Monitoring ConfigMgr 2012 with OpsMgr


 

As with almost all Microsoft products, there is an MP to monitor ConfigMgr 2012.  This MP is such a divergence from the previous ConfigMgr 2007 MP, I wanted to take a moment and point out the differences.

 

  • Not a conversion MP!

The previous ConfigMgr 2007 MP was actually a conversion MP from MOM 2005.  This caused major issues in supporting that management pack, and there were a long list of things that needed “fixing” along the way, which resulted in required updates to the MP.  The ConfigMgr 2012 MP was written from the ground up alongside ConfigMgr 2012.  It plugs directly into the registry and WMI to connect to the built in health analyzer in ConfigMgr.  Because it is not a conversion MP, there is no longer a dependency on the backwards compatibility MP. 

  • NO SCRIPTS in the Monitoring MP! 

The previous MP has about 12 scripts, which fed hundreds of rules which generate alerts.  These scripts were problematic, and left very few options for override tuning.  Now the MP primarily uses shared datasources which leverage WMI or registry data.

  • Lines of code

The precious MP had 125,000+ lines of code in the XML.  The new MP has less than 40,000.  That is a huge reduction.

  • Number of workflows

The previous MP had over 900 rules.  The current MP has 214 rules, and only ONE is enabled out of the box!  All the monitoring comes from Monitors now.

  • Disabled workflows out of the box.

Out of the box, the 2012 MP ships with ALL performance collection rules disabled.  This allows the customer to turn these on if they desire all this performance data in their console or for reporting.  This lessens the impact of the MP on the monitored servers, and the SCOM infrastructure.  Additionally, there are many monitors that are disabled out of the box, due to uncommon monitoring scenarios, un-deployed roles, or potential noise.  The guide neatly calls these out.

  • A well documented guide and appendix.

The current MP ships with a REALLY well documented MP guide that explains what is necessary to get the MP working, and an appendix which outlines every class, and detailed information about each discovery, rule, or monitor, including data source info.

  • Simpler health rollup and class

This thing is so simple – its beautiful!

 

 

image

 

 

 

Here is a breakdown on the MP:

 

 

What does it do???  (Key Monitoring Scenarios)

 

  • Replication Health
    • SQL replication between sites
    • Primary > CAS > Primary
    • Primary to Secondary
    • Receiving and Sending
  • Replication Configuration
    • Service broker validity
    • SQL port
    • SQL firewall port
    • SQL disk space
    • SQL DB certificate validity
  • Backup and Recovery status
  • Component Availability
    • Inbox Manager
    • Site component manager
    • Management Point
    • Outbox
    • WSUS
    • Site System status
    • Deployment Status
    • Component status
  • Service Availability
    • Alert on critical service status
      • SMSexec
      • SMS Agent Host
    • Dependent services
      • WMI
      • SQL
      • IIS
      • BITS
      • WSUS
  • Server Role Availability
    • Asset intelligence
    • Management Point
    • Reporting Point
    • Software Updates
    • Distribution point
    • Application catalog
    • Enrollment point
    • Fallback status
    • Endpoint protection
  • Backlog monitoring (DDR, Inventory)
  • General Health (Process/Processor)
  • Database connection status
  • Software update synchronization (WSUS)
  • DP Configuration

 

 

 

What’s in the MP?

Microsoft.SystemCenter2012.ConfigurationManager.Library.mp

  • 13 Discoveries
  • 84 Classes
  • 14 Groups

Microsoft.SystemCenter2012.ConfigurationManager.Discovery.mp

  • 13 Discoveries
  • 2 Classes

Microsoft.SystemCenter2012.ConfigurationManager.Monitoring.mp

  • 145 Monitors
  • 214 Rules (all but one disabled)
  • 199 Monitoring Views
  • 34 Reports

 

 

 

What’s required from a configuration perspective?

 

Not much! 

  • Make sure your agents run as Local System
  • Enable agent proxy for site servers
  • Create an override MP for your tuning specific to this MP.

