Asked by:
SCOM 2019: alerts older than 7 days are not available anymore

Question
-
Hi,
did in SCOM 2019 change something related to alert retention time?
If the alerts are older than 7 days, they cannot be displayed:
"An object of class MonitoringAlert with ID 91914728-b286-434b-ab42-65f92c79306a was not found."
I ran the sql script from Kevin Holman and it listed the following:
Any idea?
Best regars
Birdal
- Edited by _Birdal Monday, June 17, 2019 12:31 PM
All replies
-
These settings are for retention in the datawarehouse, alert grooming in the operationsmanager (and therefore in the console) is different.
Settings for alert grooming can be found in Administration > Settings > Alerts > Automatic Alert Resolution and in Database Grooming
-
Hi,
Check your grooming settings in the Administration pane > Settings > Database Grooming, I believe they are 1 week (7 days) by default.
Example from my SCOM 2019 lab:
Best regards,
Leon
Blog:
https://thesystemcenterblog.com LinkedIn:
- Edited by Leon Laude Monday, June 17, 2019 12:39 PM
-
Hi Leon,
this configuration were also in previous version of SCOM > 7 days.
But the alerts data was available min. for 30 days.
How about with performance data? We want that these data can be accesible min,. for 3 months.
Shouldn't SCOM datawarehouse DB contain these data (alerts, performance, etc.) longer time? Kevin's script listed different retentuions days, not 7 days.
I am confused.
Best regards
Birdal
-
Data retained in the DW can only be accessed from reports and perf widget in dashboards, not from regular perf/alert views.
You can decide to keep longer retention in the OperationManager DB, but be careful to not overload it as it only contains raw (non-agregated) data. 3 months worth of raw perf data would require an ENORMOUS database!
- Edited by CyrAz Monday, June 17, 2019 1:04 PM
-
Hi Birdal,
Let me try to clarify this a bit. You got all the OpsMgr DB retention settings as CyrAz and Leon stated, under:
Administration > Settings > Alerts > Automatic Alert Resolution and in Database Grooming
After this period, the data is moved to the DataWarehouse, wher you can obtain it via different reporting options or directly with a SQL query. Kevin Holman's article is about the Datawarehouse Retention Settings and how to adjust them.
"Shouldn't SCOM datawarehouse DB contain these data (alerts, performance, etc.) longer time?" You can decide how long you want to retain the data, the process on changing those values is also depicted in the same article.
So at the end:
- You chose your OpsMgr DB retention settings in the GUI
- Data gets moved to the DW after the configured periods expire.
- Data is availale in the DW as per the settings configurey by you, using the dwdatarp.exe tool.Regards,
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer" where applicable. This helps the community, keeps the forums tidy, and recognizes useful contributions. Thanks!) Blog: https://blog.pohn.ch/ Twitter: @StoyanChalakov
- Edited by Stoyan ChalakovMVP, Moderator Monday, June 17, 2019 1:00 PM
-
-
-
I was talking about the widgets that you can add in the dashboards that appeared with SCOM 2012 : https://blogs.technet.microsoft.com/rohitkochher/2011/11/15/system-center-operations-manager-2012-dashboards-1/
I can't say for sure if this still exist in SCOM 2019 as I have not deployed it yet, but as per http://blogs.technet.com/b/momteam/archive/2011/10/04/widgets-performance-widget.aspx (not online anymore) :
The performance widget pulls data from the SCOM data warehouse:
The chart is optimized to show no more than 100 data points per line to improve querying and rendering performance. It is important to consider this when configuring the time range for the following reasons:
- If the time range is less than 100 hours the widget will show raw data from the data warehouse
- If the time range is between 100 hours and 100 days the widget will show hourly aggregated data
- If the time range is greater than 100 days the widget will show daily aggregated data
- In addition, in order to optimize rendering performance, if the time range is 2 weeks (336 hours) the query will return 336 hourly data points, but the widget will reduce the number of points in the resulting line to approximately 100 points. This is very similar to what PerfMon does in Windows.
- Edited by CyrAz Monday, June 17, 2019 2:11 PM
-
I believe the old blog post can be found here if I'm not mistaken:
Blog:
https://thesystemcenterblog.com LinkedIn:
-
-
Hi CyrAz,
we have such kind of dashboards related to Performance data.
There is definetly NO data older than 7 days there.
Example:
Processor Time % > Performance View
from 01.06.2019 till 17.06.2019 shows only last 7 days, but not older:
Best regards
Birdal
-
Your screenshot shows a performance view (right click>navigation>performance view), not a performance widget that need to be explicitely created in a dashboard of your own.
You can't open a performance widget from a contextual menu, you have to create a dashboard and then create a widget inside it.
- Edited by CyrAz Monday, June 17, 2019 3:12 PM
-
-
-
-
-
Just to make it clear:
1. Create an empty dashboard.
2. In the dashboard, click on Click to add widget.
3. Select the Performance Widget.
4. Select either a group/object.
5. Then click Add to add the performance counters.
6. Select a a time range.
7. Finally specify the chart preferences.
Result:
Blog:
https://thesystemcenterblog.com LinkedIn:
- Edited by Leon Laude Monday, June 17, 2019 4:11 PM
-
-
Corrected!
Blog:
https://thesystemcenterblog.com LinkedIn:
-
-
-
By "empty dashboard" I meant, either a grid or column layout dashboard from the templates.
Blog:
https://thesystemcenterblog.com LinkedIn:
-
-
OK, I created the Performance Widget in "Grid" layout for a server group. Yes; i can see now more than 1 week data, BUT - Configuration takes several minutes for only 3 Weeks back data!!! - I cannot change time interval. If I want to change it, I must configure it again!!! - This method does not give me possibility to create dashboards/widgets in a specific management pack. Hey, People! That is not a good solution from Microsoft. That is just tinkering. Performance querstion was not my main question in this ticket. Main main question is related to getting alerts which are older than 1 week . Our discussion went to Performance data area. "Alert Widget" don't give any possibility to define alerts in a time period: days/months/years. One thing I forgot to write in my question: "Alert link" in SCOM Web Console does not list alerts which are older than 7 days. Best regards Birdal
-
I definitely agree this is not a great solution, but unfortunately that's the only one available in the console (without increasing raw perf data retention). SquaredUp offers a much better solution, but it's a paid-for third party product...
And you're right, Alert widgets do not offer the same possibility.
But I think we pretty much covered the "Alerts" question earlier :
- Default grooming for resolved alerts in console is 7 days, and alerts are getting resolved automatically after 30 days in the "new" resolution state or after 7 days when in any resolution state and their source is healthy.
- You can adjust all these settings in scom console > administration > settings > alerts and database grooming
- Edited by CyrAz Tuesday, June 18, 2019 2:17 PM