How to change the content of the field Owner in a SCOM-alert. RRS feed

  • Question

  • Dear Experts,

    I am a system operator and my job is to react when alerts appears in SCOM. In the alert is a column called Owner.

    In that field a name is specified who i can call to fix the problem.

    I want to change the name in the column Owner. Where can I find the column Owner to change its content

    I hope i have explained my problem right :)

    Greetings, P

    Monday, July 13, 2020 2:26 PM


All replies

  • Hi,

    You can use the Set-SCOMAlert PowerShell cmdlet to change alert attributes such as the Owner of the alert.


    Get-SCOMAlert -Name "Failed Accessing Windows Event Log" | Set-SCOMAlert -Owner "CONTOSO\Isabel" -CustomField1 "Root Cause - Permissions"

    This command gets all alerts named "Failed Accessing Windows Event Log" and then passes the alert objects to the Set-SCOMAlert cmdlet by using the pipe operator. The Set-SCOMAlert cmdlet changes the owner of the alert and sets the value for CustomField1.

    Best regards,

    Blog: https://thesystemcenterblog.com LinkedIn:

    Monday, July 13, 2020 3:30 PM
  • Thank you for your help.

    So if i understand this correctly

    With the ps-commandlet I can change the settings of an alert. And the next time the alert appears it will

    be displayed with setting that i have changed.

    Greetings, Peter Kiers

    Monday, July 13, 2020 3:37 PM
  • The PowerShell cmdlet can only change existing alerts (alerts that have been already received).

    The AlertOwner parameter is used to set an owner for the alert. The meaning and possible values for this field are specific to a customer environment. It can be set at authoring time as required, but often it is omitted, especially for management packs that are shipped to other customers. Alert owner is an available property on the generated alert that can be set using the Operations console after an alert is generated.


    Blog: https://thesystemcenterblog.com LinkedIn:

    • Marked as answer by PeetK Monday, July 13, 2020 4:14 PM
    Monday, July 13, 2020 3:43 PM
  • And is it also possible without Powershell?

    Gr. P

    Monday, July 13, 2020 3:44 PM
  • PowerShell is definitely the best option, you can also achieve this with System Center Orchestrator in a more automated way, I have many customers changing the owner with Orchestrator.

    Blog: https://thesystemcenterblog.com LinkedIn:

    Monday, July 13, 2020 3:57 PM