locked
Failover-Clustering RRS feed

  • Question

  • Hi all,

    Would like your support to know if event ID 1146 is being monitored by Microsoft Windows Cluster management pack. I've already checked the rules and monitors, but I was not able to find it. Last week we had an issue in our environment with a specific cluster node, and this critical event did not generate any alert in SCOM console.

    For your reference, we have the latest cluster management pack applied in the environment: 

    Microsoft System Center Management Pack for Windows Server Cluster 2016 and 1709 Plus

    https://www.microsoft.com/en-us/download/details.aspx?id=54701

    Let me know about that.

    Regards,

    Roger

    Wednesday, January 22, 2020 4:55 PM

Answers

  • I had a quick look at the MP source code and indeed, there doesn't seem to be any rule or monitor for this specific event. However, maybe there is one for another related event that was generated at the same time, but you'll have to check for such event in the server which failed.
    Wednesday, January 22, 2020 5:07 PM
  • You are probably going to have to make an addendum mp, targeting cluster node class.  I had to do this for SharePoint and Exchange clusters back in the day.  Clusters are designed to fail over, if there are issues, but ops teams want to know if this happens.  The cluster mp never caught this.  I had to find the event in the cluster event log and create an alert rule for this.  

    Regards, Blake Email: mengotto<at>hotmail.com Blog: http://discussitnow.wordpress.com/ If my response was helpful, please mark it as so, if it answered your question, then please also mark it accordingly. Thank you.

    Wednesday, January 22, 2020 11:10 PM

All replies