Welcome to SCOM reporting (alert report). It's garbage. You will have to author your own report and or query the DB bro. Welcome to SCOM reporting!! Also, the monitor that raises the alert is sampling at a Higher rate than the collection rule, so the two will not match up. I suspect the collection rule is sampling every 15 minutes. So if you want to see these spikes, you will have to override the collection rule to be in close sync to the monitor, and or disable it and create your own with a more frequent sample interval. Be careful because disk counter collection is going to be huge, if it isn't already. To see the values that are in excess you get to look at all the monitors when they changed state (well sometimes they don't pipe the values in the state view, they script it out in the alert) and or look at all the silly alerts in the console or emails you got. A good SQL guy who knows the SCOM DW can probably get you a report on individual alerts by name and their values. Hit this site up for some datasources: http://blogs.technet.com/b/jonathanalmquist/archive/2011/04/09/report-dataset-samples.aspx Good luck I feel your pain. Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/

Hello, I am receiving constantly since this morning two alerts for a specific drive: Alert: Physical disk transfer (reads and writes) latency is too high Alert: Disk read latency is too high I have run the report: Alert loggin Latency but it is a 20 over for 80 under the threshold it does not reflect the number of alerts received.. Running the Performance Views on the counters Avg Disk Queue Length, Avg Disk sec/Read, Avg Disk sec/Transfer, Avg Disk sec/Write, Current Disk Queue Length, Disk Bytes/Sec, Disk Read/sec, Disk Writes/sec for all instances 16 X:#1, 16 X:, 16#1 does not show the same numbers of peaks or over threholds seen by the alerts !!! I am always running the performance views or reports from the Alert... pane Any advices? Thanks, Dom -------------------------------------------------------------------------------- System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Welcome to SCOM reporting (alert report). It's garbage. You will have to author your own report and or query the DB bro. Welcome to SCOM reporting!! Also, the monitor that raises the alert is sampling at a Higher rate than the collection rule, so the two will not match up. I suspect the collection rule is sampling every 15 minutes. So if you want to see these spikes, you will have to override the collection rule to be in close sync to the monitor, and or disable it and create your own with a more frequent sample interval. Be careful because disk counter collection is going to be huge, if it isn't already. To see the values that are in excess you get to look at all the monitors when they changed state (well sometimes they don't pipe the values in the state view, they script it out in the alert) and or look at all the silly alerts in the console or emails you got. A good SQL guy who knows the SCOM DW can probably get you a report on individual alerts by name and their values. Hit this site up for some datasources: http://blogs.technet.com/b/jonathanalmquist/archive/2011/04/09/report-dataset-samples.aspx Good luck I feel your pain. Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/