Sign in
 
Home2012Previous VersionsLibraryForumsGallery
System Center TechCenter >
> 
> 
Re-run a rule following a critical alert

已答复 Re-run a rule following a critical alert

  • Sunday, January 20, 2013 12:25 PM
     
     
    Sign In to Vote
    0

    I have a critical alert in the active alerts indicating that a web site in IIS was not available (as I have some maintenance jobs which might lead the agent to report non-availability).

    How can I re-run the rule on the mentioned IIS or computer so alert can disappear (it is a SC 2k12).

    Thanks in advance

     

All Replies

  • Sunday, January 20, 2013 1:01 PM
     
     
    Sign In to Vote
    0
    Hi, If alert is generated by rule it must be closed manually
     
  • Sunday, January 20, 2013 1:21 PM
    Moderator
     
     
    Sign In to Vote
    0

    Hi

    If you are running activities that could lead to the reporting of the website as unavailable then consider using maintenance mode to prevent false positives.

    Can you confirm is this is a rule or monitor based alert - the alert details will state Alert Rule or Alert Monitor

    1) For rule - see the post by Alexis

    2) If this alert has been generated by a monitor then it should reset automatically but it will only do so at the next iteration of the check, not necessarily immediately. The recalculte health button in Health Explorer rarely helps speed this process as it only works for a very small subset of monitors - on-demand dection.

    http://thoughtsonopsmgr.blogspot.co.uk/2010/02/bringing-monitors-back-to-healthy-state.html

    Cheers

    Graham

    Regards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk
    View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

     
  • Sunday, January 20, 2013 1:41 PM
     
     
    Sign In to Vote
    0
    Agree with Graham Davies, and also if you are sure there is no problem with IIS so you can manually reset the state of the monitor (if it's monitor), then alert will also disappear. 
     
  • Sunday, January 20, 2013 2:45 PM
     
     
    Sign In to Vote
    0

    I should think that it is a monitor as it it is stated in the alert the following :

    Summary

    This monitor checks the status of IIS web sites................

    I did "recalculate health" it didn't help

     
  • Sunday, January 20, 2013 2:50 PM
    Moderator
     
     
    Sign In to Vote
    0

    Recalculate health won't generally work for reasons already mentioned. 

    You'll need to wait until the next iteration of the monitor or try restarting the agent if you want to reset quicker.

    If you look at the monitor itself it will give you details of how the check takes place. I don't have a system to hand at the moment to check. But look at the overrides tab to see if you can change scheduling etc. 

    Cheers

    Graham

    Regards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk
    View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

     
  • Sunday, January 20, 2013 3:02 PM
     
     
    Sign In to Vote
    0

    So many thanks, I did a reset and alerts disappeared, however, I have another alert for a stopped web site which I need to exclude from monitoring. I openeed health explorer and a little bit lost between override menu (there is disable and overide sub items), which one shooulkd be used and which parameter shoud be modified?

    I see default value = true, override value = false, effective value = true

    apply button is not active as it seems I need to selet a MP, really don't know which one to chose as I dont see IIS MP in the list, should i pick "dafault MP"

     
  • Sunday, January 20, 2013 3:06 PM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi

    You should create new management packs for your overrides (changes to monitoring):

    Best Practice for Configuring Overrides

    Guidelines and Best Practice

    The Default Management Pack

    Go to the overrides tab and choose.

    Override for specific object of type <not sure what it will say here for that specific monitor> 

    Then set the enabled option to false.

    Cheers

    Graham

    Regards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk
    View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

     
  • Sunday, January 20, 2013 3:13 PM
     
     
    Sign In to Vote
    0

    So many thanks, I did a reset and alerts disappeared, however, I have another alert for a stopped web site which I need to exclude from monitoring. I openeed health explorer and a little bit lost between override menu (there is disable and overide sub items), which one shooulkd be used and which parameter shoud be modified?

    I see default value = true, override value = false, effective value = true

    apply button is not active as it seems I need to selet a MP, really don't know which one to chose as I dont see IIS MP in the list, should i pick "dafault MP"

    The more specific override wins...so go to Authoring->Management Pack Objects->Monitor-> choose your monitor and see Overrides Summary
     
  • Monday, January 21, 2013 2:39 AM
     
     
    Sign In to Vote
    0

    This means another override which enable this monitor is applied to more specific item so please open the override summary of this monitor and turn the enable to false for this more specific item

    Roger