none
Send alerts to SCOM (REST API or another way) RRS feed

  • Question

  • Hi all

    I am looking for a way to send alerts from third party tools to SCOM.

    We want to consolidate alerts from all tools into one console.

    Does SCOM support this?

    For example, one team uses a self-written tool to monitor their product. 

    So, is there a way using the Powershell module or API to send the alerts to SCOM and can we manage the alerts through SCOM?

    Thanks

    Sunday, November 10, 2019 12:53 PM

Answers

  • Hi,

    Edit:

    Sorry I misread your question at first, unfortunately you cannot consolidate alerts the way you want.

    It is possible however to integrate SCOM with other systems by creating a connector that is built on the Operations Manager Connector Framework (OMCF). Connectors built on the OMCF, which are developed from the Operations Manager SDK provides methods and types that you can use to initialize and manage a connector and to get or send operations data.

    More information here:
    Integration with other enterprise management products
    https://docs.microsoft.com/en-us/system-center/scom/plan-thirdparty-integration?view=sc-om-2019

    For the REST API, SCOM has an official REST API which you can use although there is lacking information and examples provided about it.

    You can use the custom made Web API for SCOM by Martin Ehrnst over here:
    https://github.com/ehrnst/System-Center-Operations-Manager-API

    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com LinkedIn:



    • Edited by Leon Laude Sunday, November 10, 2019 10:53 PM
    • Marked as answer by RASH MAAR Wednesday, November 13, 2019 9:16 AM
    Sunday, November 10, 2019 10:35 PM
  • Hi, 

    the short answer is "No, this is not possible" with SCOM. The reason for this is that SCOM has its own service model, which  does not allow creating alerts outside of it and managing those. 

    Each object in SCOM is member of some class, defined in a management pack, respectively each alert has some complax relationships with different objects. This makes it impossible to create alerts and import it, as they won't have any relationships to the existing SCOM objects. 

    To the other question: Yes, SCOM has a REST API:

    System Center Operations Manager REST API Reference

    but it is not a solution in your case. 

    SCOM has also an SDK, which can be used for many different purposes (but is also not an option for creating alerts):

    System Center 2012 - Operations Manager SDK

    You can learn more about the SCOM service model here:

    SCOM Service Model

    What you can do is to export alerts from SCOM and send the to your custom tool. For this purpose you can use PowerShell, the SDK or the REST API.

    Hope I was able to help.

    Regards,


    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer" where applicable. This helps the community, keeps the forums tidy, and recognizes useful contributions. Thanks!) Blog: https://blog.pohn.ch/ Twitter: @StoyanChalakov

    • Marked as answer by RASH MAAR Wednesday, November 13, 2019 9:17 AM
    Sunday, November 10, 2019 10:48 PM
    Moderator
  • As an alternative you could let the other tools write an event to the eventlog or syslog as well (if possible), and create a monitor / rule in SCOM to look at that. Not the most elegant way, but it would work.
    • Marked as answer by RASH MAAR Wednesday, November 13, 2019 9:17 AM
    Monday, November 11, 2019 12:02 PM

All replies

  • Hi,

    Edit:

    Sorry I misread your question at first, unfortunately you cannot consolidate alerts the way you want.

    It is possible however to integrate SCOM with other systems by creating a connector that is built on the Operations Manager Connector Framework (OMCF). Connectors built on the OMCF, which are developed from the Operations Manager SDK provides methods and types that you can use to initialize and manage a connector and to get or send operations data.

    More information here:
    Integration with other enterprise management products
    https://docs.microsoft.com/en-us/system-center/scom/plan-thirdparty-integration?view=sc-om-2019

    For the REST API, SCOM has an official REST API which you can use although there is lacking information and examples provided about it.

    You can use the custom made Web API for SCOM by Martin Ehrnst over here:
    https://github.com/ehrnst/System-Center-Operations-Manager-API

    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com LinkedIn:



    • Edited by Leon Laude Sunday, November 10, 2019 10:53 PM
    • Marked as answer by RASH MAAR Wednesday, November 13, 2019 9:16 AM
    Sunday, November 10, 2019 10:35 PM
  • Hi, 

    the short answer is "No, this is not possible" with SCOM. The reason for this is that SCOM has its own service model, which  does not allow creating alerts outside of it and managing those. 

    Each object in SCOM is member of some class, defined in a management pack, respectively each alert has some complax relationships with different objects. This makes it impossible to create alerts and import it, as they won't have any relationships to the existing SCOM objects. 

    To the other question: Yes, SCOM has a REST API:

    System Center Operations Manager REST API Reference

    but it is not a solution in your case. 

    SCOM has also an SDK, which can be used for many different purposes (but is also not an option for creating alerts):

    System Center 2012 - Operations Manager SDK

    You can learn more about the SCOM service model here:

    SCOM Service Model

    What you can do is to export alerts from SCOM and send the to your custom tool. For this purpose you can use PowerShell, the SDK or the REST API.

    Hope I was able to help.

    Regards,


    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer" where applicable. This helps the community, keeps the forums tidy, and recognizes useful contributions. Thanks!) Blog: https://blog.pohn.ch/ Twitter: @StoyanChalakov

    • Marked as answer by RASH MAAR Wednesday, November 13, 2019 9:17 AM
    Sunday, November 10, 2019 10:48 PM
    Moderator
  • As an alternative you could let the other tools write an event to the eventlog or syslog as well (if possible), and create a monitor / rule in SCOM to look at that. Not the most elegant way, but it would work.
    • Marked as answer by RASH MAAR Wednesday, November 13, 2019 9:17 AM
    Monday, November 11, 2019 12:02 PM