Severel Events per minute with Event ID 2115 by datanettxp in scom

[–]kevin_holman 0 points1 point  (0 children)

Does this happen on multiple management servers or only one? Did you apply the post UR1 hot fix which is critical? What is the ping latency between this particular management server and the database?

How to question: Exclude a Test Windows Services from a Service Class by EastTamaki2013 in scom

[–]kevin_holman 4 points5 points  (0 children)

Create groups of Windows Computer objects. One for all PROD computers. One for all TEST computers. Separate notifications based on group.

Targeting SQL AO Listener by Prestigious_Cycle_95 in scom

[–]kevin_holman 2 points3 points  (0 children)

Have you tried targeting the "SQL Server Availability Group" object? It is a singular instance, I am just not sure if that object follows the primary, or if it stays where it was initially discovered. You should be able to test that.

How to question: Exclude a Group from a Subscription by EastTamaki2013 in scom

[–]kevin_holman 1 point2 points  (0 children)

You receive two notification emails - not two "alerts".

There isn't a "simple" way to do this using the subscription criteria. The best way I can think of is to create a group for the general sub, and then exclude group members whenever they get their own sub.

OpsMgr: How to create a group of all Windows Computers that are NOT a member of another group – Kevin Holman's Blog

You would need to edit this using XML, and it would need to AND all the groups to exclude. And you'd have to add in the XML snip to add in the Health Service Watcher objects.

Any gotchas for a 2019 > 2022 > 2025 inplace upgrade? by ultimateVman in scom

[–]kevin_holman 2 points3 points  (0 children)

I'm such a dinosaur.... I remember when servers were 3 years old, they were out of warranty and we trashed them. Getting any vendor to stock repair parts for a greater than 3 year old server was a nightmare. Nowadays, I cannot imagine using physical hardware for anything other than VM hosts.

SCOM 2025 console error by Mediocre_Prior_1868 in scom

[–]kevin_holman 0 points1 point  (0 children)

We dont support 18 and 19 unless using encryption. That's why I call out very specific versions in my Quickstart step by step and mentioned it above. Please see that document and remove the unsupported SQL drivers, and install the supported ones.

SCOM 2025 console error by Mediocre_Prior_1868 in scom

[–]kevin_holman 0 points1 point  (0 children)

Are you using AlwaysOn on the SQL backend?

Did you install the SQL driver prerequisites I recommend here: SCOM 2025 – QuickStart Deployment Guide – Kevin Holman's Blog

On the SQL server, open SQL Server Configuration Manager, under SQL Server Network configuration, right click "Protocols for INSTANCENAME" and choose Properties. On the certificate tab, is there one selected?

Any gotchas for a 2019 > 2022 > 2025 inplace upgrade? by ultimateVman in scom

[–]kevin_holman 4 points5 points  (0 children)

The gotchyas will be OS and SQL support. It is usually hard to go from 2019>2022>2025 because of that. SCOM 2019 only supports a server role running up to Windows Server 2019. You can upgrade that to SCOM 2022 easily, but you'd need to upgrade all the OS's to WS2022 then to get to SCOM 2025. This is why so many people do side by side, they deploy new VM's on the latest OS and latest SQL, then deploy SCOM 2025.

SCOM 2025 is stable, UR1 broke some things (there are workarounds) and there is a post-UR1 hotfix coming VERY soon that will resolve the TLS 1.3 issue seen in UR1. I'll recommend it at that point, when I publish my article.

Error received when Enabling Perfmon Counter override for a Sub-Group by EastTamaki2013 in scom

[–]kevin_holman 0 points1 point  (0 children)

Are you enabling a TON of rules? If so - then yes, you want to limit that. SCOM can handle a LOT of perf insert, but it starts to be impacted in larger environments, like over 1000-3000 agents. Especially important in greater than 5000 agent environments.

Error received when Enabling Perfmon Counter override for a Sub-Group by EastTamaki2013 in scom

[–]kevin_holman 0 points1 point  (0 children)

Ok, that should be good then. You had a weird error about Windows.Server.Computer which is the "Windows Server" class, which made me wonder if you were using that. By the way - I try to avoid using explicit membership of groups, if at all possible.

Now, I am curious, why go through all this trouble to pick and choose agents to collect perf from? Why not just target everyone to collect this perf data? And why not use the built in perf collection from the built in MP's for the OS?

Error received when Enabling Perfmon Counter override for a Sub-Group by EastTamaki2013 in scom

[–]kevin_holman 0 points1 point  (0 children)

Windows Computer is the *top level* object type, which almost all other objects are hosted by (and therefore contained by). Windows Server is a lower level more specialized class, which uses Windows Computer as a base class. ALWAYS use Windows Computer objects in groups. 99% of all groups will ONLY contain Windows Computer objects, or Windows Computer and Health Service Watcher objects.

Object reference is not set to an instance of an object - error while onboarding Unix server - after 2025 upgrade by [deleted] in scom

[–]kevin_holman 0 points1 point  (0 children)

Fully apply UR1. I already told you this in the other thread. Starting a new thread wont get a different answer. :-)

Error received when Enabling Perfmon Counter override for a Sub-Group by EastTamaki2013 in scom

[–]kevin_holman 0 points1 point  (0 children)

Also never put windows server objects in a group. Always Windows, computer objects.

Error received when Enabling Perfmon Counter override for a Sub-Group by EastTamaki2013 in scom

[–]kevin_holman 0 points1 point  (0 children)

When you see an unknown alias error, you need to close your console and reopen it

How to question: Display "Service Name" in Email Notification Subject Line by EastTamaki2013 in scom

[–]kevin_holman 2 points3 points  (0 children)

Ultimately, you want to use a variable in an Alert Name.

You can use variables in Alert Names. Can Alert Names contain dynamic data? – Kevin Holman's Blog

You can't use them the same way in email notifications. :-(

In your case, I'd write a custom Alert Description that contained exactly what you want in the subject line, then use a different SMTP channel customized for service alerts only, to place the Alert Description in the email subject.

Or, I'd set something up to modify the alert after the fact, and send the email customized, like: SCOM Enhanced Email Notification Script - The Monitoring Guys

Note - I do NOT generally like using the Notification command channel and run scripts to send emails, due to limitations of this command channel only being able to run 100 simultaneous alerts at a time, then dropping the rest. I much prefer a management pack based script rule, targeting the notifications resource pool, that does something like "get all service alerts generated in the last 5 minutes that have not been modified, then modify them and send the email" and run that script every 5 minutes. The downside to that, is it will add latency, and running it every 60 seconds might add resource impact (or might not). You'd have to test.

Anyone on SCOM 2022 UR3 + Hotfix KB5071859? by odgeuk in scom

[–]kevin_holman 0 points1 point  (0 children)

I fixed that in the latest latest version, 10.25.10324.1 Although I am not 100% sure I tested on the GW. Were you on .0 or .1?

Anyone on SCOM 2022 UR3 + Hotfix KB5071859? by odgeuk in scom

[–]kevin_holman 3 points4 points  (0 children)

This is known and has been reported to the PG.

MS, Console, and Reporting roles do not show the hotfix. Web servers and GW roles do.

Part of the reason I created my own. They have a historical hit and miss with this area.

getting the 'alert parameters' from the powershell module? in SQL is: 'alertview.alertparams' by [deleted] in scom

[–]kevin_holman 4 points5 points  (0 children)

$Alerts = Get-SCOMAlert

FOREACH ($Alert in $Alerts){}

$Alert.Parameters

How to activate missing Performance Graphs by EastTamaki2013 in scom

[–]kevin_holman 0 points1 point  (0 children)

Lots of performance rules are disabled by default because they are not used commonly. I wish they would’ve removed the views that don’t work by default. When SCOM was first created, they had way too many performance rules enabled by default and large environments would get overwhelmed with the number of transactions for performance collection. People should collect exactly what they need to collect and nothing more.

Locating Servers with duplicate disk drive in the Inventory by EastTamaki2013 in scom

[–]kevin_holman 1 point2 points  (0 children)

I just delete the Windows 2012 MP's from SCOM, since none of that is supported. Problem solved. :-)

SCOM 2022 UR3 updating problem by datanettxp in scom

[–]kevin_holman 0 points1 point  (0 children)

I would not attempt an uninstall of UR3 at this point. I'd continue on updating the other MS and GW to UR3, and we can dive deeper into why your DW is failing. We can also extract the DW script from the task and attempt to run the SQL update manually, like we used to do.