I am not receiving exchange alerts in scom console or email. The exchange corelation service is started. any idea?

Are you getting other alerts (IE is your SQL server healthy, no full log file, DB - SCOM DB)?  IF you are getting other alerts, but no Exchange 2010 alerts, then I would bounce the Health Service on the RMS, after it bounces, I would bounce the exchange ce on the RMS (or management server that it resides on).  I would then look at the application log for the events that the Exchange CE logs to ensure it's not throwing any issues.  I would also monitor the Ops Manager event log on the RMS or RMS emulator role server to ensure I don't see any issues as well.

You can also check the exchange correlation engine config file to ensure it hasn't been tampered with, ensure it's set up correctly.

YEs I am getting other alerts fine. Its just the exchange alerts not coming in. Dbs are healthy. How do I know which is my RMS server? 

where is the exchange corelation service config file?

What version of SCOM are you running?  If 2007 R2 then you have a dedicated RMS and should be able to find that using the console, and or checking the config of your console (as it wants to connect to your RMS).  If 2012, then the first MS installed will have the RMS role, but if you have multiple management servers in a pool, then you can designate any one of them as hosting the RMS role, so if you have only one server it's the RMS (in either configuration).

The correlation engine has a service.  Usually that will be installed on the RMS, or a server in 2012 hosting the RMS role (not always, but best practice).  The install folder, for the correlation engine, has a configuration file, it's a xml document that tells the service about your RMS etc.  

Best to read through the guide:

http://www.microsoft.com/en-us/download/details.aspx?id=692

its scom 2012 sp1. I have 2 management servers. both have exchange corelation service installed

Not too familiar with 2012 deployment with the Exchange CE, but I would look into the guide to ensure you have it configured and set up correctly for your environment.  I think the Exchange CE should only be running on one server, not both.  So you might want to check that.  Also looks as if someone has asked something similar before, so peep this thread:

http://social.technet.microsoft.com/Forums/systemcenter/en-US/49d132eb-26f9-4c2c-8c54-eb51bff93868/scom-2012-exchange-2010-correlation-engine?forum=operationsmanagergeneral

what can i do to test that exchange will send alert to scom? What on the exchange side can i stop or generate a test alert?

Any of the core services I would suspect.  If you look at the guide, it will tell you what is monitored out of the box, so you can reference that.

Hi Jon,

First of all check these settings first. If you have installed the Exchange 2010 management pack it installs the  correlation service but does not automatically import the management packs.

Check in the Administration tab --> Management packs and see if exchange 2010 is present as per the below screen shot.

If you have not then import it.

If yes you have imported. Then check if the management pack is detecting the Exchange roles such as CAS, HUB, Mailbox, Edge transport role by the following view.

Go to monitoring view ---> Microsoft Exchange server -- > Exchange 2010 --> Server state.

Check if the servers are present showing healthy or critical but it should look like the below screen shot.

Post me the results as screen shot or by typing for further troubleshooting.

Hello Gautam,

I have Exchange 2010 MP installed and I see those servers under "Microsoft Exchange 2010" -> "Servers State".

Some servers have critical alerts such free space alerts or POP, IMAP alerts. 

The problem is, I didn't get any alert from Exchange by email or eave can't see them under "Monitoring View" - "All Alerts"

What should I check?

Thank you

Hi There,

I would suggest you to check the State view to see if the Exchange roles have been properly detected as in my above screenshot.

Like HUB Transport, Mailbox, Client access etc.

Post me the screenshot of the State view in the Exchange 2010 dashboard.

Hi mate,

only install the exchange 2010 correlation engine on the RMSe server. Only 1 correlation engine installed. remove it from the other server.

To find the RMSe:
In scom console go to Administration pane. Device management - management servers. there is a column which shows which is the RMS Emulator.

I see you said that you do see the roles as discovered (HUB role and so on). So the discovery part is working. The monitoring part should also be working because I see you said there are some yellow and red items there.

There are some monitors which do not generate alerts, but only give state changes. On the monitor which turned red/yellow from the health explorer go to the properties of that monitor and check the ALerting tab if at the top it is enabled or not.

Those which generate alerts should be visible in the Active Alerts view at the top of the monitoring pane views list. Else somebody might have closed them manually (this happened at three of my customers while I was asking myself where the alerts were... create a Closed Alerts view for yourself in your workspace to help you!).

Alerts first need to show up in the Active Alerts view.

After that you can create a subscription and subscriber and channel for notification of alerts to be forwarded to you by email.

Yes, the roles are properly detected. I have found that I can't start Microsoft Exchange Monitoring Correlation service on SCOM server.

There is only one RMS Emulator Server in my environment. But "Microsoft Exchange Monitoring Correlation  service" trying to start on different SCOM server. Probably that is the issue.

