Hello, I am trying to set a Subscription on "All Alert" except 1 0r 2 of them. I read http://social.technet.microsoft.com/Forums/en/operationsmanagerauthoring/thread/2adca001-59cd-44a5-b03b-0cbfb1c54f0c but 1. could not find the "Select All" under Subscriptions > Properties > Criteria > "Created by specific Rules or Monitors (e.g. Sources) > Click 'specific' Click Search I am getting a huge list of rules and monitor available but is it the only way yo do it ? or am i at the wrong spot? As the group cintains servers with various software I don't know if a huge list of ruiles/monitors like this will be effecient to be selected for this notification!!!! Thanks, DOm System Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

If I'm correct you are trying to be warned for all alert except 1 or 2. In the subscription however it's not possible to make an expression to filter alerts. Unfortunately the way subscriptions are build are opt-in so you mention what you need and not what you don't need. This is by design and there's no negative possible in the expression here... I have a subscription like this but it's not based on rules but on resolution state. All new alerts with resolution state [0] new. This however will not help you. If you really want to distinct the 1 or 2 alerts you'll need to adjust the specific monitors or rules to not generate alerts or give them a different Owner/attribute that distincts them from the rest of the alerts.. This will be a lot of work because all the alerts have to be modified. Another approach is to use a powershell scriptin in combination with a notification channel which excludes the alerts of a management pack before sending out a mail through powershell. This however will put a significant load on your RMS as it will process the script everytime an alert is raised. If you need more assistance please shout.It's doing common things uncommonly well that brings succes.