Dataitem created
$Data/Context/DataItem/DataItemCreateTimeLocal$               LocalTime Date/Time of Dataitem created
$Data/Context/DataItem/LastModified$                                 UTC Date/Time DataItem was modified
$Data/Context/DataItem/LastModifiedLocal$                          Local Date/Time DataItem was modified
$Data/Context/DataItem/ManagedEntity$                               ManagedEntity GUID
$Data/Context/DataItem/ManagedEntityDisplayName$             ManagedEntity Display name
$Data/Context/DataItem/ManagedEntityFullName$                   ManagedEntity Full name
$Data/Context/DataItem/ManagedEntityPath$                          Managed Entity Path
$Data/Context/DataItem/Priority$                                          The Alert Priority Number (High=1,Medium=2,Low=3)
$Data/Context/DataItem/Owner$                                           The Alert Owner
$Data/Context/DataItem/RepeatCount$                                  The Alert Repeat Count
$Data/Context/DataItem/ResolutionState$                               Resolution state ID (0=New, 255= Closed)
$Data/Context/DataItem/ResolutionStateLastModified$                 UTC Date/Time ResolutionState was last modified
$Data/Context/DataItem/ResolutionStateLastModifiedLocal$          Local Date/Time ResolutionState was last modified
$Data/Context/DataItem/ResolutionStateName$                       The Resolution State Name (New, Closed)
$Data/Context/DataItem/ResolvedBy$                                     Person resolving the alert
$Data/Context/DataItem/Severity$                                          The Alert Severity ID
$Data/Context/DataItem/TicketId$                                           The TicketID
$Data/Context/DataItem/TimeAdded$                                       UTC Time Added
$Data/Context/DataItem/TimeAddedLocal$                               Local Time Added
$Data/Context/DataItem/TimeRaised$                                      UTC Time Raised
$Data/Context/DataItem/TimeRaisedLocal$                              Local Time Raised
$Data/Context/DataItem/TimeResolved$                                  UTC Date/Time the Alert was resolved
$Data/Context/DataItem/WorkflowId$                                      The Workflow ID (GUID)

$Data/Recipients/To/Address/Address$ The name of the recipient

Forums: RE: SCOM 2007 r2 Management pack for DB2 on AIX?

Mon, 09 Nov 2009 21:25:53 GMT

There are two IBM DB2 management packs I am aware of. Both work with R2, but neither leverages the X-Plat agent.

One from Quest

http://www.management-extensions.org/entry.jspa?externalID=100039&categoryID=237

One from Nice

http://www.nice.de/en/nice-products/nice-db2-management-pack-for-microsoft-scom

Forums: Substitution Variable options when formatting a notification message

Mon, 09 Nov 2009 21:11:40 GMT

In Operations Console | Administration | Notifications | Channels | Format - there is what appears to be fixed choices of variables I can use within a notification message. Are these only popular choices and there are more avaible? One option I need is $Data/Context/DataItem/ManagedEntityDisplayName$, which is the monitored device FQDN. I need just the device name w/o the domain portion to keep my message short. How do I accomplish this? Thanks!

Forums: SCOM 2007 r2 Management pack for DB2 on AIX?

Mon, 09 Nov 2009 20:14:31 GMT

Does anyone know of a SCOM 2007 MP for DB2 on AIX?

Thanks

Forums: Re: PowerShell and Ops Mgr 2007

Mon, 09 Nov 2009 16:44:30 GMT

That worked flawlessly! Thank you! Here is the finished porduct:

get-mailboxstatistics | Where {$_.TotalItemSize -gt 475MB} | select-object DisplayName,@{name= "Size";expression={$_.TotalItemSize.Value.ToMB()}}

[string]$FailBoxes = @()

$Threshold = 475

foreach ($MB in (get-mailboxstatistics))

{

[int]$MBSize = $MB.TotalItemSize.Value.ToMB()

if ($MBSize -ge $Threshold)

{

$FailBoxes +=$MB.Displayname ,$MB.TotalItemSize.Value.ToMB()+"MB"

$FailBoxes +="`n"

}

}

$evt=new-object System.Diagnostics.EventLog("Application")

$evt.Source="Exchange Mailbox Size"

$infoevent=[System.Diagnostics.EventLogEntryType]::Information

$evt.WriteEntry("`n `nThe Following Mailboxes Have Crossed The Warning Size Threshold (475MB):`n `n$Failboxes",$infoevent,55501)

Forums: Re: Grey State will not resolve

Mon, 09 Nov 2009 16:16:06 GMT

According to the information provided, for SCOM it's just a new Domain Controller.