If I uninstall "Management Packs" -> Exchange Server 2010" and "Exchange Server Report Library", will it uninstall "Microsoft Exchange Monitoring Correlation  service"? Current installed version is 14.3.38.4 the latest one is 14.03.0210.002. Direct upgrade doesn't work, because can't start "Microsoft Exchange Monitoring Correlation  service"

• Edited by MarioTunes 10 hours 7 minutes ago

no you have to uninstall it through the programs (i Always still say the add/remove programs, but you get the point).
Else just uninstall it on both management servers and reinstall it on only the RMSe (and yes there is only one RMSemulator).

There is only one RMS Emulator Server in my environment. But "Microsoft Exchange Monitoring Correlation  service" trying to start on different SCOM server. Probably that is the issue.

If I uninstall "Management Packs" -> Exchange Server 2010" and "Exchange Server Report Library", will it uninstall "Microsoft Exchange Monitoring Correlation  service"? Current installed version is 14.3.38.4 the latest one is 14.03.0210.002. Direct upgrade doesn't work, because can't start "Microsoft Exchange Monitoring Correlation  service"

• Edited by MarioTunes Friday, July 03, 2015 9:03 PM

Thank you for reply, Should I just uninstall "Exchange 2010 Management Pack for OpsMgr 2007" ?

That what I have under "Programs and Features".

• Edited by MarioTunes 3 hours 27 minutes ago

Hi There,

Yes you need to uninstall Exchange 2010 Management Pack for OpsMgr 2007 from Programs and Features.

Then reinstall it.

I heard long time back that the correlation service has issues working with SCOM 2012. Below is the link

http://www.toolzz.com/?p=49

1. Uninstall the Setup.

2. Go to Program Files\Microsoft\Excnahge Server\V14\

3.Delete all the files there post uninstallation if there are any.

4. Then go to services.msc and see if the correletion engine has disappeared there.

5. Reinstall the setup for Exchange 2010 MP.

Post the results if it worked here.

Thank you for reply, Should I just uninstall "Exchange 2010 Management Pack for OpsMgr 2007" ?

That what I have under "Programs and Features".

• Edited by MarioTunes Saturday, July 04, 2015 3:43 AM

Hello,

I have uninstall Exchange MP , and check all steps

1. Uninstall the Setup. - OK

2. Go to Program Files\Microsoft\Excnahge Server\V14\ -

3.Delete all the files there post uninstallation if there are any. - no files, only empty folders tree

4. Then go to services.msc and see if the correletion engine has disappeared there. - Yes

5. Reinstall the setup for Exchange 2010 MP. - when I reinstall it on Server with RMS i got following Error

I have fixed this issue by coping Mombidild file from SCOM2012 folder to Exchange MP Bin folder 

And Event 4999

The description for Event ID 4999 from source MSExchange Common cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

7092
E12
c-RTL-AMD64
14.03.0038.000
M.E.Monitoring.CorrelationEngine
M.EnterpriseManagement.OperationsManager
M.E.C.TypeSpaceCache.GetType[T]
M.E.Common.ObjectNotFoundException
90b4
06.01.7221.049
False

the message resource is present but the message is not found in the string/message table

• Edited by MarioTunes 16 hours 25 minutes ago

I was able to start the service using the local network service account. Just select the network service account, blank out the password line, apply and start.

Now I am getting two new alerts

Event 714

Cannot connect to Operations Manager Root Management Server.

Error: The credentials used to connect to Operations Manager Root Management Server 'localhost' are invalid.  Error message: The user NT AUTHORITY\NETWORK SERVICE does not have sufficient permission to perform the operation.

Event 717

Connection with the Operations Manager Root Management Server failed.

Error: The Exchange Monitoring Correlation service cannot connect to the Operations Manager Root Management Server SDK Service. Exchange alerts will not be raised.

Number of occurrence: 58

Retrying in 30 seconds...

Pretty sure the service should be running as Local System, not network service.

When I run it as a "Local System" I got a error

Event 4999

The description for Event ID 4999 from source MSExchange Common cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

8000
E12
c-RTL-AMD64
14.03.0038.000
M.E.Monitoring.CorrelationEngine
M.EnterpriseManagement.OperationsManager
M.E.C.TypeSpaceCache.GetType[T]
M.E.Common.ObjectNotFoundException
90b4
06.01.7221.049
False

the message resource is present but the message is not found in the string/message table

Based on the following article http://www.toolzz.com/?p=49

I should use account with right Exchange rights. I have add my account to Exchange "Organization Management" account and then use my account to run "Microsoft Exchange Monitoring Correlation" service with same error result.

Something is not right with your install I suspect.  I run the CE under local system, I don't add any exchange people to anything in System Center.  I would remove the Exchange MP and CE, bounce the box, once back in, via elevated prompt, reinstall the Exchange MP and CE.

Be certain you are using the latest version of the Exchange 2010 MP, and that the server you are installing it on is the RMS or is hosting the RMS role.

