SCOM 2007 R2 Rule To Detect When Application Log Entry Does NOT Occur


  • We've recently migrated to SCOM 2007 R2 from MOM 2000, and I have to admit I'm in way over my head with this product.  We have a production application which previously relied on a MOM 2000 management pack for notifications.  The management pack migrated properly for the most part, however, certain rules appear to be no longer functional.

    We expect to see an informational entry in the application event log every night at a certain time.  If this entry does NOT occur within a certain timeframe, we need to trigger an alert so an administrator can be paged out.

    I've determined how to create new rules on the Authoring tab of the Operations Console which generate alerts when application event log entries ARE present, however, I'm unable to figure out how to do the opposite - that is, generate an alert when an entry does not occur.

    Any guidance or advice would be greatly appreciated.  Thank you,

    • Moved by Alan.Gim Monday, February 28, 2011 2:31 AM SCOM related (From:Monitoring)
    Friday, February 25, 2011 4:02 AM


All replies