tag:blogger.com,1999:blog-58479832196633321442024-03-13T22:45:21.261+05:30SCOM AdminsAmanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.comBlogger26125tag:blogger.com,1999:blog-5847983219663332144.post-1786901611216614782012-02-01T19:13:00.001+05:302012-02-01T19:13:12.372+05:30Download OM2007_MP_ExSrvr2003.doc [ Exchange Server 2003 Management Pack Guide] for Operations Manager 2007<p>Hi,</p> <p>Today i was looking for Management Pack Guide for “Exchange Server 2007” but not able to find it anywhere. The Microsoft links to the guide are not working anymore.</p> <p>Somehow i manage to find the Guide and saved it on my Dropbox folder. </p> <p>You can download “Management pack Guide for Exchange Server 2003” from <a title="http://dl.dropbox.com/u/17858935/OM2007_MP_ExSrvr2003.zip" href="http://dl.dropbox.com/u/17858935/OM2007_MP_ExSrvr2003.zip">http://dl.dropbox.com/u/17858935/OM2007_MP_ExSrvr2003.zip</a> </p> <table border="0" cellspacing="0" cellpadding="2" width="688"> <tbody> <tr> <td valign="top" width="217">OM2007_MP_ExSrvr2003.doc</td> <td valign="top" width="469"><a title="http://dl.dropbox.com/u/17858935/OM2007_MP_ExSrvr2003.zip" href="http://dl.dropbox.com/u/17858935/OM2007_MP_ExSrvr2003.zip">http://dl.dropbox.com/u/17858935/OM2007_MP_ExSrvr2003.zip</a></td></tr></tbody></table> <p>Thanks</p> <p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1tag:blogger.com,1999:blog-5847983219663332144.post-34149236895290254512012-02-01T17:14:00.001+05:302012-02-01T17:14:34.633+05:30How to change the Default retention period of ACS Database of SCOM.<p>Hi,</p> <p><strong><em>What is Retention Period of database?</em></strong> </p> <p>Once a day database when database grooming run it removed the data in ACS Database which is older then number of days specifies in database retention option. </p> <p><strong>My Problem: </strong>By default database retention period is of 14 days, but when i installed the ACS Services i choose to keep the database for 60 days and the drawback is my hard-disk starting filling up very quickly. Then i decide to change the Database retention period from 60 days to 30 days.</p> <p><strong>Lets do it.</strong></p> <p>First Login to your “SQL Server” using your “SQL Server Management Studio” .</p> <p><a href="http://lh6.ggpht.com/-qRK_FLBz2hc/TykldDtsZ7I/AAAAAAAACDw/wgwjHfefXiM/s1600-h/01-02-2012%25252016-44-33%25255B7%25255D.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="01-02-2012 16-44-33" border="0" alt="01-02-2012 16-44-33" src="http://lh6.ggpht.com/-xy5CmHTsvBM/TykleGk4n-I/AAAAAAAACD4/N1ZUF_1hWP4/01-02-2012%25252016-44-33_thumb%25255B3%25255D.png?imgmax=800" width="417" height="315"></a> </p> <p>Browse to your “ACS Database” mine is “OperationsManagerAC” and click on “dbo.dtconfig” table.</p> <p><a href="http://lh3.ggpht.com/-2enYuy24_nI/TyklfBq57JI/AAAAAAAACEA/jwd5-Qw36nk/s1600-h/01-02-2012%25252016-45-03%25255B3%25255D.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="01-02-2012 16-45-03" border="0" alt="01-02-2012 16-45-03" src="http://lh5.ggpht.com/-5XiwxlFlw2Y/TyklfxQgviI/AAAAAAAACEI/pZI5NR1AOVc/01-02-2012%25252016-45-03_thumb%25255B1%25255D.png?imgmax=800" width="463" height="336"></a> </p> <p>The retention day option is saved under (ID 6) in the “dbo.dtconfig” table of the ACS Database.</p> <p>To change the setting, right click on “dbo.dtconfig” table and choose “Edit Top 200 Rows”.</p> <p><a href="http://lh5.ggpht.com/-muAFWd-wDM0/Tyklg4vEOEI/AAAAAAAACEQ/NZujlWs50us/s1600-h/01-02-2012%25252016-45-26%25255B3%25255D.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="01-02-2012 16-45-26" border="0" alt="01-02-2012 16-45-26" src="http://lh3.ggpht.com/--_Xxtvs7yUc/Tyklhw-23DI/AAAAAAAACEY/D2jkTmqRhhU/01-02-2012%25252016-45-26_thumb%25255B1%25255D.png?imgmax=800" width="468" height="402"></a> </p> <p>You can see that the value of ID 6 is 61, now lets change it to 31, {</p> <p><a href="http://lh4.ggpht.com/-ZVG5BDGBR6s/TyklinXg3lI/AAAAAAAACEg/9olqr8Xv83w/s1600-h/01-02-2012%25252016-45-38%25255B3%25255D.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="01-02-2012 16-45-38" border="0" alt="01-02-2012 16-45-38" src="http://lh5.ggpht.com/-pTSpSm0WvVA/Tyklj548rXI/AAAAAAAACEo/QQ2TzEQS6Tg/01-02-2012%25252016-45-38_thumb%25255B1%25255D.png?imgmax=800" width="504" height="204"></a> </p> <p>I change the value of ID-6 to “31”. and now run the same “Edit 200 row” query again. </p> <p><a href="http://lh4.ggpht.com/-GPw0Npd201o/Tyklk5SrmoI/AAAAAAAACEw/8Ekr9HIuJyA/s1600-h/01-02-2012%25252016-46-01%25255B3%25255D.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="01-02-2012 16-46-01" border="0" alt="01-02-2012 16-46-01" src="http://lh6.ggpht.com/-Ku4QMijBq_M/TyklmXF_tgI/AAAAAAAACE4/reoJCeOoHqI/01-02-2012%25252016-46-01_thumb%25255B1%25255D.png?imgmax=800" width="504" height="198"></a> </p> <p>and you will saw that value is successfully saved as “31” … </p> <p><a href="http://lh6.ggpht.com/-BtUL7NxG8NY/TyklnVArIcI/AAAAAAAACFA/kUp_EXpbtl8/s1600-h/01-02-2012%25252016-46-42%25255B3%25255D.png"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="01-02-2012 16-46-42" border="0" alt="01-02-2012 16-46-42" src="http://lh3.ggpht.com/-_R20jWV135w/TykloA59UvI/AAAAAAAACFI/1Y1V6NVk1uI/01-02-2012%25252016-46-42_thumb%25255B1%25255D.png?imgmax=800" width="504" height="198"></a> </p> <p> </p> <p>That’s all</p> <p>thanks </p> <p>aman dhally </p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com7tag:blogger.com,1999:blog-5847983219663332144.post-50742042635479254212012-01-20T16:12:00.001+05:302012-01-20T16:12:46.264+05:30“Agent and Operating System architecture are the same – Agent” error in SCOM<p>Hi </p> <p>As the above error is quite simple to read. It is saying that “Agent and Operating System architecture are the same” but actually meaning of this that the version of “SCOM Agent” insatlled on the machine is not same. For example you are running 32bit version of AGENT on 64bit Windows Machine.</p> <p><strong><em>Error</em></strong></p> <p><a href="http://lh6.ggpht.com/-1jz5i_ko47U/TxlEgDf4HKI/AAAAAAAAB0E/cx8lXqQ-Jro/s1600-h/Agent%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent" border="0" alt="Agent" src="http://lh3.ggpht.com/-I1EkB89YIaI/TxlEhBRBrjI/AAAAAAAAB0M/ZSlS2LpqJAI/Agent_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="316"></a> </p> <p><strong><em>Lets Check the agent.</em></strong></p> <p>I logged in to the server and i saw that “SCOM Agent” is installed in “C:\Program Files (x86)” directory. Which mean that our agent is 32 Bit.</p> <p><a href="http://lh6.ggpht.com/-2zCpftf5baI/TxlEh3iVGeI/AAAAAAAAB0U/rHgtTu2mEGU/s1600-h/Agent_1%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_1" border="0" alt="Agent_1" src="http://lh5.ggpht.com/-_n7AVJdVBeA/TxlEi0vMKqI/AAAAAAAAB0c/stHdFMnE8pQ/Agent_1_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="202"></a> </p> <p>Let check the version of windows. </p> <p>The windows is 64bit. </p> <p><a href="http://lh4.ggpht.com/-m1tpltlM6Ks/TxlEj2x3uWI/AAAAAAAAB0k/8UO_uhBamgY/s1600-h/Agent_2%25255B7%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_2" border="0" alt="Agent_2" src="http://lh3.ggpht.com/-otH0LPm2xFI/TxlElMzlQzI/AAAAAAAAB0s/2le8Hq5mYbQ/Agent_2_thumb%25255B3%25255D.jpg?imgmax=800" width="504" height="377"></a> </p> <p>Lets Un-Install the the Agent manually. Go to Control Panel, “Programs and features”, choose the “System Center Operations Manager R2 Agent” and right click on it and choose uninstall.</p> <p><a href="http://lh5.ggpht.com/-BUQKtY3GY5Q/TxlEl-_YJAI/AAAAAAAAB00/_kP472-uZ30/s1600-h/Agent_3%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_3" border="0" alt="Agent_3" src="http://lh5.ggpht.com/-I7SCGAJen-Q/TxlEne_eUnI/AAAAAAAAB08/73ntHTVwTRg/Agent_3_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="189"></a> </p> <p>Agent “Un-installed”</p> <p><a href="http://lh3.ggpht.com/--cQ4kNWWU80/TxlEoLepOBI/AAAAAAAAB1E/jxRCFlM_VFc/s1600-h/Agent_4%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_4" border="0" alt="Agent_4" src="http://lh4.ggpht.com/-ttlr0l2thVA/TxlEpeBFUZI/AAAAAAAAB1M/QsKKqfqdht4/Agent_4_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="185"></a> </p> <p>“System Center Operations manger” directory is removed from “C:\Programs Files (x86)”</p> <p><a href="http://lh5.ggpht.com/-saUqKcqsWhE/TxlEqHV7CfI/AAAAAAAAB1U/IWHJ3mxIf54/s1600-h/Agent_5%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_5" border="0" alt="Agent_5" src="http://lh5.ggpht.com/-s9df0PkknDE/TxlErCfvjTI/AAAAAAAAB1c/RM_xT4b1Zyo/Agent_5_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="233"></a> </p> <p>Now come back to “SCOM Console” and run the “Discovery Wizard” to install the SCOM agent on the Server.</p> <p>Go to “administration” pane and right click anywhere and choose “Discovery Wizard”</p> <p><a href="http://lh5.ggpht.com/-8OT0QZYfpks/TxlEsDSDj6I/AAAAAAAAB1k/lVlXyUAEMwc/s1600-h/Agent_6%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_6" border="0" alt="Agent_6" src="http://lh3.ggpht.com/-OvB7s-TE3Kw/TxlEtUqwaHI/AAAAAAAAB1s/gTVKQzfDW_g/Agent_6_thumb%25255B1%25255D.jpg?imgmax=800" width="359" height="102"></a> </p> <p>Choose “Windows Computers”</p> <p><a href="http://lh4.ggpht.com/-gG9-HBVWwpQ/TxlEuHGK84I/AAAAAAAAB10/5uPbLxeFWp4/s1600-h/Agent_7%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_7" border="0" alt="Agent_7" src="http://lh3.ggpht.com/-4fsvScqEieg/TxlEvgVbspI/AAAAAAAAB18/wlWud6mbK9I/Agent_7_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="517"></a> </p> <p>I choose the “Advanced Discovery” and select “Server Only”</p> <p><a href="http://lh4.ggpht.com/-tleDlF-Z_iw/TxlEwQKN-8I/AAAAAAAAB2E/kC1jQ-PbxQM/s1600-h/Agent_8%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_8" border="0" alt="Agent_8" src="http://lh6.ggpht.com/-PvQ6zLtMRKQ/TxlExw6ViYI/AAAAAAAAB2M/Xaf9zGQdypg/Agent_8_thumb%25255B1%25255D.jpg?imgmax=800" width="492" height="399"></a> </p> <p>Now i choose to browse, i searched the computer and add it here. Click on NEXT</p> <p><a href="http://lh5.ggpht.com/-SMh_q0SPo9U/TxlEzK6_6fI/AAAAAAAAB2U/QAofNtnxtao/s1600-h/Agent_9%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_9" border="0" alt="Agent_9" src="http://lh6.ggpht.com/-OqXUiLkQdLU/TxlE0WdfQoI/AAAAAAAAB2c/hUXCK5_Xe1U/Agent_9_thumb%25255B1%25255D.jpg?imgmax=800" width="548" height="399"></a> </p> <p>Provide you account which you want to use for search the server and for install agent in to it {it should be administrator account}. now click on “Discover” </p> <p><a href="http://lh5.ggpht.com/-FEcog3OhS9E/TxlE1AZL4OI/AAAAAAAAB2g/EAO1kpgbfqQ/s1600-h/Agent_10%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_10" border="0" alt="Agent_10" src="http://lh3.ggpht.com/-hsKkvobr1OY/TxlE1gmvaYI/AAAAAAAAB2o/IwiDBLTK6As/Agent_10_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="540"></a> </p> <p>It failed to Discover Server, Discovery failed.. <strong>Why????</strong></p> <p><a href="http://lh4.ggpht.com/-pshvvqh04eI/TxlE2dKBwVI/AAAAAAAAB2w/GhDiqzVQNcs/s1600-h/Agent_11%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_11" border="0" alt="Agent_11" src="http://lh3.ggpht.com/-mrjYy9Zt628/TxlE3OcxiBI/AAAAAAAAB28/1FAPedOxdx8/Agent_11_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="535"></a> </p> <p>If you want to re-discover the Server again. Make sure you deleted in “Agent Managed”, if the server name is still in the list then discovery wizard wont search it again.</p> <p>Click on “Administration” pane and click on “Agent managed” and search for the server on which we just un-installed the agent.</p> <p><a href="http://lh4.ggpht.com/-0TN_bfd9YGU/TxlE4KnKwnI/AAAAAAAAB3A/m-oauNjElSE/s1600-h/Agent_12%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_12" border="0" alt="Agent_12" src="http://lh4.ggpht.com/-vR-Cvll9GAg/TxlE48wX8wI/AAAAAAAAB3M/rMgdcsWn2hA/Agent_12_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="54"></a> </p> <p>Choose the server, right click on it and choose “Delete”</p> <p><a href="http://lh6.ggpht.com/-PB1Q1VKNzLk/TxlE53e5SZI/AAAAAAAAB3U/JWEEFPhPHN8/s1600-h/Agent_13%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_13" border="0" alt="Agent_13" src="http://lh4.ggpht.com/-HIUCI5cjgPE/TxlE6zMLj2I/AAAAAAAAB3c/_r1XcyTs8W0/Agent_13_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="135"></a> </p> <p>Click on “YES” </p> <p><a href="http://lh6.ggpht.com/-oSmMgT28_hw/TxlE8NdYo7I/AAAAAAAAB3k/xneKpvW4FYg/s1600-h/Agent_14%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_14" border="0" alt="Agent_14" src="http://lh3.ggpht.com/-KHk0dRWkeVs/TxlE9QWgeXI/AAAAAAAAB3s/6JQPNb9DKRU/Agent_14_thumb%25255B1%25255D.jpg?imgmax=800" width="445" height="183"></a> </p> <p> </p> <p>now lets run the “Discovery Wizard” again and hopefully this time we will be able to discover it again successfully</p> <p>yes it discovered :) </p> <p><a href="http://lh4.ggpht.com/-DrSvXmQ-Xtg/TxlE-GIG3PI/AAAAAAAAB30/SWDAmMZ4VY0/s1600-h/Agent_15%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_15" border="0" alt="Agent_15" src="http://lh5.ggpht.com/-hnNfkpM4pvk/TxlE_L8jpeI/AAAAAAAAB38/jaz9IqGlQWw/Agent_15_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="456"></a> .</p> <p>Provide the the “Action account “ if needed. and click on FINISH.</p> <p><a href="http://lh5.ggpht.com/-Zigzu6zbGv8/TxlFAEOXStI/AAAAAAAAB4E/_SAZCnW3M_8/s1600-h/Agent_16%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_16" border="0" alt="Agent_16" src="http://lh3.ggpht.com/-fE0qGLahajQ/TxlFBIjxECI/AAAAAAAAB4M/X1MlVR8gN2E/Agent_16_thumb%25255B1%25255D.jpg?imgmax=800" width="556" height="591"></a> </p> <p>Agent installation task started.</p> <p><a href="http://lh5.ggpht.com/-Kmlqesv4DOo/TxlFB_gMZII/AAAAAAAAB4Q/Y6T03GB_1J8/s1600-h/Agent_17%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_17" border="0" alt="Agent_17" src="http://lh6.ggpht.com/-t6NGvG8P6rE/TxlFCw3NP4I/AAAAAAAAB4c/aER-yPmXaKI/Agent_17_thumb%25255B1%25255D.jpg?imgmax=800" width="442" height="258"></a> </p> <p>Task finished successfully.</p> <p><a href="http://lh6.ggpht.com/-x9scNAee23E/TxlFDtr-U-I/AAAAAAAAB4k/sElQZ1mhPSY/s1600-h/Agent_18%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_18" border="0" alt="Agent_18" src="http://lh6.ggpht.com/-kKZl8jEoHNI/TxlFE1Vt_EI/AAAAAAAAB4s/UdnuqPIZBzg/Agent_18_thumb%25255B1%25255D.jpg?imgmax=800" width="449" height="158"></a> </p> <p>lets login to server again and see if it is installed properly this time. </p> <p>and you can see it installed on “C:\Program Files”. not in x86 folder.</p> <p>All Sorted.</p> <p><a href="http://lh6.ggpht.com/-ytn_7yVtp7Q/TxlFF0c9tuI/AAAAAAAAB40/yJ8pNxVvucc/s1600-h/Agent_19%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_19" border="0" alt="Agent_19" src="http://lh5.ggpht.com/-P-H7CLbViA8/TxlFG6bU3HI/AAAAAAAAB48/6m3K4GMgzqs/Agent_19_thumb%25255B1%25255D.jpg?imgmax=800" width="595" height="286"></a> </p> <p><strong>why this happens.</strong></p> <p>Because </p> <p>if you see the Agent Directory in SCOM Installation media, it seems there is no agent for 64bit windows, so sometime users manually installed the i386 version of SCOM agent.</p> <p>But for 64 bit windows install the agent from AMD64 bit folder. :) </p> <p>for ITANIUM bases servers installed the agent from <strong>: ia64</strong> folder</p> <p>for 32bit based servers install agent from : <strong>i386</strong> folder</p> <p>for 64bit Intel/AMD based servers install agent from : <strong>AMD64</strong> folder</p> <p><a href="http://lh5.ggpht.com/-BBZ5FDvms-Q/TxlFHwuwRxI/AAAAAAAAB5A/dsfA_htBsZY/s1600-h/20-01-2012%25252016-01-44%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="20-01-2012 16-01-44" border="0" alt="20-01-2012 16-01-44" src="http://lh3.ggpht.com/-aq3-KZpltx4/TxlFI2pePGI/AAAAAAAAB5I/nf3Jp_d33D4/20-01-2012%25252016-01-44_thumb%25255B1%25255D.jpg?imgmax=800" width="492" height="199"></a> </p> <p>Thanks </p> <p>hope it helps someone :) </p> <p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1tag:blogger.com,1999:blog-5847983219663332144.post-85375515013105152612012-01-16T20:34:00.001+05:302012-01-16T20:34:39.808+05:30How to Deploy or Install Audit Collection Services (ACS) in SCOM 2007 R2<p>Hi all, </p> <p>Q: what is <strong>Audit Collection Service (ACS)</strong></p> <p>Answer: In Operations Manager 2007, you can use Audit Collection Services (ACS) to collect records generated by an audit policy and store them in a centralized database. By default, auditing is configured on individual computers and all events generated from an audit policy are saved to the local Security log of the audited computer. {microsoft}</p> <p>In simple language, ACS keep the copy of “Security Log” of the Event Log. It save all these security logs in to a database.</p> <p>This consist of three things.</p> <blockquote> <p>- <strong>ACS Forwarders</strong> : this is service which is installed by default with SCOM-Agents installations but disabled.</p> <p>- <strong>ACS Collector</strong> : This collector receive data from forwarders and then send the data to ACS database</p> <p>- <strong>ACS Database</strong> : The SQL Database which save all the security logs in to it.</p> <p> </p></blockquote> <p>Enough theory, <strong>let’s start implementing it</strong> now.</p> <p>I am installing ACS Service on my Root Management server. </p> <p><strong><u>PART-1 </u></strong></p> <p><strong><u>Install Audit Collection Services Server </u></strong></p> <p>Let’s start.</p> <p>as per Microsoft in you ACS server you have the latest version of <strong>MDAC</strong> {<a href="http://go.microsoft.com/fwlink/?LinkId=74155">http://go.microsoft.com/fwlink/?LinkId=74155</a>.}. When i check the the latest version of MDAC it is 2.8 with SP1. and i already have this version because this version was published in year 2005.</p> <p><a href="http://lh3.ggpht.com/-bbTlmPeL31U/TxQ7h6r_3jI/AAAAAAAABrg/DiC5af1RLsE/s1600-h/16-01-2012%25252016-17-24%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="16-01-2012 16-17-24" border="0" alt="16-01-2012 16-17-24" src="http://lh3.ggpht.com/-9EtIXzah2Ss/TxQ7i0CPEaI/AAAAAAAABro/TEfAZSQFmZc/16-01-2012%25252016-17-24_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="308"></a> </p> <p>Insert your SCOM installation media and run “<strong>SetupOm.exe</strong>” or if its autorun it will open automatically.</p> <p>Click on “<strong>Install Audit Collection server</strong>”</p> <p><a href="http://lh5.ggpht.com/-k0m_h3-FoPI/TxQ7jtCm1XI/AAAAAAAABrw/Y8cwJg4BEJs/s1600-h/2%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="2" border="0" alt="2" src="http://lh5.ggpht.com/-peIVnEfiWqw/TxQ7k1WZ9aI/AAAAAAAABr4/YXnGM8eTBZw/2_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="396"></a> </p> <p>a welcome wizard for ACS installation will open now then click on “<strong>NEXT</strong>”</p> <p><a href="http://lh5.ggpht.com/-jyLUD9dFWsg/TxQ7mEWgqvI/AAAAAAAABsA/GEDNcvKJl1o/s1600-h/3%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="3" border="0" alt="3" src="http://lh5.ggpht.com/-_mcpI6gT2kA/TxQ7m-qJVgI/AAAAAAAABsI/nqWk86DAHqw/3_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="385"></a> </p> <p>Select “<strong>I accept the agreement</strong>” and click on “<strong>Next</strong>”</p> <p><a href="http://lh6.ggpht.com/-7nO0jqAKC6g/TxQ7n-iiaxI/AAAAAAAABsQ/4AFKOHQgpBU/s1600-h/4%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="4" border="0" alt="4" src="http://lh6.ggpht.com/-RmnqWTlUtbk/TxQ7pHT1thI/AAAAAAAABsY/ewk8cKncOLU/4_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="389"></a> </p> <p>I don’t have any previously created ACS database, so i choose “<strong>Create a new database</strong>” , click on “<strong>Next</strong>”</p> <p><a href="http://lh5.ggpht.com/-M0sO0zZ_aNs/TxQ7qEYkHGI/AAAAAAAABsg/fhcdhzcPFHA/s1600-h/5%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="5" border="0" alt="5" src="http://lh4.ggpht.com/-jN8y6bp-is4/TxQ7rLFzl4I/AAAAAAAABso/NAccVpqao6w/5_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="383"></a> </p> <p>Here it is using MDAC to connect to the SQL Server. lets choose default data source name “<strong>OpsMgrAc</strong>” and click on “<strong>Next</strong>”</p> <p><a href="http://lh3.ggpht.com/-sQDrZx-9GEY/TxQ7r24HZaI/AAAAAAAABsw/sy1SUK7BNM8/s1600-h/6%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="6" border="0" alt="6" src="http://lh5.ggpht.com/-LMXE12m_EWY/TxQ7tEUQ1MI/AAAAAAAABs4/lJni8WZ0Rfg/6_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="387"></a> </p> <p>In Database, i have a separate “SQL Server” for SCOM databases. Select “<strong>Remote Database Server</strong>”, and type the name of you remote “<strong>SQL Server</strong>” and in database name choose i am choosing the default name “<strong>OperationsManagerAC</strong>”, now click on “<strong>Next</strong>”.