SCOM Events making it to OVO, but not posting
I recently installed and configured the connector and interop provider pieces for SCOM 2007 R2 and HPOMW 9.0. I also installed the CU2 upgrade. I see the events making it to the HP server, when i look in c:\sci.log, I see mention of them, and
I see the EventID filled in back over in the SCOM console. My problem is that I have yet to see any event from SCOM get posted in HPOM.
I created a subscription to send EVERY SCOM event to HPOM to assist in testing. Like I mentioned, the connection is there, I see mention in the log and the EventID is filled in. I just can't figure out why not one single event has actually posted
in HPOM. Any assistance or ideas would be VERY gratefully appreciated.
Thanks!
Dave
September 20th, 2012 12:16pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Dave,
Couple things that generally cause this.
1 - You need to make sure every node you forward an alert from SCOM 2007 R2 is known by HPOM. This mean you either add each node to a Management group in HPOM or create an External Node and allow a range of nodes.
2 - If you know 1 above is setup correctly you most likely have a policy that is discarding the SCOM 2007 alerts. Look through your policies and verify there is nothing that would discard these alerts or create a specific policy that catches these alerts
and allows them to be displayed.
Regards,
-Steve
-
Marked as answer by
Steve Weber [MSFT]Microsoft employee, Moderator
Tuesday, September 25, 2012 11:51 AM
September 20th, 2012 12:48pm
Steve,
Thanks for your input. We are just standing up new systems. I have a great deal of experience with SCOM, HPOM is new to me. We are in a test environment, and all the SCOM nodes are also HPOM nodes, so they are all known to each other.
When I look in SCI.log, I see the alerts coming over, and the EventID gets updated, but nothing so far gets posted in HPOM. I didn't create any policies in HPOM which would block the alerts, by default should they go through? I used opcmsg to simulate
events from the SCOM RMS and they posted immediately. I've been working this for going on 2 weeks, and I'm really drawing nothing at this point.
Is a policy on HPOM required to post events? I played with creating one, which keyed off the MessageGroup (SCInterop), The Application (System Center OpsMgr to HP OVO), and the ServiceName (OpsMgr 2007 Managed). I tried each separately and in various
combinations.
Sending messages with these fields from opcmsg works fine, but not using the connector/interop.
I appreciate any advice.
Thanks!
Dave
Everything is pretty much default. I am using SCOM 2007 R2 on W2K8, and HPOM 9.0 for Windows on W2K8.
October 2nd, 2012 4:17pm
Dave,
Do you have an OVO agent on the SCOM 2007 R2 by chance? If so the connector gets confused and does not work properly and you need to remove the OVO agent from the SCOM server. You do not need any OVO agent on any nodes managed by SCOM.
If not, your best method for troubleshooting this is to put the connector into trace mode
http://technet.microsoft.com/en-us/library/ee809020.aspx and see exactly how the alert is being sent over to HPOM.
Replicate this in your opcmsg command and see if the event still shows up. If the event does not show you will need to create a policy that allows these type of events through.
Regards,
-Steve
October 2nd, 2012 4:32pm
Steve,
Thanks for your help. I got everything into debug/trace mode, and after some troubleshooting, it appeared that the msg backlog queue file on the HPOM server was hosed up. We stopped the HPOM server, renamed the file, restarted, and were able
to send messages.
Thanks again!
October 3rd, 2012 4:56pm