Please check out the Operations Manager Event Log on that machine for any Errors, also - does SCOM have the appropriate rights on the machine? Just wondering if you have some GPO that's not active yet on the new machine.

Forums: Grey State will not resolve

Mon, 09 Nov 2009 16:08:12 GMT

I have a key Domain Controller that was recently replaced because the old one failed. The new one has a different name but has taken to role of the old one. I installed the SCOM agent several times but it only stays active for an hour, then goes into a grey state. It unloads the health service and goes grey. Restarting the health service only helps for a short time. Its physically close to the Management Server so its not a connectivity issue.

What could cause this? How do I resolve it?

Thanks

Gary

Blog: AWESOME SCOM Series: How to create a Two-State PowerShell Script Monitor using the Authoring Console

Mon, 09 Nov 2009 22:25:25 GMT

Stefan has finished up a brilliant series on the new native Powershell modules in OpsMgr 2007 R2. In addition to the step-by-step series, he has included a sample management pack with the finished product to help you along in learning how to leverage the new functionality.

Great work Stefan!

Installments in the Series

How to create a Two-State PowerShell Script Monitor using the Authoring Console (Part 1)
http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/44971/Default.aspx

How to create a Two-State PowerShell Script Monitor using the Authoring Console (Part 2)
http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/46908/Default.aspx

How to create a Two-State PowerShell Script Monitor using the Authoring Console (Part 3)
http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/48469/Default.aspx

How to create a Two-State PowerShell Script Monitor using the Authoring Console (Part 4)
http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/50085/Default.aspx

Sample MP Download

You can download the sample MP at http://www.systemcentercentral.com/tabid/144/IndexId/50087/Default.aspx

RSS | TWITTER

Forums: Re: Script or Executable Failed to start - Problem with Agent running Cscript

Mon, 09 Nov 2009 16:03:26 GMT

I restarted the WMI service, but I wonder if the problem could be related to the very low bandwidth on that segment of the WAN. Logging in to that server via Terminal Services took almost 2 minutes versus 5 seconds on a normal system. If SCOM were attempting to run a script and its connection to the Management server was very slow, would that time-out the script and cause it to fail?

Blog: OpsMgr: New and Improved Two-State Monitor Script to Identify SQL Databases Never Backed Up

Mon, 09 Nov 2009 20:47:25 GMT

While the code is listed here, you can download a copy of the script on the original discussion HERE. Bob's discovery of the root issue is definitely worth reading if have clustered SQL instances in your environment. Check out his account of the problem and solution HERE. Great work again Bob!

Complete Script

' ---------------------------------------------------------

' SQL Full or Diff Backup check for OpsMgr 2007 2-state monitor

' ---------------------------------------------------------

' Param 0: The SQL connection string for the server

' Param 1: The Database to use

' Param 2: The threshold (in hours) to use

' Author:  David Scheltens

' Date:    02-02-2009

' ---------------------------------------------------------

Option Explicit

Sub Main()

    Dim oAPI, strServer, strDatabase, iThresholdHours, objBag, strErrDescription, objArgs, I, Param, strReason, strHours, strStatus

    Const EVENT_TYPE_ERROR = 1

    Const EVENT_TYPE_WARNING = 2

    Const EVENT_TYPE_INFORMATION = 4

      ' Initialize SCOM Script object

    Set oAPI = CreateObject("MOM.ScriptAPI")

      ' Write Parameters to eventlog

      ' Enable for debugging.

      Set objArgs = Wscript.Arguments

      For I = 0 to objArgs.Count -1

          Param = objArgs(I)

           'strErrDescription = strErrDescription & ", " & Param

      Next

          'call oAPI.LogScriptEvent("SQL Full or Diff Backup Check.vbs", 1313, EVENT_TYPE_INFORMATION, strErrDescription)

    If WScript.Arguments.Count = 3 then

        ' Retrieve parameters

        strServer = CStr(WScript.Arguments(0))

        strDatabase = CStr(WScript.Arguments(1))

        If LCase(strDatabase) = "tempdb" Then

            Set objBag = oAPI.CreateTypedPropertyBag(2)

            ' tempdb is always ok

            Call objBag.AddValue("BackupType", "Full or differential backup")

            Call objBag.AddValue("NumHours", "0")

            Call objBag.AddValue("Reason", "Database tempdb is skipped.")