</p> <p><a href="http://lh4.ggpht.com/-OrHKpm7bk4Q/TxQ7ucx2opI/AAAAAAAABtA/qbpHScBALWY/s1600-h/7%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="7" border="0" alt="7" src="http://lh4.ggpht.com/-IcPqCKDY_6A/TxQ7vIwfazI/AAAAAAAABtI/hWUSgal3soY/7_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="385"></a> </p> <p>In “Database Authentication” i choose “<strong>Windows Authentication</strong>” you can also choose “SQL Authentication” its up to you. click on “<strong>Next</strong>”</p> <p><a href="http://lh3.ggpht.com/-gtL7LAT6fcg/TxQ7wVwhJkI/AAAAAAAABtQ/OXdWjwsxH80/s1600-h/8%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="8" border="0" alt="8" src="http://lh3.ggpht.com/-ZAz5Hmz82KU/TxQ7xKIaVwI/AAAAAAAABtY/hgedXUomfdc/8_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="389"></a> </p> <p>In “<strong>Database Creation Option</strong>” i choose the “<strong>use SQL Server’s default data and log file directories</strong>”, because in my SQL Server i already defined the file location for data and log files that’s why i want to use this option. click on “<strong>Next</strong>”</p> <p><a href="http://lh4.ggpht.com/-VU0I2Z4-Xc8/TxQ7yD9HPDI/AAAAAAAABtg/QSW4uMnbLig/s1600-h/9%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="9" border="0" alt="9" src="http://lh4.ggpht.com/-4If8qimT6a0/TxQ7y3hILcI/AAAAAAAABto/MSkMevNU_Ls/9_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="387"></a> </p> <p>In “<strong>Event Retention Schedule</strong>” i choose the 3:00am and i want to keep the security log data for at least for 2 months, so i choose <strong>60 days</strong>. Click on “Next”.</p> <p><a href="http://lh3.ggpht.com/-ClaMmz5zAuA/TxQ7z01TzxI/AAAAAAAABtw/v8O6use6OiU/s1600-h/10%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="10" border="0" alt="10" src="http://lh4.ggpht.com/-5Lbe24797LY/TxQ706lgwlI/AAAAAAAABt4/QE1SEsuEXCA/10_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="392"></a> </p> <p>in “<strong>timestamp”</strong> i want to use my local time . click on “<strong>Next</strong>”</p> <p><a href="http://lh5.ggpht.com/-Gp6gf0e2ZaY/TxQ71xiFl8I/AAAAAAAABuA/Bwu099I371w/s1600-h/11%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="11" border="0" alt="11" src="http://lh3.ggpht.com/-6Y9Iq0BAHTY/TxQ72hj099I/AAAAAAAABuI/l91kqU8WVLE/11_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="385"></a> </p> <p>it’s showing the “<strong>Summary of installation</strong>”, now click on “<strong>Next”</strong></p> <p><a href="http://lh3.ggpht.com/-SEsXtR9eL3c/TxQ73y8DRVI/AAAAAAAABuQ/mTmcrMOdlpo/s1600-h/12%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="12" border="0" alt="12" src="http://lh6.ggpht.com/-LJBDECqyoGM/TxQ748pClCI/AAAAAAAABuY/-e3YU7vf0Pg/12_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="387"></a> </p> <p>Now it trying to create ACS database and it asking for “<strong>SQL Server Login</strong>” credentials, i was using windows authentication, so i just click on “<strong>Use trust Collection</strong>” and click on OK.</p> <p><a href="http://lh6.ggpht.com/-VoM8nYjTONM/TxQ751FSa7I/AAAAAAAABug/mE9OE1xgcpc/s1600-h/13%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="13" border="0" alt="13" src="http://lh4.ggpht.com/-Z1CkwbQ-2jc/TxQ77C0_CeI/AAAAAAAABuo/kZ2PlQ38h6U/13_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="356"></a> </p> <p>Yippy!!! its showing that our ACS Server is successfully installed. Click on <strong>Finish</strong>. </p> <p><a href="http://lh6.ggpht.com/-uxsk6VC8bkM/TxQ7795y8OI/AAAAAAAABuw/7LQPj8oHTmM/s1600-h/14%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="14" border="0" alt="14" src="http://lh5.ggpht.com/-Snqk664rT2k/TxQ78-5pUKI/AAAAAAAABu4/3jGNAQy49vk/14_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="385"></a> </p> <p>I logged in to my <strong>SQL Server to check if the database is created or not</strong>. It is successfully created.</p> <p><strong>Cool.</strong></p> <p><a href="http://lh3.ggpht.com/-6KngutVMqaY/TxQ798VvqMI/AAAAAAAABvA/ulbDAnPC6Vg/s1600-h/15%25255B2%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="15" border="0" alt="15" src="http://lh4.ggpht.com/-HlzL-fuhRXY/TxQ7-4bUMcI/AAAAAAAABvI/TMeY95_284M/15_thumb.jpg?imgmax=800" width="210" height="84"></a> </p> <p>Till here our installation for ACS Server is finished. The next step is to enable auditing on agent.</p> <p><strong><u>PART-2 </u></strong></p> <p><strong><u>Enable Auditing on Agent </u></strong></p> <p>Open SCOM console.</p> <p>Click on “<strong>Monitoring”</strong> tab and navigate to “<strong>Operations Manager</strong>” and then click on “<strong>Agents</strong>” and then click on “<strong>Agent health State</strong>”. Now the two pane will open , but we are concerned about the “<strong>Right hand side</strong>” pane only. </p> <p><a href="http://lh6.ggpht.com/-iAmdvXSQYdY/TxQ7_8DyTaI/AAAAAAAABvM/Eofu7nsPLNI/s1600-h/16%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="16" border="0" alt="16" src="http://lh6.ggpht.com/-4BbI7lb933g/TxQ8AhirwLI/AAAAAAAABvU/UOJ_9WKAnqo/16_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="202"></a> </p> <p>Now choose the <strong>Agents</strong> on the right hand side of the pane and in action tab under “<strong>Health Service tasks”</strong> click on “<strong>Enable Audit Collection</strong>”</p> <p><a href="http://lh6.ggpht.com/-6PoLnrH4_Vc/TxQ8BR7kXaI/AAAAAAAABvg/RM-ZH3rjmq4/s1600-h/17%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="17" border="0" alt="17" src="http://lh4.ggpht.com/-MvUO_prQ1u0/TxQ8Cp5BxVI/AAAAAAAABvo/ur9tcYUG5VE/17_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="214"></a> </p> <p>In Credentials.I am using my “<strong>Administrator</strong>” account to run the task. provide the <strong>credentials</strong> and click on “<strong>RUN</strong>”</p> <p><a href="http://lh4.ggpht.com/-PVq3YM54vHI/TxQ8DumZr-I/AAAAAAAABvw/pmIxE2rdvDg/s1600-h/18%25255B7%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="18" border="0" alt="18" src="http://lh4.ggpht.com/-hEvCnwMCdqw/TxQ8Ep2pwVI/AAAAAAAABv4/QqxeAu5sCzA/18_thumb%25255B3%25255D.jpg?imgmax=800" width="504" height="573"></a> </p> <p>When you click on “<strong>RUN</strong>” it show you that task is <strong>started.</strong></p> <p><a href="http://lh3.ggpht.com/-t3A8ZA-52R4/TxQ8FUzJsBI/AAAAAAAABwA/Uo7rfhNA3Nk/s1600-h/19%25255B4%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="19" border="0" alt="19" src="http://lh3.ggpht.com/-iBuTEc2eCsQ/TxQ8HyMTTqI/AAAAAAAABwI/XalR3sbL8us/19_thumb%25255B2%25255D.jpg?imgmax=800" width="512" height="543"></a> </p> <p>Now the status is “<strong>Success</strong>” all done :) </p> <p><a href="http://lh4.ggpht.com/-V6e-ELaP1IQ/TxQ8Ioc113I/AAAAAAAABwQ/LgTvyL-boLs/s1600-h/20%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="20" border="0" alt="20" src="http://lh3.ggpht.com/-dMS19jF6NXc/TxQ8JmdQjwI/AAAAAAAABwY/o9AFIAbVi1g/20_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="530"></a> </p> <p>How can i see the Logs???? ahhh !!! that is crucial part. we need to configure “SQL Reporting Services to access these logs.</p> <p><strong><u>PART-3 </u></strong></p> <p>Configure ACS Reporting Services to Access these Logs or view report bases of Security Logs</p> <p>make sure you have “SQL Reporting Services Installed” to configure this and make sure that you are able to access <a href="http://YourReportServerName/ReportServer"><strong>http://YourReportServerName/ReportServer</strong></a><strong> .</strong></p> <p>it should look like this.</p> <p><a href="http://lh5.ggpht.com/-1ZpAdk-Tu88/TxQ8KWK_28I/AAAAAAAABwc/ckGss-GAEkk/s1600-h/24%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="24" border="0" alt="24" src="http://lh3.ggpht.com/-B-qh_38A_kU/TxQ8LBcGh_I/AAAAAAAABwo/2zHJFkPyHyY/24_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="325"></a> </p> <p>Now Login to your ACS Server or any SCOM Management Server and create a <strong>ACS </strong>folder in C Drive of it <strong>C:\ACS</strong></p> <p><a href="http://lh5.ggpht.com/-CG3rXx7wT3c/TxQ8MuZGRSI/AAAAAAAABww/i5SiL28QPvY/s1600-h/21%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="21" border="0" alt="21" src="http://lh3.ggpht.com/-k7pItpoASng/TxQ8NjP421I/AAAAAAAABw4/NNOcVSKxM8c/21_thumb%25255B1%25255D.jpg?imgmax=800" width="260" height="246"></a> </p> <p>Go to your SCOM installation media navigate to <strong>ReportsModels\acs</strong> and copy all files to <strong>C:\ACS</strong> folder</p> <p><a href="http://lh3.ggpht.com/-W654-cQ1v3s/TxQ8PCWuuFI/AAAAAAAABxA/ogaHDFJmmww/s1600-h/22%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="22" border="0" alt="22" src="http://lh5.ggpht.com/-HWsPzCl9LVM/TxQ8P93laCI/AAAAAAAABxI/uXkAddz_bi0/22_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="192"></a> </p> <p>now open “command prompt” and navigate to c:\ACS and type the command</p> <p><strong>UploadauditReports.cmd <urACSDatabase Servername> </strong><a href="http://YOURREPORTSERVER/ReportServer"><strong>http://YOURREPORTSERVER/ReportServer</strong></a><strong> C:\ACS</strong></p> <p> </p> <p><a href="http://lh3.ggpht.com/-VnVeCWSYVhU/TxQ8QpIgS2I/AAAAAAAABxM/BlrQUtq475E/s1600-h/23%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="23" border="0" alt="23" src="http://lh5.ggpht.com/-75Q8BXqolrY/TxQ8RfAXuMI/AAAAAAAABxU/l7ku-Ap4T2g/23_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="83"></a> </p> <p>after run the command it shows you that its uploaded few files.</p> <p><a href="http://lh4.ggpht.com/-Xe8LaLZr1Og/TxQ8SRcquYI/AAAAAAAABxg/E_w3onSPT3E/s1600-h/25%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="25" border="0" alt="25" src="http://lh3.ggpht.com/-v9hf4A1MkzQ/TxQ8TfIRJUI/AAAAAAAABxk/fu7Iwh69tJw/25_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="119"></a> </p> <p>now open access you report server again <a href="http://YourReportServerName/ReportServer"><strong>http://YourReportServerName/ReportServer</strong></a> . and you will see that a new folder is added named as “<strong>Audit Reports</strong>”</p> <p><a href="http://lh4.ggpht.com/-Ku3tUV83-qg/TxQ8UGur18I/AAAAAAAABxw/Y0JMN5bNnVg/s1600-h/26%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="26" border="0" alt="26" src="http://lh5.ggpht.com/-aRcM8tuVgVI/TxQ8Vt1GP_I/AAAAAAAABx4/foG0AaEaV6c/26_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="227"></a> </p> <p>Cool now open this page. <a href="http://YourReportServerName/Reports"><strong>http://YourReportServerName/Reports</strong></a> make sure this is <strong>Reports</strong> not <strong>ReportServer</strong></p> <p>A page will open like below.</p> <p><a href="http://lh3.ggpht.com/-SaKJfCxjQ-c/TxQ8WnjILMI/AAAAAAAAByA/d2AYe9sSjmU/s1600-h/28%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="28" border="0" alt="28" src="http://lh3.ggpht.com/-ZSspBPalW4U/TxQ8XjskbpI/AAAAAAAAByI/JloNRouHaSA/28_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="346"></a> </p> <p>and then click on “<strong>Audit Reports</strong>”</p> <p><a href="http://lh5.ggpht.com/-TbXRIEBIhrc/TxQ8YWA3fdI/AAAAAAAAByQ/UaE4oeBO9h8/s1600-h/27%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="27" border="0" alt="27" src="http://lh6.ggpht.com/-lVh1S6rMMco/TxQ8ZcuMhUI/AAAAAAAAByY/Q4ogyoW1TSk/27_thumb%25255B1%25255D.jpg?imgmax=800" width="528" height="279"></a> </p> <p>Then click on “<strong>DB.Audit</strong>” if you not able to find the “DB.audit” then just soft the files by details.</p> <p><a href="http://lh6.ggpht.com/-V7GGxHsWnSY/TxQ8aYhAQJI/AAAAAAAAByg/n-pMQXrDxrI/s1600-h/29%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="29" border="0" alt="29" src="http://lh4.ggpht.com/-jLdBL_w2-5k/TxQ8bRdqOuI/AAAAAAAAByo/mwHNp_ekkf8/29_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="262"></a> </p> <p>I Keep the everything as it is except i choose “<strong>windows integrated security</strong>”. Click on <strong>Apply.</strong></p> <p><a href="http://lh3.ggpht.com/-MUH-LXZSCSo/TxQ8cCEKC6I/AAAAAAAAByw/d-zF2mhUAEc/s1600-h/30%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="30" border="0" alt="30" src="http://lh3.ggpht.com/-JTYdFncbApM/TxQ8cwDfDqI/AAAAAAAABy4/bTPAvgRsXfI/30_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="389"></a> </p> <p>All Done… now lets check it…….</p> <p><strong><u>PART-4 </u></strong></p> <p>everything is done and step up now. </p> <p>Now Open <strong>SCOM Console</strong> and click on <strong>Reporting tab</strong>.</p> <p>You will see the “<strong>Audit Reports</strong>” options in the left hand side, click on it and then you will see the some predefined templates on right hand side. </p> <p><a href="http://lh5.ggpht.com/-c3YRIh983as/TxQ8d-_ta1I/AAAAAAAABzA/spsGbZxw1mI/s1600-h/31%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="31" border="0" alt="31" src="http://lh4.ggpht.com/-oynRkOYv5mU/TxQ8fAmT83I/AAAAAAAABzI/xuKVUu27enU/31_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="260"></a> </p> <p>Open any report and run it. </p> <p>Voilaa!!! Working now :) </p> <p><a href="http://lh6.ggpht.com/-XKt4h6c3Ons/TxQ8gTFwP_I/AAAAAAAABzM/rXNIrfwTy-M/s1600-h/32%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="32" border="0" alt="32" src="http://lh4.ggpht.com/-LUSY9PFle_A/TxQ8hGJjALI/AAAAAAAABzU/Q1Ncnw9UAOg/32_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="194"></a> </p> <p>I hope that it save someone else time</p> <p>Thanks </p> <p>aman dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com8tag:blogger.com,1999:blog-5847983219663332144.post-48580768457245392452011-11-29T18:05:00.001+05:302011-11-29T18:05:00.783+05:30“When you un-installed the SCOM Agent from managed servers, SCOM is not discovering those Servers again to re-install agents”<p>Hi, </p> <p>Today i have found that on few of our servers there are wrong version of SCOM Agents is installed, for example 32bit Agents are installed on 64bit Servers. Then i plan to uninstall them and reinstall the proper agent version</p> <p>I un-installed the Agents using “Add remove programs” on all the servers and then tried to reinstall them again using “Operations Manager Console”.</p> <p><strong>But</strong></p> <p>When i run the “discovery wizard” it’s not showing me the server on whose I un-installed the agent, i tries 3-4 time but same problem. then i searched the internet and tried few troubleshooting tip but nothing helps. </p> <p>then i thought let’s check the “agent managed” may be the server is still on SCOM Database that’s why its not detecting it.</p> <p>I got to “Administration Pane” and click on “Agent managed” and then i search for the server on which i am trying to re-install the agent and as expected it was there.</p> <p><a href="http://lh3.ggpht.com/-94D1DmZMas4/TtTRW6-LHNI/AAAAAAAABhs/7fKksZAFARU/s1600-h/Agent_12%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_12" border="0" alt="Agent_12" src="http://lh3.ggpht.com/-MQngqB8kewg/TtTRYQqtPaI/AAAAAAAABh0/HSFI2YQKJYw/Agent_12_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="54"></a> </p> <p>ok, not its time to delete it, select the server and right click on it and click on “delete”</p> <p><a href="http://lh4.ggpht.com/-dAvPT9xwmmY/TtTRZHzXddI/AAAAAAAABh8/cILCHdU2JgU/s1600-h/Agent_13%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_13" border="0" alt="Agent_13" src="http://lh6.ggpht.com/-2OGsNXpNFiI/TtTRaQtEAaI/AAAAAAAABiE/WakmKXvfM_c/Agent_13_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="135"></a> </p> <p>now click on “Yes”</p> <p><a href="http://lh4.ggpht.com/-5FVjKaBZwS8/TtTRbdAWBQI/AAAAAAAABiM/HcbPnj-lV1I/s1600-h/Agent_14%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Agent_14" border="0" alt="Agent_14" src="http://lh6.ggpht.com/-ncGTEIWk3-E/TtTRcs9v_aI/AAAAAAAABiU/Hz8yHVVNL_w/Agent_14_thumb%25255B1%25255D.jpg?imgmax=800" width="445" height="183"></a> </p> <p>All Done, wait for 5 minutes , run the discovery wizard again and hopefully this time you will successfully able to discover the Server :) </p> <p>Solution: In my case the solution was removing the server in “Agent managed”</p> <p>thanks </p> <p>aman dhally </p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com0tag:blogger.com,1999:blog-5847983219663332144.post-41357651217616058322011-11-28T20:02:00.001+05:302011-11-28T20:02:42.348+05:30“Remote SMTP queue length is outside the configured threshold” error in SCOM<p> </p> <p>Hi, </p> <p>As the error clearly showing us that the problem is with one and more “SMTP” queue length. Let’s investigate a little bit more about it. </p> <p><strong>Error:</strong></p> <p><a href="http://lh4.ggpht.com/-qobNID8joBA/TtObZccv-gI/AAAAAAAABgc/vvYQFo2Vp2A/s1600-h/SMTP%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="SMTP" border="0" alt="SMTP" src="http://lh5.ggpht.com/-MXc7ZFPVftI/TtObaxhyLlI/AAAAAAAABgk/G4Jpzdg6iHA/SMTP_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="308"></a> </p> <p>in error the source is “SMTP” and the path is one of our “Exchange Server”, in the error it is showing that the default number of message is set to “200” and the interval is “3600sec (1hour). which means this “SMTP Queue Monitor” check exchange server queues after every hour and if there is more than 200 messages are stuck in the queue it generates an alert.</p> <p>let’ check our exchange Sever to solve the error</p> <p>Open Exchange Server “System Manager” navigate to your exchange server and click on queues, and here we found our problematic queue, there is “301” messages stuck in it, the “SMTP monitor is right”,</p> <p><a href="http://lh5.ggpht.com/-4ck02dvlc50/TtObbmuTVxI/AAAAAAAABgs/q83THMT45uo/s1600-h/SMTP-1%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="SMTP-1" border="0" alt="SMTP-1" src="http://lh6.ggpht.com/-WEBZvvP8Fko/TtObcyQfCrI/AAAAAAAABg0/LhlkLitJCRo/SMTP-1_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="131"></a> </p> <p>Solution:</p> <ol> <li>try to find out why your remote queue got stuck, may be some firewall rules blocking SMTP connection</li> <li>Make sure your SMTP Connector is working</li> <li>Right click on your problematic queue click on force connection and see if email start get deliver</li> <li>Try restarting “SMTP” service</li> <li>if nothing helps try contacting any “Exchange Sever” engineer or administrator</li></ol> <p>in My case solution was different </p> <p>i select the problematic server and right click on it and choose find messages.</p> <p><a href="http://lh3.ggpht.com/-Q57XyNZ5JTI/TtObdVOqLOI/AAAAAAAABg8/StAbrY5EGnA/s1600-h/SMTP-2%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="SMTP-2" border="0" alt="SMTP-2" src="http://lh4.ggpht.com/-8fMrShlqCL0/TtObevVydUI/AAAAAAAABhE/GAdXyhHpzgE/SMTP-2_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="154"></a> </p> <p>all the messages which stuck in the queue was “JUNK” then i decide to remove them.</p> <p>I selected all messages , right click on them and choose “Delete (no NDR)”</p> <p><a href="http://lh3.ggpht.com/-lilZ2EcQei8/TtObfm2dazI/AAAAAAAABhM/QPxRJ8Q5UoQ/s1600-h/SMTP-3%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="SMTP-3" border="0" alt="SMTP-3" src="http://lh6.ggpht.com/-Phd15-LRGH4/TtObguVIPPI/AAAAAAAABhU/4VSerKRKBDo/SMTP-3_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="404"></a> </p> <p>My message queue is not back to zero 0, all is well now , you can close this alert manually or wait for another one hour to get close it automatically.</p> <p><a href="http://lh3.ggpht.com/-n2HFJf91v3k/TtObhZGOE3I/AAAAAAAABhc/jvWd0uURCdo/s1600-h/SMTP-4%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="SMTP-4" border="0" alt="SMTP-4" src="http://lh3.ggpht.com/-DZCM6JllvKM/TtObiQY2SOI/AAAAAAAABhk/0_CZZMJFXVE/SMTP-4_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="116"></a> </p> <p> </p> <p>Thanks </p> <p>Aman</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1tag:blogger.com,1999:blog-5847983219663332144.post-12230328181128439012011-11-22T22:11:00.002+05:302011-11-22T22:12:42.072+05:30Yippy !!!! Ten Thousand Page Views<div dir="ltr" style="text-align: left;" trbidi="on"><br />
Our Blog have 10,000 Page views ….. {i knew these Number doesn’t matter but stillll…} <br />
Yippy!!!!!!! <br />
<a href="http://lh5.ggpht.com/--nnu49-3Vx4/TsvQrS4E1JI/AAAAAAAABfM/SqtLNy9TFdE/s1600-h/10013%25255B3%25255D.jpg"><img alt="10013" border="0" height="167" src="http://lh6.ggpht.com/-tbvcGHxEt30/TsvQsrD44ZI/AAAAAAAABfU/NnFw8VpLS5A/10013_thumb%25255B1%25255D.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="10013" width="400" /></a></div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com0tag:blogger.com,1999:blog-5847983219663332144.post-33142414167710856832011-11-22T12:46:00.001+05:302011-11-22T12:46:11.539+05:30“A SQL job failed to complete successfully” error in SCOM<p>Hi,</p> <p>As the error is self explainery that one of our SQL Backup Job is failed. How to fix it? Depends how much you know about SQL and you also know what to do. But let’s check which job is failed and let me show you how to check the failed “SQL Job” , I know its quite simple but sometime few SCOM new users don’t know where to find these failed jobs.</p> <p><strong>Error:</strong></p> <p>Error is showing that “SQL Job is failed on Computer 2K” and the job name is “Copy Tables From”</p> <p><a href="http://lh4.ggpht.com/-zSv2vUoqbbg/TstMDn_CQtI/AAAAAAAABc8/IFFwzAj3Z6s/s1600-h/Sql_Job_1%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Sql_Job_1" border="0" alt="Sql_Job_1" src="http://lh5.ggpht.com/-DckYbkP7Pkc/TstME1u-n9I/AAAAAAAABdE/f_WDYQZnwCM/Sql_Job_1_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="419"></a> </p> <p>let me RDP to my SQL Server “2K” and let me open “ SQL Server Enterprise Manager”</p> <p>Click on your SQL Server, expand the “Management” , beneath it expand “SQL Server Agent” and then click on “Jobs” and here is our failed SQL Job. You can see there is a red cross in the front of the the job.</p> <p><a href="http://lh4.ggpht.com/-XeIJY9ab4Ko/TstMF96BXCI/AAAAAAAABdM/PkT-hv5Lb7c/s1600-h/Sql_Job_2%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Sql_Job_2" border="0" alt="Sql_Job_2" src="http://lh6.ggpht.com/-KCXWiL87XcA/TstMHAzmPmI/AAAAAAAABdU/7fOvocC-YV4/Sql_Job_2_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="158"></a> </p> <p>To check the more details about the job, right click on it and then choose “<strong>View Job History”</strong></p> <p><a href="http://lh4.ggpht.com/-CwLjc1igKqw/TstMIf3bIRI/AAAAAAAABdc/pNWgdQ7tDbk/s1600-h/Sql_Job_3%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Sql_Job_3" border="0" alt="Sql_Job_3" src="http://lh4.ggpht.com/-vLPvKoiVvXg/TstMJrqGFtI/AAAAAAAABdk/PDVJkxdlnkQ/Sql_Job_3_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="298"></a> </p> <p>now click on “Show Step Details” if you want to know more info about the job.</p> <p><a href="http://lh3.ggpht.com/-zWAnB880gY8/TstMKT9isdI/AAAAAAAABds/uOfSYFNm53s/s1600-h/Sql_Job_4%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Sql_Job_4" border="0" alt="Sql_Job_4" src="http://lh6.ggpht.com/-MeeovtkIAsc/TstML_kHglI/AAAAAAAABd0/VaRndfQnojY/Sql_Job_4_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="448"></a> </p> <p>So here is the complete step info about the backup job. I think you can find a useful info on why this job failed.</p> <p><a href="http://lh4.ggpht.com/-rQnCRwqV2Z4/TstMNKbAGiI/AAAAAAAABd8/TGER1LSW5_A/s1600-h/Sql_Job_5%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Sql_Job_5" border="0" alt="Sql_Job_5" src="http://lh3.ggpht.com/-P4fb8hpC5rg/TstMOe_6HTI/AAAAAAAABeE/xaL0KtPrKnM/Sql_Job_5_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="439"></a> </p> <p>Otherwise: go to your SQL Administrator and told him “Damn, Fix it ,”</p> <p>Thanks </p> <p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1tag:blogger.com,1999:blog-5847983219663332144.post-79434789380867116222011-11-21T20:09:00.002+05:302011-11-21T20:24:17.275+05:30SCOM : How to resolve “The SMTP Local Retry Queue Total is outside calculated baseline” error in SCOM.<div dir="ltr" style="text-align: left;" trbidi="on">Hi <br />
As the notification is clearly saying that there is some error in our exchange server’s Local retry Queue. But what is the exactly happening.? <br />
Let explore it little bit. <br />
<strong>Error ::: <img alt="" border="0" src="http://farm7.staticflickr.com/6233/6376681109_1f9480f8ac.jpg" /></strong><br />
Right Clink on the Error, Click on Open and Choose “Health Explorer”<br />
<a href="http://www.myhosting.com/blog/SMTP23.jpg"></a><img alt="" border="0" src="http://farm7.staticflickr.com/6091/6376681225_fb9c722a32.jpg" /><br />
Now Click on “SMTP Local Retry Queue - Queue [Exchange Queue] , and click on “Monitor Properties”<br />
<a href="http://www.myhosting.com/blog/SMTP33.jpg"></a><img alt="" border="0" src="http://farm7.staticflickr.com/6235/6376681341_7123014992.jpg" /><br />
In “Performance Counter” tab, it is showing that this monitor is based on “Perfmon” and it is monitoring using the “Local Retry Queue Length” on “SMTP Server” Object of the Exchange Server.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6100/6376681423_fee5fd1ff4.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="160" src="http://farm7.staticflickr.com/6100/6376681423_fee5fd1ff4.jpg" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
The Next tab in “Baselining”, which indicates that this is a “STT” Self Tuning Threshold Monitor. OK,, <br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6117/6376681535_a5da5425b7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="313" src="http://farm7.staticflickr.com/6117/6376681535_a5da5425b7.jpg" width="400" /></a></div><br />
<br />
Now click on “Overrides” tab, and click on “Overrides”<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6219/6376681659_4019ef6589.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://farm7.staticflickr.com/6219/6376681659_4019ef6589.jpg" /></a></div><br />
Choose “ For All Object of Class Exchange Queue”<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6118/6376681725_c5efbf858c.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="280" src="http://farm7.staticflickr.com/6118/6376681725_c5efbf858c.jpg" width="400" /></a></div><br />
<br />
in Overrides the “Inner Sensitivity” of the monitor is 3.11 and I think it means if it have more then 3.X message in the Local retry queue it should send an alert.<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6057/6376681951_ebcc4fe01a_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="http://farm7.staticflickr.com/6057/6376681951_ebcc4fe01a_z.jpg" width="315" /></a></div><br />
<br />
how to check????<br />
why not we manually check the “Local Retry Queue” performance counter manually, Isn’t it is a good idea?<br />
let’s do it, Open the “Performance Monitor” in Object choose “SMTP Servers” and in Counter choose “Local Retry Queue Length” <br />
in Counter Explanation is says “ The Number of messages in the local retry queue” <br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6215/6376682089_aa2a407f88_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://farm7.staticflickr.com/6215/6376682089_aa2a407f88_z.jpg" /></a></div><br />
<br />
Ok, so how many local messages are stuck, let check, OK , we have 4 local message stuck in the retry queue. <br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6233/6376682213_f674733ba9_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="212" src="http://farm7.staticflickr.com/6233/6376682213_f674733ba9_z.jpg" width="320" /></a></div><br />
<br />
now go to your Exchange Server Queue and you will find that there is 4 messages are stuck.<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6104/6376682275_c7fa32f95d_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="53" src="http://farm7.staticflickr.com/6104/6376682275_c7fa32f95d_z.jpg" width="400" /></a></div><br />
<br />
let’s find them , Delete them if they are not necessary emails. <br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6059/6376682369_f2bd1ec2f6_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://farm7.staticflickr.com/6059/6376682369_f2bd1ec2f6_z.jpg" /></a></div><br />
<br />
Once the Messages are deleted, our local retry queue is back to normal i means on Zero 0.<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6096/6376682545_f62b6f1aed_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="278" src="http://farm7.staticflickr.com/6096/6376682545_f62b6f1aed_z.jpg" width="400" /></a></div><br />
<br />
after 5-10 minutes the error should be gone otherwise you can choose the monitor and click on “Recalculate health” Option.<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6235/6376682693_fb6085d7f9_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="157" src="http://farm7.staticflickr.com/6235/6376682693_fb6085d7f9_z.jpg" width="400" /></a></div><br />
<br />
YippY!!! Exchange Server is Happy Again.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://farm7.staticflickr.com/6097/6376682811_dfc4f2b40f_z.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="264" src="http://farm7.staticflickr.com/6097/6376682811_dfc4f2b40f_z.jpg" width="320" /></a></div><br />
Thanks <br />
Aman Dhally</div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com0tag:blogger.com,1999:blog-5847983219663332144.post-37288667605635811612011-11-18T17:48:00.001+05:302011-11-18T18:15:27.783+05:30Get-Overrides created on Specific Day .<p>hi,</p> <p>yesterday one of our SCOM admin created few overrides in SCOM and today he is on leave and the also not picking up the phone and I need to know which overrides he created.</p> <p>Then i think that lets try to write a little basic PowerShell script which show the list of overrides created between specific number of days. </p> <p>you can download the script from here : <a title="http://dl.dropbox.com/u/17858935/Get_SCOM_Overrides_by_Day_Created.zip" href="http://dl.dropbox.com/u/17858935/Get_SCOM_Overrides_by_Day_Created.zip">http://dl.dropbox.com/u/17858935/Get_SCOM_Overrides_by_Day_Created.zip</a></p> <p><strong>Make sure you run this script in “Operations manager Shell”</strong></p> <div id="codeSnippetWrapper"> <div id="codeSnippetWrapper"> <div id="codeSnippetWrapper"> <div style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: #f4f4f4; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px" id="codeSnippet"><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: white; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum1"> 1:</span> ### I <span style="color: #0000ff">set</span> $olddate <span style="color: #0000ff">to</span> 2 Days ago <span style="color: #0000ff">date</span></pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: #f4f4f4; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum2"> 2:</span> </pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: white; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum3"> 3:</span> $olddate = (<span style="color: #0000ff">Get</span>-<span style="color: #0000ff">Date</span>).AddDays(-2)</pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: #f4f4f4; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum4"> 4:</span> </pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: white; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum5"> 5:</span> ## <span style="color: #0000ff">Select</span> every Management pack <span style="color: #0000ff">and</span> Piped it <span style="color: #0000ff">to</span> "<span style="color: #0000ff">Get</span>-Override)</pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: #f4f4f4; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum6"> 6:</span> </pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: white; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum7"> 7:</span> $Mp = <span style="color: #0000ff">Get</span>-Managementpack | <span style="color: #0000ff">Get</span>-Override </pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: #f4f4f4; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum8"> 8:</span> </pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: white; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum9"> 9:</span> ### Now it will show only <span style="color: #0000ff">overrides</span> which are created after $oldDate</pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: #f4f4f4; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum10"> 10:</span> </pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: white; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum11"> 11:</span> $Mp| Where-<span style="color: #0000ff">Object</span> { $_.TimeAdded -gt $olddate} | <span style="color: #0000ff">select</span> ManagementGroupId,Name,TimeAdded | fl *</pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: #f4f4f4; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum12"> 12:</span> </pre><!--CRLF--><pre style="border-bottom-style: none; text-align: left; padding-bottom: 0px; line-height: 12pt; background-color: white; margin: 0em; border-left-style: none; padding-left: 0px; width: 100%; padding-right: 0px; font-family: 'Courier New', courier, monospace; direction: ltr; border-top-style: none; color: black; border-right-style: none; font-size: 8pt; overflow: visible; padding-top: 0px"><span style="color: #606060" id="lnum13"> 13:</span> ######## E N D of S C R I P T #############</pre><!--CRLF--></div></div></div></div><br /><p>in <strong>$olddate</strong> i minus 2 days so if today is 18 November then <strong>$olddate</strong> should have 16 November stored in variable </p><br /><p><a href="http://lh3.ggpht.com/-ht3Z5tcDrDc/TsZM62StmPI/AAAAAAAABRo/n62wfg0aT4Q/s1600-h/OldDate%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="OldDate" border="0" alt="OldDate" src="http://lh4.ggpht.com/-IcNmZLvpwCU/TsZM72Q65FI/AAAAAAAABRw/7mrS_AwVc-8/OldDate_thumb%25255B1%25255D.jpg?imgmax=800" width="406" height="89"></a> </p><br /><p>in variable <strong>$Mp</strong> in am storing all Management packs and piped them to <strong>Get-Overrides</strong></p><br /><p><a href="http://lh5.ggpht.com/-WDj3_9jdVZs/TsZM81sPJlI/AAAAAAAABR4/XInwJu14rkQ/s1600-h/MpPack%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="MpPack" border="0" alt="MpPack" src="http://lh5.ggpht.com/-7cXugwB47AY/TsZM-JOWdEI/AAAAAAAABSA/2-X9hz5wrBQ/MpPack_thumb%25255B1%25255D.jpg?imgmax=800" width="356" height="54"></a> </p><br /><p>lets run <strong>$Mp</strong> lets see what we will get.</p><br /><p>It shows the list of all Overrides in all management packs. Now we need to sort them.</p><br /><p><a href="http://lh6.ggpht.com/-__vT5Hl1GGo/TsZM-7JUCLI/AAAAAAAABSI/ExhGS2gjQ04/s1600-h/MP2%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="MP2" border="0" alt="MP2" src="http://lh6.ggpht.com/-wBGJ2djYZ0A/TsZNAKdj3vI/AAAAAAAABSQ/73A2NKZYoR4/MP2_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="327"></a> </p><br /><p><strong>$Mp| Where-Object { $_.TimeAdded -gt $olddate} | select ManagementGroupId,Name,TimeAdded | fl *</strong></p><br /><p>in above command , we piping $MP to where-Object cmdlet and choosing TimeAdded property in Overrides and comparing them with our variable $OldDate , so if the TimeAdded is property is greater then 16 November then it show all the Overrides created between 17,18 November.</p><br /><p>seems working … :) </p><br /><p><a href="http://lh3.ggpht.com/-fzs4lrRRQi0/TsZNBGQQFAI/AAAAAAAABSY/fjXxNkzAWtQ/s1600-h/result%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="result" border="0" alt="result" src="http://lh4.ggpht.com/-orbQmIlzJ4c/TsZNCMwBHpI/AAAAAAAABSg/c8MCxY_-W34/result_thumb%25255B1%25255D.jpg?imgmax=800" width="504" height="258"></a> </p><br /><p>Download Link: <a title="http://dl.dropbox.com/u/17858935/Get_SCOM_Overrides_by_Day_Created.zip" href="http://dl.dropbox.com/u/17858935/Get_SCOM_Overrides_by_Day_Created.zip">http://dl.dropbox.com/u/17858935/Get_SCOM_Overrides_by_Day_Created.zip</a></p><br /><p>Hope someone like it :) </p><br /><p>Thanks</p><br /><p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1tag:blogger.com,1999:blog-5847983219663332144.post-87037821457127974912011-11-17T14:23:00.001+05:302011-11-17T14:23:06.126+05:30Thanks to www.PowerWf.com<p> </p> <p>to mention our post on there Blog :) </p> <p><a title="http://blog.powerwf.com/post/12114067606/using-powershell-to-see-if-agent-proxy-is-enabled-in#disqus_thread" href="http://blog.powerwf.com/post/12114067606/using-powershell-to-see-if-agent-proxy-is-enabled-in#disqus_thread">http://blog.powerwf.com/post/12114067606/using-powershell-to-see-if-agent-proxy-is-enabled-in#disqus_thread</a></p> <p> </p> <p>Thanks Guys </p> <p> </p> <p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com0tag:blogger.com,1999:blog-5847983219663332144.post-67226596573567716822011-10-24T14:53:00.001+05:302011-10-24T14:58:40.610+05:30Agent Proxy on SCOM Agents<div dir="ltr" style="text-align: left;" trbidi="on"><br />
Hi,<br />
When we install SCOM agents on any server or workstation after installation we need to enable [tick on] Agent Proxy on Agents properties via go to :<br />
<ul><li>Administration Pane</li>
</ul><ul><li>Go to "Agent Managed" beneath "Device Management"</li>
<li>Search for the Agent</li>
<li>Right click on the Agent and select Properties</li>
<li>and tick on "Agent Proxy"</li>
</ul><div><span class="Apple-style-span" style="background-color: white; color: #333333; font-family: 'Segoe UI', Calibri, 'Myriad Pro', Myriad, 'Trebuchet MS', Helvetica, Arial, sans-serif; font-size: 13px; line-height: 16px;"></span><br />
<div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><a href="http://www.amandhally.net/blog/wp-content/uploads/2011/10/1_Proxy.jpg" style="color: #ed1e24; outline-color: initial; outline-style: none; outline-width: initial; text-decoration: underline;"><img alt="" class="alignnone size-medium wp-image-112" height="143" src="http://www.amandhally.net/blog/wp-content/uploads/2011/10/1_Proxy-300x143.jpg" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px;" title="1_Proxy" width="300" /></a></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">good Enough !!! but if we installed SCOM Agent on 100 servers or if your organization have more then two administrators and rather then you other administrator installed the SCOM Agents and he forget to enable the “Agent Proxy” , then you you found that which Agents are “Proxy Enabled” and which are not.</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">There are two ways to accomplish it.</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><strong><span style="text-decoration: underline;">Option 1:</span></strong></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Check the Settings of each and Every SCOM Agent</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="text-decoration: underline;"><strong>Option 2</strong></span></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Use PowerShell <img alt=":)" class="wp-smiley" src="http://www.amandhally.net/blog/wp-includes/images/smilies/icon_smile.gif" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; vertical-align: -15%;" /></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">let me show you how .</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Open “<strong>Operations Manager Shell</strong>”</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><a href="http://www.amandhally.net/blog/wp-content/uploads/2011/10/2_Proxy.jpg" style="color: #2d8ac7; outline-color: initial; outline-style: none; outline-width: initial; text-decoration: none;"><img alt="" class="alignnone size-medium wp-image-113" height="83" src="http://www.amandhally.net/blog/wp-content/uploads/2011/10/2_Proxy-300x83.jpg" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px;" title="2_Proxy" width="300" /></a></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">and type this command “<strong>Get-agent | ? { $_.ProxyingEnabled -match $False}</strong> ” and hit enter .</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><a href="http://www.amandhally.net/blog/wp-content/uploads/2011/10/proxy_9.png" style="color: #2d8ac7; outline-color: initial; outline-style: none; outline-width: initial; text-decoration: none;"><img alt="" class="alignnone size-medium wp-image-114" height="13" src="http://www.amandhally.net/blog/wp-content/uploads/2011/10/proxy_9-300x13.png" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px;" title="proxy_9" width="300" /></a></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">and this will show you the list of All agents which doesn’t have “Agent Proxy” enabled.</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><a href="http://www.amandhally.net/blog/wp-content/uploads/2011/10/Proxy_10.jpg" style="color: #2d8ac7; outline-color: initial; outline-style: none; outline-width: initial; text-decoration: none;"><img alt="" class="alignnone size-medium wp-image-115" height="300" src="http://www.amandhally.net/blog/wp-content/uploads/2011/10/Proxy_10-274x300.jpg" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px;" title="Proxy_10" width="274" /></a></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">to be more precise we can also select name of the Agents</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">“<strong>Get-agent | ? { $_.ProxyingEnabled -match $False} | select Name</strong>”</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><a href="http://www.amandhally.net/blog/wp-content/uploads/2011/10/Proxy_11.jpg" style="color: #2d8ac7; outline-color: initial; outline-style: none; outline-width: initial; text-decoration: none;"><img alt="" class="alignnone size-medium wp-image-116" height="78" src="http://www.amandhally.net/blog/wp-content/uploads/2011/10/Proxy_11-300x78.jpg" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px;" title="Proxy_11" width="300" /></a></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">That’s all <img alt=":)" class="wp-smiley" src="http://www.amandhally.net/blog/wp-includes/images/smilies/icon_smile.gif" style="border-bottom-width: 0px; border-color: initial; border-left-width: 0px; border-right-width: 0px; border-style: initial; border-top-width: 0px; vertical-align: -15%;" /></div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">now we know on which “Agent” we need to enable “agent Proxy” setting.</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br />
