Este es precisamente uno de los errores que me arroja en el event viewer de la maquina que tiene scom
The account for the UNIX/Linux Action Run As profile associated with the workflow "Microsoft.Linux.RHEL.6.LogFile.Syslog.SSHAuth.PAM.Root.Failure.Alert", running for instance "xxxxxxxxxxxxx" with ID {7DDF88E9-F30D-0657-4F3D-E26665543606}
is not defined. The workflow has been unloaded. Please associate an account with the profile.
Ahora checkeo lo que me pasaste