Hello,

I have uninstall Exchange MP , and check all steps

1. Uninstall the Setup. - OK

2. Go to Program Files\Microsoft\Excnahge Server\V14\ -

3.Delete all the files there post uninstallation if there are any. - no files, only empty folders tree

4. Then go to services.msc and see if the correletion engine has disappeared there. - Yes

5. Reinstall the setup for Exchange 2010 MP. - when I reinstall it on Server with RMS i got following Error

I have fixed this issue by coping Mombidild file from SCOM2012 folder to Exchange MP Bin folder 

And Event 4999

The description for Event ID 4999 from source MSExchange Common cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

If the event originated on another computer, the display information had to be saved with the event.

The following information was included with the event:

7092
E12
c-RTL-AMD64
14.03.0038.000
M.E.Monitoring.CorrelationEngine
M.EnterpriseManagement.OperationsManager
M.E.C.TypeSpaceCache.GetType[T]
M.E.Common.ObjectNotFoundException
90b4
06.01.7221.049
False

the message resource is present but the message is not found in the string/message table

• Edited by MarioTunes Monday, July 06, 2015 2:45 PM

Hello Blake,

I have use latest Exchange 2010 MP

https://www.microsoft.com/en-us/download/details.aspx?id=692

Install it on RMS emulator

Get-SCOMRMSEmulator

What is CE?

I have successfully install Exchange 2010 MP on my SCOM 2007 environment without any issue, but can't on my SCOM 2012 (different environment).

Thank you

CE is short for Exchange Correlation Engine.  So it's working in your 2007 R2 environment, but not 2012.  Did you try to remove it from 2012 RMSe box, reinstall?

Yes, I tried to reinstall it:

1. Uninstall MP

2. Install MP

a. during installation, I have to switch "Local System" to "local network service" on CE to run and finalize installation.

b. Change the value of localhost to the FQDN servername of your RMS Emulator in Microsoft.Exchange.Monitoring.CorrelationEngine.exe.config

c. change "Local System" back on CE.

Hi There,

Lets check few things first.

1. How many Management servers you have ?

2. If you have more than 2 MS then has the CE installed on both ? if yes then is it working fine there ?

3. Below is the version i am using:

Can you confirm which is your version ?

4. Also the CE should run with Local system account and nothing else.

5. My install location for CE is D:\Program Files\Microsoft\Exchange Server\v14\Bin

Hoping yours is C:.

6. So can you go to the following location: D:\Program Files\Microsoft\Exchange Server\v14\Bin

 and verify the # of files and its Size is as mine in the below ?

7. Also under D:\Program Files\Microsoft\Exchange Server\v14\Bin\en below is what it should look:

And under D:\Program Files\Microsoft\Exchange Server\v14\Bin\res

And under D:\Program Files\Microsoft\Exchange Server\v14\Bin\res\en it should like the above in the second screenshot.

So can you let me know if all the files there as in the screenshot are present in your installation as well ?

Also is the file size same ? or is there any difference in the size ?

Post me the results.

Hello,

1. How many Management servers you have ?  - I have 2 management servers

2. If you have more than 2 MS then has the CE installed on both ? if yes then is it working fine there ? - Currently CE installed on only one server, first one RMSemulator.

3. Below is the version i am using:

Can you confirm which is your version ? - - I am using 14.3.38.4

4. Also the CE should run with Local system account and nothing else. - yes, currently it is setup to run under "Local system", but it was changed during installation to "Network Service", without it I can't finish installation.

5. My install location for CE is D:\Program Files\Microsoft\Exchange Server\v14\Bin

Hoping yours is C:. - Yes I am using C drive

6. So can you go to the following location: D:\Program Files\Microsoft\Exchange Server\v14\Bin

 and verify the # of files and its Size is as mine in the below ? - I have the same files, same size.

Hello,

I have the same files and the same size, please see below

• Edited by MarioTunes 15 hours 17 minutes ago

Hello,

I have the same files and the same size, please see below

• Edited by MarioTunes Tuesday, July 07, 2015 3:53 PM

We have found that one of our MP has NULL records in SCOM DB. To find what MP cause the issue run following query for DB

Use OperationsManager
SELECT *
FROM dbo.ImageReference
JOIN dbo.[Resource] on ([Resource].ResourceId = ImageReference.ImageId)
LEFT JOIN dbo.[Category] ON [Category].CategoryTarget = [Resource].ResourceId
LEFT JOIN dbo.[EnumType] ON [EnumType].EnumTypeId = [Category].CategoryValue
JOIN dbo.MPElementView ON (ImageReference.ReferenceId = MPElementView.MPElementId)
INNER JOIN dbo.[ManagementPack] ON dbo.ManagementPack.ManagementPackId = [ImageReference].ManagementPackId AND dbo.ManagementPack.ContentReadable = 1
WHERE dbo.[ImageReference].[ReferenceId] IN (select dbo.ManagedType.ManagedTypeId from dbo.ManagedType)
and dbo.[Resource].ResourceType = 4 AND [EnumType].EnumTypeName IS NULL