</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Thanks</div><div style="line-height: 19px; margin-bottom: 0.75em; margin-top: 0.25em; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Aman Dhally</div></div></div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com2tag:blogger.com,1999:blog-5847983219663332144.post-76486873343362907432011-07-11T17:19:00.001+05:302011-07-11T17:19:40.087+05:30SCOM: Use Operations Manager Shell to close multiple Alerts generated by Same Rule<p>Hi,</p> <p>When today i login in to my SCOM console I saw approx 134 Active Alerts about Microsoft SQL Job failure. I was about to close these alert but then one thing strike in my mind that lets try to close these alerts using “Operations Manager Shell”. These Alerts are generating from same source and the name of the alert is same to it would not be to hard. So let try.</p> <p><a href="http://lh4.ggpht.com/-qeL-E22dyAY/Thri8lo7GoI/AAAAAAAAA8o/HQQU5tQf6a8/s1600-h/problem%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="problem" border="0" alt="problem" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZUrrddg0TSieV1QJGxYUHCkpOqlGxm2kv750WehatI5iaUPCQE9Lc6rBhqFsGprfwi7-0idoqW6psNPOO_Ds_Ib8bEoRP-EecoT-Pn-Jgtf79xDsXoMT8NFacFSRQjosNSWvnHjmBELj-/?imgmax=800" width="339" height="188"></a> </p> <p>Our First Step is to find out the Command which can show us Alert in SCOM Shell. </p> <p>Open “Operations manager shell” and type Get-Command *alert* , this will search for all SCOM cmdlets which have the word alert (we use wildcard *), and as you know PowerShell cmdlets works on Verb-Noun format so if we use Get-Alert cmdlets it will shows all alerts.</p> <p><a href="http://lh5.ggpht.com/-mlpoqygYPQg/Thri_ORKOpI/AAAAAAAAA8w/kxycJ2wyrF8/s1600-h/alert%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="alert" border="0" alt="alert" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjS5eB6fe1z4rl_xwNDRsENi1pyhzkA2QmmcdSAl9RumpN_CC-inhSDKRwA3xHsb1mF-nOOY4WpvJu5_adBMXX1sBPR-o-c-ZGoaBOK5iAuSpfkAzE_TlXRR4sBqrP-AdDjPZlzKSi6BLYI/?imgmax=800" width="480" height="177"></a> </p> <p>Let Try Get-Alert </p> <p><a href="http://lh3.ggpht.com/-LrZeTl4Sxm8/ThrjBd1rsyI/AAAAAAAAA84/OYkZj7ujjIs/s1600-h/alert-2%25255B2%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="alert-2" border="0" alt="alert-2" src="http://lh4.ggpht.com/-tWd8-ivs2oU/ThrjCpbbK6I/AAAAAAAAA88/7e_iXItKI8k/alert-2_thumb.jpg?imgmax=800" width="116" height="29"></a> </p> <p>Type get-alert in the shell and hit Enter and it shown you all alerts.</p> <p><a href="http://lh4.ggpht.com/-jCYGmaO2QXg/ThrjDj0bb5I/AAAAAAAAA9A/PMKzlmO1kZk/s1600-h/Sol-5%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Sol-5" border="0" alt="Sol-5" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTmLeEhFgxSDU7S1xj5JI6XDBYCiyLdTG3eVgU-3p6Te4U949k-Pu_9msVMCaSDxR3niGcDPqgPurF2BCNKEdirqEbq0Rb4_S0fQtfh2Ruo_a9Tj1H_oooZOkknZf9NI8vtF0Hmf65RdEK/?imgmax=800" width="404" height="267"></a> </p> <p>Next task is to choose which Alert to Close .. if you look at active Alert in SCOM CONSOLE name of My Alert is “"<strong><em>A SQL job failed to complete successfully</em></strong>"</p> <p> <a href="http://lh5.ggpht.com/-847YY5cWyH0/ThrjGc-R5_I/AAAAAAAAA9I/5P2soqfkKWc/s1600-h/problem-1%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="problem-1" border="0" alt="problem-1" src="http://lh3.ggpht.com/-mBCxUGsaZuU/ThrjHtZKefI/AAAAAAAAA9M/9RrXhQalrfI/problem-1_thumb%25255B1%25255D.jpg?imgmax=800" width="421" height="225"></a> </p> <p>Now our next step is to find the properties and methods supported by <strong><em>Get-Alert</em></strong> command. To know these we need to use another command <strong><em>Get-Member</em></strong></p> <p><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDQpZOO6LKOGGoNbONa8J_EmDwtlXUcCXFaI7yeq3noDcHihjhrd2Fw4eygbahxxAY6ZtlYk8az8fbMsqXlvCYmlDHUXKdbpLs3HY89dsdB-XbhPcBJiWM2NyIYFLp2HvzMc7ZNWQ-TB7y/s1600-h/member%25255B2%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="member" border="0" alt="member" src="http://lh4.ggpht.com/-AcQEXaBrfyc/ThrjJUpEPfI/AAAAAAAAA9U/WufON_egGaQ/member_thumb.jpg?imgmax=800" width="224" height="29"></a> </p> <p>Yes.. it has name property…Gr8</p> <p><a href="http://lh4.ggpht.com/-qworU1eQ8zM/ThrjKsQTIwI/AAAAAAAAA9Y/2YQz8CpOKxo/s1600-h/Sol-2%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Sol-2" border="0" alt="Sol-2" src="http://lh5.ggpht.com/-oILqZJAL9zk/ThrjL4y_94I/AAAAAAAAA9c/ljxX2D9n7r4/Sol-2_thumb%25255B1%25255D.jpg?imgmax=800" width="564" height="163"></a> </p> <p>Now we need to see all alerts whose name match “"A SQL job failed to complete successfully", for filter the output from Get-alert command we pipe (|) the output of Get-Alert command to Where-Object cmdlet.</p> <p>Get-alert | Where-Object { $_.Name -match "A SQL job failed to complete successfully"} </p> <p><a href="http://lh6.ggpht.com/-99_SwAmtiWU/ThrjMxMozwI/AAAAAAAAA9g/T4dZOObpBgg/s1600-h/where%25255B4%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="where" border="0" alt="where" src="http://lh3.ggpht.com/-KPXDAubW_-A/ThrjN5LB9vI/AAAAAAAAA9k/gyQtUxbXv9g/where_thumb%25255B2%25255D.jpg?imgmax=800" width="705" height="22"></a> </p> <p>This will show all alerts whose name matches with "A SQL job failed to complete successfully"</p> <p>So now our next step is to find a cmdlet which can close these alerts. lets find out.. run the same command </p> <p>Get-Command *alert*</p> <p><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwDpYskJH_YcB4LKmJVZ3NOU1Y2kxNRrlEyDxMtXFWLy6W3jYzeVAFpytNUafjfSvZg42YljFL3PmU1vDISnZUmYDKovy2GuTDtX_EmX5OcNToW9vuvXMm7KAmqPliiUH0oFjLm_d7zvzs/s1600-h/resolve-alert%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="resolve-alert" border="0" alt="resolve-alert" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirOdRXMfrc2F6-_VvOm8g5u9_Ndb2MA36X-XjtVx0eCjFEH3YSYXk9YWo22I63wglLkTARbQK-K3MM8L-tvF7KPSloBodKQ_WO-r25YDxn6KSZdiUWq6peAqrtYk2AmZdZCd274LcbQibQ/?imgmax=800" width="453" height="105"></a> </p> <p>So this time we have find Resolve-Alert cmdlet. now we need to join and our cmdlets command using piping . so this should be like this. </p> <p>get-alert | where-object { $_.Name -match "A SQL job failed to complete successfully"} | Resolve-alert</p> <p><a href="http://lh5.ggpht.com/-CQ2Y82MvqP8/ThrjRIkK_sI/AAAAAAAAA9w/CW3NE1JgXAc/s1600-h/rr%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="rr" border="0" alt="rr" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4JbtAjG876JuQtVinwIQ0VYL9J-OCpBgnx74dE8ESAkjKghD1nwC8qBsvWEUOHHrNJChuwbSRhOsrzOmtwbVtn09BaYe9by1mkQGJL5Qa0cvGvXh0abDaWiH_d-_QZX2OJ8FjR-BEa20K/?imgmax=800" width="708" height="25"></a> </p> <p>in Get Alert we are searching for an Alerts | then we are filter then using Name with match to “Sql job Failure | and then we are resolving them. now type the above command and hit enter. It will take sometime to do this. </p> <p>When you command run successfully, open SCOM Console and search for same SQL JOB error and you will found nothing :) </p> <p><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEge6YrWuezIidxg3DN8-XEq0UjbQW6DpzjVmtJL0np2Rn-IapjArWvGWPOCEOSawBp5nH3wV2fpBB4KDYxbo79PlTdlG7PV6UGm-HMxaNLO7tRpvsgu6LHN1zKyYDUYNf9-T8uj1yNU_NH3/s1600-h/Solved-7%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Solved-7" border="0" alt="Solved-7" src="http://lh6.ggpht.com/-yxIVQcDtzUw/ThrjUlmZGpI/AAAAAAAAA98/C-PZOAxZTJ0/Solved-7_thumb%25255B1%25255D.jpg?imgmax=800" width="606" height="260"></a> </p> <p> </p> <p>I hope that it helps someone…</p> <p>Thanks </p> <p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1tag:blogger.com,1999:blog-5847983219663332144.post-1174509593558652572011-07-08T17:30:00.001+05:302011-07-11T13:54:25.448+05:30Mystery of Blank Schedule Email Reports in SCOM<p>Hi,</p> <p>After deployment of Reporting Server for SCOM we test the working of Reporting Server by generating few “Windows Generic Reports” manually and they works perfect. So we plan to schedule Reports for a weekly delivery on Emails. So that we can have the statistics of our server weekly.</p> <p align="left">So when we test schedule email reports in SCOM, but when reports arrives in an email they are with no data completely blank email with link to Reporting Server. Then we investigate on internet and found that this is a knows issue (KB: <a href="http://support.microsoft.com/kb/972821">http://support.microsoft.com/kb/972821</a>) and we also found the blog posting on <a href="http://blogs.technet.com/b/kevinholman/archive/2010/10/05/charts-not-showing-up-in-scheduled-reports.aspx" target="_blank">Kevin Holman</a> on the same Issue. (Please visit his blog posting for more clarifications..<a href="http://blogs.technet.com/b/kevinholman/archive/2010/10/05/charts-not-showing-up-in-scheduled-reports.aspx" target="_blank">click here</a> )</p> <p><strong><em><u>So Lets try.</u></em></strong></p> <p>Step:1</p> <p>Login to your SQL Reporting Server for SCOM </p> <p>Navigate to default Reporting Server installation path and navigate to ”<strong><em>Reporting Services\ReportServer\bin</em></strong>” and Open </p> <p>“<strong><em>ReportingServicesService.exe.config</em></strong>” in notepad.</p> <p>“<em>C:\Program Files\Microsoft SQL Server\MSRS10.MSSQLSERVER\Reporting Services\ReportServer\bin”</em></p> <p><a href="http://lh5.ggpht.com/-R4RDJBROZ64/ThbxNuJEzoI/AAAAAAAAA8A/P7yErvhidVc/s1600-h/2%25255B2%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="2" border="0" alt="2" src="http://lh5.ggpht.com/-XOm8X62wtbw/ThbxPVIdHuI/AAAAAAAAA8E/XIhkeWuEedM/2_thumb.jpg?imgmax=800" width="244" height="234"></a> </p> <p> </p> <p><strong>Step:2</strong></p> <p>After opening “<strong><em>ReportingServicesService.exe.config</em></strong>” we need to insert below code in to this file. The main issue is where to insert the Code. </p> <p> </p> <table border="1" cellspacing="0" cellpadding="2" width="628"> <tbody> <tr> <td valign="top" width="626"> <p>To resolve this problem, add the following information to the ReportingServicesService.exe.config file in the ReportServer\bin directory: <pre><dependentAssembly><br /><assemblyIdentity name="Microsoft.ReportingServices.ProcessingCore" publicKeyToken="89845dcd8080cc91" culture="neutral" /><br /><bindingRedirect oldVersion="9.0.242.0" newVersion="10.0.0.0" /><br /></dependentAssembly><br /><dependentAssembly xmlns="urn:schemas-microsoft-com:asm.v1"><br /><assemblyIdentity name="Microsoft.ReportingServices.ProcessingCore" publicKeyToken="89845dcd8080cc91" culture="neutral" /><br /><bindingRedirect oldVersion="9.0.242.0" newVersion="10.0.0.0" /><br /></dependentAssembly><br /></pre></td></tr></tbody></table><br /><p>The Right Position of Correct code is below. </p><br /><p><em>This XML section must be added in between <strong><runtime><assemblyBinding…> </strong>and <strong></assemblyBinding></strong><strong></runtime></strong> statements of the \ReportServer\bin\ReportingServicesService.exe.config file. </em></p><br /><p><a href="http://lh6.ggpht.com/-eSoD48dNgPs/ThbxQkFt_6I/AAAAAAAAA8I/YXaJqkev3cQ/s1600-h/3%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="3" border="0" alt="3" src="http://lh3.ggpht.com/-obxMdQQwCNg/ThbxSfvDdBI/AAAAAAAAA8M/sqhk6TYWMEo/3_thumb%25255B1%25255D.jpg?imgmax=800" width="451" height="317"></a></p><br /><p> </p><br /><p>After Insert the Code in to “<strong><em>ReportingServicesService.exe.config</em></strong>” . save the file and reboot the “<strong>SQL Server Reporting Service”</strong></p><br /><p><a href="http://lh5.ggpht.com/-QnoYx8dIyhE/ThbxTl60o8I/AAAAAAAAA8Q/rU63VXpLWsc/s1600-h/4%25255B2%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="4" border="0" alt="4" src="http://lh4.ggpht.com/-VXiKLARRjvI/ThbxVPIRZFI/AAAAAAAAA8U/rgO0dDwptWY/4_thumb.jpg?imgmax=800" width="244" height="161"></a> </p><br /><p>That’s all :) .. </p><br /><p><strong>BUT… </strong></p><br /><p>But i after doing that problem is still not resolved. We still getting Black Reports. Now No Clue what to do next. Then i tried the Following. I open the File in “<a href="http://notepad-plus-plus.org/" target="_blank">Notepad++”</a> and formatted it, save the file and restart SQL Reporting Server.</p><br /><p><strong>Before Formatting </strong></p><br /><p><a href="http://lh5.ggpht.com/-RL3kn-40ANg/ThbxWiRsLLI/AAAAAAAAA8Y/tA0mhXSYIOE/s1600-h/Old-%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="Old-" border="0" alt="Old-" src="http://lh3.ggpht.com/-tOQ4ckeAM8E/ThbxX04tpTI/AAAAAAAAA8c/lwAERrzkm_s/Old-_thumb%25255B1%25255D.jpg?imgmax=800" width="276" height="174"></a> </p><br /><p><strong>After Formatting</strong></p><br /><p><a href="http://lh5.ggpht.com/-dd53aKa4CNU/ThbxZa8VIEI/AAAAAAAAA8g/aYRK8AqTNco/s1600-h/Resolver%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="Resolver" border="0" alt="Resolver" src="http://lh6.ggpht.com/-ddi2bKwB5SQ/Thbxa7IoudI/AAAAAAAAA8k/PDordsUa6QY/Resolver_thumb%25255B1%25255D.jpg?imgmax=800" width="268" height="220"></a> </p><br /><p>BingO.. this works for me … ( I know it doesn’t make any sense but it works) .. After done this my all schedule email reports works perfectly.</p><br /><p> </p><br /><p>I hope that it may save some one else time ..</p><br /><p>Thanks</p><br /><p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com0tag:blogger.com,1999:blog-5847983219663332144.post-12558548802241826792011-06-30T12:32:00.001+05:302011-06-30T12:35:33.157+05:30SCOM: Run As Account does not exist on the target system or does not have enough permissions [MS SQL server 2008]<p>Hi, </p> <p>Yesterday my SQL Server Management Pack reporting that it is facing some problem with “run as accounts” it says either “run as accounts does not exists” or they don't have “enough permission” to do some tasks. Both these server have SQL Server 2008 installed.</p> <table border="1" cellspacing="0" cellpadding="2" width="484"> <tbody> <tr> <td valign="top" width="482"><em> <p><em><font face="Consolas">When <strong>SQL 2008</strong> is installed by default, it no longer places <strong>BUILTIN\Administrators</strong> in the SQL security access list. The install of SQL 2008 now prompts the installer to give SQL a user account, or Group, to grant SA (SysAdmin) rights to. If installing on a standalone instance, NT AUTHORITY\SYSTEM (Local System) is still granted SA rights. If installing on a clustered instance, NT AUTHORITY\SYSTEM (Local System) is granted public rights, but not SA. </font></em></p> <p><em><font face="Consolas"><strong><u><a href="http://blogs.technet.com/b/kevinholman/archive/2010/09/08/configuring-run-as-accounts-and-profiles-in-r2-a-sql-management-pack-example.aspx" target="_blank">Kevin Holman</a></u></strong></font></em></p></em></td></tr></tbody></table> <p><strong>Error</strong></p> <p><a href="http://lh3.ggpht.com/-6trNM6WN-7U/TgwekKNWUpI/AAAAAAAAA7g/rM5Z_KDQtmI/s1600-h/Error-1%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="Error-1" border="0" alt="Error-1" src="http://lh6.ggpht.com/-q14-gMDFbpw/Tgwe67k6d6I/AAAAAAAAA7k/rHFGQwRiRn4/Error-1_thumb%25255B1%25255D.jpg?imgmax=800" width="326" height="43"></a></p> <p>Kevin Holman wrote an excellent post on this error.. <a href="http://blogs.technet.com/b/kevinholman/archive/2010/09/08/configuring-run-as-accounts-and-profiles-in-r2-a-sql-management-pack-example.aspx" target="_blank">click here</a></p> <p>I have only few machine which are running SQL Server 2008, so i plan to give my default agent action account the rights on SA in SQL Server 2008.</p> <p>Solution</p> <p>Login to problematic SQL Server. Open SQL Management Studio. Got to SECURITY and then expand LOGINS,</p> <p><a href="http://lh6.ggpht.com/-QKn4Th0IZcY/Tgwe8dMYqQI/AAAAAAAAA7o/JfZRCr5N_Qo/s1600-h/1a%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="1a" border="0" alt="1a" src="http://lh3.ggpht.com/-VO2j1s_3oSk/TgwfI55jhdI/AAAAAAAAA7s/N6UiO6w-Vkk/1a_thumb%25255B1%25255D.jpg?imgmax=800" width="272" height="319"></a> </p> <p>Choose the “Default Agent Action Account” right click on it and then choose Properties.</p> <p><a href="http://lh6.ggpht.com/-fn7bnTFshWg/TgwfKJjt8MI/AAAAAAAAA7w/bghABQCWPD8/s1600-h/2a%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="2a" border="0" alt="2a" src="http://lh4.ggpht.com/-Z0k7XlJXnuI/TgwfRLGLGiI/AAAAAAAAA70/KJf60mw8E2I/2a_thumb%25255B1%25255D.jpg?imgmax=800" width="299" height="290"></a> </p> <p>Now click on “Server Role” and then select “SysAdmin” and click on OK.. </p> <p><a href="http://lh4.ggpht.com/-SRIxsACIQ1U/TgwfdKNHEXI/AAAAAAAAA74/FujGXaP-3gc/s1600-h/3-a%25255B3%25255D.jpg"><img style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" title="3-a" border="0" alt="3-a" src="http://lh5.ggpht.com/-TWl3og3ES00/TgwfkGL0C7I/AAAAAAAAA78/iUt08HigJ-k/3-a_thumb%25255B1%25255D.jpg?imgmax=800" width="331" height="168"></a> </p> <p>That’s All :-) .. It should resolve the SQL Server 2008 Run As Problem.</p> <p>I hope that it helps someone :) </p> <p>Thanks </p> <p>Aman Dhally</p> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com7tag:blogger.com,1999:blog-5847983219663332144.post-29878972235417928752011-06-29T12:01:00.002+05:302011-06-29T12:03:09.603+05:30SCOM: Event ID “2000”<div dir="ltr" style="text-align: left;" trbidi="on">Hi, <br />
Today I check my SCOM windows event log and saw some error logs with <strong>“EVENT ID 2000”.</strong> Complaining about that the one of my SERVER is not a part of SCOM Management Group.<br />
<a href="http://lh4.ggpht.com/-oTiMv2UwoRw/TgrGkltjrUI/AAAAAAAAA64/HK6J2boKWL8/s1600-h/Error%25255B3%25255D.jpg"><img alt="Error" border="0" height="273" src="http://lh6.ggpht.com/-64ghgCLk3Rg/TgrGmt-98PI/AAAAAAAAA68/8iC6pCjgJHE/Error_thumb%25255B1%25255D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Error" width="246" /></a> <br />
<br />
So Lets try to resolve it .<br />
<strong>Step 1</strong><br />
My First Step is Login to the server who is generating an alerts. First I removed the SCOM Agent and then I reinstall again manually.<br />
<strong>Step 2</strong><br />
Now in SCOM console to to “Administration” then click on “Pending Management” and you may see the name of the server on which we just installed the SCOM AGENT.<br />
<a href="http://lh4.ggpht.com/-eAv_ys3UQlk/TgrGocQcsjI/AAAAAAAAA7A/KpRogxhpKNI/s1600-h/Sol-1%25255B3%25255D.jpg"><img alt="Sol-1" border="0" height="55" src="http://lh6.ggpht.com/-FChkUc_pDY4/TgrGp7rgRvI/AAAAAAAAA7E/n8pIqzZtKSI/Sol-1_thumb%25255B1%25255D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Sol-1" width="278" /></a> <br />
Right click on Server and click on “Approve” <br />
<a href="http://lh5.ggpht.com/-UZ3pl4zosl4/TgrGrnowHuI/AAAAAAAAA7I/GLuKnXtC1Fc/s1600-h/Sol-2%25255B3%25255D.jpg"><img alt="Sol-2" border="0" height="80" src="http://lh5.ggpht.com/-xjYKXeLBUAk/TgrGtevxP9I/AAAAAAAAA7M/Y2R1Pb9VVRc/Sol-2_thumb%25255B1%25255D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Sol-2" width="274" /></a> <br />
<br />
Now wait for 3-4 minutes to update the changes in SCOM and after few minute you will see that server is appeared in SCOM and it is healthy now.<br />
