I am not receiving exchange alerts in scom console or email. The exchange corelation service is started. any idea?

Are you getting other alerts (IE is your SQL server healthy, no full log file, DB - SCOM DB)?  IF you are getting other alerts, but no Exchange 2010 alerts, then I would bounce the Health Service on the RMS, after it bounces, I would bounce the exchange ce on the RMS (or management server that it resides on).  I would then look at the application log for the events that the Exchange CE logs to ensure it's not throwing any issues.  I would also monitor the Ops Manager event log on the RMS or RMS emulator role server to ensure I don't see any issues as well.

You can also check the exchange correlation engine config file to ensure it hasn't been tampered with, ensure it's set up correctly.

YEs I am getting other alerts fine. Its just the exchange alerts not coming in. Dbs are healthy. How do I know which is my RMS server? 

where is the exchange corelation service config file?

What version of SCOM are you running?  If 2007 R2 then you have a dedicated RMS and should be able to find that using the console, and or checking the config of your console (as it wants to connect to your RMS).  If 2012, then the first MS installed will have the RMS role, but if you have multiple management servers in a pool, then you can designate any one of them as hosting the RMS role, so if you have only one server it's the RMS (in either configuration).

The correlation engine has a service.  Usually that will be installed on the RMS, or a server in 2012 hosting the RMS role (not always, but best practice).  The install folder, for the correlation engine, has a configuration file, it's a xml document that tells the service about your RMS etc.  

Best to read through the guide:

http://www.microsoft.com/en-us/download/details.aspx?id=692

its scom 2012 sp1. I have 2 management servers. both have exchange corelation service installed

Not too familiar with 2012 deployment with the Exchange CE, but I would look into the guide to ensure you have it configured and set up correctly for your environment.  I think the Exchange CE should only be running on one server, not both.  So you might want to check that.  Also looks as if someone has asked something similar before, so peep this thread:

http://social.technet.microsoft.com/Forums/systemcenter/en-US/49d132eb-26f9-4c2c-8c54-eb51bff93868/scom-2012-exchange-2010-correlation-engine?forum=operationsmanagergeneral

what can i do to test that exchange will send alert to scom? What on the exchange side can i stop or generate a test alert?

Any of the core services I would suspect.  If you look at the guide, it will tell you what is monitored out of the box, so you can reference that.

Hi Jon,

First of all check these settings first. If you have installed the Exchange 2010 management pack it installs the  correlation service but does not automatically import the management packs.

Check in the Administration tab --> Management packs and see if exchange 2010 is present as per the below screen shot.

If you have not then import it.

If yes you have imported. Then check if the management pack is detecting the Exchange roles such as CAS, HUB, Mailbox, Edge transport role by the following view.

Go to monitoring view ---> Microsoft Exchange server -- > Exchange 2010 --> Server state.

Check if the servers are present showing healthy or critical but it should look like the below screen shot.

Post me the results as screen shot or by typing for further troubleshooting.

Hello Gautam,

I have Exchange 2010 MP installed and I see those servers under "Microsoft Exchange 2010" -> "Servers State".

Some servers have critical alerts such free space alerts or POP, IMAP alerts. 

The problem is, I didn't get any alert from Exchange by email or eave can't see them under "Monitoring View" - "All Alerts"

What should I check?

Thank you

Hi There,

I would suggest you to check the State view to see if the Exchange roles have been properly detected as in my above screenshot.

Like HUB Transport, Mailbox, Client access etc.

Post me the screenshot of the State view in the Exchange 2010 dashboard.

Hi mate,

only install the exchange 2010 correlation engine on the RMSe server. Only 1 correlation engine installed. remove it from the other server.

To find the RMSe:
In scom console go to Administration pane. Device management - management servers. there is a column which shows which is the RMS Emulator.

I see you said that you do see the roles as discovered (HUB role and so on). So the discovery part is working. The monitoring part should also be working because I see you said there are some yellow and red items there.

There are some monitors which do not generate alerts, but only give state changes. On the monitor which turned red/yellow from the health explorer go to the properties of that monitor and check the ALerting tab if at the top it is enabled or not.

Those which generate alerts should be visible in the Active Alerts view at the top of the monitoring pane views list. Else somebody might have closed them manually (this happened at three of my customers while I was asking myself where the alerts were... create a Closed Alerts view for yourself in your workspace to help you!).

Alerts first need to show up in the Active Alerts view.

After that you can create a subscription and subscriber and channel for notification of alerts to be forwarded to you by email.

Yes, the roles are properly detected. I have found that I can't start Microsoft Exchange Monitoring Correlation service on SCOM server.

There is only one RMS Emulator Server in my environment. But "Microsoft Exchange Monitoring Correlation  service" trying to start on different SCOM server. Probably that is the issue.

If I uninstall "Management Packs" -> Exchange Server 2010" and "Exchange Server Report Library", will it uninstall "Microsoft Exchange Monitoring Correlation  service"? Current installed version is 14.3.38.4 the latest one is 14.03.0210.002. Direct upgrade doesn't work, because can't start "Microsoft Exchange Monitoring Correlation  service"

• Edited by MarioTunes 10 hours 41 minutes ago

no you have to uninstall it through the programs (i Always still say the add/remove programs, but you get the point).
Else just uninstall it on both management servers and reinstall it on only the RMSe (and yes there is only one RMSemulator).

Thank you for reply, Should I just uninstall "Exchange 2010 Management Pack for OpsMgr 2007" ?

That what I have under "Programs and Features".

• Edited by MarioTunes 4 hours 0 minutes ago

Hi There,

Yes you need to uninstall Exchange 2010 Management Pack for OpsMgr 2007 from Programs and Features.

Then reinstall it.

I heard long time back that the correlation service has issues working with SCOM 2012. Below is the link

http://www.toolzz.com/?p=49

1. Uninstall the Setup.

2. Go to Program Files\Microsoft\Excnahge Server\V14\

3.Delete all the files there post uninstallation if there are any.

4. Then go to services.msc and see if the correletion engine has disappeared there.

5. Reinstall the setup for Exchange 2010 MP.

Post the results if it worked here.