I recently wrote a blog article on Extending the Windows Computer class from Registry keys on agents. You can read about that here: https://kevinholman.com/2016/12/04/extending-windows-computer-class-from-registry-keys-in-scom/ However, what about UNIX/Linux agents? They don’t have the concept of a Windows Registry. For those, we can use a file on the file system…
I recently had an interesting customer issue. They wanted to collect some specific events for reporting. This was specific to NTLM authentications. The problem was – that these events could potentially FLOOD some servers, and they didn’t want to collect ALL the events, just a sample of unique events on…
Consider the scenario – you want to monitor the event logs for a specific event, however, this event has a tendency to “storm” or log hundreds of events in a short time window. Not a good condition for a monitoring system, as you can quickly overwhelm the system, nor do…
Years ago – I wrote a post on customizing the “Windows Computer” class, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler. You can read about the details of how and why here: https://kevinholman.com/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/ I later updated that…
Years ago – I wrote a post on customizing the “Windows Computer” class, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler. You can read about the details of how and why here: https://kevinholman.com/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/ I later updated that…
Years ago – I wrote a post on this, showing how to use registry keys to add properties to the “Windows Computer” class, to make creating custom groups much simpler. You can read about the details of how and why here: https://kevinholman.com/2009/06/10/creating-custom-dynamic-computer-groups-based-on-registry-keys-on-agents/ This post is a simple updated…
Customers often use “My Workspace” to create customized views that they use on a regular basis. However, one of the drawbacks on My Workspace is that these views are not available to any other users. Generally, we recommend customers use My Workspace to test and develop views, then simply re-create…
Resource pools are nothing new – they were introduced in SCOM 2012 RTM, for two reasons: 1. To remove the single-point-of-failure that was the RMS role in SCOM 2007. 2. To provide a mechanism for high availability of agentless/remote workflows, such as Unix/Linux, Network, and URL monitoring, among…
These is an issue with the current Exchange 2010 Correlation Engine – which causes it to fail on SCOM 2012 or 2016 Management Servers. Jimmy wrote about these here: https://blogs.technet.microsoft.com/jimmyharper/2015/04/15/exchange-2010-correlation-engine-not-generating-alerts/ So one remedy to this – is to install the Correlation Engine (CE) on a non-management server role. Either…
This is a list of queries that I know many people find helpful in report writing or understanding the SCOM DB schema’s to get useful info. These queries work for SCOM 2012 and later. Large Table query. (I am putting this at the top, because I use it…