Is it possible to monitor for a certain process? We have an application that runs on our servers that is not a service but has a process. Thanks!

Hi Try the Process Template in the Authoring tab: http://technet.microsoft.com/en-us/library/dd362689.aspx http://systemcentersolutions.wordpress.com/2009/11/16/process-monitoring-extending-the-authoring-template/ http://blogs.msdn.com/b/steverac/archive/2009/07/17/understanding-the-r2-process-monitoring-management-pack-templates.aspx Cheers GrahamRegards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

Those are helpful links! We are running 2012 so I am not sure how that may differ from 2007. I have them setup but no alerts are occuring yet. I set one up to monitor for notepad.exe where more than one process should create an alert. Nothing yet though.

Hi Nothing has changed in SCOM 2012 with regards to the authoring template. If nothing is coming through then double check the group that you specified has that server in it. Also the conditions that you set. It is a reliable template. Cheers GrahamRegards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

Thanks! My guess is that it might be how we configured the group. I am testing this on a Windows 2008 R2 Domain Controller. I've applied it to the AD Domain Controller Group (Windows 2008 Server). Right-clicking and choosing view members shows me the system I have notepad.exe running. I've chosen to keep the settings for 1 and 1 for the process monitor, but still no luck with notepad open in three instances.

Hi For a quick test, I'd suggest creating your own group and adding the windows computer objects that you wish to monitor to that group. The template doesn't actually target this group. It creates the process monitor disabled targeted at all windows computers and then sets an override (enable = true) for the group. As your group doesn't contain windows computer objects it may be failing. Cheers Graham Regards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

Hi For a quick test, I'd suggest creating your own group and adding the windows computer objects that you wish to monitor to that group. The template doesn't actually target this group. It creates the process monitor disabled targeted at all windows computers and then sets an override (enable = true) for the group. As your group doesn't contain windows computer objects it may be failing. Cheers Graham Regards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

That was it. For some reason the group I chose did not work. Creating a test group with my target systems worked!

The reason is due to the way SCOM uses classes and discovered objects. Although the process wizard talks about targetting a group, it doesn't actually do this. When you use the template, the template automatically: - creates the monitors, disabled - targets the monitors at windows computer class - creates an override to enable the monitors for the group you stated But in this case, the group that you selected didn't contain windows computer objects. http://www.scom2k7.com/scom-2007-targeting/ Regards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/