SCOM 2007 R2 +CU4 I'm working with a customer that has an SLA for alerts in different resolution states, for example: a New alert must be acknowledged within 10 minutes. So, when a new alert hits 11 minutes, we'd like a notification sent to the team lead (or whoever should receive it). My understanding of the alert aging is that it is looking at the condition (i.e. low disk space) rather than the resolution state. 2 questions: 1. Is there a way to create a notification that meets the criteria of an alert being in a specific resolution state for a specific amount of time? 2. Is my understanding of SCOM 2007 alert aging correct? Thanks - BH

Modify this PS script trigger every 10 minutes for your desired objects. It will generate a new alert. This is what we do for Web Sites down. We must respond within 10 mins. <tt><tt>#Script to Update New Web Mon Alerts Add-PSSnapin "Microsoft.EnterpriseManagement.OperationsManager.Client" -ErrorVariable errSnapin; Set-Location "OperationsManagerMonitoring::" -ErrorVariable errSnapin; new-managementGroupConnection -ConnectionString:'rhthcscom01' -ErrorVariable errSnapin; set-location 'YOUR-RMS-SERVER' -ErrorVariable errSnapin; #Simple WebMon Alerts $SimpleAlerts = get-alert -criteria "ResolutionState=0" | where-object {$_.MonitoringObjectName -like "http*" -and $_.MonitoringObjectPath -eq "my-watcher-node.my-site.com"} if($SimpleAlerts -eq $null){"No Alerts Exist"} else{ForEach($Alert in $SimpleAlerts){$Alert.Update("")}} #Complex WebMon alerts $ComplexAlerts = get-alert -criteria "ResolutionState=0" | where-object {$_.MonitoringObjectFullName -like "WebApplication*"} if($ComplexAlerts -eq $null){"No Alerts Exist"} else{ForEach($Alert in $ComplexAlerts){$Alert.Update("")}} </tt></tt>

Thanks Julia - So, with this script, if an alert was triggered at 10:01 and the script executed at 10:02, it would then generate a new alert? BH

Yes, but be careful, thsi script is powerful and has the capability of making NOC folks mad during outages ... :) An email every minute would be quite heavy.

Why not just create a second subscription and select "Delay sending notifications if conditions remain unchanged for longer than" for 10 minutes? Set the criteria to State = New. So if the State doesn't change from new in 10 minutes a second notification is sent. If the State changes to aknowledged, or whatever, a second notification is not sent.

Thanks SCOMcat - So simple, yet elegant. That will do the trick! BH