Alert History
Hello together,
where do I see alerts, events, sent notifications etc. which happened on / for a system in the past? Would it be possible to see which Operator changed the resolution state, closed the alert etc. as well?
Regards,
M.
November 4th, 2010 5:04am
Hi,
You can create any event view or alert view to show you events and alerts generated in the past, as long it is in your database. With default settings we store around a week of data in the OperationsManager database. After that you need to use reports to
look at the data, the data warehouse database store data for a year with default settings. For how long back do you want to see alerts and events?Anders Bengtsson | Microsoft PFE | blog at http://www.contoso.se
Free Windows Admin Tool Kit Click here and download it now
November 4th, 2010 5:13am
Hi
Just to add to Anders reply as this very much does depend on how long back you want to look as there are seperate grooming settings for the database and data warehouse but detailed information only really gets stored in the database (7 days by default).
It also depends on the exact information that you are looking for:
E.g.
1) You can create a view for closed alerts and look at the history tab to see who closed the alert (or if it was autoresolved by the system) for data that is in the OperationsManager database
2) There is no alert history for notifications -
http://blogs.technet.com/b/momteam/archive/2009/05/08/notifications-update-alert-history-tool.aspx
I find reporting around alerting very poor in OpsMgr - in engagements which have also deployed Service Manager 2010 there are more options around incident reporting.
Cheers
GRahamView OpsMgr tips and tricks at
http://systemcentersolutions.wordpress.com/
November 4th, 2010 5:24am