<a href="http://lh4.ggpht.com/-HQgTjNrjSoA/TgrGuyK-0DI/AAAAAAAAA7Q/hHXt_b75w-w/s1600-h/Resolve%25255B3%25255D.jpg"><img alt="Resolve" border="0" height="50" src="http://lh5.ggpht.com/--KA5JK1yw_w/TgrGwmQwEII/AAAAAAAAA7U/s6VzjcAxsDI/Resolve_thumb%25255B1%25255D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Resolve" width="303" /></a> <br />
And you will see “EVENT ID 29103” saying that our problematic server is now successfully able to contact with SCOM server.<br />
<a href="http://lh4.ggpht.com/-c9RK9MU4i54/TgrGyrbvLRI/AAAAAAAAA7Y/u_IMss7afSQ/s1600-h/Resolve-1%25255B2%25255D.jpg"><img alt="Resolve-1" border="0" height="244" src="http://lh3.ggpht.com/-QcvF_bOXPuA/TgrG0bDfPFI/AAAAAAAAA7c/Jpfct7w9suw/Resolve-1_thumb.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Resolve-1" width="220" /></a> <br />
<br />
I hope it may helps someone<br />
Thanks <br />
Aman Dhally</div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1tag:blogger.com,1999:blog-5847983219663332144.post-60806567840105137662011-05-31T16:11:00.002+05:302011-05-31T16:18:35.724+05:30SCOM: Event ID “33333” in SCOM from Source “DataAccesslayer”<div style="text-align: left" dir="ltr" trbidi="on">Hi, <br>From past few days i am getting Event ID code “<strong>33333</strong>” from source “<strong>DataAccesslayer</strong>” in Operations Manager Log of my RMS. This events are generating in almost every minute. <br><a href="http://lh4.ggpht.com/-IByI5PDtoRs/TeTFsY96xFI/AAAAAAAAA58/kIaC0fi_6-E/s1600-h/A%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="A" border="0" alt="A" src="http://lh5.ggpht.com/-Fl4hSQ7j06M/TeTFuCbo1AI/AAAAAAAAA6A/RYwc_js3xeQ/A_thumb%25255B1%25255D.jpg?imgmax=800" width="292" height="136"></a> <br>The error is indicating about to “Enable "<strong>clr</strong>" configuration option” is SQL server <br><a href="http://lh4.ggpht.com/-0ANBp30QvHc/TeTFvmRRphI/AAAAAAAAA6E/pQNdqryejYg/s1600-h/B%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="B" border="0" alt="B" src="http://lh6.ggpht.com/-owLuTlhzlEU/TeTFxYKMr0I/AAAAAAAAA6I/f983TV3-qRs/B_thumb%25255B1%25255D.jpg?imgmax=800" width="287" height="317"></a> <br><strong><u>Text Error Code</u></strong> </div> <table border="1" cellspacing="0" cellpadding="2" width="455"> <tbody> <tr> <td valign="top" width="453"><font size="3"><span style="font-size: x-small">Event Type: Warning<br>Event Source: DataAccessLayer<br>Event Category: None<br>Event ID: 33333<br>Date: 31/05/2011<br>Time: 09:28:41<br>User: N/A<br>Computer: Foo-BAR<br>Description:<br>Data Access Layer rejected retry on SqlError:<br>Request: MTV_SelectProperty_b87e82bc-1a85-4de3-330a-13133cf5f9c3 --</span><br><span style="font-size: x-small">(ManagedTypeId=994bdf28-10b8-52e4-3334-d65a63d9fe52), (IsDeleted=False),</span><br></font><font size="3"><span style="font-size: x-small">(RegExPattern0=(?i)^10.0..*), (RegExPattern1=(?i)^10.1..*)<br>Class: 16<br>Number: 6263<br>Message: Execution of user code in the .NET Framework is disabled. Enable "clr enabled" configuration option. </span><br><span style="font-size: x-small">For more information, see Help and Support Center at </span></font><a href="http://go.microsoft.com/fwlink/events.asp"><span style="font-size: x-small"><font size="3">http://go.microsoft.com/fwlink/events.asp</font></span></a><span style="font-size: x-small"><font size="3">.</font></span></td></tr></tbody></table> <div style="text-align: left" dir="ltr" trbidi="on"><br><strong><u>Solution:</u></strong><br>I searched few website and finally I got the solution. The solution is to enable “CLR” option is “OperationsManager” database so that user codes in .NET can executes</div> <div style="text-align: left" dir="ltr" trbidi="on"><br>To do this Connect to your SQL server and log in to SQL Server management Console.</div> <div style="text-align: left" dir="ltr" trbidi="on"><br>Right Click the “<strong>OperationsManager</strong>” database and click on “<strong>New Query</strong>”</div> <div style="text-align: left" dir="ltr" trbidi="on"><br><a href="http://lh6.ggpht.com/-Fq6HEhRnpBw/TeTFytafzsI/AAAAAAAAA6M/VkwCVBKyuEo/s1600-h/C%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="C" border="0" alt="C" src="http://lh4.ggpht.com/-UoqlaTwvg_k/TeTF0Z9emYI/AAAAAAAAA6Q/0SpcMUj1dko/C_thumb%25255B1%25255D.jpg?imgmax=800" width="333" height="114"></a> </div> <div style="text-align: left" dir="ltr" trbidi="on"><br>In “New Query windows” type the below code and then click on “<strong>Execute</strong>” <br></div> <div style="text-align: left" dir="ltr" trbidi="on"> <table style="width: 400px" border="1" cellspacing="0" cellpadding="2"> <tbody> <tr> <td valign="top" width="398"><em>sp_configure @configname=clr_enabled, @configvalue=1<br>GO<br>RECONFIGURE<br>GO</em></td></tr></tbody></table></div> <div style="text-align: left" dir="ltr" trbidi="on"> </div> <div style="text-align: left" dir="ltr" trbidi="on"> </div> <div style="text-align: left" dir="ltr" trbidi="on"><a href="http://lh4.ggpht.com/-6YxddGN75tk/TeTF1lnxPgI/AAAAAAAAA6U/uJx70OJ11TA/s1600-h/D%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="D" border="0" alt="D" src="http://lh4.ggpht.com/-P9zs4b5wZwA/TeTF3AInoSI/AAAAAAAAA6Y/R8646wjuv8Y/D_thumb%25255B1%25255D.jpg?imgmax=800" width="346" height="64"></a> </div> <div style="text-align: left" dir="ltr" trbidi="on"><br>In Message Pan you will see that it run successfully and “<strong>clr</strong>” option in changed from “0” to “1”.</div> <div style="text-align: left" dir="ltr" trbidi="on"><br><a href="http://lh4.ggpht.com/-yJRS2f1rR2g/TeTF4poVheI/AAAAAAAAA6c/eQVg0erI-SI/s1600-h/E%25255B3%25255D.jpg"><img style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" title="E" border="0" alt="E" src="http://lh5.ggpht.com/-ZNFk6XEeVDw/TeTF6IxQIJI/AAAAAAAAA6g/kCbXBKJItIk/E_thumb%25255B1%25255D.jpg?imgmax=800" width="350" height="307"></a> </div> <div style="text-align: left" dir="ltr" trbidi="on"><br>After i done this, the error code “33333” not occurred again … <br>source: <a href="http://social.technet.microsoft.com/Forums/en-US/operationsmanagergeneral/thread/e798a59d-c63e-445f-9e4e-b338c7fdc270/" target="_blank">TechNet</a><br>I hope it helps someone :) <br><br>Thanks <br>Aman Dhally</div> Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com0tag:blogger.com,1999:blog-5847983219663332144.post-51615517497404642602011-05-27T15:28:00.002+05:302011-05-27T15:31:38.436+05:30SCOM: SCOM not recognising SQL Server 2008 and Reporting Services installed<div dir="ltr" style="text-align: left;" trbidi="on">Hi<br />
Yesterday I planned to install “Reporting Server” and “Data Warehouse” for SCOM on Microsoft SQL Server 2008. So to implement it i setup a new Server and Install Microsoft SQL Server 2008 and SQL Reporting Services in to it but when i run the “Check Prerequisites” from SCOM Installation media it was not recognising the SQL and Reporting Services Installed.<br />
<a href="http://lh5.ggpht.com/--fb7249g-OA/Td91ry0KhnI/AAAAAAAAA48/5_OL0u2N0lM/s1600-h/1%25255B5%25255D.jpg"><img alt="1" border="0" height="217" src="http://lh4.ggpht.com/-DNi970GXOpQ/Td91tqWmTYI/AAAAAAAAA5A/sQjT6vyreyw/1_thumb%25255B1%25255D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="1" width="244" /></a> <br />
Then I Click on More to check the details of the error.<br />
<a href="http://lh6.ggpht.com/-smEhc0Ogyhs/Td91u3sPFZI/AAAAAAAAA5E/kqMf-f3dTEs/s1600-h/2%25255B2%25255D.jpg"><img alt="2" border="0" height="219" src="http://lh4.ggpht.com/-bVIZuIgOl5I/Td91wWzPrII/AAAAAAAAA5I/770eqQEDXdw/2_thumb.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="2" width="244" /></a> <br />
<a href="http://lh4.ggpht.com/-eOyqYUy-dKY/Td91x1FhLgI/AAAAAAAAA5M/Vs7y-2LVAwQ/s1600-h/3%25255B2%25255D.jpg"><img alt="3" border="0" height="215" src="http://lh4.ggpht.com/-yOx_Zm_PEdk/Td91zeuHADI/AAAAAAAAA5Q/_PqUZsiXEuU/3_thumb.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="3" width="244" /></a> <br />
<strong>Solutions:</strong><br />
The problem was “SCOM” needs “SQL Server 2008” with “Service Pack 1” or later. You can download SQL 2008 service pack 1 from <a href="http://www.microsoft.com/downloads/en/details.aspx?FamilyID=66ab3dbb-bf3e-4f46-9559-ccc6a4f9dc19&displaylang=en" target="_blank">here</a>.<br />
After Installation of Service Pack .. SCOM Detects the SQL Server 2008 and reporting Services.<br />
<a href="http://lh5.ggpht.com/-7UmfsFEsWqA/Td910ttzdyI/AAAAAAAAA5U/csMOc_WICsE/s1600-h/11%25255B2%25255D.jpg"><img alt="11" border="0" height="218" src="http://lh3.ggpht.com/-KMgtj0rqnn0/Td912CVjaqI/AAAAAAAAA5Y/Zrts3FkuhOA/11_thumb.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="11" width="244" /></a> <br />
I know its my mistakes. I should read the dependencies and prerequisites before doing anything.But I am sharing it may be it helps someone :)<br />
<br />
Thanks<br />
Aman Dhally </div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com0tag:blogger.com,1999:blog-5847983219663332144.post-57810850403530699262011-05-19T19:11:00.002+05:302011-05-19T19:14:20.692+05:30SCOM: How to Backup System Center Operations Manager 2007 R2<div dir="ltr" style="text-align: left;" trbidi="on">HI All, <br />
Yesterday I was working on “How to Backup System Center Operations Manager 2007 R2”. I go through different document and posts and read few documentations and I think I should also share this information with you. <br />
Our first step is to plan what to backup. So here is the list<br />
<ol><li>Note down SCOM servers IP Address, Subnet, Gateway<br />
</li>
<li>Note down the Location of System Center Operations Manager Installation Path<br />
</li>
<li>Backup SCOM Databases <ol><li><strong>OperationsManager</strong> (Operational Database)<br />
</li>
<li><strong>OperationsManagerDW</strong> (Dataware house Database)<br />
</li>
<li><strong>OperationsManagerAC</strong> (Audit Collection Server Database)<br />
</li>
<li><strong>ReportServer</strong> (Reporting Server Database)<br />
</li>
<li><strong>ReportServerTempDB</strong> (Reporting Server Temporary Database)<br />
</li>
<li><strong>Master</strong> (SQL Server Master Database)<br />
</li>
<li><strong>MsDbData </strong>(Msdb database)</li>
</ol></li>
<li>IIS 6.0 Metabase or IIS 7.0 configuration<br />
</li>
<li>Root Management Server Encryption Key<br />
</li>
<li>Create List of All Management Pack Installed<br />
</li>
<li>Backup of Unsealed (customised) Management packs<br />
</li>
<li>SCOM Registry Keys<br />
</li>
<li>Backup your files </li>
</ol>Let’s Start <br />
<ol><li>I have noted down the IP-Address of SCOM including Subnet mask, Gateway IP and DNS Entries.<br />
</li>
<li>I noted down the location where is my SCOM in Installed, in my case it is installed on “<strong>C:\Program Files\System Center Operations Manager 2007</strong>”<br />
</li>
<li>Backup Databases </li>
</ol><u>Operations Manager Operational Database (</u><strong><u>OperationsManager)</u> </strong><br />
The OperationsManager database contains almost all of the Operations Manager environment configuration settings, agent information, management packs with customizations, operations data, and other data required for Operations Manager to operate properly.<br />
Note: If your backup procedure sets the OperationsManager database to be offline during backup, Operations Manager caches incoming data, and then, after backup is complete, Operations Manager stores that data in the database.<br />
Open “<strong>Microsoft SQL Server Management Studio</strong>” , Expend the “<strong>Database</strong>” , Right click on “<strong>OperationsManager</strong>”, choose “<strong>Tasks</strong>” and click on “<strong>Backup</strong>”<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUdQ04JHgI/AAAAAAAAA1Y/88xn6O2QK_Y/s1600-h/SqlBackup111.jpg"><img alt="SqlBackup-1" border="0" height="243" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUdR1yiBYI/AAAAAAAAA1c/j232fQiLR9s/SqlBackup1_thumb5.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="SqlBackup-1" width="294" /></a> <br />
For now, I am choosing “<strong>Backup type = Full</strong>” and Name of the Backup and Backup Destinations, (for now I am backing up the data in to my network folder (Click on “ADD” to define the location of where you want to keep your backup”) and click on “<strong>OK</strong>”<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUdS9oxs-I/AAAAAAAAA1g/-1uUowlbJA0/s1600-h/SqlBackup23.jpg"><img alt="SqlBackup-2" border="0" height="266" src="http://lh4.ggpht.com/_7fc0QWesxus/TdUdT1WvAqI/AAAAAAAAA1k/KjdLFZv3Fo0/SqlBackup2_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="SqlBackup-2" width="296" /></a> <br />
After “Backup” process finish , you can see the data on your backup destination folder.<br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdUdU8XKHZI/AAAAAAAAA1o/IwyrUwGpxUs/s1600-h/SqlBackup33.jpg"><img alt="SqlBackup-3" border="0" height="185" src="http://lh4.ggpht.com/_7fc0QWesxus/TdUdWHI6waI/AAAAAAAAA1s/8UuvUKubsUA/SqlBackup3_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="SqlBackup-3" width="295" /></a> <br />
<br />
Do the same for all SCOM Databases ( <strong><em>OperationsManagerDW, OperationsManagerAC,ReportServer,ReportServerTempDB,Master,MsDbData</em></strong>) <br />
<ul><li><strong>Reporting Databases (just a brief intro)</strong></li>
</ul>Operations Manager Reporting uses the following databases: <br />
· Operations Manager 2007 data warehouse (<strong>OperationsManagerDW</strong>) <br />
· SQL Server Reporting Services databases (<strong>ReportServer</strong> and <strong>ReportServerTempDB</strong>) <br />
The OperationsManagerDW database contains all of the performance and other operational data from your Operations Manager environment. SQL Reporting Services then uses this data to generate reports such as trend analysis and performance tracking. <br />
<ul><li><strong>ACS Database (just a brief intro)</strong></li>
</ul>The Audit Collection Services (ACS) database, OperationsManagerAC, is the central repository for events and security logs that are collected by ACS forwarders on monitored computers. <br />
The OperationsManagerAC database can grow significantly depending upon how many ACS forwarders send events to the ACS database and the filters configured to control what events are written to the database. <br />
<ul><li><a href="" name="z8"></a><strong>Master Database (just a brief intro)</strong></li>
</ul>The master database is a system database, which records all of the system-level information for a Microsoft SQL Server system, including the location of the database files. It also records all logon accounts and system configuration settings. The proper functionality of the master database is key to the operation of all of the databases in a SQL Server instance. <br />
<ul><li><a href="" name="z9"></a><strong>MSDB Database (just a brief intro)</strong></li>
</ul>The MSDB database, Msdbdata, is a SQL system database, which is used by the SQL Server agent to schedule jobs and alerts and for recording operators. The proper functionality of the MSDB database is key to the operation of all the databases in a SQL Server instance. <br />
<br />
<strong><u>Backup IIS Metabase</u></strong><br />
My SCOM installed on “Windows 2003 server” so I am using IIS 6.0. To backup IIS 6.0 metabase, Go to <strong>RUN</strong> (windows key + R) and type <strong>“%systemroot%\system32\inetsrv\iis.msc</strong>” and hit OK<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUdW6WtaHI/AAAAAAAAA1w/zkw8RijlqRk/s1600-h/IIS3.jpg"><img alt="IIS" border="0" height="158" src="http://lh5.ggpht.com/_7fc0QWesxus/TdUdX5AkWkI/AAAAAAAAA10/sr5b2DXAM5o/IIS_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="IIS" width="302" /></a> <br />
Right click on your “<strong>Computer Name</strong>” and then click on “<strong>All tasks</strong>” and choose “<strong>Backup/Restore configuration</strong>”<br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdUdY5Fv9rI/AAAAAAAAA14/EBkYA-eYm2o/s1600-h/IISMetabackup1SCOCM3.jpg"><img alt="IISMetabackup-1-SCOCM" border="0" height="162" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUdaAsxcxI/AAAAAAAAA18/eghJuMQbqlo/IISMetabackup1SCOCM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="IISMetabackup-1-SCOCM" width="314" /></a> <br />
Click on “<strong>Create Backup</strong>” and then type the “<strong>Configurations backup Name</strong>” and then hit on “<strong>OK</strong>”<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUdbB4IbHI/AAAAAAAAA2A/De4RtpPnf94/s1600-h/IISMetabackup2SCOCM3.jpg"><img alt="IISMetabackup-2-SCOCM" border="0" height="249" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUdcTn44nI/AAAAAAAAA2E/AR-6B-Un9s8/IISMetabackup2SCOCM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="IISMetabackup-2-SCOCM" width="302" /></a> <br />
By Default all Metadata are stored in <strong>“%systemroot%\system32\inetsrv\MetaBack</strong>”<br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdUddfsxFeI/AAAAAAAAA2I/68RPheBJiaM/s1600-h/IISMetabackup4SCOCM3.jpg"><img alt="IISMetabackup-4-SCOCM" border="0" height="91" src="http://lh5.ggpht.com/_7fc0QWesxus/TdUdeI2DAHI/AAAAAAAAA2M/Zki-r0foBEs/IISMetabackup4SCOCM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="IISMetabackup-4-SCOCM" width="372" /></a> <br />
<br />
<strong><u>Backup Root Management Server Encryption Key </u></strong><br />
To restore SCOM from scratch we need “RMS Encryption Key”. You must backup “RMS Encryption Key” and store it on secure locations.<br />
To backup an Encryption Key go to “<strong>C:\Program Files\System Center Operations Manager 2007</strong>” double click <strong>SecureStorageBackup.exe</strong> <br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdUdfD1OKVI/AAAAAAAAA2Q/GCgNzPogxXc/s1600-h/BackupEncryptionKey1SCOM3.jpg"><img alt="BackupEncryptionKey-1-SCOM" border="0" height="259" src="http://lh4.ggpht.com/_7fc0QWesxus/TdUdf_9fq2I/AAAAAAAAA2U/l5ayiYON3kA/BackupEncryptionKey1SCOM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="BackupEncryptionKey-1-SCOM" width="244" /></a> <br />
When you double click “<strong>SecureStorageBackup.exe</strong>”, an “<strong>Encryption Key Backup and restore wizard</strong>” Open, click on <strong>NEXT</strong><br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdUdhYr0u0I/AAAAAAAAA2Y/R9jadzYQUEE/s1600-h/BackupEncryptionKey2SCOM3.jpg"><img alt="BackupEncryptionKey-2-SCOM" border="0" height="252" src="http://lh6.ggpht.com/_7fc0QWesxus/TdUdiYwrj6I/AAAAAAAAA2c/aITl9PUzZPk/BackupEncryptionKey2SCOM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="BackupEncryptionKey-2-SCOM" width="288" /></a> <br />
in “<strong>Select Action</strong>” choose to “<strong>Backup Encryption Key</strong>” and click on “NEXT”<br />
<a href="http://lh5.ggpht.com/_7fc0QWesxus/TdUdjfkyxwI/AAAAAAAAA2g/d9Ase5r4z_Q/s1600-h/BackupEncryptionKey3SCOM3.jpg"><img alt="BackupEncryptionKey-3-SCOM" border="0" height="246" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUdkfhsjOI/AAAAAAAAA2k/-BTYcp_oiYo/BackupEncryptionKey3SCOM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="BackupEncryptionKey-3-SCOM" width="280" /></a> <br />
Now “<strong>Specify the location of Backup File</strong>” where you want to save your encryption key, name it and click Next<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUdlpoqxJI/AAAAAAAAA2o/QFz9T15U1pk/s1600-h/BackupEncryptionKey4SCOM3.jpg"><img alt="BackupEncryptionKey-4-SCOM" border="0" height="242" src="http://lh6.ggpht.com/_7fc0QWesxus/TdUdmYcbumI/AAAAAAAAA2s/MPn6_viescs/BackupEncryptionKey4SCOM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="BackupEncryptionKey-4-SCOM" width="274" /></a><br />
Specify the password to protect the key and SCOM will ask for this password when we restore it after restorations after failure.<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUdnIoctHI/AAAAAAAAA2w/Wv3LXdPdya8/s1600-h/BackupEncryptionKey5SCOM3.jpg"><img alt="BackupEncryptionKey-5-SCOM" border="0" height="247" src="http://lh5.ggpht.com/_7fc0QWesxus/TdUdn_j0ebI/AAAAAAAAA20/et-8wN5j1n8/BackupEncryptionKey5SCOM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="BackupEncryptionKey-5-SCOM" width="279" /></a> <br />
Click on “Finish”<br />
<a href="http://lh5.ggpht.com/_7fc0QWesxus/TdUdooc5CfI/AAAAAAAAA24/2wRJOcqHYM8/s1600-h/BackupEncryptionKey6SCOM3.jpg"><img alt="BackupEncryptionKey-6-SCOM" border="0" height="244" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUdpgrz1UI/AAAAAAAAA28/c7o4e7uicnE/BackupEncryptionKey6SCOM_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="BackupEncryptionKey-6-SCOM" width="280" /></a> <br />
