Appendix: Monitoring Pack Contents

Article
03/29/2012

Applies To: System Center 2012 - Operations Manager

The Operations Manager Monitoring Pack discovers the object types described in the following sections. Not all of the objects are automatically discovered. Use overrides to discover those objects that are not discovered automatically.

Important

Any workflow (rule, monitor, discovery, and so forth) that has “Deprecated” in its name should never be enabled.

Reports

To see the Operational Data Reporting reports, in the Operations console, click Reporting. In the Reporting pane, expand Reporting, and then click Microsoft ODR Report Library. The management pack includes the following reports:

Instance Space Report

This report shows the number of instances of each class (for example, Exchange Servers) that are created in your management group. By default, this report needs no parameters, but it is possible to modify the start and end dates.
Management Group Report

This report shows the operating system version used in the Operations Manager infrastructure (management servers). By default, this report needs no parameters, but it is possible to modify the start and end dates.
Management Packs Report

This report shows the versions of each management pack that is installed in your environment. It also summarizes all the overrides you have defined in your environment, as well as custom rules and monitors you have authored. By default, this report needs no parameters, but it is possible to modify the start and end dates.
Most Common Alerts Report

This report shows the most common alerts generated within the report period (by default one week). It also shows this data by management pack. By default, this report needs no parameters, but it is possible to modify the start and end dates.
Alerts Per Day Report

This report shows the number of alerts generated per day from each rule or monitor that alerted within the report period (by default one week). By default, this report needs no parameters, but it is possible to modify the start and end dates.

Agent

Discovery Information

The discovery of agents is defined in the System Center Internal Library Management Pack.

Note that the monitors listed in this table list the effective configuration of monitors on an Agent. Agent monitoring consists of several classes, such as Management Health Service and the Agent class. This table lists all of these monitors.

