Missing data in OpsMgr DB and OpsMgr DW DB
Hi, We have SCOM R2 and utilizing sql 2008 for the DBs. Over the last few weeks, both DBs have large chunks of data missing. My understanding of the data flow was that the management servers write to both DBs at the same time and the query should return a similar dataset. Our grooming settings on the OpsMgr DB match the default settings and the DW settings in the StandardDataSetAggregation table shows retention for alerts at 400 days, events at 100 days and State at 180 days. This is especially vexing since the support desk has tickets open for alerts that were in the console but are no longer visible and cannot be found in either DB. Are there additional settings we need to be looking at? Do the groom settings for the OpsMgr DB have an impact on the DW DB? thanks. OpsMgr DB: select * from dbo.AlertView where TimeRaised >= '2010-08-31 12:00:00' and TimeRaised <= '2010-09-30 12:00:00' order by TimeRaised desc DW DB: select * from Alert.vAlert where RaisedDateTime >= '2010-08-31 12:00:00' and RaisedDateTime <= '2010-09-30 12:00:00' order by RaisedDateTime desc
September 29th, 2010 8:36pm

Based on the above query of the OpsDB, you are trying to return 30 days of alerts. The default retention period for closed alerts in the OpsDB is 7 days. In this case, you will not see a matching number of alerts return from these two queries.HTH, Jonathan Almquist - MSFT
Free Windows Admin Tool Kit Click here and download it now
September 30th, 2010 9:55am

The grooming settings on the OpsDB do not impact the grooming settings on the data warehouse. As Johnathan points out, the default grooming settings for OpsDB is 7 days which would explain why you are getting back data from the datawarehouse that you are not getting from the Operations database - since you are trying to retrieve for an entire month of data tha is no longer there. I am trying to understand though why you are saying there are chunks of data missing from the datawarehouse?
October 2nd, 2010 6:10am

The chunks of data missing correspond to tickets that were opened when the alerts fired in the Ops Console. Checking the SCOM console the following day, showed no alerts corresponding to the tickets. Querying the DB and DW showed no alerts that matched either. These chunks of missing of alerts span upto 11 days in one instance. There are simply no alerts in the DW for this period of time. v
Free Windows Admin Tool Kit Click here and download it now
October 4th, 2010 8:48pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics