How to test your ACS filter to ensure it is valid

  ACS (Audit Collection Services) in SCOM uses a WMI filter to reject certain events from being collected and stored in the Audit database. This filter supports about 4800 characters, so the filters can get very large and very advanced.  It is important to test these before implementing to ensure you are getting a valid…

0

Removing unwanted product connectors in SCOM 2012 R2 and SCOM 2016

    There are certain management packs that will use product connectors to insert discovery data into SCOM, or to manage alerts.  Sometimes, you might find that the vendor did not provide a way to remove these product connectors, when you decide to stop using the MP or solution which created them. Below is a…

0

UR12 for SCOM 2012 R2 – Step by Step

  KB Article for OpsMgr:  https://support.microsoft.com/en-us/help/3209587/system-center-2012-r2-om-ur12 Download catalog site:  http://www.catalog.update.microsoft.com/Search.aspx?q=3209587     NOTE:  I get this question every time we release an update rollup:   ALL SCOM Update Rollups are CUMULATIVE.  This means you do not need to apply them in order, you can always just apply the latest update.  If you have deployed SCOM 2012R2…

9

I retired a management server – now SCOM reporting doesn’t work?

    When you first install reporting, you have to supply a management server.  This is used for SDK based connections that SCOM reporting requires.  If you ever retire this management server, reporting will break so this is an additional step to ensure you check whenever you retire a MS.   There are three places…

2

SCOM 2016 now supports SQL 2012 SP3

  When SCOM 2016 UR1 shipped – the only DB platforms supported were SQL 2014 SP2, and SQL 2016.   However, for SCOM 2012 R2 users, most were running SQL 2012.  This meant, in order to upgrade to SCOM 2016…..  you had to FIRST upgrade your SQL servers to a SQL platform that supports BOTH…

9

Linux MP Update for SCOM 2016 UR1

    An update was recently released.  This can be considered the “UR1” update for the SCOM 2016 Linux MP’s.  Note – these are for SCOM 2016 ONLY.  Do not attempt to import SCOM 2016 Linux MP’s into SCOM 2012.    https://www.microsoft.com/en-us/download/details.aspx?id=29696   Make sure you get the correct version:     Download, extract, and…

4

SQL MP Update – 6.7.15.0

      The SQL MP’s have been updated.   SQL 2016 DB Engine https://www.microsoft.com/en-us/download/details.aspx?id=53008 SQL 2016 Analysis Services https://www.microsoft.com/en-us/download/details.aspx?id=53011 SQL 2016 Replication https://www.microsoft.com/en-us/download/details.aspx?id=53009 SQL 2016 Reporting https://www.microsoft.com/en-us/download/details.aspx?id=53010     SQL 2014 DB Engine https://www.microsoft.com/en-us/download/details.aspx?id=42573 SQL 2014 Analysis Services https://www.microsoft.com/en-us/download/details.aspx?id=44586 SQL 2014 Replication https://www.microsoft.com/en-us/download/details.aspx?id=47720 SQL 2014 Reporting https://www.microsoft.com/en-us/download/details.aspx?id=43390     SQL 2008-2012 DB Engine https://www.microsoft.com/en-us/download/details.aspx?id=10631…

15

MP Update – Totally new Active Directory MP for Windows Server 2012 and 2016

    This is pretty exciting. Microsoft just shipped a totally new AD MP.  This one has no dependencies on the previous ADMP, that has been mostly based on the same core design for the past 15 years!   https://www.microsoft.com/en-us/download/details.aspx?id=54525   The new ADMP supports monitoring Active Directory when yours DC’s are Windows Server 2012,…

33

Where are the Server 2016 Management Packs?

    I will try to use this post as a running record to help you find all the MP’s that we have released for Windows Server 2016 OS and the unique server roles for which we create MP’s for. As with all MP’s, you should give great scrutiny, and only import MP’s that are…

12

Getting Monitor State Change Events via PowerShell

    This is a script example on how to get statechangeevents from monitor context using PowerShell.  This example uses a URL transaction monitor, but you can change this to any class/classinstance.   #Set arrays to empty $Monitor = @() $MonitorColl = @() $States = @() #Get Web Transaction URL Class $URLClass = Get-SCOMClass -Name…

0

Extending UNIX/Linux Computer class from a local file

    I recently wrote a blog article on Extending the Windows Computer class from Registry keys on agents.  You can read about that here:  https://blogs.technet.microsoft.com/kevinholman/2016/12/04/extending-windows-computer-class-from-registry-keys-in-scom/ However, what about UNIX/Linux agents?  They don’t have the concept of a Windows Registry.  For those, we can use a file on the filesystem as an example.   In…

1

How to collect events – but not ALL the events?

  I recently had an interesting customer issue. They wanted to collect some specific events for reporting.  This was specific to NTLM authentications.  The problem was – that these events could potentially FLOOD some servers, and they didn’t want to collect ALL the events, just a sample of unique events on a somewhat regular basis,…

1

MP Update: Windows Server OS MP’s updated for Windows 2003 – Windows 2012R2

    The Windows Server Operating System MP’s (2003 – 2012R2) have been updated. Download link: https://www.microsoft.com/en-us/download/details.aspx?id=9296   This MP’s is a minor update streamlined to work with the same Base OS libraries from the separate download for Windows Server 2016: https://www.microsoft.com/en-us/download/details.aspx?id=54303   From the guide:   Changes in Version 6.0.7323.0•    Added Storport Miniport monitor…

2

Silect wants your feedback – support fragments in MP Author?

  Silect is looking for user community feedback, to see if it is valuable to support the import of VSAE fragments into MP author, to extend the types of workflows that MP Author could support. They are looking to see how valuable this would be, and how many MP authors would actually use and benefit…

0

Alerting on Events – waiting for a specific amount of time to pass

  Consider the scenario –  you want to monitor the event logs for a specific event, however, this event has a tendency to “storm” or log hundreds of events in a short time window.  Not a good condition for a monitoring system, as you can quickly overwhelm the system, nor do you want hundreds or…

0

Extending Windows Computer class from a SQL CMDB in SCOM

  Years ago – I wrote a post on customizing the “Windows Computer” class, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler.  You can read about the details of how and why here:  https://blogs.technet.microsoft.com/kevinholman/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/ I later updated that sample MP here:  https://blogs.technet.microsoft.com/kevinholman/2016/12/04/extending-windows-computer-class-from-registry-keys-in-scom/…

1

Extending Windows Computer class from a CSV file in SCOM

  Years ago – I wrote a post on customizing the “Windows Computer” class, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler.  You can read about the details of how and why here:  https://blogs.technet.microsoft.com/kevinholman/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/ I later updated that sample MP here:  https://blogs.technet.microsoft.com/kevinholman/2016/12/04/extending-windows-computer-class-from-registry-keys-in-scom/…

2

Extending Windows Computer class from Registry Keys in SCOM

  Years ago – I wrote a post on this, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler.  You can read about the details of how and why here:  https://blogs.technet.microsoft.com/kevinholman/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/\   This post is a simple updated example of that Management Pack,…

5

Windows Server 2016 Management Packs are available

  These are now available: https://www.microsoft.com/en-us/download/details.aspx?id=54303   This is version 10.0.8.0.  It covers the Windows Server 2016 MP release ONLY, and does not include other management packs for previous operating systems, which will be interesting to see how the product group combines these in future updates, since they share the same base libraries.    …

10

How to move views in My Workspace into a Management Pack

  Customers often use “My Workspace” to create customized views that they use on a regular basis.  However, one of the drawbacks on My Workspace is that these views are not available to any other users.  Generally, we recommend customers use My Workspace to test and develop views, then simply re-create them in a Management…

0