Monitor Name	Enabled	Alert	Alert Severity	Description	When to Enable
Agent and Operating System architecture are the same	TRUE	TRUE	Warning	This monitor detects if the 32-bit agent has been installed on a 64-bit operating system.	N/A
Agent Version Monitor	TRUE	TRUE	Warning	This monitor checks for the agent version, and generates an alert if the version of an agent is less than the minimum version that is provided.	N/A
Health Service Handle Count Threshold	FALSE	FALSE	N/A	This monitor ensures that the "Process\Handle Count" counter for the "MonitoringHost.exe" processes do not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	N/A
Health Service Private Bytes Threshold	FALSE	FALSE	N/A	This monitor ensures that the "Process\Private Bytes" counter for the "MonitoringHost.exe" processes do not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	Never (this monitoring is handled by a separate monitor for agents)
Audit Collection Forwarder – Windows Service	TRUE	FALSE	N/A	This monitor checks the state of the ACS forwarder windows service.	N/A
Send Queue % Used	TRUE	TRUE	Error	This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.	N/A
WMI Health Monitor	TRUE	TRUE	Error	This monitor checks whether WMI is healthy by periodically performing a WMI query	N/A
WMI Memory Usage Monitor	TRUE	TRUE	Match Monitor Health	This monitor checks WMI memory utilization on the computer.	N/A
Monitoring Host Handle Count Threshold	TRUE	FALSE	N/A	This monitor ensures that the "Process\Handle Count" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	N/A
Monitoring Host Private Bytes Threshold	TRUE	FALSE	N/A	This monitor ensures that the "Process\Private Bytes" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	N/A
No End to End Event for 45 minutes (Critical Level)	FALSE	FALSE	N/A	This monitor detects if the local System Center Management Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.	Enable if you want to track end to end event monitoring
Local End to End Event Health	FALSE	FALSE	N/A	This roll-up monitor represents the health for a System Center Management Health Service's functionality to process events.	Enable if you want to track end to end event monitoring
No End to End Event for 30 minutes (Warning Level)	FALSE	FALSE	N/A	This monitor detects if the local System Center Management Health Service was able to log an event in the last 30 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.	Enable if you want to track end to end event monitoring
WMI Service Availability	TRUE	FALSE	N/A	WMI Service Availability roll-up monitor.	N/A
AVIcode Intercept service found	FALSE	TRUE	Warning	Monitor that watches for an installer error raised to indicate that an old AVIcode .NET Enterprise Agent is on the system. This monitor is disabled by default but you might want to enable it to verify which portion of your agents are still running the AVIcode Intercept service as opposed to the new APM feature in Operations Manager2012.	See description
Valid Host No APM Agent	FALSE	FALSE	N/A	Monitor that watches for .NET installed on a system with an Operations Manager health service that does not have the APM service installed	If you want to monitor for agents that do not have the right version of .NET installed
Audit Collection Availability	TRUE	FALSE	N/A	Audit Collection Availability roll up monitor.	N/A
System Center Management Health Service Availability	TRUE	FALSE	N/A	System Center Management Health Service Availability roll-up monitor.	N/A
Expiration Check of Certificate Used for Authentication	TRUE	TRUE	Error	This monitor checks the status of the certificate used for authentication and sends an alert when the certificate is about to expire.	N/A
Configuration Processing	FALSE	FALSE	N/A	This monitor indicates whether the System Center Management Health Service could load the configuration successfully or not.	If you want to enable configuration monitoring
Configuration 90 minutes out of Data (Critical Level)	FALSE	FALSE	N/A	This monitor indicates that the System Center Management Health Service has had a stale configuration for a long period of time.	If you want to enable stale configuration monitoring
System Center Management Health Service Configuration Processing	FALSE	TRUE	Error	Indicates whether the System Center Management Health Service configuration processing is successful and current.	If you want to enable configuration monitoring
