How to collect events – but not ALL the events?

  I recently had an interesting customer issue. They wanted to collect some specific events for reporting.  This was specific to NTLM authentications.  The problem was – that these events could potentially FLOOD some servers, and they didn’t want to collect ALL the events, just a sample of unique events on a somewhat regular basis,…

0

MP Update: Windows Server OS MP’s updated for Windows 2003 – Windows 2012R2

    The Windows Server Operating System MP’s (2003 – 2012R2) have been updated. Download link: https://www.microsoft.com/en-us/download/details.aspx?id=9296   This MP’s is a minor update streamlined to work with the same Base OS libraries from the separate download for Windows Server 2016: https://www.microsoft.com/en-us/download/details.aspx?id=54303   From the guide:   Changes in Version 6.0.7323.0•    Added Storport Miniport monitor…

0

Silect wants your feedback – support fragments in MP Author?

  Silect is looking for user community feedback, to see if it is valuable to support the import of VSAE fragments into MP author, to extend the types of workflows that MP Author could support. They are looking to see how valuable this would be, and how many MP authors would actually use and benefit…

0

Alerting on Events – waiting for a specific amount of time to pass

  Consider the scenario –  you want to monitor the event logs for a specific event, however, this event has a tendency to “storm” or log hundreds of events in a short time window.  Not a good condition for a monitoring system, as you can quickly overwhelm the system, nor do you want hundreds or…

0

Extending Windows Computer class from a SQL CMDB in SCOM

  Years ago – I wrote a post on customizing the “Windows Computer” class, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler.  You can read about the details of how and why here:  https://blogs.technet.microsoft.com/kevinholman/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/ I later updated that sample MP here:  https://blogs.technet.microsoft.com/kevinholman/2016/12/04/extending-windows-computer-class-from-registry-keys-in-scom/…

0

Extending Windows Computer class from a CSV file in SCOM

  Years ago – I wrote a post on customizing the “Windows Computer” class, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler.  You can read about the details of how and why here:  https://blogs.technet.microsoft.com/kevinholman/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/ I later updated that sample MP here:  https://blogs.technet.microsoft.com/kevinholman/2016/12/04/extending-windows-computer-class-from-registry-keys-in-scom/…

1

Extending Windows Computer class from Registry Keys in SCOM

  Years ago – I wrote a post on this, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler.  You can read about the details of how and why here:  https://blogs.technet.microsoft.com/kevinholman/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/\   This post is a simple updated example of that Management Pack,…

2

Windows Server 2016 Management Packs are available

  These are now available: https://www.microsoft.com/en-us/download/details.aspx?id=54303   This is version 10.0.8.0.  It covers the Windows Server 2016 MP release ONLY, and does not include other management packs for previous operating systems, which will be interesting to see how the product group combines these in future updates, since they share the same base libraries.    …

0

How to move views in My Workspace into a Management Pack

  Customers often use “My Workspace” to create customized views that they use on a regular basis.  However, one of the drawbacks on My Workspace is that these views are not available to any other users.  Generally, we recommend customers use My Workspace to test and develop views, then simply re-create them in a Management…

0

Understanding SCOM Resource Pools

      Resource pools are nothing new – they were introduced in SCOM 2012 RTM, for two reasons: 1.  To remove the single-point-of-failure that was the RMS role in SCOM 2007. 2.  To provide a mechanism for high availability of agentless/remote workflows, such as Unix/Linux, Network, and URL monitoring, among others.   That said…

9

Installing the Exchange 2010 Correlation Engine on a Non-Management Server and without a console

  These is an issue with the current Exchange 2010 Correlation Engine – which causes it to fail on SCOM 2012 or 2016 Management Servers.  Jimmy wrote about these here: https://blogs.technet.microsoft.com/jimmyharper/2015/04/15/exchange-2010-correlation-engine-not-generating-alerts/   So one remedy to this – is to install the Correlation Engine (CE) on a non-management server role.  Either on a dedicated reporting…

3

SCOM SQL queries

  These queries work for SCOM 2012 and SCOM 2016.  Updated 11/11/2016     Large Table query.  (I am putting this at the top, because I use it so much – to find out what is taking up so much space in the OpsDB or DW) –Large Table query. I am putting this at the…

5

Monitoring UNIX/Linux with OpsMgr 2016

    Microsoft started including Unix and Linux monitoring in OpsMgr directly in OpsMgr 2007 R2, which shipped in 2009.  Some significant updates have been made to this for OpsMgr 2012.  Primarily these updates are around: Highly available Monitoring via Resource Pools Sudo elevation support for using a low priv account with elevation rights for…

0

Does SCOM 2012 R2 support monitoring Windows Server 2016?

  This has been coming up quite a bit lately – The answer is YES, and we have updated the SCOM 2012 R2 documentation: https://technet.microsoft.com/en-us/library/dn281931(v=sc.12).aspx   There is no minimum UR level required to support this.  However, we always recommend applying the most current cumulative update rollup to your SCOM agents.     Operations Manager…

9

Deploying SCOM 2016 Agents to Domain controllers – some assembly required

    Something that a fellow PFE (Brian Barrington) called to my attention, with SCOM 2016 agents, when installed on a Domain Controller:  the agent just sits there and does not communicate.   The reason?  Local System is denied by HSLOCKDOWN. HSLockdown is a tool that grants or denies a particular RunAs account access to…

9

SCOM Console crashes after October Windows cumulative updates – Resolved

  There is an issue where after patching your Windows Server or Workstation machine with the monthly cumulative updates – you might see you SCOM console crash with an exception.   This affects SCOM 2012 and SCOM 2016       Log Name:      Application Event ID:      1000 Description: Faulting application name: Microsoft.EnterpriseManagement.Monitoring.Console.exe, version: 7.2.11719.0, time…

11

Enabling Scheduled Maintenance in SCOM 2016 UR1

  When you try and use the new Scheduled Maintenance feature in SCOM 2016 UR1, you will probably see the following error pop up as soon as you select “Maintenance Schedules” in the Operations Console:     Date: 10/22/2016 3:03:32 PMApplication: Operations ManagerApplication Version: 7.2.11719.0Severity: ErrorMessage: The EXECUTE permission was denied on the object ‘sp_help_jobactivity’,…

2

UR1 for SCOM 2016 – Step by Step

      KB Article for OpsMgr:  https://support.microsoft.com/en-us/kb/3190029 Download catalog site:  http://catalog.update.microsoft.com/v7/site/Search.aspx?q=3190029     NOTE:  I get this question every time we release an update rollup:   ALL SCOM Update Rollups are CUMULATIVE.  This means you do not need to apply them in order, you can always just apply the latest update.  If you have deployed…

14

OpsMgr 2016 – QuickStart Deployment Guide

    There is already a very good deployment guide posted on TechNet here:   https://technet.microsoft.com/en-us/system-center-docs/om/deploy/deploying-system-center-2016-operations-manager The TechNet deployment guide provides an excellent walkthrough of installing OpsMgr 2016 for the “all in one” scenario, where all roles are installed on a single server.  That is a very good method for doing simple functionality testing and lab…

8

VSAE (Visual Studio Authoring Extensions) updated for SCOM 2016

      VSAE has been updated for SCOM 2016.   Get it here: https://www.microsoft.com/en-us/download/details.aspx?id=30169       Works great with my fragment library – which you can download and try out here: https://blogs.technet.microsoft.com/kevinholman/2016/06/04/authoring-management-packs-the-fast-and-easy-way-using-visual-studio/     Even if you ARE running SCOM 2016 – I still recommend choosing SCOM 2012R2 – so any MP’s you…

0