I'm pretty new to SCOM and am trying to work through the challenge of troubleshooting alerts attached to rules versus alerts attached to monitors. For example, a monitor that has an alert which is configured with medium priority and critical severity meets the criteria of 2 subscriptions, they result in an email being sent and a script being fired. For the monitor, this works fine. However, the issue I'm running into is that when a rule generates an alert with the same priority and severity, only one subscription is triggered. What's the difference? An alert is an alert, right?

Hi! You're not basing the subscription on specific rules or monitors, are you? What happen if you remove the Medium priority criteria? /RogerThis posting is provided "AS IS" with no warranties, and confers no rights.

When you say that an alert makes a script fire from a subscription, do you mean to say that you have set up a recovery on a monitor - and this is how you are firing the script? If yes, then that explains it - recoveries and diagnosers are not notification driven - and they are not available to rules.Microsoft Corporation

No, the subscription criteria is for anything from a specific group with a critical severity and high or medium priority. The email channel works, the script/command portion doesn't on alerts raised from rules. However they both fire for alerts raised from monitors.

The script/command is a channel which works on other areas of the system, but doesn't fire on alerts raised from rules that are handled by this subscription.

Just a thought - is the script failing in the rule case?Microsoft Corporation