<br />
<strong><u>Create List of All Management Pack Installed</u></strong><br />
It is handy to keep the latest list of all “Management Pack” installed in SCOM. The list will helps us to download or restore them. To create an List of All Management Packs, open “Operations Manager Shell” and type :<br />
“<strong>Get-ManagementPack | Export-csv c:\ManagementPackList-May-2011.csv</strong>” <br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUdqZ13BKI/AAAAAAAAA3A/DymTnib-dVk/s1600-h/Listmanagementpack3.jpg"><img alt="List-managementpack" border="0" height="62" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUdrb8UguI/AAAAAAAAA3E/uYTfsHOwwyQ/Listmanagementpack_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="List-managementpack" width="450" /></a> <br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdUdsD7tXVI/AAAAAAAAA3I/2gcQ5P_q6S8/s1600-h/CDrive2.jpg"><img alt="CDrive" border="0" height="137" src="http://lh4.ggpht.com/_7fc0QWesxus/TdUds4J_86I/AAAAAAAAA3M/6qfxJpC24E0/CDrive_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="CDrive" width="240" /></a> <br />
this will export all management packs in to .CSV file which we can import to excel and see the list of sealed and unsealed Management Packs <br />
for example : Import the CSV file in to Microsoft Excel and create a filter on Data and the you are view list of All management packs by “sealed” or “Unsealed”<br />
<a href="http://lh5.ggpht.com/_7fc0QWesxus/TdUdtwqIO-I/AAAAAAAAA3Q/2yNNaJwhuoo/s1600-h/Filter4.jpg"><img alt="Filter" border="0" height="177" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUduwae-nI/AAAAAAAAA3U/NJ36A0LuODE/Filter_thumb2.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="Filter" width="427" /></a> <br />
<br />
<strong><u>Backup of Unsealed (customised) Management packs</u></strong> <br />
Open “<strong>System Center Operations Manager Console</strong>” click on “<strong>Monitoring</strong>” , click on “<strong>Management Packs</strong>” and sort the Management Packs by “<strong>Sealed</strong>” or “<strong>Unsealed</strong>”, choose the “Management pack” which you want to export, then right click it and choose “Export management pack” <br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdUdv6SHhBI/AAAAAAAAA3Y/7AihcPhBddQ/s1600-h/ExportMpGui3.jpg"><img alt="Export-Mp-Gui" border="0" height="268" src="http://lh6.ggpht.com/_7fc0QWesxus/TdUdw1qxB6I/AAAAAAAAA3c/F1NqZ5LbA9w/ExportMpGui_thumb1.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="Export-Mp-Gui" width="424" /></a> <br />
choose the location where you want to save “Management Pack” and click on “Ok”<br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdUdxnNPTeI/AAAAAAAAA3g/I-TT_4ltrSs/s1600-h/Export-Mp-Gui-1.jpg"><img alt="Export-Mp-Gui-1" border="0" height="307" src="http://lh6.ggpht.com/_7fc0QWesxus/TdUdyvcam8I/AAAAAAAAA3k/dFazLii54Xw/Export-Mp-Gui-1_thumb.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Export-Mp-Gui-1" width="317" /></a><br />
Exported “Successfully” , do the same for every unsealed Management Pack<br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdUdzhpYlqI/AAAAAAAAA3o/WYbuEXEiCJY/s1600-h/Export-Mp-Gui-2%5B3%5D.jpg"><img alt="Export-Mp-Gui-2" border="0" height="81" src="http://lh4.ggpht.com/_7fc0QWesxus/TdUd0lyAqNI/AAAAAAAAA3s/fmhkrv0Ufzw/Export-Mp-Gui-2_thumb%5B1%5D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Export-Mp-Gui-2" width="373" /></a> <br />
<br />
<strong><u>Backup SCOM Registry Keys</u></strong> <br />
I read on some posts that we need to backup SCOM registry Keys and it seems a good backup practice. so open “Registry editor" navigate to “<strong>My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Operations Manager\</strong>” and export the whole key.<br />
<a href="http://lh5.ggpht.com/_7fc0QWesxus/TdUd1Ogb0PI/AAAAAAAAA3w/9b6ZFS6W7-k/s1600-h/RegistryBackupLocation-SCOM%5B3%5D.jpg"><img alt="RegistryBackupLocation-SCOM" border="0" height="346" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUd2P0J4lI/AAAAAAAAA30/9qunVjNT-lo/RegistryBackupLocation-SCOM_thumb%5B1%5D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="RegistryBackupLocation-SCOM" width="283" /></a> <br />
Right Click on “<strong>Microsoft Operations manager</strong>” ,Click on “<strong>Export</strong>”<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUd3IK0GWI/AAAAAAAAA34/GGj1C944WN4/s1600-h/Export%20registry%5B3%5D.jpg"><img alt="Export registry" border="0" height="204" src="http://lh5.ggpht.com/_7fc0QWesxus/TdUd37w0IJI/AAAAAAAAA38/CEmz7XGzoGY/Export%20registry_thumb%5B1%5D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Export registry" width="288" /></a> <br />
Choose the location where to save registry keys, and choose the file name make sure you have selected (Selected branch), and click on “<strong>Save</strong>” <br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdUd42ZtwnI/AAAAAAAAA4A/fr1iCJIbLvE/s1600-h/Export%20registry-1%5B3%5D.jpg"><img alt="Export registry-1" border="0" height="282" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUd5hUjmpI/AAAAAAAAA4E/-HzXjQLCDCs/Export%20registry-1_thumb%5B1%5D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Export registry-1" width="314" /></a> <br />
<br />
<strong><u>Backup your files</u></strong> <br />
The last thing to backup is your installation folder. :-).<br />
<a href="http://lh5.ggpht.com/_7fc0QWesxus/TdUd6V7SVmI/AAAAAAAAA4I/LrpZ4vMWfFw/s1600-h/Folder%5B3%5D.jpg"><img alt="Folder" border="0" height="150" src="http://lh3.ggpht.com/_7fc0QWesxus/TdUd7WnINYI/AAAAAAAAA4M/B5bbwNLBTC0/Folder_thumb%5B1%5D.jpg?imgmax=800" style="border-bottom: 0px; border-left: 0px; border-right: 0px; border-top: 0px; display: inline;" title="Folder" width="332" /></a> <br />
As per Microsoft documentations when you restoring your folder make sure you don’t restore the “Heath service State” folder.<br />
<br />
That’s all :-) <br />
Hope it helps someone <br />
<br />
Thanks<br />
Aman Dhally</div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com3tag:blogger.com,1999:blog-5847983219663332144.post-52724764832602937182011-05-16T20:48:00.002+05:302011-05-16T23:56:41.966+05:30SCOM: Monitoring Windows Event Logs Using SCOM<div dir="ltr" style="text-align: left;" trbidi="on">HI, All <br />
In my IT environment I am using “Symantec Backup Exec” to backup the data of the servers. from past few days some Backup Jobs are getting failed. We knew the failure of these backup jobs after few days after failure. After this incident I decide to monitor these backup failure using “SCOM”. For me the best option was to monitor “Windows Event Log”, because in SCOM it is very easy to monitor “Event Logs”<br />
The “Symantec Backup Exec” log a “failure” or “success” event in “Application” Log. The event code for Failure is “341132. So for Monitoring i need to create a monitor which can alert me when Event ID 34113 created. So I plant to Monitor “Event ID 34113” from “Source Backup Exec”<br />
<strong><u>Problem</u></strong><br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdE_hAWVxcI/AAAAAAAAAyc/CxL0-iNT_J8/s1600-h/1%5B2%5D.jpg"><img alt="1" border="0" height="244" src="http://lh4.ggpht.com/_7fc0QWesxus/TdE_iDDySzI/AAAAAAAAAyg/JsEO__0VJVM/1_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="1" width="223" /></a> <br />
<strong><u>Step: 1 Create a Monitor</u></strong><br />
Open “Authoring” Pane, select “Monitors” <br />
<a href="http://lh5.ggpht.com/_7fc0QWesxus/TdE_wuUlA9I/AAAAAAAAAyk/Dd_giD9vzRQ/s1600-h/2%5B2%5D.jpg"><img alt="2" border="0" height="244" src="http://lh5.ggpht.com/_7fc0QWesxus/TdE_xjv5bFI/AAAAAAAAAyo/j0sgLhSdfTc/2_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="2" width="156" /></a> <br />
Right click on “Monitors”, choose “Create a Monitor” and choose “Unit Monitor”<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdE_yctT9JI/AAAAAAAAAys/gFZF3MbaQBY/s1600-h/3%5B2%5D.jpg"><img alt="3" border="0" height="56" src="http://lh5.ggpht.com/_7fc0QWesxus/TdE_yxbAk2I/AAAAAAAAAyw/wupBzmBz6yQ/3_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="3" width="244" /></a> <br />
Expand “Windows Events” then expand “Simple event detection” and choose “Manual Reset” then choose you management pack where you are planning to save this “Monitor”<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdE_z_iNZtI/AAAAAAAAAy0/Z9MstykE3aI/s1600-h/4%5B2%5D.jpg"><img alt="4" border="0" height="238" src="http://lh6.ggpht.com/_7fc0QWesxus/TdE_0_fdpDI/AAAAAAAAAy4/-H5WHrmTQiE/4_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="4" width="244" /></a> <br />
Type “Name” for this Monitor i am using “failure of Differential backup” and write a brief “Description” and in “Monitoring Target” i am choosing “Windows Server Operating System” because in my environment “Symantec backup exec” in installed on windows 2003 and 2008 servers, not click Next<br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdE_1kDjnnI/AAAAAAAAAy8/afSEMq3m7sw/s1600-h/5%5B2%5D.jpg"><img alt="5" border="0" height="239" src="http://lh6.ggpht.com/_7fc0QWesxus/TdE_2YgPoFI/AAAAAAAAAzA/j-enoTlTSjw/5_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="5" width="244" /></a> <br />
choose the “Log Name” where your application write “event logs” in my case “Symantec Backup Exec” writes event in “Application Log” that’s why i choose “Application” now click on Next<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdE_3LkI9PI/AAAAAAAAAzE/Ng_2IHOz7fQ/s1600-h/6%5B2%5D.jpg"><img alt="6" border="0" height="236" src="http://lh3.ggpht.com/_7fc0QWesxus/TdE_3oX_c5I/AAAAAAAAAzI/eXctQfR5Vls/6_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="6" width="244" /></a><br />
Now we need to provide the Event ID and Event Source in Expression Builder so that is any event log matched this criteria created SCOM can alert us. In My case “Event ID is 34113” and Event Source is “Backup Exec” , now click on NEXT<br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdE_4jTMH2I/AAAAAAAAAzM/lrTnj33J8gE/s1600-h/7%5B2%5D.jpg"><img alt="7" border="0" height="237" src="http://lh6.ggpht.com/_7fc0QWesxus/TdE_5cfXnzI/AAAAAAAAAzQ/WbxZZuX-0Eo/7_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="7" width="244" /></a> <br />
Now we need to “Configure Health Conditions” so If “Event is Raised” then the status is “Warning” otherwise it is “Healthy” now click on “Next”<br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdE_6BQyUxI/AAAAAAAAAzU/tlYtBTIEFrI/s1600-h/8%5B2%5D.jpg"><img alt="8" border="0" height="238" src="http://lh4.ggpht.com/_7fc0QWesxus/TdE_68FLfaI/AAAAAAAAAzY/FqVQBSh2x8A/8_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="8" width="244" /></a><br />
We need an alert when is Event is Created , so click on “Generate Alerts for this Monitor” and click on “Create”<br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdE_7VBt7gI/AAAAAAAAAzc/pfMfatNyqTw/s1600-h/9%5B5%5D.jpg"><img alt="9" border="0" height="237" src="http://lh5.ggpht.com/_7fc0QWesxus/TdE_8CO_r7I/AAAAAAAAAzg/jvbYgi51jeE/9_thumb%5B1%5D.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="9" width="244" /></a> <br />
<br />
<strong><em><u>Step: 2 Create a subscription</u></em></strong> <br />
I am creating a New Subscription for it so that whenever this Event ID creates or Backup Job Fails then it should send an alert "our “Backup Administrators”<br />
Click on “Administration” and Select “Subscriptions”<br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdE_84EacXI/AAAAAAAAAzk/Iyb3MpAAfjI/s1600-h/10%5B2%5D.jpg"><img alt="10" border="0" height="244" src="http://lh6.ggpht.com/_7fc0QWesxus/TdE_9y2JtaI/AAAAAAAAAzo/QF-N1Lj43Ko/10_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="10" width="157" /></a> <br />
Right click on “Subscriptions” and choose “New Subscriptions” <br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdE_-379ZhI/AAAAAAAAAzs/YypYqib1BEQ/s1600-h/11%5B2%5D.jpg"><img alt="11" border="0" height="244" src="http://lh5.ggpht.com/_7fc0QWesxus/TdE__pTVUuI/AAAAAAAAAzw/ubNLqm96oaU/11_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="11" width="158" /></a> <br />
Now Type “Subscription Name” and Description and click Next<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdFAAVynwyI/AAAAAAAAAz0/DLA6msgHMGY/s1600-h/12%5B2%5D.jpg"><img alt="12" border="0" height="244" src="http://lh6.ggpht.com/_7fc0QWesxus/TdFAA8HFotI/AAAAAAAAAz4/52xjvZLYuhI/12_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="12" width="240" /></a> <br />
In “Subscription Criteria” click on “Created by Specific rules or Monitors” and choose our previously created “Monitor” “Failure of Differential backup” and click on Next<br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdFAB9eDeUI/AAAAAAAAAz8/_aF6MvxQYXo/s1600-h/13%5B2%5D.jpg"><img alt="13" border="0" height="139" src="http://lh3.ggpht.com/_7fc0QWesxus/TdFACY-wQfI/AAAAAAAAA0A/0r7HLS1lox8/13_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="13" width="244" /></a><br />
Add users which intended to receive the alerts, after adding users click on NEXT<br />
<a href="http://lh5.ggpht.com/_7fc0QWesxus/TdFADaTW7xI/AAAAAAAAA0E/5ZOjcPu2lfA/s1600-h/14%5B2%5D.jpg"><img alt="14" border="0" height="244" src="http://lh5.ggpht.com/_7fc0QWesxus/TdFAEHxfwRI/AAAAAAAAA0I/8RGJyqZ-dfQ/14_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="14" width="214" /></a> <br />
Choose Channels by which you are going to send an alerts, in my case I am sending alerts using an email. click NEXT<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdFAEnOetpI/AAAAAAAAA0M/WpOYgFWbY58/s1600-h/15%5B2%5D.jpg"><img alt="15" border="0" height="244" src="http://lh6.ggpht.com/_7fc0QWesxus/TdFAFf6rlEI/AAAAAAAAA0Q/3n6fHPsMzXY/15_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="15" width="230" /></a> <br />
Click on “Enable this notifications subscription” and click on Finish.<br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdFAGd3I6PI/AAAAAAAAA0U/arp83Vh_bNM/s1600-h/16%5B2%5D.jpg"><img alt="16" border="0" height="241" src="http://lh6.ggpht.com/_7fc0QWesxus/TdFAHPLAV7I/AAAAAAAAA0Y/Gb8fC2cib9w/16_thumb.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="16" width="244" /></a> <br />
<br />
<strong><em><u>Step: 3 Testing</u></em></strong><br />
Now its time to test the monitor, I used Logevent.exe to create an demo alert in window Application Log. See <a href="http://support.microsoft.com/kb/315410" target="_blank">this</a> link to know more about <a href="http://support.microsoft.com/kb/315410" target="_blank">Logevent</a> utility. <br />
<a href="http://lh4.ggpht.com/_7fc0QWesxus/TdFAH-hr0mI/AAAAAAAAA0c/rHB0489njL8/s1600-h/18%5B5%5D.jpg"><img alt="18" border="0" height="23" src="http://lh6.ggpht.com/_7fc0QWesxus/TdFAIjgeSEI/AAAAAAAAA0g/vZwvDsDZtfQ/18_thumb%5B3%5D.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="18" width="244" /></a> <br />
<br />
<strong><em><u>Step: 4 Result </u></em></strong><br />
Bingo !!! It shows warning in SCOM Alert window.<br />
<a href="http://lh3.ggpht.com/_7fc0QWesxus/TdFAJD7VK8I/AAAAAAAAA0k/mIZE7UsOKmw/s1600-h/19%5B4%5D.jpg"><img alt="19" border="0" height="27" src="http://lh3.ggpht.com/_7fc0QWesxus/TdFAJ4V2G2I/AAAAAAAAA0o/I23vu-QkC_U/19_thumb%5B2%5D.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="19" width="244" /></a> <br />
and it also send me an email about this alert :-)<br />
<a href="http://lh6.ggpht.com/_7fc0QWesxus/TdFAKq2mjcI/AAAAAAAAA0s/wxn4gkcvedw/s1600-h/20%5B8%5D.jpg"><img alt="20" border="0" height="84" src="http://lh3.ggpht.com/_7fc0QWesxus/TdFALroTfZI/AAAAAAAAA0w/LyN8XbrEvbs/20_thumb%5B6%5D.jpg?imgmax=800" style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; display: inline;" title="20" width="244" /></a> <br />
<br />
I hope that this help someone :-)<br />
<br />
Thanks <br />
Aman Dhally</div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com8tag:blogger.com,1999:blog-5847983219663332144.post-17364200151391031752011-05-16T13:48:00.000+05:302011-05-16T13:48:25.317+05:30SCOM: Monitor a custom Services on Windows server 2003<div dir="ltr" style="text-align: left;" trbidi="on">Hi, All<br />
Few days back I was trying to monitor a ISCSI service on my one of Windows Server. But I was not get succeed to do it. Then I post it on SCOM mailing list. With the Help of <a href="http://blogs.technet.com/b/kevinholman/">Kevin Holman</a> and his blog <a href="http://blogs.technet.com/b/kevinholman/archive/2011/01/20/how-to-monitor-a-service-with-unique-names-across-multiple-computers-using-a-wildcard.aspx">post</a> i am able to get this done.<br />
<br />
To Monitor a specific server we need to create a New Class for it and then we need to write a Discovery rule for it. So that Discovery find that Target and then we can write desired monitoring or Alert rule on it.<br />
<br />
For example I am going to Monitor <a href="http://www.solarwinds.com/products/freetools/free_tftp_server.aspx">Solarwinds TFTP Server</a> installed on one of my server and going to monitor its service.<br />
<br />
Tools Needed.<br />
<br />
We need System Center Operations Manager 2007 R2 Authoring Resource Kit. You can download it from <a href="http://www.microsoft.com/downloads/en/details.aspx?displaylang=en&FamilyID=9104af8b-ff87-45a1-81cd-b73e6f6b51f0">here </a><br />
<br />
Step: 1<br />
<br />
After Installation Open SCOM Authoring Console and create and New Management Pack.<br />
Type the Name of Management Pack. for example "solarwinds.Tftp.server<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeYXNhP2G1TXMBjeuKDkxPE6yZoxT4hyGd2l2b56fqmwhHwcHCWPctMLegFOIfsjO_ADbLzxmiYvVl6PilYtCl_2whwt_AyHVsXcWACaqS8z8aK8z4nbGbxe3YD3r1IZYrH-iAjUcrAdFQ/s1600/Mgmt-1.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="343" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjeYXNhP2G1TXMBjeuKDkxPE6yZoxT4hyGd2l2b56fqmwhHwcHCWPctMLegFOIfsjO_ADbLzxmiYvVl6PilYtCl_2whwt_AyHVsXcWACaqS8z8aK8z4nbGbxe3YD3r1IZYrH-iAjUcrAdFQ/s400/Mgmt-1.png" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now type Display Name for Management Pack and Type its description. for example display Name "Solarwinds TFTP Server" and then types its description.<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoJOGDmVI4Z-Nhvm_pnQIOznj4xYl-jJWYt_B6EvL0Cv_mXYWRSCJmfH0Asu3KnJcnW53px6xN2-ECNLVYNt0llkvHl4yjbWjZrzea8mXB4IBM4skCdbXwDK9RDEe0GbN0jZ5xN9o4-EMA/s1600/Mgmt-2.PNG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="353" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoJOGDmVI4Z-Nhvm_pnQIOznj4xYl-jJWYt_B6EvL0Cv_mXYWRSCJmfH0Asu3KnJcnW53px6xN2-ECNLVYNt0llkvHl4yjbWjZrzea8mXB4IBM4skCdbXwDK9RDEe0GbN0jZ5xN9o4-EMA/s400/Mgmt-2.PNG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Click on "Service Model" and select "Classes" and in detail pane , right click and select NEW and select Custom Class<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhe6tbNc3RsRUH2B7jCg9R82wsvgThCKGRhr4Uuo7P5SwW8OvmdskA_a-MfVfD42ZcWh1Cte4lnx61wcKB3mSLWnPfIAPTKJ1QeGlKkeol0ByEfSBmqeBgZLMCI2EHDxNjxvMMyRg-rUM91/s1600/Mgmt-3.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="371" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhe6tbNc3RsRUH2B7jCg9R82wsvgThCKGRhr4Uuo7P5SwW8OvmdskA_a-MfVfD42ZcWh1Cte4lnx61wcKB3mSLWnPfIAPTKJ1QeGlKkeol0ByEfSBmqeBgZLMCI2EHDxNjxvMMyRg-rUM91/s400/Mgmt-3.jpg" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now give an Name to New Class. for example I am giving "TFTP Server"<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFpv01BEaUpp2KACICraIASMinAnA2-3EssGZCtcj_UMYYD7Brp516uIS0ombqwvcv38ca9zUx-Q0PX_pfhhHonWwQJ7jjS-Kp9CqlyrGWUFRwl3Gho2xgAvHW_m6fzrfJPmQBgfNk-96a/s1600/Mgmt-4.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="155" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFpv01BEaUpp2KACICraIASMinAnA2-3EssGZCtcj_UMYYD7Brp516uIS0ombqwvcv38ca9zUx-Q0PX_pfhhHonWwQJ7jjS-Kp9CqlyrGWUFRwl3Gho2xgAvHW_m6fzrfJPmQBgfNk-96a/s400/Mgmt-4.JPG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
In "General" tab click on "Base Class" and choose "Microsoft.windows.LocalApplication" and click on OK<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtoK847WVN2XxcDCrBtaPOhsBN0V10_tXYqf-62wothZoITpSpckfZSybqymYgHkuwUcGfhzXEr9nbnBjbfaZqF_5gKlbkDsBjxNnef7C8cg8APh2t2CxFK5qumroEB5jEn4YYC_YyyE4G/s1600/Mgmt-5.jpg" imageanchor="1" style="clear: left; display: inline !important; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtoK847WVN2XxcDCrBtaPOhsBN0V10_tXYqf-62wothZoITpSpckfZSybqymYgHkuwUcGfhzXEr9nbnBjbfaZqF_5gKlbkDsBjxNnef7C8cg8APh2t2CxFK5qumroEB5jEn4YYC_YyyE4G/s400/Mgmt-5.jpg" width="400" /></a><br />
<br />
In Display String type name and description. Now Click on Apply and OK<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxl1UQZPpvw6zR_YZyvLsyBGPw_oCGS5jzUzQUL2UAT3QPaZuxEQAzHUBOo0Qo1gFxCh4MSr0Hp5YMIi7MZ5CGKMu9v5-JwjJgYn4O387JGlJ_vMcr3DkFfrhuRg4X-tVEWDgmvtE9QcKg/s1600/Mgmt-6.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxl1UQZPpvw6zR_YZyvLsyBGPw_oCGS5jzUzQUL2UAT3QPaZuxEQAzHUBOo0Qo1gFxCh4MSr0Hp5YMIi7MZ5CGKMu9v5-JwjJgYn4O387JGlJ_vMcr3DkFfrhuRg4X-tVEWDgmvtE9QcKg/s320/Mgmt-6.JPG" width="318" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now click on "Health Model" and click on "Discoveries" , right click on detail pane and right click and select "New" then "Custom Discovery"<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPEwrQLiq_z5F0eM6bJc0c5ZzbA1UQRF_M-fFLl_aosjX8VihhDuthU1wm7wfOkZ8mB958mclX2KH_hMor8S_X1ihULcCSL9RKNcqgqA5v2H53krfY9lOvtXKtteZd0eIIXrSp8GZhlQyv/s1600/Mgmt-7.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPEwrQLiq_z5F0eM6bJc0c5ZzbA1UQRF_M-fFLl_aosjX8VihhDuthU1wm7wfOkZ8mB958mclX2KH_hMor8S_X1ihULcCSL9RKNcqgqA5v2H53krfY9lOvtXKtteZd0eIIXrSp8GZhlQyv/s400/Mgmt-7.jpg" width="346" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now choose an "Unique Identifier" for this discovery, I am giving its name "TFTP Discovery"<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGGmIPb93l9ARAn3KZQ6FaoJ4oXV-9AUh3vdgdK9xpanB1FlQKn-n_3xS5tZZ1rAFyHMYMxNvH-vLukWlh5ofSXuyTlGTBIqASyLqa7QAaNV9QaVryMD0wsXkyb_lTQAsoDN5ER5HcjQTW/s1600/Mgmt-8.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="124" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGGmIPb93l9ARAn3KZQ6FaoJ4oXV-9AUh3vdgdK9xpanB1FlQKn-n_3xS5tZZ1rAFyHMYMxNvH-vLukWlh5ofSXuyTlGTBIqASyLqa7QAaNV9QaVryMD0wsXkyb_lTQAsoDN5ER5HcjQTW/s320/Mgmt-8.JPG" width="320" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Select "General" tab and type Display Name , Description for Discovery and My service is running on Windows 2003 server so in Target choose "Microsoft.windows.Server.Computer"<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnXnnvysNyVfa5goxoHz_lbnrx190JiLGipRYGPruCVLhTLVNUdF30llCt1H1fYpYgfvq1DwOEBeXQ6tz_pNTwVhug4PSe9DQca24fI6EL1nvMt8YtYY_7F4yWm3ujudL3qfcFCjELFRfc/s1600/Mgmt-9.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="282" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnXnnvysNyVfa5goxoHz_lbnrx190JiLGipRYGPruCVLhTLVNUdF30llCt1H1fYpYgfvq1DwOEBeXQ6tz_pNTwVhug4PSe9DQca24fI6EL1nvMt8YtYY_7F4yWm3ujudL3qfcFCjELFRfc/s400/Mgmt-9.jpg" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
click on "Discovery Classes" tab, in "Discovered classes and their attributes" click on "Add" and select "Add Discovered type"<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPAxFjLJa1ep9-2LzyWADFtPJT-VXOIA1ZCAhTvWcU1qv-Os5x47QZKOHjEKDuzb30UhvrhvDdX7L9bkf27i0AlNMwEm9TlFeF2Hjy8nn69Rmuv6NX3iXOglPOeT4oRy6x-WUOnlqlRw33/s1600/Mgmt-10.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="392" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjPAxFjLJa1ep9-2LzyWADFtPJT-VXOIA1ZCAhTvWcU1qv-Os5x47QZKOHjEKDuzb30UhvrhvDdX7L9bkf27i0AlNMwEm9TlFeF2Hjy8nn69Rmuv6NX3iXOglPOeT4oRy6x-WUOnlqlRw33/s400/Mgmt-10.jpg" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now choose "Solarwind TFTP server which we made previously" and click on OK<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmP0sMBbOqT-Sb74weOTf4kvZMri82FryKbx6H9zrbq0bCzQT_59RP9sFgTQOnnlwwIo-um3s-LVpAQUszOhH8pzf13dfp18PlaKlrRqhR0e95AuTfkxKwMMXgezy1NNOfGEapDVMJcrOn/s1600/Mgmt-11.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="340" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmP0sMBbOqT-Sb74weOTf4kvZMri82FryKbx6H9zrbq0bCzQT_59RP9sFgTQOnnlwwIo-um3s-LVpAQUszOhH8pzf13dfp18PlaKlrRqhR0e95AuTfkxKwMMXgezy1NNOfGEapDVMJcrOn/s400/Mgmt-11.JPG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAY8NBogsTi74Iq19aSWjzF6otPzzIUwik3uWSqIclAQA02Lz3cf146ZV5ibkAq0y21YNc5CQlVqo94olvB-tTq1zXfDFiqJt8N6OvdGov35faJo5BystRNkjR2DklQpYBfv3gckqP9q4d/s1600/Mgmt-12.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="397" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAY8NBogsTi74Iq19aSWjzF6otPzzIUwik3uWSqIclAQA02Lz3cf146ZV5ibkAq0y21YNc5CQlVqo94olvB-tTq1zXfDFiqJt8N6OvdGov35faJo5BystRNkjR2DklQpYBfv3gckqP9q4d/s400/Mgmt-12.JPG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
click on "configuration" tab and click on "Browse for a type"<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWVD46SSVPFXof1hyLn3PZ7ubOaDpANM58HJuq1t8G31qdPvl-Q6RnQTz4ah_19e3YX7YV1OQIv0WsvQg0t6_6Ki6xJSMcS2PPcVMn-ejA2Kv34DK3XYkaYBzark5vOvJyz7PrjHGD9nFi/s1600/Mgmt-13.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="285" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhWVD46SSVPFXof1hyLn3PZ7ubOaDpANM58HJuq1t8G31qdPvl-Q6RnQTz4ah_19e3YX7YV1OQIv0WsvQg0t6_6Ki6xJSMcS2PPcVMn-ejA2Kv34DK3XYkaYBzark5vOvJyz7PrjHGD9nFi/s400/Mgmt-13.jpg" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
I want to discover my Server using Registry value of its Computer Name, so we will choose Registry to discover our server<br />
<br />
Now Look for "registry" and choose Microsoft.windows.FilteredregistryDiscovery.Provider" and in Module ID type DS and click on OK<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyF0wrLMsSPUjyZAygI6K8QTCZkmS-K35AnURSCGdK9Spb0G12c0CTTZGPK1bAAKdjV1Mv-KfaUYQ9KgotPW2NzYokNpYwCRjDJz9_rO0pgBn6RQ24EF-5QTIMyEqwNe2qjTw2_jjBkrGr/s1600/Mgmt-14.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="234" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyF0wrLMsSPUjyZAygI6K8QTCZkmS-K35AnURSCGdK9Spb0G12c0CTTZGPK1bAAKdjV1Mv-KfaUYQ9KgotPW2NzYokNpYwCRjDJz9_rO0pgBn6RQ24EF-5QTIMyEqwNe2qjTw2_jjBkrGr/s400/Mgmt-14.JPG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
In "Schedule" tab choose the schedule to run, for demo purpose I am using 60 Seconds<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLdt85KQTb6YqYdYECQgBB-NKYd5Pw4nUzsuHDIrYYghiDRJYToR-no8EoSd1qfNNNzDJhgYBKlwXErS0uZm4NCkMeCyx1T7bGGu-2vPmalA9whn6cNNq2JbExAQqP3HB6Zf9RkJ_Kfetg/s1600/Mgmt-15.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjLdt85KQTb6YqYdYECQgBB-NKYd5Pw4nUzsuHDIrYYghiDRJYToR-no8EoSd1qfNNNzDJhgYBKlwXErS0uZm4NCkMeCyx1T7bGGu-2vPmalA9whn6cNNq2JbExAQqP3HB6Zf9RkJ_Kfetg/s400/Mgmt-15.JPG" width="396" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
I want to discover my computer using computerName registry key and its Value.<br />
the location of this key is "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName"<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGtVkNuH-SFpTo8oXEmRJOYC-pBSCLFxyr4bZuBrCnL8cRKCUVtYwus1l245b0BE8ByXv_PCMc9TptdXq7qcNWmVc8U4BAgJxZYmhO-NscbEc-YdYynyDQjFrF4IRqSkoTrMulGybqDKqT/s1600/Mgmt-16.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiGtVkNuH-SFpTo8oXEmRJOYC-pBSCLFxyr4bZuBrCnL8cRKCUVtYwus1l245b0BE8ByXv_PCMc9TptdXq7qcNWmVc8U4BAgJxZYmhO-NscbEc-YdYynyDQjFrF4IRqSkoTrMulGybqDKqT/s400/Mgmt-16.JPG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now click on "registry Probe Configuration" and click on "Value" because we need to find computer by its Name.<br />
In Propertied type "TftpExists" and in path type "SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName"<br />
and in "Attribute Type" choose "String"<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrLv7SRg3q_o_SYryI0iwqWigrv7cYDwCxrZ7CNp56cZFrCZjvw3McR2kolxowkxs4AVmb0NGClvbX77oPYDq-sBFHFe3OGVZpAQeYD10pNUV46M1VRg5JDr14JbaDfmttC4z-CAOo7kyt/s1600/Mgmt-17.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrLv7SRg3q_o_SYryI0iwqWigrv7cYDwCxrZ7CNp56cZFrCZjvw3McR2kolxowkxs4AVmb0NGClvbX77oPYDq-sBFHFe3OGVZpAQeYD10pNUV46M1VRg5JDr14JbaDfmttC4z-CAOo7kyt/s400/Mgmt-17.jpg" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now click on "Expression" tab and click on "Insert"<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVm0JbodccR9UX4xLb_z260gw0MVYLBYVrWs3B-_M9W5ZFBXCivHhYA71CYlATgd0o80MGzb20RcQ7OLbjBuWo9NNPJpfRxRUX6tsyiRgulWoq8P8xDUwYTemwi-_uPMrj-e6EU6S1Hc-j/s1600/Mgmt-18.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="195" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVm0JbodccR9UX4xLb_z260gw0MVYLBYVrWs3B-_M9W5ZFBXCivHhYA71CYlATgd0o80MGzb20RcQ7OLbjBuWo9NNPJpfRxRUX6tsyiRgulWoq8P8xDUwYTemwi-_uPMrj-e6EU6S1Hc-j/s400/Mgmt-18.JPG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
In "Parameter Name" choose "TFTexists"<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBQSMmXucTdFI1CywAC0m5uWDoSZbTqedm7EgqeNYNCgHG2kLtdakT5_n_2MZDEK7U-ZuCBPNW_UsqU3NnkSSkBdxT7NgPr04C8vVwB2UGgEjntdOnMFfWQOucDdvAdvJO7T7ONtiBC9yQ/s1600/Mgmt-19.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="135" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBQSMmXucTdFI1CywAC0m5uWDoSZbTqedm7EgqeNYNCgHG2kLtdakT5_n_2MZDEK7U-ZuCBPNW_UsqU3NnkSSkBdxT7NgPr04C8vVwB2UGgEjntdOnMFfWQOucDdvAdvJO7T7ONtiBC9yQ/s400/Mgmt-19.jpg" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
In Operator choose "Equals"<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzGcBvF8mJjsYyoZ6tzvyqh_M9rfPBsUx75qvPNcaUaWdnUtzLHR8IXA20WSjBYi6B9u-LZm1bZqt9qmAZ_QBzYpl-cQBN0CmrYJusUqoTZkaWOkhZfP6dUkY2Nv7oyISnhVV-3RvMX_AJ/s1600/Mgmt-20.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="221" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzGcBvF8mJjsYyoZ6tzvyqh_M9rfPBsUx75qvPNcaUaWdnUtzLHR8IXA20WSjBYi6B9u-LZm1bZqt9qmAZ_QBzYpl-cQBN0CmrYJusUqoTZkaWOkhZfP6dUkY2Nv7oyISnhVV-3RvMX_AJ/s400/Mgmt-20.jpg" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
and in "Value" type your computer Name (shown as exact in the "computerName" registry key)<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFphcE3Ao0uiv4m3QCIV2p-DslYBb7Y-m-4Ji9hAZ7WI-VhxGrOrywXfU6sCmSmIBxTIW4VczvOc0HVOzkajxAwtOW-ufF3k-WSOUjbNl9LVQGX1cYzyRhhHee5QYnbl0o75eR13-IlSUh/s1600/Mgmt-21.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFphcE3Ao0uiv4m3QCIV2p-DslYBb7Y-m-4Ji9hAZ7WI-VhxGrOrywXfU6sCmSmIBxTIW4VczvOc0HVOzkajxAwtOW-ufF3k-WSOUjbNl9LVQGX1cYzyRhhHee5QYnbl0o75eR13-IlSUh/s1600/Mgmt-21.JPG" /></a></div><div class="separator" style="clear: both; text-align: center;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><br />
</div><div class="separator" style="clear: both; text-align: center;"></div>click on "Discover Mapper" and in "Key property" choose "Display Name"<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmhr7tcP8u0vSJ3Aqmj3pOBj_qOCo6fy5yhgjb8OwRJtPtPL_U2LhBgOFkPIu5PztYh8sAMTlfSIFQqKhr3uMYy5ARW6N1IDZtgz1SyUSiMjlMg4AUUVkbhRGLhffacFPr5UdXpQgtsauR/s1600/Mgmt-22.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="226" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmhr7tcP8u0vSJ3Aqmj3pOBj_qOCo6fy5yhgjb8OwRJtPtPL_U2LhBgOFkPIu5PztYh8sAMTlfSIFQqKhr3uMYy5ARW6N1IDZtgz1SyUSiMjlMg4AUUVkbhRGLhffacFPr5UdXpQgtsauR/s400/Mgmt-22.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: center;"><br />
</div><div class="separator" style="clear: both; text-align: left;">In "Non Key Properties" choose "Network Name"</div><div class="separator" style="clear: both; text-align: center;"></div><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKdRRiyVXGoRKloI4XIWh9gvKRceI7Kdy3DeTwf50VDeJFYeb8uLIFCo2dZvYlDHT2aQod9NrZcnRKVHmUYcQaZGsIZn3bl26ETBTs7CQ1-fgysPXd2fsF_ZO3j6H-rbCR3njYZ01CZ8KX/s1600/Mgmt-23.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="293" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKdRRiyVXGoRKloI4XIWh9gvKRceI7Kdy3DeTwf50VDeJFYeb8uLIFCo2dZvYlDHT2aQod9NrZcnRKVHmUYcQaZGsIZn3bl26ETBTs7CQ1-fgysPXd2fsF_ZO3j6H-rbCR3njYZ01CZ8KX/s400/Mgmt-23.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Now click on "Apply" and then "OK"</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8m2ziMk0Dlzt4Y2IifJGD5GciB9f9cdNehKHWbqRCQvEUS5xi5AdpyvqgDCD5tqn0SelGIvLZhLYj2aLvt9pY8dDxaAXCr_ULmzLaJAGxAT3YR4ynPOZrd92q2ZFx-GKzh1eTnj-21ufc/s1600/Mgmt-24.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="266" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8m2ziMk0Dlzt4Y2IifJGD5GciB9f9cdNehKHWbqRCQvEUS5xi5AdpyvqgDCD5tqn0SelGIvLZhLYj2aLvt9pY8dDxaAXCr_ULmzLaJAGxAT3YR4ynPOZrd92q2ZFx-GKzh1eTnj-21ufc/s400/Mgmt-24.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;">Again , click on "Apply" and then click on "OK"</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicefskB15zFNG0EWWLGFx5M9cFZykJecnoN9-K0wFEf_AOkjvwSA2k-chwAnhYsbuRTxEevU1ifzGukpD5kh7R_xifxfLc7gif-2AmH_UaOxfUITLY7KXiqYNTIeaIKbmN9i4ApuhuhhFm/s1600/Mgmt-25.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEicefskB15zFNG0EWWLGFx5M9cFZykJecnoN9-K0wFEf_AOkjvwSA2k-chwAnhYsbuRTxEevU1ifzGukpD5kh7R_xifxfLc7gif-2AmH_UaOxfUITLY7KXiqYNTIeaIKbmN9i4ApuhuhhFm/s400/Mgmt-25.JPG" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;">Now save your "Management pack"</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKzcKVYfeTXP6oXKTBNnqxkqv6J_92mPVFGG5JtN54EA63uX26yNS43SKcpAZGYVG2JkoIWbqYtWPJCS-a5NFC6hIYdamIJr8BxAqyrinf53CQIM4L79lq78hPZucaWw0qEM1tS-i68FSa/s1600/Mgmt-26.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="305" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKzcKVYfeTXP6oXKTBNnqxkqv6J_92mPVFGG5JtN54EA63uX26yNS43SKcpAZGYVG2JkoIWbqYtWPJCS-a5NFC6hIYdamIJr8BxAqyrinf53CQIM4L79lq78hPZucaWw0qEM1tS-i68FSa/s400/Mgmt-26.JPG" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Step: 2</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Open SCOM Console, click on "Administration" and choose "Import Management packs"</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUKsowzV1_b0HCZIUOQz2r5TgXr7Krn12YFkWWurYWQ-7X_ogcnFlgs6hcFXtotnK6OJM-rGlTHRiRUY8VN2MhBo7tumCDtYJQdjGKHLUR206RcIMN6W-B9GQBEKZbfJudbMWW96oK9Tmp/s1600/Mgmt-27.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUKsowzV1_b0HCZIUOQz2r5TgXr7Krn12YFkWWurYWQ-7X_ogcnFlgs6hcFXtotnK6OJM-rGlTHRiRUY8VN2MhBo7tumCDtYJQdjGKHLUR206RcIMN6W-B9GQBEKZbfJudbMWW96oK9Tmp/s400/Mgmt-27.jpg" width="400" /></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUKsowzV1_b0HCZIUOQz2r5TgXr7Krn12YFkWWurYWQ-7X_ogcnFlgs6hcFXtotnK6OJM-rGlTHRiRUY8VN2MhBo7tumCDtYJQdjGKHLUR206RcIMN6W-B9GQBEKZbfJudbMWW96oK9Tmp/s1600/Mgmt-27.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em; text-align: left;"><br />
</a></div><div class="separator" style="clear: both; text-align: center;"></div><div style="text-align: left;">click on "Add" and select "Add from Disk"</div><div style="text-align: left;"><br />
</div><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-32ts3sHGrRYko2Zqgv8ZP_ZaXHXYBDpUJxUtGnEhuaQFzjH9YtQO7tTkoyow0-6cvksUeJ0HhTSrccVsI9gp5nThEAxq-J3KjK9BLd8CZ1cGBmgYAk3Yg5Cr9TbSbcNI4UdsZUNCGlIL/s1600/Mgmt-28.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="143" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-32ts3sHGrRYko2Zqgv8ZP_ZaXHXYBDpUJxUtGnEhuaQFzjH9YtQO7tTkoyow0-6cvksUeJ0HhTSrccVsI9gp5nThEAxq-J3KjK9BLd8CZ1cGBmgYAk3Yg5Cr9TbSbcNI4UdsZUNCGlIL/s400/Mgmt-28.JPG" width="400" /></a><br />
<div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">click yes on "Online Catalog Connection" to resolve dependencies if required.</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimUc_A1YH7b3Y2FwrEjQd3mAnEmV9qpVLXPQ83rjIkpGTNU_0XMWGUg6Mbo3ZV4ONtD8DjAo8ZVQITnBSxwqCBnO6s-4Mqd2quN5Zgow_IsN8aqKjdW6q2hUl25rTSExVedyzT_1G5EROj/s1600/Mgmt-29.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimUc_A1YH7b3Y2FwrEjQd3mAnEmV9qpVLXPQ83rjIkpGTNU_0XMWGUg6Mbo3ZV4ONtD8DjAo8ZVQITnBSxwqCBnO6s-4Mqd2quN5Zgow_IsN8aqKjdW6q2hUl25rTSExVedyzT_1G5EROj/s400/Mgmt-29.JPG" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Select your management pack file and click "Open"</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiANTRzCkY3PcaVcbFmd1kbMT9pE_NlRUErSYWg-vtmmCd4KePGO6aDiepQ9Zf1rvZnzYgGMAnFMrrwRyz4WllQ3Lsy9KChjqHmnQRpAN_GDxTX55qTZDiTKPkQ_eVQyYDaK9kPtsHLH_n/s1600/Mgmt-30.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="293" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiANTRzCkY3PcaVcbFmd1kbMT9pE_NlRUErSYWg-vtmmCd4KePGO6aDiepQ9Zf1rvZnzYgGMAnFMrrwRyz4WllQ3Lsy9KChjqHmnQRpAN_GDxTX55qTZDiTKPkQ_eVQyYDaK9kPtsHLH_n/s400/Mgmt-30.JPG" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">click on Install</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihDvuo-tYKsW5PFmnuT4j5obQCRwQBi-i8u9AT5zKJnhZyuFfkfymyFlv-0BfDIQzFbJHm3Jd9VNuruastuXG0jC_qRsCoVHvN-vwg8In4EOzo0PNeZZTdn83ID6xVDPOOzLUiDickY_7x/s1600/Mgmt-31.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="355" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihDvuo-tYKsW5PFmnuT4j5obQCRwQBi-i8u9AT5zKJnhZyuFfkfymyFlv-0BfDIQzFbJHm3Jd9VNuruastuXG0jC_qRsCoVHvN-vwg8In4EOzo0PNeZZTdn83ID6xVDPOOzLUiDickY_7x/s400/Mgmt-31.JPG" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">After successfully import of Management Pack , click on Close.</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrWFfPjedkARsP_cRgmBoUMkaMllV9ccmmbYN-pXZWw-A0pptgLYbGIrxyGR9VxQK6CygSEKkMBywNHUwqKHpCjiM5PE_zoYwzLOznCx5HHwVwvYm2p6DOC_-Hy0gjksZhnMrDQ9UGOPj9/s1600/Mgmt-32.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrWFfPjedkARsP_cRgmBoUMkaMllV9ccmmbYN-pXZWw-A0pptgLYbGIrxyGR9VxQK6CygSEKkMBywNHUwqKHpCjiM5PE_zoYwzLOznCx5HHwVwvYm2p6DOC_-Hy0gjksZhnMrDQ9UGOPj9/s400/Mgmt-32.JPG" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Step: 3</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Now we need to see if this management pack is working or not and see if it discovered our Mentioned Server.</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Now click on "Monitoring" in Action Pane click on "change target Type" in select item select "Solarwind Tftp server" and click on OK</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggVh8GUhR0vdiSCOGOySSfCrzjhV3DXn9S2_Q05AcxfZs99jgRXwiPlOQ4daYIanJzrCkff6MQw9d_gQza5OacoPAueDUVpMigAB-KA3R4PNt1ir2nL8hw2raucb9TITRMoqmjP7Aeb4nv/s1600/Mgmt-33.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="178" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggVh8GUhR0vdiSCOGOySSfCrzjhV3DXn9S2_Q05AcxfZs99jgRXwiPlOQ4daYIanJzrCkff6MQw9d_gQza5OacoPAueDUVpMigAB-KA3R4PNt1ir2nL8hw2raucb9TITRMoqmjP7Aeb4nv/s400/Mgmt-33.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">great !!! It have found our DC3 server. and status is "Not Monitored"</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS6blQKZ9f5JfKCqedkb5QOdaPHtRqYw3HvBNS-ajWlbbwnYdOx04oziR2MhzGPH8X-jxIVhXbqzXwscyAZWgTp6HZ5Nqm1SK5txBftXQ48gj1x_FEKrKUBTGok0CabLYnBQpjNicmTbw7/s1600/Mgmt-34.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="59" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS6blQKZ9f5JfKCqedkb5QOdaPHtRqYw3HvBNS-ajWlbbwnYdOx04oziR2MhzGPH8X-jxIVhXbqzXwscyAZWgTp6HZ5Nqm1SK5txBftXQ48gj1x_FEKrKUBTGok0CabLYnBQpjNicmTbw7/s400/Mgmt-34.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Step: 3</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Now we have to write a rule to monitor service, so if service stop running it send an alert.</div><div class="separator" style="clear: both; text-align: left;">click on "Authoring" and right click on "Monitor" and click on "Create a Monitor" and select "Unit Monitor"</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioa5l5sQX_eWThmj8HQnPikGfWS2iNBglg5DRGuF8beUmElwAg8Ut1G6Hehjeyqv15anDXzVtbUZM55-l8MYpo7cLOyqlQlDEcrWxXoL2YTXjKi30IeiCSsDifxLy6fMrY29NH4sXgf_8o/s1600/Mgmt-35.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioa5l5sQX_eWThmj8HQnPikGfWS2iNBglg5DRGuF8beUmElwAg8Ut1G6Hehjeyqv15anDXzVtbUZM55-l8MYpo7cLOyqlQlDEcrWxXoL2YTXjKi30IeiCSsDifxLy6fMrY29NH4sXgf_8o/s400/Mgmt-35.jpg" width="358" /></a></div><div class="separator" style="clear: both; text-align: left;">Select "Basic service Monitor" in windows services and choose the Management pack which we have imported before. click on Next</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1wmKPk5dbjnbSyxVnVj3ozWfr8cFT0hk7HU4cvr6fNTB12B6Bq448nTEi3HN0mBsdlpxK_dCuEmQ8_meDhMgQTsdA6o0KL0M4C93N2CxVrGQ5DwhxbapYy1ptPZa_ZUcCl8A2vFACDd6m/s1600/Mgmt-36.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="386" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1wmKPk5dbjnbSyxVnVj3ozWfr8cFT0hk7HU4cvr6fNTB12B6Bq448nTEi3HN0mBsdlpxK_dCuEmQ8_meDhMgQTsdA6o0KL0M4C93N2CxVrGQ5DwhxbapYy1ptPZa_ZUcCl8A2vFACDd6m/s400/Mgmt-36.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;">Type "Name" and "description" of the service and in Monitor target choose "Solarwind TFTP server2 and click on Next</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiMRpF0fZ1gMSV6DCWj6C94VuUsKD6nV44urVj2de65ejZqU_nJlcE-3hWsqmj-fdweT4K7kyxp7labCA1kwH6xzGFZNd0Ugs15RDKinxAUXOdDf1Xl1nEeumMzaBL26REg68gMSAQs3Hg/s1600/Mgmt-37.