Application Diagnostics: Rule Management Wizard

I am looking for documentation for SCOM 2012 (APM), Application Diagnostic in particular how to use the Rules Management Wizard.

I am looking for examples on how to use a condition value for 'Event Data' the populated example is

//stackPoint/method[not(starts-with(text(),"System.")) and not(starts-with(text(),"Microsoft."))]

I am also looking for examples on how to use the condition value for 'Description' I would like to use a wildcard in this value but I can seem to get it to work unless it is a full match even thou the description is set to 'like'. I would prefer to see more conditional options than just 'like' and 'not like' I would like to of seen 'starts with', 'ends with' and 'contains' are just a few exa

March 19th, 2013 7:29pm

We don't really have documentation of this for OpsMgr 2012. Anyhow, this feature is basically identical to how it was in AVIcode 5.7. If you download the manual for AVIcode 5.7 from here http://www.microsoft.com/en-us/download/details.aspx?id=11106 - there is a chapter on "Problem Management" that covers how this works and what operators and wildcard are supported.

Free Windows Admin Tool Kit Click here and download it now
March 19th, 2013 8:11pm

Hope these are helpful :) used them to study

APM (Application Performance Monitoring)

  • Proposed as answer by Mohamed_Abbas Wednesday, March 20, 2013 6:21 AM
March 20th, 2013 9:21am

Hi Daniele

Is APM documentation still lacking?

I'm particularly interested in the integration (or lack hereof) between OpsMgr and APM.

For example, I hoped setting an Alert status i the OpsMgr Console would change the status of the underlying events in APM AppDiagnostics and vise versa.

Thanks

Michael Brandt Lassen

Free Windows Admin Tool Kit Click here and download it now
January 30th, 2015 1:13pm

Due to internal reorganization, I haven't worked on APM for the last couple of years - this must have been one of my last posts around here in 2013...

This said, I don't think the rules management has been documented. I see the link to the AVIcode documentation mentioned up here in this thread is still available; that part works exactly the same as it did in AVI and has not received any enhancement.

And no, Alerts and events are not kept 'in sync', largely because there are various ways you can generate alerts (based on a number/performance counter in a monitor, or for individual exceptions with rules - see here http://blogs.technet.com/b/momteam/archive/2012/01/23/custom-apm-rules-for-granular-alerting.aspx), and because events are in a much larger number than events -  http://blogs.technet.com/b/momteam/archive/2012/06/18/event-to-alert-ratio-reviewing-problems-and-understanding-trends-for-apm-data-in-opsmgr-2012.aspx

As far as documentation, APM *is* pretty well documented in many other regards - starting here https://technet.microsoft.com/en-us/library/hh457578.aspx

and back in the days I had written several other posts explaining various internals and behaviors of the 'SCOM' side of things, that are still largely valid AFAIK i.e.

http://blogs.technet.com/b/momteam/archive/2012/01/14/apm-object-model.aspx

http://blogs.technet.com/b/momteam/archive/2012/01/23/custom-apm-rules-for-granular-alerting.aspx

http://blogs.technet.com/b/momteam/archive/2012/04/03/all-you-need-to-know-about-apm-transactions.aspx

http://blogs.technet.com/b/momteam/archive/2012/08/22/apm-configured-endpoint-report.aspx

January 30th, 2015 9:07pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics