Issue subscribing to a particular event
Hello , I'm trying to subscribe to this particular service stopping alert and not other OS related errors, however am not able to do it till now. I've a requirement to send email notifications whenever a particular application service stops to the application support team. They are not interested in OS alerts. They only want to be notified in case this application service stops. I created the monitor for the windows service and disabled it. This was targeted to Windows 2000 Operating System as other core windows service are already present here. As this service was not present on RMS I chose the server name and then selected the service. Using override I enabled it for one particular server (Windows 2000 server) where the service exists. Now when I stop the service for testing, I get a an active alert and notification is sent to windows team as there are subscriptions to send all service stop alerts to windows team. So, in addition to above. After going through blogs presnt here on subscriptions. I've created a group and added explicit member(s). The group is able to populate its member so no problem in group. I've created a monitor targeted to this group and added the basic monitor for windows service all again. As this service was not present on RMS I chose the server name and then selected the service. The monitor is enabled as it targets a custom group created for this purpose only. Now I go to subscriptions and create a new subscription for it. Scoping to this group and this class only. Alert criteria contains all options ( Error/Warning, New Closed. High/Medium/Low, State/Avail/Perf/Secu/Custom/.. etc.). I specify the receipent address(application owner's email).I stop the service manually on the server. An alert pops up in the active alert. However the application owners do not get a notification. Windows team gets a notification as per old subscription.I close the alert. I still do not get a notification. Is the approach wrong ? Is there a better way to do this ? Is it not feasible to do ? I'm working on a SCOM 2007 SP1 and upgrade is not an option. Thanks, Harry :-)
November 17th, 2010 2:12pm

@Vivian, I've already checked Anders Bengtsson's blog. The link he refers to doesn't exist. On searching I found the link to blog at-> http://code4ward.net/main/Blog/tabid/70/EntryId/12/Set-NotificationForAlert.aspx It clearly states that the script he has provided only works for alerts which are raised from rules. Alerts raised from monitors do not work with this script. Thanks, Harry :-)
Free Windows Admin Tool Kit Click here and download it now
November 18th, 2010 5:42am

@Graham, I'm not comfortable with XML stuff. I fear if anything I do is wrong the entire subscription may stop working. As this is production environment it would escalate.Thanks, Harry :-)
November 18th, 2010 5:51am

Hi Harry Sadly that is the way to do it on SP 1 - http://blogs.technet.com/b/kevinholman/archive/2008/10/12/creating-granular-alert-notifications-rule-by-rule-monitor-by-monitor.aspx - R2 was a big improvement in the product around notifications. Is there a specific reason you can't upgrade? Is it cost? It really would make this a straight forward exercise. Cheers Graham View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
November 18th, 2010 2:02pm

@Graham, Yes cost is one of the factors why we can't upgrade now. I've already informed the account the need to upgrade. Lets see if they agree. I'm closing the chain.Thanks, Harry :-)
November 22nd, 2010 7:05am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics