locked
setting alert severity for any alerts coming from servers in a particular group RRS feed

  • Question

  • Hello.

    We have a particular group of servers where we would like ALL alerts that come in, to be at the warning level.

    To manually hit each monitor and set an override for that group is impossible.

    I suppose it would be possible to script a change that touches every monitor in the database and sets the override, but that seems very invasive.

    Is there a simple solution I'm missing?

    We use Netcool to front end SCOM 2007 R2, and right now errors display in red in Netcool and warnings come in orange.  Basically we want everything for this group to end up orange.

    Thank you!

    Tuesday, June 3, 2014 4:34 PM

Answers

  • Michael-

    We have a couple thousand servers we monitor, and have had this environment running for years.  It is quite stable.  We have one "owner" of several servers that says that for ANY of his servers, ALL alerts should be only warnings.  Hence my thought to create a group for those servers, and somehow alter alerts for that group to 'warning' level, no 'error'.  It has to do with how the monitoring analysts are trained to handle an 'error' versus a 'warning'.

    Alexis-

    I'll look at Alert Activity.  Was hoping for a simpler fix, but, it's not a simple request on their part.  :(

    Thanks everyone.

    • Proposed as answer by Yan Li_ Friday, June 6, 2014 2:12 AM
    • Marked as answer by Yan Li_ Tuesday, June 17, 2014 2:18 AM
    Wednesday, June 4, 2014 1:32 PM
  • Hi,

    We can use powershell script to override monitors, more details please refer to the below link:

    http://blogs.msdn.com/b/rslaten/archive/2013/07/21/create-overrides-in-scom-2012-with-powershell.aspx

    Regards,

    Yan Li


    Regards, Yan Li

    • Proposed as answer by Mai AliMVP Sunday, June 8, 2014 10:58 AM
    • Marked as answer by Yan Li_ Tuesday, June 17, 2014 2:18 AM
    Friday, June 6, 2014 2:38 AM

All replies

  • I dont see any simple solution for this, nor do i recommend this, as i am convinced that not every single possible alert should be critical.

    A (complicated) script might be possible, but that will probably mess up the management pack best practices. Every override should not be placed in the same management pack (overrides for SQL monitors should be placed in a SQL override mp, overrides for AD monitors should be placed in an AD overrides mp etc.).

    Tuning your environment is a process. I suggest that you check every alert coming in, and decide on each alert.


    www.coretech.dk - blog.coretech.dk

    Tuesday, June 3, 2014 11:28 PM
  • hi,

    It's not a problem to override severity but sometimes this param is not overridable.

    So you can use Scorch (or command channel) to pass all new alerts (Warning/Critical) from the members of your group to Netcool with necessary constant severity.

    http://technet.microsoft.com/en-us/library/hh211592.aspx

    Wednesday, June 4, 2014 10:59 AM
  • Michael-

    We have a couple thousand servers we monitor, and have had this environment running for years.  It is quite stable.  We have one "owner" of several servers that says that for ANY of his servers, ALL alerts should be only warnings.  Hence my thought to create a group for those servers, and somehow alter alerts for that group to 'warning' level, no 'error'.  It has to do with how the monitoring analysts are trained to handle an 'error' versus a 'warning'.

    Alexis-

    I'll look at Alert Activity.  Was hoping for a simpler fix, but, it's not a simple request on their part.  :(

    Thanks everyone.

    • Proposed as answer by Yan Li_ Friday, June 6, 2014 2:12 AM
    • Marked as answer by Yan Li_ Tuesday, June 17, 2014 2:18 AM
    Wednesday, June 4, 2014 1:32 PM
  • Hi,

    We can use powershell script to override monitors, more details please refer to the below link:

    http://blogs.msdn.com/b/rslaten/archive/2013/07/21/create-overrides-in-scom-2012-with-powershell.aspx

    Regards,

    Yan Li


    Regards, Yan Li

    • Proposed as answer by Mai AliMVP Sunday, June 8, 2014 10:58 AM
    • Marked as answer by Yan Li_ Tuesday, June 17, 2014 2:18 AM
    Friday, June 6, 2014 2:38 AM
  • Creating Monitor overrides via a script
    http://www.systemcentercentral.com/Forums/tabid/60/categoryid/4/indexid/57457/Default.aspx

    How to Create an Override for a Monitor
    http://msdn.microsoft.com/en-us/library/bb960482.aspx

    [OpsMgr] How to Create an Override for a Monitor (updated SDK sample)
    http://scompro.wordpress.com/2011/10/09/opsmgr-how-to-create-an-override-for-a-monitor-updated-sdk-sample/


    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer" Mai Ali | My blog: Technical | Twitter: Mai Ali

    Sunday, June 8, 2014 10:58 AM