locked
SharePoint MP Best Practices RRS feed

  • Question

  • I am completely new to SCOM.  I have read the SharePoint 2010 MP Guides back-to-back and referenced many blogs but I have not come across a decent set of best practices for the MP.  Can someone point me in the right direction?  I am very interested in the recommended thresholds for monitors and how to best utilize the MP.  Thank you!
    James Grizzle
    ---
    http://www.linkedin.com/in/jamesgrizzle
    Wednesday, March 2, 2011 6:51 PM

Answers

  • In this case, my suggestion would be for you to sit down with your SCOM guy and either hand off monitoring and management (and therefore tuning) to them, or sit down with them and have them walk you thru the quesitons one by one.

    A recommendation is to direct them to get the MP working, run it for a month in production, and then come back to you with a list of top incident drivers that need tuning.  The value in doing this is that nobody is guessing - you'll have data on which alerts need tuning (put them in a histogram with the heigh of each bar being # of alerts for a given type of rule, and the bars representing the rules.  If you pay attention only to the thresholds that have more than 60 or so occurrences (allowing for 2 alerts per rule per day - rule of thumb) you'll get pretty close without having to think too deeply about it.

    Remember - things that don't alert - don't need tuning.

    Also, if there are outages that were not caught, then review the disabled rules as seen in MPwiki.

    The guide stuff has to be done by the operations team that controls SCOM.  You cannot do any of that.


    Microsoft Corporation
    Wednesday, March 2, 2011 10:48 PM

All replies

  • Then if you are new, let me introduce you to an excellent set of management pack resources

    First up is systemcentercentral.com - a quick search for "SharePoint 2010" gave us what you may be looking for

    http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/82994/Default.aspx

    Next up is the MP wiki

    http://mpwiki.viacode.com/default.aspx?g=posts&t=12698

    This helps you see what is on by default and what is able to be turned on - this is a big pack.


    Microsoft Corporation
    Wednesday, March 2, 2011 8:52 PM
  • Although those links are fantastic, they didn't address my question.  I should have been more specific.  I will not (nor will anyone on my team) be touching SCOM to set it up, nor are we allowed to.  We are only permitted to hand over information on what we want SCOM to do for us.  The guides (and wiki you mentioned) were great in listing out the discoveries, rules, and monitors that are applicable however I am SCOM dumb and have no idea what kind of thresholds would be appropriate for those monitors or even what thresholds or combinations of thresholds are possible.
    James Grizzle
    ---
    http://www.linkedin.com/in/jamesgrizzle
    Wednesday, March 2, 2011 9:07 PM
  • In this case, my suggestion would be for you to sit down with your SCOM guy and either hand off monitoring and management (and therefore tuning) to them, or sit down with them and have them walk you thru the quesitons one by one.

    A recommendation is to direct them to get the MP working, run it for a month in production, and then come back to you with a list of top incident drivers that need tuning.  The value in doing this is that nobody is guessing - you'll have data on which alerts need tuning (put them in a histogram with the heigh of each bar being # of alerts for a given type of rule, and the bars representing the rules.  If you pay attention only to the thresholds that have more than 60 or so occurrences (allowing for 2 alerts per rule per day - rule of thumb) you'll get pretty close without having to think too deeply about it.

    Remember - things that don't alert - don't need tuning.

    Also, if there are outages that were not caught, then review the disabled rules as seen in MPwiki.

    The guide stuff has to be done by the operations team that controls SCOM.  You cannot do any of that.


    Microsoft Corporation
    Wednesday, March 2, 2011 10:48 PM
  • Dan is correct.  Put it in prod and or a lab, let it cook, and run reports for the top noise for the MP and then have your SCOM admin's tune until you are satisfied with the level of monitoring.  If something is missing, he/she can make a custom MP targeted to the existing SharePoint 2010 boxes (referencing the proper SP 2010 MP to pull in the classes) and add those custom monitors.
    Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/
    Thursday, March 3, 2011 12:44 AM
  • Thank you!
    James Grizzle
    ---
    http://www.linkedin.com/in/jamesgrizzle
    Thursday, March 3, 2011 4:02 AM