Optional configuration:

  • Check out the disabled rules and monitors documented in the guide and see if you want them enabled.
  • 52 performance threshold monitors that might need to be adjusted for your environment (see guide)
  • 15 manual reset monitors.  Optionally disable these and enable 15 rules which are corresponding to these, if your organization cannot support manual reset monitors (most cannot)

 

Distribution

Summary:

 

Looks like a solid MP, very simple to deploy, configure, and LIGHT YEARS better than that ConfigMgr 2007 MP.  Very nice!

 

With the new dashboarding capabilities in OpsMgr – creating a single pane of glass for the ConfigMgr team was never simpler:

image


Comments (25)

  1. LXSSK says:

    Hi Kevin
    Is there an easy way to match Performance Rule with the Performance View like Management Points – Inventory etc.

    regards
    Sven

  2. Anonymous says:

    @bobgreen84 –

    That can happen when there is a crash on the management server responsible for calculating health state.  I generally try maintenance mode on the affect entity, or flush the health service cache on all the management servers.

  3. Anonymous says:

    Why I see rollup monitors in critical state, but all child unit monitors in healthy state? Reset monitor and maintenance mode not helps me.

  4. Aleksey says:

    Hmm..All my Secondary CM-sites in View "Sites" in OM2012 Console in state "Not monitored". Primary site – "Healthy"

  5. Aleksey says:

    …And empty Views "Distribution Points – State","Management Points – State","Software Update Points – State"

  6. Aleksey says:

    And another strange thing. I get RED status from "SQL Server Firewall Port Monitor", but on all my CM-servers Port 1433 and 4022 is open 🙁

  7. Max says:

    Which "•15 manual reset Monitors" do you mean? In the documentation all Monitors have Auto Reset behavior.

  8. Jon says:

    We have the same issue as Aleksey – Only the central site shows up as healthy, everything else as not monitored. SCOM 2012 SP1 monitoring SCCM 2012 SP1.

    Could this be caused by our agents running on a service account (with admin privileges on the server but not in sccm)?

  9. Tolga says:

    Here is one more to Alexey and Jon.

    I do not agree that the MP is well-documented and simple.

    ConfigMgr 2007 on OpsMgr 2007 was painless, really.

  10. Jon says:

    I'm really missing documentation on the permission requirements for running the agents on a service account. I actually thought running the SCOM-agents on a domain service account was best practice and as many environments are set up that way it's not something you want to stray away from on a few servers if you don't must.

    I'd really like to se documentation on what privileges the action account needs. If possible with least privileges necessary within SCCM to avoid separation of duties-conflicts.

  11. Maekee says:

    When we just imported the 2012 Management Pack we cant get this monitor back to green state:

    Site Database Server Without Valid Certificate (Database Certificate Validity Monitor)

    But we have a valid Certificate, so i dont know what this monitor reacts on.

    This info is gathered from Alert Context on the Alert:

    < DataItem type =" MOM.RegistryData " time =" 2013-05-29T15:15:55.0774480+02:00 " sourceHealthServiceId =" 79B707F7-327F-214F-02FD-8523D5BB9141 " >

    < Values >

     < Severity VariantType =" 19 " > 3 </ Severity >

     < State VariantType =" 19 " > 3332 </ State >

     </ Values >

     </ DataItem >

    Now what?

  12. Rob says:

    Same as the guys above.  Fresh install of SCCM 2012 MP and no distribution points have been discovered.  The all server state view shows these as "Not Monitored"

    all agents running as localsystem with agent proxy enabled.

  13. Davy says:

    No update on a possible solution for this, I'm in the same boat; primary SCOM agents healthy, SCCM MP Server and Site System Roles showing as 'Not Monitored' 24 hours after enabling them as agent proxy. No active or closed alerts related to the servers either.