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="261" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiMRpF0fZ1gMSV6DCWj6C94VuUsKD6nV44urVj2de65ejZqU_nJlcE-3hWsqmj-fdweT4K7kyxp7labCA1kwH6xzGFZNd0Ugs15RDKinxAUXOdDf1Xl1nEeumMzaBL26REg68gMSAQs3Hg/s400/Mgmt-37.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">In "Service name" click on browse and Type the Computer name on which services are running fro example "DC3-Foo" , choose the service to monitor for example "SolarWinds TFTP server Service" click on OK</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEht_OvHeTT59imU1WnrYjGOcLFTNBPwJ8JDG_rufuRjlhpji8YdiV3_oIPTJAR3wcai2ewG_l6sjBpMNCWVhVBcJ3Xhq3uTUjCBQZT298JDrXhVYEL3pb8O7jWkzZ5V4zPD2g20uWGWk9vp/s1600/Mgmt-38.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="335" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEht_OvHeTT59imU1WnrYjGOcLFTNBPwJ8JDG_rufuRjlhpji8YdiV3_oIPTJAR3wcai2ewG_l6sjBpMNCWVhVBcJ3Xhq3uTUjCBQZT298JDrXhVYEL3pb8O7jWkzZ5V4zPD2g20uWGWk9vp/s400/Mgmt-38.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifyb7AxBBN8jCyvyQAbIyVjHqpoAgOsN0tBI4Yve9MfwA9IOc9NgzqEQFLr4dkT6ZSi3INH0LTrlMXlNyNSo5Jrx1bekmn4Y7Wtw5in9cD-ci84bG5dZT4Xp5EHzOW3seBYhX5zNuEMLDt/s1600/Mgmt-39.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="94" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifyb7AxBBN8jCyvyQAbIyVjHqpoAgOsN0tBI4Yve9MfwA9IOc9NgzqEQFLr4dkT6ZSi3INH0LTrlMXlNyNSo5Jrx1bekmn4Y7Wtw5in9cD-ci84bG5dZT4Xp5EHzOW3seBYhX5zNuEMLDt/s320/Mgmt-39.JPG" width="320" /></a></div><div class="separator" style="clear: both; text-align: left;">So , If the service is running then Server is healthy and if the service is not running then the server is critical , so just click on NEXT</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4XWuJd9MDA2BdB3N-4Kd3ZG5AqL_Q3xk1JX2zgTy2IQuFJwS0xpAmcHCC4rKMvkcroUfLyhnVi1w93opuC4x7U4zN4kyxX0_tq_Bn7KViNNTkOY4tSv4RI53XpLHvnQ_6i7fqzjnSeh_P/s1600/Mgmt-40.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4XWuJd9MDA2BdB3N-4Kd3ZG5AqL_Q3xk1JX2zgTy2IQuFJwS0xpAmcHCC4rKMvkcroUfLyhnVi1w93opuC4x7U4zN4kyxX0_tq_Bn7KViNNTkOY4tSv4RI53XpLHvnQ_6i7fqzjnSeh_P/s400/Mgmt-40.JPG" width="352" /></a></div><div class="separator" style="clear: both; text-align: left;">Click on "Generate Alerts" and then just click on Create...</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjppS26MkcLg9nX1cWhfC5b6NnZ3E0EXhHAy88nfDSOPtw9wPkwuFPwsaW49azD3bZcoq11Egoglc3CzqWc3mGhcbCtbBJNZqX9OObztsyjEhPN4evfKhpUe9ZWfj4ogxYiiuYBHpOb5HaG/s1600/Mgmt-41.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjppS26MkcLg9nX1cWhfC5b6NnZ3E0EXhHAy88nfDSOPtw9wPkwuFPwsaW49azD3bZcoq11Egoglc3CzqWc3mGhcbCtbBJNZqX9OObztsyjEhPN4evfKhpUe9ZWfj4ogxYiiuYBHpOb5HaG/s400/Mgmt-41.JPG" width="357" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">currently Solarwind TFTP server Service is running so Server status is healthy.</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE2vBNveYyTrZ_uPUVUqlUrWF4iRUINUk_EueNiNX5fj5OMx5GjfiG_xNdlfrAAP3UhSGoVTYA6XwVPEf8f_E-fTJ_rMN83TvQjA2zI5XbEKGDm29IX5mKIcWfdfCIAup03jjADSBx1oL4/s1600/Mgmt-42.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="60" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE2vBNveYyTrZ_uPUVUqlUrWF4iRUINUk_EueNiNX5fj5OMx5GjfiG_xNdlfrAAP3UhSGoVTYA6XwVPEf8f_E-fTJ_rMN83TvQjA2zI5XbEKGDm29IX5mKIcWfdfCIAup03jjADSBx1oL4/s400/Mgmt-42.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Step: 4</div><div class="separator" style="clear: both; text-align: left;">Testing.</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Lets Stop the "Solarwinds TFTP Service" on our DC3-Foo server and then see if it Alerts Us.</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirk6ZRvNf6rXLUhDYc9Rmd4DO78JwkQaDB_0MoH1UV3azmKEzBr6AJ8oLy1x63CJHZ8CnR991C3XTOHiOIrtLI1qeI7PAwuMCY5FYtyhJKMsPpxch-UrQPyZh7lbhvPX4Bi5JqQD6odGuI/s1600/Mgmt-43.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="371" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEirk6ZRvNf6rXLUhDYc9Rmd4DO78JwkQaDB_0MoH1UV3azmKEzBr6AJ8oLy1x63CJHZ8CnR991C3XTOHiOIrtLI1qeI7PAwuMCY5FYtyhJKMsPpxch-UrQPyZh7lbhvPX4Bi5JqQD6odGuI/s400/Mgmt-43.JPG" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;">And the result is :</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNEOrlV8BSRHWzEVf8VcNtAbmRhvq09W5Pr8IwgCn3BA7z1J4KySsYlXUxceRcTg1sCRc0O8T6d8dzUAolr4dRMsxvfvprsRmg6vsRBwL6vtI2SBG261DqtmMDnngrSlU8qdApBZ0vlDSo/s1600/Mgmt-44.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="51" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNEOrlV8BSRHWzEVf8VcNtAbmRhvq09W5Pr8IwgCn3BA7z1J4KySsYlXUxceRcTg1sCRc0O8T6d8dzUAolr4dRMsxvfvprsRmg6vsRBwL6vtI2SBG261DqtmMDnngrSlU8qdApBZ0vlDSo/s400/Mgmt-44.jpg" width="400" /></a></div><div class="separator" style="clear: both; text-align: left;">Yes It Works :-) </div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;">Thanks </div><div class="separator" style="clear: both; text-align: left;">Aman Dhally</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><div class="separator" style="clear: both; text-align: left;"><br />
</div><br />
</div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com5tag:blogger.com,1999:blog-5847983219663332144.post-66426090860089459652011-03-10T19:01:00.002+05:302011-05-31T17:01:35.296+05:30SCOM: "Event Log ID 20070" on managed Computers<div dir="ltr" style="text-align: left;" trbidi="on">Hi,<br />
Today I manually installed SCOM agent on one of my remote servers. After installation when i checked the status of that server it shown me unmanaged. I wait for 1 hours (i thought it may be a communication problem) but the the status was same.<br />
<br />
Then i checked the EventLog of managed server and it showing me <span class="Apple-style-span" style="color: red;">Event ID 20070</span> and <span class="Apple-style-span" style="color: red;">21016</span><br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiRSNOAc1eL2MUOSbNZk2aE4uqzinxQ3B-ltrp8tLnshXHHUCnZMZeteWz6vFpVWlgazWZ5Yt_2gsu8bL7iVxEl-TomvdxvkxxFpoigf1WfoP70DEjhF3EBkFUjevBbadWw9VghXdpFj3z/s1600/1.PNG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiRSNOAc1eL2MUOSbNZk2aE4uqzinxQ3B-ltrp8tLnshXHHUCnZMZeteWz6vFpVWlgazWZ5Yt_2gsu8bL7iVxEl-TomvdxvkxxFpoigf1WfoP70DEjhF3EBkFUjevBbadWw9VghXdpFj3z/s1600/1.PNG" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh83V89NUzfj267t5vPGCawWmm2qG92zivzstCIN8CY2UK9zvgFgKI8kfLH0eXOY6nEXyMem39HhZBcokqWpcH2hjnPymfVU5Q86G8_fFjyKdz_ywRfANcZdK-zbw4hdL9Bw6KybKn9CTsN/s1600/2.PNG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh83V89NUzfj267t5vPGCawWmm2qG92zivzstCIN8CY2UK9zvgFgKI8kfLH0eXOY6nEXyMem39HhZBcokqWpcH2hjnPymfVU5Q86G8_fFjyKdz_ywRfANcZdK-zbw4hdL9Bw6KybKn9CTsN/s1600/2.PNG" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
which pointing to check the Event Log of the SCOM server and check for <span class="Apple-style-span" style="color: red;">Event ID 20000</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkKMtjDZwjHh1q1VZd2vcdUN2LzVOXXTR35GUS1d8HivxZ7MM0b76AGte4kp_gyaMIKG0v-6Xa05cRscqqwOHkz3W2WJtOmCJiMuV_bchkCBB2jOLliTKa0AFQ2_7NDObOsl3uj_mQIEEr/s1600/3.PNG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgkKMtjDZwjHh1q1VZd2vcdUN2LzVOXXTR35GUS1d8HivxZ7MM0b76AGte4kp_gyaMIKG0v-6Xa05cRscqqwOHkz3W2WJtOmCJiMuV_bchkCBB2jOLliTKa0AFQ2_7NDObOsl3uj_mQIEEr/s1600/3.PNG" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
According to Event ID 20000 , A device which is not a part of this management group has attempted to assess this Health Service .... But this is not true , all my setting , including Management Group Name, Server name is correct.<br />
<br />
At this point I have no idea what to do ... Then i did the following ..<br />
I restarted the core services of SCOM server<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRsqlXs9SS2v3SNYYpsdrVJlx8Jrrm5WaUMsV5V9ynJGGm2q86OUPGHgooAnVBpztovRxiFghW0rjRQn3Q2Gk6GebTRDT2KfSB5IPBjadJSm0EFUGKgdmRmJtK6WydSVk_1RmUhHgm-oM_/s1600/3a.PNG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRsqlXs9SS2v3SNYYpsdrVJlx8Jrrm5WaUMsV5V9ynJGGm2q86OUPGHgooAnVBpztovRxiFghW0rjRQn3Q2Gk6GebTRDT2KfSB5IPBjadJSm0EFUGKgdmRmJtK6WydSVk_1RmUhHgm-oM_/s1600/3a.PNG" /></a></div><br />
<br />
<br />
<br />
And after restarting, everything seems fine :)<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibHGTf6Ru685IyI2UySnb4vrckGjjKW_4KMCrBD_FEdPDy1-IoOycYueMZf4SJ6sdk_UJr2k1R4w4F4-kkcurWgu_oOOn3poy12EdkwmWUBvZLesTptlcVOlqJhta2qO42-Ff0kMgzmxc4/s1600/4.PNG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibHGTf6Ru685IyI2UySnb4vrckGjjKW_4KMCrBD_FEdPDy1-IoOycYueMZf4SJ6sdk_UJr2k1R4w4F4-kkcurWgu_oOOn3poy12EdkwmWUBvZLesTptlcVOlqJhta2qO42-Ff0kMgzmxc4/s1600/4.PNG" /></a></div><br />
<br />
<br />
<br />
<br />
I hope this helps :)<br />
<br />
Thanks<br />
<br />
Take care<br />
<br />
Aman Dhally </div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com7tag:blogger.com,1999:blog-5847983219663332144.post-22881160008860365632011-03-03T21:17:00.001+05:302011-05-16T23:58:28.963+05:30SCOM: "Failed Accessing Windows Event Log" Error<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBi-YfGTPbzaS8_iwnh-BvWiX7iuRjrsW7EH2jAWniHq3JwX7XowCDTwWyBCdG_5qCLDnvt1PlL-1ZUWxyLscMWGvYaUVvm1qgKSwVTugL2SRw_Ff2Zxy4RRBcFxJYsq_lvcUw_YwmK9ci/s1600/2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"></a></div> Hi All,<br />
<br />
Few days back I imported the DHCP Management Pack for SCOM. After importing I start getting Failed "Accessing windows Event Log" errors on Alert View of SCOM.<br />
<br />
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhskEJ4wooO40Thxxywz1TM0gCKKEgFjERAog4y8UXvfck8qX-xXurPNR2U0gyGWYcks5HYOZOKrCU1yGHKnLixYovGSGfXk46xZt0PI40HvEyAatfq5itog4bmXivCjTgkoOIcXlMD7gJJ/s1600/1.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhskEJ4wooO40Thxxywz1TM0gCKKEgFjERAog4y8UXvfck8qX-xXurPNR2U0gyGWYcks5HYOZOKrCU1yGHKnLixYovGSGfXk46xZt0PI40HvEyAatfq5itog4bmXivCjTgkoOIcXlMD7gJJ/s1600/1.JPG" /></a><br />
<br />
<br />
<br />
I Google and search internet and found that this is a BUG in DHCP Management Pack. In Monitored computer it shows the event ID 25002 and 25004<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBi-YfGTPbzaS8_iwnh-BvWiX7iuRjrsW7EH2jAWniHq3JwX7XowCDTwWyBCdG_5qCLDnvt1PlL-1ZUWxyLscMWGvYaUVvm1qgKSwVTugL2SRw_Ff2Zxy4RRBcFxJYsq_lvcUw_YwmK9ci/s1600/2.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBi-YfGTPbzaS8_iwnh-BvWiX7iuRjrsW7EH2jAWniHq3JwX7XowCDTwWyBCdG_5qCLDnvt1PlL-1ZUWxyLscMWGvYaUVvm1qgKSwVTugL2SRw_Ff2Zxy4RRBcFxJYsq_lvcUw_YwmK9ci/s320/2.JPG" width="288" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhywJqHxyHN4RRVqVC8PrP9IdoJfQLdnLbOCLbS1_v9s1lMGYYqbqa9PZP-KV5IffjIDH_yWMK0hTZHe4eY62FIReKvPIFiLdWijDY0yvoDZsI4lZ1aViOXzn0qkTqu0l9osSUGuV_iaFSP/s1600/error.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhywJqHxyHN4RRVqVC8PrP9IdoJfQLdnLbOCLbS1_v9s1lMGYYqbqa9PZP-KV5IffjIDH_yWMK0hTZHe4eY62FIReKvPIFiLdWijDY0yvoDZsI4lZ1aViOXzn0qkTqu0l9osSUGuV_iaFSP/s320/error.JPG" width="285" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Thanks to Kevins Post who guide us what to monitor and what not to monitor on DHCP Servers<br />
: <a href="http://blogs.technet.com/b/kevinholman/archive/2010/08/31/some-things-to-know-about-the-dhcp-mp-version-6-0-6709-0.aspx">Kevin Holman</a><br />
<br />
<br />
To stop these error you need to Disable this alert using overrides.<br />
<br />
To Override: Right Click the Monitor, click on Properties .<br />
click on Overrides and select "For all objects of class: health Service"<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcsVcAfVMlANGriRiK4GxegNrYU1kjHjM8PQT1045VaQDZDacwWc7VQB0QqZj2Kw7gKx-eMppC_BxWRlqlWTV9fWhhMsYTV4diQRACZuryFk5U6DB9z_T60Fp-9OmA-bD4COLkJMUmH1ul/s1600/3.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="147" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcsVcAfVMlANGriRiK4GxegNrYU1kjHjM8PQT1045VaQDZDacwWc7VQB0QqZj2Kw7gKx-eMppC_BxWRlqlWTV9fWhhMsYTV4diQRACZuryFk5U6DB9z_T60Fp-9OmA-bD4COLkJMUmH1ul/s400/3.JPG" width="400" /></a></div><br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Choose Destination Management Pack. and change the value from "True" to override value "False"<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvHmNSwklh6L4UM4RajctfazHqWyh4I_vcai-AnBUriA-ECjvACGTxmcRptjpnba61NbrqtqafWvna_AH7mt4yYhjMmxTM-A27ClaIITPTErVNCbyVn9xf1IkTZffAA4wK_yMu5mnnLqzu/s1600/4.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvHmNSwklh6L4UM4RajctfazHqWyh4I_vcai-AnBUriA-ECjvACGTxmcRptjpnba61NbrqtqafWvna_AH7mt4yYhjMmxTM-A27ClaIITPTErVNCbyVn9xf1IkTZffAA4wK_yMu5mnnLqzu/s400/4.JPG" width="390" /></a></div> <br />
<br />
and click on APPLY<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
<br />
Now you can see that it disabled the monitoring of the Windows Event Log. <br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0tbUQZPK8_jXxB2VO_OAd_7zqxokG4prKwK8WVchugYqjcmA9nB5VKaCHZ6DmmdEKe7oE7JtNjXztge17p3MwaQn8wHWI0C9cTpZoIv6ydKcgPF4Vyj-CudZFbvXyHp74jYMRZQLP4mSY/s1600/5.JPG" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0tbUQZPK8_jXxB2VO_OAd_7zqxokG4prKwK8WVchugYqjcmA9nB5VKaCHZ6DmmdEKe7oE7JtNjXztge17p3MwaQn8wHWI0C9cTpZoIv6ydKcgPF4Vyj-CudZFbvXyHp74jYMRZQLP4mSY/s1600/5.JPG" /></a></div><br />
<br />
<br />
I hope this Helps<br />
<br />
Thanks<br />
Aman Dhally </div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com3tag:blogger.com,1999:blog-5847983219663332144.post-39407851682224932972011-03-03T17:33:00.026+05:302011-03-03T18:21:45.884+05:30SCOM: "DNS 2003 Monitor Zone Resolution Alert" ErrorHi All,<br /><br />Few days back i imported the DNS Server management pack for SCOM 2007 , The version of DNS Server management pack is 6.0.6480.0<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyRl9nlWl50Z_gkybVix-JUiEwVWTAodESy-CokXU0_CC_-jLX33nR5wR7GL2xKOCSQupGVm6DZJwjyu8meEQUtZXxgolOThjsux6pDLkmOYPUHMNVrtlqRNc5lORdhTnpEd0jgiH9wIae/s1600/0.JPG"><img style="float: left; margin: 0pt 10px 10px 0pt; cursor: pointer; width: 320px; height: 58px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyRl9nlWl50Z_gkybVix-JUiEwVWTAodESy-CokXU0_CC_-jLX33nR5wR7GL2xKOCSQupGVm6DZJwjyu8meEQUtZXxgolOThjsux6pDLkmOYPUHMNVrtlqRNc5lORdhTnpEd0jgiH9wIae/s320/0.JPG" alt="" id="BLOGGER_PHOTO_ID_5579823876611805314" border="0" /></a><br /><br /><br /><br />After importing DNS Management Pack after few days i got Alerts regrading "DNS 2003 Monitor Zone Alert" for one of my "Reverse Lookup Zone" subnet.<br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCjetvY7iNPrWaOgjYrbLrNs0ggBxCmaA0I0dwg2Ti5TIZN7ThNI4kvX9qeU7iwbwq-WN0LGLafrdYXQ9xcZDqyOf5fWTerdUMUjs-SF6J79bzx8ddVgkkXPLlPLycW_bAgr4hivvMRMwP/s1600/Clipboard01.jpg"><img style="float: left; margin: 0pt 10px 10px 0pt; cursor: pointer; width: 400px; height: 60px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCjetvY7iNPrWaOgjYrbLrNs0ggBxCmaA0I0dwg2Ti5TIZN7ThNI4kvX9qeU7iwbwq-WN0LGLafrdYXQ9xcZDqyOf5fWTerdUMUjs-SF6J79bzx8ddVgkkXPLlPLycW_bAgr4hivvMRMwP/s400/Clipboard01.jpg" alt="" id="BLOGGER_PHOTO_ID_5579827447928651266" border="0" /></a><br /><br /><br /><br />and when i check using Health Explorer it shows the following.<br /><br /><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6A5IUUV5AfPHSV63p29OaPfV_iEz1zw0BtR97ZGluh845JSIdYP4UukJh9DYCBDWsLTjyRUGMfh8d6H6uS3ROLSBekXgEbc34VtF92JTW6t4fR7xuOBBtaHaKaLP7x5C0MSY9OCzwJvUg/s1600/2.jpg"><img style="float: left; margin: 0pt 10px 10px 0pt; cursor: pointer; width: 400px; height: 246px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6A5IUUV5AfPHSV63p29OaPfV_iEz1zw0BtR97ZGluh845JSIdYP4UukJh9DYCBDWsLTjyRUGMfh8d6H6uS3ROLSBekXgEbc34VtF92JTW6t4fR7xuOBBtaHaKaLP7x5C0MSY9OCzwJvUg/s400/2.jpg" alt="" id="BLOGGER_PHOTO_ID_5579827682529910418" border="0" /></a><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br /><br />The DNS 2003 Zone monitor use the following command to check the working of reverse zone.<br /><br /><br /><span style="font-style: italic;">NslookUp -QueryType=ns nameofzone dnsserver</span><br />for example<br /><span style="font-style: italic;">Nslookup -querytype=ns 168.192.in-addr.arpa 192.1</span><span style="font-style: italic;">68.1.1</span><br /><br />The default timeout of 360 seconds.<br /><br /><span style="font-style: italic;">So troubleshoot the problem i did the following . </span><br /><br /><ul><li>Login to my DNS Server.</li><li>Open DNS Console</li><li>Expand Reverse Lookup Zone</li><li>Right click on my Subnet for which SCOM was giving me the alert.</li></ul><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdS3UMnnHqsglwURxxN3Ptg9X3aX-Xufmh0LMxQ9F5WA6UHrFUBc48IAjGo-G-ZaomgPnT2Nvgba9M3xNBXOMyrOk7cUqqFMOdD1kaLh4XRe35LVny1FqiH03Jisd8lLekzU1n6XxEjLyL/s1600/4.JPG"><img style="float: left; margin: 0pt 10px 10px 0pt; cursor: pointer; width: 177px; height: 81px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdS3UMnnHqsglwURxxN3Ptg9X3aX-Xufmh0LMxQ9F5WA6UHrFUBc48IAjGo-G-ZaomgPnT2Nvgba9M3xNBXOMyrOk7cUqqFMOdD1kaLh4XRe35LVny1FqiH03Jisd8lLekzU1n6XxEjLyL/s400/4.JPG" alt="" id="BLOGGER_PHOTO_ID_5579828782633401218" border="0" /></a><br /><br /><br /><br /><br /><br /><ul><li>Right Click on the subnet and click on Properties and then click on the NameServer tab</li><li><span style="font-style: italic;">Note: please note that how much time it take to load, in my environment it takes half an hour to load the name of name servers.</span></li></ul><br /><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDBQJxPPNM-93aM2e2D8NWb4FobegTh6xAID5DPt0vawR0zvH-Gx9OtUI87XsZ7J7FXaXUBafmAlX7Id1EC5yq7wyIec-mVjUUuzLeqwE68TIVxIivGzDc1QWwUcBZ6CidFQMP1jGRMvTt/s1600/5.JPG"><img style="float: left; margin: 0pt 10px 10px 0pt; cursor: pointer; width: 400px; height: 80px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgDBQJxPPNM-93aM2e2D8NWb4FobegTh6xAID5DPt0vawR0zvH-Gx9OtUI87XsZ7J7FXaXUBafmAlX7Id1EC5yq7wyIec-mVjUUuzLeqwE68TIVxIivGzDc1QWwUcBZ6CidFQMP1jGRMvTt/s400/5.JPG" alt="" id="BLOGGER_PHOTO_ID_5579829404500145170" border="0" /></a><br /><br /><br /><br /><br /><br />So in My Environment the culprit was "MY old removed domain controllers whose entries still not get removed"<br /><br /><div style="text-align: left;"><a onblur="try {parent.deselectBloggerImageGracefully();} catch(e) {}" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiG2GPXfupyazHCcZyHfUwei95QCiL0J6FB477a9mINkJTCFgsWKh_jqqyWmi7LQOJlEWqeU5-kQnHjlycGmiGaGRvgl7ppx8GzekQE_3nQlkuwwOnzc-wagH3r2O9k1hk-aPYNEwmEP5e5/s1600/3.jpg"><img style="display: block; margin: 0px auto 10px; text-align: center; cursor: pointer; width: 356px; height: 186px;" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiG2GPXfupyazHCcZyHfUwei95QCiL0J6FB477a9mINkJTCFgsWKh_jqqyWmi7LQOJlEWqeU5-kQnHjlycGmiGaGRvgl7ppx8GzekQE_3nQlkuwwOnzc-wagH3r2O9k1hk-aPYNEwmEP5e5/s400/3.jpg" alt="" id="BLOGGER_PHOTO_ID_5579830248648402594" border="0" /></a>And after cleaning my DNS entries, everything seems well :)<br /><br /><br />Hope this helps<br /><br />Thanks<br />Aman Dhally<br /><br /><br /></div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com19tag:blogger.com,1999:blog-5847983219663332144.post-2187350920481844742011-02-25T19:06:00.000+05:302011-02-25T19:06:12.529+05:30System Center Operations Manager 2007 R2 - An Intro<div dir="ltr" style="text-align: left;" trbidi="on"><div>As an IT Professionals we need to keep an eye on all of Servers, Applications, Service etc. We also need to know how are the Servers, Hardware and Applications Performing. So time its very difficult to find the faults and errors which cause server crash, slow performance of the servers. At that time we need some Monitoring Solution which can keep his eye on our IT Infrastructure.<br />
<br />
In my company we have approx 100 Servers and all of them are windows based. The current monitoring solution which we are using in reactive and we want proactive solution. To solve our purpose we choose System Center Operations manager 2007 R2.<br />
<br />
SCOM Overview : <a href="http://www.microsoft.com/systemcenter/en/us/operations-manager/om-overview.aspx">http://www.microsoft.com/systemcenter/en/us/operations-manager/om-overview.aspx</a><br />
<br />
I am using SCOM for:<br />
<ul style="text-align: left;"><li> Monitor all of My Network Switches</li>
<li>Monitor all windows base Servers</li>
<li>Monitor Exchange server </li>
<li>Monitor SQL Server</li>
<li>Monitor NetApp SAN</li>
<li>Monitor Riverbed Caching Device</li>
<li>Monitor some Web URL and TCP Ports</li>
<li>and setup synthetic transactions to monitor Business App</li>
</ul>Our Next Step is to Install System Center Operations Manager 2007 R2 <br />
<br />
<br />
Take Care<br />
Aman Dhally</div><div><br />
<div><br />
<br />
<br />
</div></div></div>Amanhttp://www.blogger.com/profile/18237285527131443966noreply@blogger.com1