Configuration 45 minutes Out of Date (Warning Level)	FALSE	FALSE	N/A	This monitor indicates that the System Center Management Health Service has had a stale configuration for some period of time.	If you want to enable stale configuration monitoring
Send Queue % Used (Health Service)	FALSE	TRUE	Error	This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.	Never (this monitoring is handled by a separate monitor for agents)
System Center Management Health Service Performance	TRUE	FALSE	N/A	System Center Management Health Service performance roll-up monitor.	N/A
Agent processor utilization	TRUE	TRUE	Error	Monitor all agent processes to identify potential issues with the agent using too much processor time.	N/A
Data Validity Check	FALSE	TRUE	Warning	Monitors the validity of data arriving at this System Center Management Health Service.	If you want to enable this monitoring scenario
Data Integrity	TRUE	FALSE	N/A	Monitors the integrity of data flowing into the System Center Management Health Service.	N/A
Spoofed Data Check	TRUE	TRUE	Warning	This monitor reports on spoofed data received by this System Center Management Health Service.	N/A
System Center Management Health Service Security	TRUE	FALSE	N/A	Security roll-up for the System Center Management Health Service.	N/A
System Center Management Health Service Memory Utilization	TRUE	FALSE	N/A	This monitor aggregates state from four unit monitors that measure memory utilization of the System Center Management Health Service. When this monitor changes to critical, it starts a recovery task that restarts the System Center Management Health Service.	N/A
System Center Management Health Service Performance	TRUE	FALSE	N/A	System Center Management Health Service modules performance roll-up monitor.	N/A
System Center Management Health Service Modules Performance Rollup	TRUE	FALSE	N/A	System Center Management Health Service modules roll-up monitor.	N/A
Many Corrupt or Unreadable Windows Events	TRUE	TRUE	Warning	This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.	N/A
Failed Accessing Windows Event Log	TRUE	TRUE	Warning	This monitor checks access to Windows event logs.	N/A
Processing Backlogged Events Taking a Long Time	TRUE	TRUE	Match Monitor Health	This monitor checks the if the Windows Event Log module is processing backlogged events for a period of time.	N/A
Event Log Data Source Module	TRUE	FALSE	N/A	Event Log Data Source module roll-up monitor.	N/A
Unable to Process Windows Event Log	TRUE	TRUE	Warning	This monitor checks if the Windows Event Log monitor is unable to process events from one or more event logs.	N/A
Run As Account Verification	TRUE	TRUE	Warning	Monitor that verifies Run As accounts.	N/A
Run As Account Authorization	TRUE	TRUE	Error	This monitor checks that a set of Run As accounts are authorized. Authorization can be restricted when an administrator runs the HSLockdown tool.	N/A
Run As Account and Password Expiration	TRUE	TRUE	Match Monitor Health	Checks for expiring Run As accounts and their passwords	N/A
Run As Account Logon Locally	TRUE	TRUE	Error	This monitor checks if the computer is configured to allow all Run As accounts to log on locally.	N/A
Run As Accounts	TRUE	FALSE	N/A	Monitors health of Run As accounts executing on this System Center Management Health Service.	N/A
Run As Account or Password Expired or Incorrect	TRUE	TRUE	Error	This monitor checks if a Run As account can successfully log on with the configured username and password.	N/A
Network Monitoring Timeouts	TRUE	TRUE	Warning	This monitor checks whether Network Monitoring is experiencing excessive timeouts	N/A
Secure Exchange Key Synchronization Check	TRUE	FALSE	N/A	Changes state when an issue synchronizing the secure exchange key exists	N/A
Default Action Account Type	TRUE	TRUE	Error	This monitor detects when the account type used for the agent's default Action Account is incorrect.	N/A
Run As Account Configuration Processing	TRUE	TRUE	Error	Detects when Run As account configuration processing has failed	N/A
Windows Management Instrumentation Service	TRUE	TRUE	Warning	This monitor checks the state of the Windows Management Instrumentation Service.	N/A
Network Monitoring SNMP Trap port is already in use by another program	TRUE	TRUE	Error	This monitor checks whether Network Discovery failed for a SNMP Trap port is already in use by another program.	N/A

