SCOM Email notification
Hi All,
The RASS Team supports 6 Notes servers and we received 306 "Manual Reboot Detected" alerts this weekend. It appears that SCOM is sending an email every couple of minutes until the alert is cleared. Please change it such that only one alert is generated.
All ,
can any one tell me will scom send an email every couple of minutes until the alert is cleared. i hope it will send a email notification only one time when the issue occuers. Please correct
me if i am wrong.
Is there any way to change it such that only one alert is generated.
when i checked the Email notification the following criteria only selected "Raised by specific group". seviarity and priority criteria option was not selected. Please tell me this would be reason for generating 306 email notification?
May 23rd, 2011 7:54am
Hi,
OpsMgr sends a notification if a one of a following occurs:
- a monitor changes it's state
- a rule is generates a new alert
In your case, I can try to guess... "Manual Reboot Detected" alert is generated by a rule that 'catches' a SNMP Traps. Most of this rules I,ve seen are creating a new alert every time a server recieves a trap.
First of all, you need to check the rule. What is this rule for? SNMP Traps?
Check your Operations Console. Do you see this 306 alerts? http://OpsMgr.ru/
Free Windows Admin Tool Kit Click here and download it now
May 23rd, 2011 8:06am
hi
i hace checked , no 306 alerts. Please tell me how to check the rule. is ther any way to check number of email notification sent and root cause for that.
May 23rd, 2011 8:32am
We're can try to find the root cause. :)
First, try to create a 'Closed Alerts' view. Create a new alert view -> select resolution state = 255. Then you can try to find a "Manual Reboot Detected" alerts in this view.
Second, try to find this rule or monitor in Authoring\rules or Authoring\monitors (use a filtering options). http://OpsMgr.ru/
Free Windows Admin Tool Kit Click here and download it now
May 23rd, 2011 10:18am
Once you find the rule thats causing the trouble that will help a lot. Also check the closed alerts for their contents. Check if the contents change every time. For instance if they list the time when the alert occured. In that case each alert would be
different and could get sent (so if they are not identical they can not be captured by a Repeat Count).Bob Cornelissen - BICTT (My BICTT Blog)
May 23rd, 2011 12:35pm
Hi,
Here are more information about how to troubleshoot rules and alerts:
Troubleshooting alert storms in OpsMgr 2007
http://blogs.technet.com/b/operationsmgr/archive/2010/02/25/troubleshooting-alert-storms-in-opsmgr-2007.aspxPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
May 24th, 2011 4:01am