T-SQL : Search for Historical Alerts and Events on the SCOM Data Warehouse for a specific server and between dates

T-SQL : Search for Historical Alerts and Events on the SCOM Data Warehouse for a specific server and between dates

Description :

There are several T-SQL queries available on the internet especially from Microsoft PFE Kevin Holman regarding searching for Events or Alerts on the OpsMgr Operational Database but not for the Data Warehouse database. In some troubleshooting scenarios or forensic analysis historical data (events or alerts) related to a […]

Read More

SCOM 2012 R2 UNIX/Linux Discovery can fail with error message : “Data at the root level is invalid. Line 2, position 1”.

Problem Description :

The UNIX/Linux Discovery Wizard in SCOM 2012 R2 can fail with the error message : “Data at the root level is invalid. Line 2, position 1” .

Solution :

This problem can of course have different reasons but in our case we figured out that the problem is caused […]

Read More

Part 12 : SCOM 2012 R2 HealthService Event Reference / PoolManager

PoolManager

EventID=15000
Severity=Informational Message=The pool member has initialized %n%nManagement Group: %1 %nManagement Group ID: %2 %nPool Name: %3 %nPool ID: %4 %nPool Version: %5 %nNumber of Pool Members: %6 %nNumber of Observer Only Pool Members: %7 %nNumber of Members Added: %8 %nNumber of Members Removed: %9 %nNumber of Instances: %10 […]

Read More

Part 11 : SCOM 2012 R2 HealthService Event Reference / JobManager

JobManager

EventID=9000
Severity=Error Message=The task status was changed to Failed on restart and was unable to be resumed because the System Center Management service was shut down

EventID=9001
Severity=Warning Message=The task is not active, and the task status was not correctly updated There is no way to determine if the […]

Read More

Part 10 : SCOM 2012 R2 HealthService Event Reference / DataPublisherManager

DataPublisherManager

EventID=8000
Severity=Warning Message=A subscriber data source in management group %1 has posted items to the workflow, but has not received a response in %5 minutes Data will be queued to disk until a response has been received This indicates a performance or functional problem with the workflow%n Workflow Id […]

Read More

Part 9 : SCOM 2012 R2 HealthService Event Reference / DiscoveryManager

DiscoveryManager

EventID=10000
Severity=Warning Message=A scheduled discovery task was not started because the previous task for that discovery was still executing %n%nDiscovery name: %2 %nInstance name: %3 %nManagement group name: %1

EventID=10001
Severity=Warning Message=An error occurred starting a discovery task %nError Code: %1 %n%nDiscovery name: %3 %nInstance name: %4 %nManagement group […]

Read More

Part 8 : SCOM 2012 R2 HealthService Event Reference / SecureStorageManager

SecureStorageManager

EventID=7000
Severity=Error Message=The Health Service could not log on the RunAs account %1\%2 for management group %5 The error is %3(%4) This will prevent the health service from monitoring or performing actions using this RunAs account

EventID=7001
Severity=Warning Message=The password for RunAs account %1\%2 for management group %5 is expiring […]

Read More

Part 7 : SCOM 2012 R2 HealthService Event Reference / HealthManager

HealthManager

EventID=5101
Severity=Error Message=Get the snapshot of current health states for selected instance failed with error: %7 %n%nInstance ID: %6 %nManagement Group ID: %5

EventID=5102
Severity=Error Message=Get the state of the monitor failed with error: %8 %n%nMonitor ID: %7 %nInstance ID: %6 %nManagement Group ID: %5

EventID=5200
Severity=Warning Message=One of […]

Read More

Part 6 : SCOM 2012 R2 HealthService Event Reference / ExecutionManager

ExecutionManager

EventID=4000
Severity=Error Message=A monitoring host is unresponsive or has crashed. The status code for the host failure was %1

EventID=4001
Severity=Error Message=ESE failure trying to remove module state. The status code for the failure was %1

Read More

Part 5 : SCOM 2012 R2 HealthService Event Reference / ConfigurationManager

ConfigurationManager

EventID=1100
Severity=Error Message=Property reference with id:”%5″ in workflow “%4”, running for instance “%3″ with id:”%2” cannot be resolved Workflow will not be loaded Management group “%1”

EventID=1101
Severity=Error Message=Host reference in workflow “%4”, running for instance “%3″ with id:”%2” cannot be resolved Workflow will not be loaded Management group […]

Read More