Note that the rules listed in this table list the effective configuration of monitors on an Agent. Agent monitoring consists of several classes, such as Management Health Service and the Agent class. This table lists all of these rules.

Rule Name	Enabled	Alert	Alert Severity	Description	When to Enable
Collect System\System Uptime	TRUE	FALSE	N/A	Collects the System\System Uptime performance counter object for testing performance collection.	N/A
Collect Restart System Center Management Health Service Events	TRUE	FALSE	N/A	Collects the Restart System Center Management Health Service events.	N/A
Log Distributed Workflow Test Event	TRUE	FALSE	N/A	This rule logs an event at each System Center Management Health Service that will be collected to test event collection.	N/A
Collect Service Control Manager failed to start events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process failing to start.	N/A
Collect Service Control Manager started or stopped events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process starting and stopping.	N/A
Collect Service Control Manager process terminated events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process terminating.	N/A
Alert Invalid Override Value	TRUE	TRUE	Error	Invalid value used when overriding alert priority or severity. Runtime adjusted the value to the closest allowed.	N/A
Parameter Replacement Failure During Alert Creation	TRUE	TRUE	Warning	Parameter replacement failed during alert creation.	N/A
Critical Parameter Replacement Failure During Alert Creation	FALSE	TRUE	Error	Parameter replacement failed during alert creation. This will cause the workflow to unload.	If you want to enable this monitoring scenario
Parameter Replacement Failure Event Collection Rule	FALSE	FALSE	N/A	This rule collects System Center Management Health Service events related to parameter replacement failures.	N/A
Replacement Failure For Suppression During Alert Creation	TRUE	TRUE	Error	Replacement failed for suppression tag during alert creation.	N/A
Alert generation was temporarily suspended due to too many alerts.	TRUE	TRUE	Warning	Alert generation was temporarily suspended for a rule because the number of alerts generated exceeded the threshold within the specified time interval. This is done to prevent excessive load against the management group.	N/A
Collect Alert Subscription Module Events	TRUE	FALSE	N/A	Collects Alert Subscription module events.	N/A
Syslog Module Events Collector Rule	TRUE	FALSE	N/A	This rule collects Syslog module events.	N/A
Collect Application Log Module Events	TRUE	FALSE	N/A	Collects events generated by the Application Log module.	N/A
Application Log Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Application Log module experiences a runtime failure.	N/A
Application Log Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Application Log module fails to initialize.	N/A
Average Threshold Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Average Threshold module experiences an initialization failure.	N/A
Alert on Backward Compatibility Script Errors.	TRUE	TRUE	Warning	This rule generates alerts when Backward Compatibility script errors occur.	N/A
Collect Backward Compatibility Module Events	TRUE	FALSE	N/A	Collects Backward Compatibility module events.	N/A
Collect Baselining Modules Event	TRUE	FALSE	N/A	Collects the series of events for the numeric baselining module.	N/A
Baselining Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Baselining Module experiences an initialization failure.	N/A
Alert on Dropped Batch Responses	TRUE	TRUE	Warning	The rule generates alerts when batch responses are dropped.	N/A
Workflow Initialization: Failed to start a process or script	TRUE	TRUE	Warning	This rule generates alerts when a rule or monitor attempts to execute a process and the process cannot be started.	N/A
Workflow Initialization: Failed to start a workflow that runs a process or script	TRUE	TRUE	Warning	This rule generates alerts when failed to start a workflow that runs a process or script.	N/A
Workflow Runtime: Failed to run a process or script	TRUE	TRUE	Warning	This rule generates alerts when batch responses fail.	N/A
Collect Batch Response Module Events	FALSE	FALSE	N/A	Collects Batch Response module events.	If you want to enable this monitoring scenario
Collect Alerts	TRUE	FALSE	N/A	System rule that collects alert data from any object.	N/A
Collect Discovery Data	TRUE	FALSE	N/A	System rule that collects discovery data from any object.	N/A
Entity state change collector	TRUE	FALSE	N/A	This rule collects all state change events in the system	N/A
Event data collector	TRUE	FALSE	N/A	System rule that collects events from any object.	N/A
Collect Monitor Generated Alerts	TRUE	FALSE	N/A	System rule that collects alerts generated from monitors.	N/A
Collect Performance Data	TRUE	FALSE	N/A	System rule that collects performance data from any object.	N/A
Collect Object State	TRUE	FALSE	N/A	System rule that collects state change events from any object.	N/A
Collect Object State - Resend	TRUE	FALSE	N/A	Support rule for the Collect Object State to resend items not received by the database on the first try.	N/A
Collect Performance Signatures	TRUE	FALSE	N/A	System rule that collects performance signature data from any object.	N/A
Computer Verification Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects Computer Verification module events.	N/A
Consecutive Samples Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Consecutive Samples module experiences an initialization failure.	N/A
Collect Consolidator Module Events	TRUE	FALSE	N/A	Collects events generated by the Consolidator module.	N/A
Consolidator Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Consolidator module experiences a runtime failure.	N/A
Consolidator Module Initialization Failure	TRUE	TRUE	Error	This rule generates an alert when the Consolidator module fails to initialize.	N/A
Collect Correlation Module Events	TRUE	FALSE	N/A	Collects events generated by the Correlation module.	N/A
Correlation Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Correlation module experiences a runtime failure.	N/A
Correlation Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Correlation module fails to initialize.	N/A
Entity state change collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) entity state change events for Data Warehouse collection (to default store)	N/A
Event data collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) event data for Data Warehouse collection (to default store)	N/A
Performance data collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) performance data for Data Warehouse collection (to default store)	N/A
Entity state change publisher	TRUE	FALSE	N/A	This rule collects entity state change information from all managed entities and publishes it for Data Warehouse collection on default channel	N/A