            Call objBag.AddValue("Status","OK")

            strHours = "0"

            strStatus = "OK"

            strReason = "Database tempdb is skipped."

            oAPI.AddItem(objBag)

        Else

            iThresholdHours = 0

            iThresholdHours = CInt(WScript.Arguments(2))

            'Connect to the database

            Dim cnADOConnection

            Set cnADOConnection = CreateObject("ADODB.Connection")

            cnADOConnection.Provider = "sqloledb"

            cnADOConnection.ConnectionTimeout = 60

            Dim ConnString

            ConnString = "Server=" & strServer & ";Database=master;Integrated Security=SSPI"

            cnADOConnection.Open ConnString

            'Connection established, now run the code

            Dim oResults

            Set oResults = cnADOConnection.Execute( _

                "SELECT TOP 1 " & _

                    "MAX([bs].[backup_start_date]) AS [lasttime], " & _

                    "DATEDIFF(hour, MAX([bs].[backup_start_date]), GETDATE()) AS [numhours] " & _

                "FROM " & _

                    "[master].[dbo].[sysdatabases] AS [sd] WITH (NOLOCK) " & _

                "LEFT JOIN " & _

                    "[msdb].[dbo].[backupset] AS [bs] WITH (NOLOCK) ON ([bs].[database_name] COLLATE SQL_Latin1_General_CP1_CI_AS  = [sd].[name]) " & _

                "WHERE " & _

                    "[sd].[name] COLLATE SQL_Latin1_General_CP1_CI_AS = '" & strDatabase & "' " & _

                    "AND " & _

                    "[bs].[type] IN ('D', 'I') " & _

                "GROUP BY " & _

                    "[bs].[type] " & _

                "ORDER BY " & _

                    "1 DESC;" _

            ' should be just one record

            ' oResults.MoveFirst

            Set objBag = oAPI.CreateTypedPropertyBag(2)

            If oResults.EOF Then

                ' a backup is never made!

                Call objBag.AddValue("BackupType", "Full or differential backup")

                Call objBag.AddValue("NumHours", "9999")

                Call objBag.AddValue("Reason", "A full backup for database " & strDatabase & " is never be made!")

                Call objBag.AddValue("Status","Bad")

                strStatus = "Bad"

                strHours = "9999"

                strReason = "A full backup for database " & strDatabase & " is never be made!"

            Else

                ' backup is made

                Call objBag.AddValue("BackupType", "Full or differential backup")

                Call objBag.AddValue("NumHours", CStr(oResults(1)))

                strHours = CStr(oResults(1))

                If CInt(oResults(1)) > iThresholdHours Then

                    ' last backup is too old

                    Call objBag.AddValue("Reason", "The last full or differential backup for database " & strDatabase & " is more than " & oResults(1) & " hours old!")

                    Call objBag.AddValue("Status","Bad")

                    strReason = "The last full or differential backup for database " & strDatabase & " is more than " & oResults(1) & " hours old!"

                    strStatus = "Bad"

                Else

                    ' backups is ok

                    Call objBag.AddValue("Reason", "The last full or differential backup for database " & strDatabase & " SHOULD NOT BE ALERTING BECAUSE IT is less than " & CStr(iThresholdHours) & " hours old.")

                    Call objBag.AddValue("Status","OK")

                    strReason = "The last full or differential backup for database " & strDatabase & " SHOULD NOT BE ALERTING BECAUSE IT is less than " & CStr(iThresholdHours) & " hours old."

                    strStatus = "OK"

                End If

            End If

            oAPI.AddItem(objBag)

            cnADOConnection.Close

        End If

        'return the property bag objects

        Call oAPI.ReturnItems

        ' Log results into Operations Manager event log

             ' Enable for debugging.

        ' Call oAPI.LogScriptEvent("SQLCustomBackupMonitor.vbs", 101, 4, "SQLCustomBackupMonitor.vbs returned the following values to SCOM for " & strDatabase & "  Reason:" & strReason & "  Hours:" & strHours & "  Status:" & strStatus)

    End If

End Sub

Call Main()