Missing sources in "created by specific sources" alertview filter
I'm still trying to create one single alertview for our server operators.This should contain all alerts from several managementpacks including Windows OS, Exchange, Cluster, DNS.As the object based approach doesn't allow to select only specific classes I tried selecting all rules and monitors from the different management packs.I chose the "created by specific sources" filter during alertview creation.It is very difficult to select the right sources as there is no way to tell which managementpack the rule/monitor is coming from.Futhermore there were 1030 sources to choose from.When finally done I compared the resulting alertview to an alertview that showed all open alerts.I noticed some alerts from several managementpack were missing.I could not find them so I decided to select ALL sources.The alerts that were missing earlier were still missing.How can it be that these kind of bugs are still in a product that has been on the market for two years? I give up. I'll tell the server operators that even a simple thing like this can't be done in OpsMgr
December 28th, 2009 7:53am
Hi,You could also create a dashboard view with one DNS Alert view, one Exchange alert view and one OS Alert view.Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se
December 28th, 2009 8:31am
Off course, but there's also a couple of other managementpacks like HP servers. HP Storage, Network Load balancing, DFS and AD.That's a bit too much for a dashboard view.
December 28th, 2009 10:14am
No activity for 30 days. I will close the thread now. Feel free to re-open it.Anders Bengtsson | Microsoft MVP - Operations Manager | http://www.contoso.se
February 8th, 2010 2:26pm
I'm having exactly the same problem. When filtering by sources, specific sources don't show up in the list like "Alert on Failed Batch Responses", which is targeting to class "Health Service". Even if I target the view to class "Health Service", the source doesn't appear :-( Creating is Dashboard isn't possible because I have to display everything except of alerts from 20-30 specific sources. Does anybody found a solution/workaroundmeanwhile?
May 22nd, 2012 3:58am
I was playing a bit around and exported the management pack containing the view and having a look to it. I went to SCOM DB and execute query: SELECT Id, DisplayName FROM [OperationsManager].[dbo].[RuleView] WHERE DisplayName like [REPLACEWITHRULENAME] ORDER BY DisplayName then I copied the rule id, converted it to lower case and added an filter entry like: <Source> <Type>Rule</Type> <Id>[REPLACEWITHRULEID]</Id> </Source> after reimporting the management pack it shows the alerts for the missing rule. I was curious what would happen when I edit the view. It was showing a string like: When going to edit the sources, all available sources are deselected and the manually added source isn't displayed.
May 22nd, 2012 5:24am