Delta Threshold Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Delta Threshold module experiences an initialization failure.	N/A
Collect Dependent Service Check Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the Dependent Service Check Probe module.	N/A
Dependent Service Check Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Dependent Service Check Probe module experiences a runtime failure.	N/A
Dependent Service Check Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Dependent Service Check Probe module fails to initialize.	N/A
Collect Discovery Data Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Discovery Data Mapper module.	N/A
Discovery Data Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Discovery Data Mapper module experiences a runtime failure.	N/A
Discovery Data Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Discovery Data Mapper module fails to initialize.	N/A
Collect Expression Filter Module Events	TRUE	FALSE	N/A	Collects events generated by the Expression Filter module.	N/A
Expression Filter Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Expression Filter module fails to initialize.	N/A
File Transfer Empty File	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file path could not be determined by the file upload module.	If you want to enable this monitoring scenario
File Transfer Processing Failure	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file could not be processed by the file upload module.	If you want to enable this monitoring scenario
File Transfer Failure	FALSE	FALSE	N/A	This rule collects all failed file transfers by the file upload module.	If you want to enable this monitoring scenario
File Transfer Upload failure	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file failed to upload by the file upload module.	If you want to enable this monitoring scenario
File Transfer Invalid File name	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file path name was invalid and could not be processed by the file upload module.	If you want to enable this monitoring scenario
File Transfer Successful	FALSE	FALSE	N/A	This rule collects all successful file transfers by the file upload module.	If you want to enable this monitoring scenario
Collect Generic Event Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Generic Event Mapper module.	N/A
Generic Event Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Generic Event Mapper module experiences a runtime failure.	N/A
Generic Event Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Generic Event Mapper module fails to initialize.	N/A
Collect Generic Performance Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Generic Performance Mapper module.	N/A
Generic Performance Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Generic Performance Mapper module experiences a runtime failure.	N/A
Generic Performance Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Generic Performance Mapper module fails to initialize.	N/A
Collect Group Calculation Module Events	TRUE	FALSE	N/A	Collects Group Calculation module events.	N/A
Collect Alert Flow Events	TRUE	FALSE	N/A	Collects events that verify alerts are flowing from the System Center Management Health Service to the Operational Database.	N/A
Collect Health Service\Module Count	TRUE	FALSE	N/A	Collects Module Count performance counter.	N/A
Collect Health Service Management Group\Send Queue % Used	TRUE	FALSE	N/A	Collects Send Queue % Used performance counter.	N/A
Collect Health Service Management Group\Send Queue Size	TRUE	FALSE	N/A	Collects the Send Queue Size performance counter.	N/A
Collect Health Service\Workflow Count	TRUE	FALSE	N/A	Collects Workflow Count performance counter.	N/A
Collect Workflow Unloaded Events	TRUE	FALSE	N/A	Collects events related to unloaded workflows.	N/A
Collect Health Service Configuration Updated Events	FALSE	FALSE	N/A	Collects the series of events on the System Center Management Health Service that indicate requesting, receiving, and activating new configuration (e.g. rules and monitors). This rule is disabled by default as it can result in excessive event collections, which create overhead for the management group and consume space in the operational and data warehouse databases. If enabled, it is recommended that the rule only be enabled for a limited period of time.	See description
Collect Configuration Parse Error Events	FALSE	FALSE	N/A	Collects the events related to the failure of a System Center Management Health Service being able to parse its new configuration.	If you want to enable this monitoring scenario
System Center Management Health Service Credentials Not Defined	TRUE	TRUE	Error	This rule raises an alert when unable to resolve Secure Reference override.	N/A
System Center Management Health Service Credentials Not Found	TRUE	TRUE	Error	This rule raises an alert when unable to resolve Secure Reference override.	N/A
Collect Entity State Change Flow Error Events	TRUE	FALSE	N/A	Collects the events related to the flow of State Change Data from System Center Management Health Services to the Operational Database.	N/A
Collect Health Manager Events	TRUE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.	N/A
Collect Health Manager Events ID Parameter	FALSE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.	N/A
Collect Health Manager Events Name Parameter	FALSE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of the System Center Management Health Service.	If you want to enable this monitoring scenario
Periodic System Center Management Health Service Store Maintenance	TRUE	FALSE	N/A	Rule which runs periodic maintenance of the System Center Management Health Service ESE store.	N/A
Collect Monitor State Change Flow Error Events	TRUE	FALSE	N/A	Collects the events related to the flow of monitor state change data from System Center Management Health Services to the Operational database.	N/A
Collect agent processor utilization	TRUE	FALSE	N/A	Collects the "agent processor utilization" performance counter	N/A
Collect Run As Account Failure Events	FALSE	FALSE	N/A	Collects the series of events that indicate a failure in executing a rule, monitor, or task using a specific Run As account.	If you want to enable this monitoring scenario
Collect IIS Discovery Probe Module Events	FALSE	FALSE	N/A	Collects events generated by the IIS Discovery Probe module.	If you want to enable this monitoring scenario
IIS Discovery Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Discovery Probe module experiences a runtime failure.	N/A
IIS Discovery Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Discovery Probe module fails to initialize.	N/A
Collect IIS Log Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Log Condition module.	N/A
