Hello, I have several alerts picking events (e.g.: Event ID 400) from Microsoft Forefront Identity Manager. The issue is FIM is checking very often (each and every minutes) to verify accounts againsts all the modules Mainframe, Active Directory, FIM itself, Specific Databases of users to confirm the User Account is valid in all sources and issuing an event ID 400 every minutes so SCOM is sending an alert every minute as well. Anyway to limit these alerts? I would like to send an alert once the first Event ID with the specific content is showing in the logs... and might be another one daily if not resolved but not every minute... Any idea? Thanks, DomSystem Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

You can disable this rule, create your own and set alert suppression by event id. It will not be create new alert, but will be increase repeat counter.

You can disable this rule, create your own and set alert suppression by event id. It will not be create new alert, but will be increase repeat counter.

thanks, DomSystem Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager

Thanks, DomSystem Center Operations Manager 2007 / System Center Configuration Manager 2007 R2 / Forefront Client Security / Forefront Identity Manager