Once again WSUS is throwing 7000 and 7003 errors. This seems to happen once every month or two and I have to remove the role and reinstall WSUS. It gets old after a while, but this brings a pet peeve to light.

I use status filter rules to send email messages when any component issues a warning or error alert. Last night I received about 1,600 emails from the WSUS components before I could disable the rule. I have about 870 actual error messages in the message viewer. It seems I get two emails per message. I can live with that, but getting 1,600 emails about one issue is quite annoying.

What I would like to do is find a way to suppress duplicate errors and warnings in either the status filter rules that send our email alerts, in the site status logs, or both. I have been searching for an answer and have not found it yet.

Can anyone point me in the right direction to suppress these duplicate messages?

Thanks so much,

Annoyed_in_Seattle

What about to use Status Filter Rules in the Site Settings?

See Status Filter Rules Configuration Overview

Regards,

Sabrina

Hello Sabrina. Thank you for responding.

I use Status Filter Rules quite a bit to eliminate emails on status messages I don't care about, but I can't think of a way to use them to filter duplicates of a single message ID. Can you explain what you mean?

Here is how I use the filters to send email.

At the bottom of the filter list I have one Error filter and one Warning filter.

I select the "System" and "Severity" on the General tab then on the actions tab I use "Run a program" which is my script statement.

How would I use filter rules to send only one (or a small number) email for each Message ID?

Thanks,

Steve 

Correct Steve; I can't think of a way to build intelligence into some kind of frequency trigger on a status filter rule.  All I could suggest is implementing SCOM, and the SCOM Management Pack for ConfigMgr 2007, and spending a few weeks (like we did) customizing the scom alerts until they make sense for your environment (every environment is different, the Management Pack has a lot of warnings and alerts, but you may need to adjust scom alerts to fit your environment).  SCOM would let you set different thresholds for what means 'information', what means 'warning', and which would trigger an email.