  14. Davy says:

    UPDATE!! Logged a support call for this after spending a fair bit of time troubleshooting, MS was stumped too and went off to confer with the MP owner, got back to me next dayt stating that the MP guide is incorrect and that you should enable proxy agent on the CAS and Primary site! I can confirm that discovery worked after that and all objects and health states are reporting correctly. Nice diagram too 🙂 Hope this helps!

  15. Davy says:

    Kevin, out of curiosity, do you have an 'automated process' to flush the health service cache or are you referring to the manual rename method? Thanks.

  16. LvilleSystemsJockey says:

    Same issue.  Not only does it not discover DPs, but my site server is showing under "Servers and Site System Roles" as "Not Monitored".  I have renamed the "Health Service State" folder on the client to clear the cache, but not luck yet.  I'm about to remove the MP and re-add.  I couldn't find anything listing Prerequisite MPs needed, but it would make sense to require SQL and IIS.  Last time I used this MP, I added it after SQL and IIS.  It worked with no issue.  It should really state in the guide if there are prerequisite MPs, but I can't find it.  I didn't read the whole doc, but i'm a pretty good skimmer.

    -LvilleSystemsJockey

  17. GNelson says:

    I have noticed that many monitors have the Generate alerts for this monitor checkbox checked, but then also have an override to set Enable Alerting to False (such as the Backup Status Monitor — I definately want to know/get alerted if the Site Backup fails…)

    So I am having to not only verify what monitors are enabled, but that they effectively still have alerting enabled for them…

    Just wanted to point this out, as the MP Guide does not mention which monitors have alerting disabled…

  18. GNelson says:

    Update on my earlier comment… I just noticed that the Aggregate Rollup monitors above the monitors I was mentioning have alerting enabled for them.  So alerts will be generated, and for those cases where there are multiple monitors that rollup to the aggregate monitor (Management Point availability, for example), you will only get the one alert from the aggregate monitor.  I suppose this was done to minimize the amount of alerts recieved.

  19. Shahid says:

    My site server is shown a not monitored in SCOM 2012 SP1 console, can you please help me to resolve this. I have even manually done the site discovery and still site server is showing not discovered

  20. Ashutosh says:

    Hi,

    I have SCOm 2012 SP1 setup, but I have SCCM 2007 R3 with us. So can you guide wihch MP should i use on SCOM 2012 for Monitoring SCCM 2007 R3?

    Thanks in advance.

    Regards,
    Ashutosh

  21. Jesty says:

    Hi Kevin,

    We have the Microsoft.SystemCenter2012.ConfigurationManager.SiteServer found in not monitored state in the Server state view under the SCCM 2012 folder. Any tips to make them healthy and monitored? Kindly assist.

  22. Gary says:

    I created the dashboard above in 2012 but can figure out how you were able to setup the service level widget.

  23. Rajesh says:

    Thanks Kevin for such a wonderful document. In the last part of your post, you have given snapshot of SCOM with Configuration Manager Service Level. Are "Configuration Manager SLO" predefined or is it something we can configure. If we can configure, what
    are the best practices to configure that?

  24. Owais Mohammed says:

    Hi all,

    I Know its an OLD post but the issue with distribution and managment point showing NOT monitored is till not resolved.

    I have installed latest version of SCCM MP but still the issue is not resolved.

    i have performed below step but still issue is not resolved.

    1.Enabled Agent Proxy
    2.Created SCOM exclusions for our Anti-Virus
    3.Disabled the client discovery object as we are not running Config Manager clients on our infrastructure
    4.Decreased the Hierarchy Discovery time from 86400 seconds to 600 seconds
    5.Decreased the Central Site Discovery time from 14400 seconds to 600 seconds
    6.Increased the Site Services Discovery, Hierarchy Discovery and Distribution Point Drive Discovery timeout from 300 seconds to 500 seconds
    7. Even upgraded our scom to RU9 but still the issue not resolved.

    Please help!!

    1. Werner says:

      I See some people having the clients unmonitored in there Management Group,

      The Management Pack flows down from the top, as an example.

      if you have a CAS, the Primary and Secondary Sites Servers needs to report to the same Management group that the CAS reports to.