IIS Log Condition Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Log Condition module experiences a runtime failure.	N/A
IIS Log Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Log Condition module fails to initialize.	N/A
Collect IIS Site State Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Site State Data Source module.	N/A
IIS Site State Data Source Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Site State Data Source module experiences a runtime failure.	N/A
IIS Site State Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Site State Data Source module fails to initialize.	N/A
Collect IIS Site State Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Site State Probe module.	N/A
IIS Site State Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Site State Probe module experiences a runtime failure.	N/A
IIS Site State Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Site State Probe module fails to initialize.	N/A
Collect LDAP Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the LDAP Probe module.	N/A
LDAP Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the LDAP Probe module experiences a runtime failure.	N/A
LDAP Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the LDAP Probe module fails to initialize.	N/A
Learning Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Learning Module experiences a runtime failure.	N/A
Learning Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Learning Module experiences an initialization failure.	N/A
Collect Maintenance Mode Events	TRUE	FALSE	N/A	Collects the events that indicate an object entering into maintenance mode and exiting maintenance mode.	N/A
Collect Backward Compatibility Application Log Module Events	TRUE	FALSE	N/A	Collects events generated by the Backward Compatibility Application Log module.	N/A
Backward Compatibility Application Log Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Backward Compatibility Application Log module experiences a runtime failure.	N/A
Backward Compatibility Application Log Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Backward Compatibility Application Log module fails to initialize.	N/A
Collect Backward Compatibility WMI Event Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Backward Compatibility WMI Event Mapper module.	N/A
Backward Compatibility WMI Event Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Backward Compatibility WMI Event Mapper module experiences a runtime failure.	N/A
Backward Compatibility WMI Event Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Backward Compatibility WMI Event Mapper module fails to initialize.	N/A
Collect MOM NT Performance Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the MOM NT Performance Mapper module.	N/A
MOM NT Performance Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the MOM NT Performance Mapper module experiences a runtime failure.	N/A
MOM NT Performance Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the MOM NT Performance Mapper module fails to initialize.	N/A
Collect Monitoring Host Crash Events	TRUE	FALSE	N/A	Collects the events that indicate when monitoring host crashes.	N/A
Collect Multi instance Performance Module Events	FALSE	FALSE	N/A	Collects Multi instance Performance Module Events	If you want to enable this monitoring scenario
Alert on Dropped Multi instance Performance Module	TRUE	TRUE	Error	This rule generates alerts when the Multi instance Perf Module has an invalid frequency configuration	N/A
OleDb Probe Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects OleDb Probe module events.	If you want to enable this monitoring scenario
Collect Performance Data Source Module Events	FALSE	FALSE	N/A	Collects Performance Data module events.	If you want to enable this monitoring scenario
Performance Data Source Module could not find a performance counter	FALSE	TRUE	Error	This rule generates alerts when the Performance Data Source Module module is unable to find the performance counter that the workflow has been configured to collect or alert on.	If you want to enable this monitoring scenario
Alert on Dropped Power Shell Scripts	TRUE	TRUE	Warning	Alerts on dropped Power Shell scripts.	N/A
Alert on Failure to Create PowerShell Run space for Power Shell Script	TRUE	TRUE	Warning	Alerts when a rule or monitor attempts to execute a Power Shell script and the Power Shell Run space cannot be started.	N/A
Alert on Failure to Load a Power Shell SnapIn	TRUE	TRUE	Warning	Alerts when a rule or monitor attempts to execute a Power Shell script and a Power Shell snap-in cannot be loaded.	N/A
Alert on Failed Power Shell Scripts	TRUE	TRUE	Warning	Alerts on failed Power Shell scripts.	N/A
Alert on Power Shell Not Installed	TRUE	TRUE	Warning	Alerts when Power Shell scripts are being used where Power Shell is not installed.	N/A
Collect Power Shell Module Events	TRUE	FALSE	N/A	Collects Power Shell module events.	N/A
Read Discovery Data	TRUE	FALSE	N/A	This rule reads and publishes discovery data created by scheduled discoveries	N/A
Collect Registry Probe Module Events	TRUE	FALSE	N/A	This rule collects Registry Probe module events.	N/A
Schedule Manager Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Schedule Manager fails to initialize.	N/A
Collect Scheduler Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the Scheduler Condition module.	N/A
Scheduler Condition Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Condition module experiences a runtime execution failure.	N/A
Scheduler Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Condition module fails to initialize.	N/A
Collect Scheduler Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the Scheduler Data Source module.	N/A
Scheduler Data Source Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Data Source module experiences a runtime execution failure.	N/A
Scheduler Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Data Source module fails to initialize.	N/A
Collect Service Check Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the Service Check Data Source module.	N/A
Service Check Data Source Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Service Check Data Source module experiences a runtime failure.	N/A
Service Check Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Service Check Data Source module fails to initialize.	N/A
Collect Service Check Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the Service Check Probe module.	N/A
Service Check Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Service Check Probe module experiences a runtime failure.	N/A
Service Check Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Service Check Probe module fails to initialize.	N/A
Collect Timer Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the Timer Condition module.	N/A
Timer Condition Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Timer Condition module experiences a runtime failure.	N/A
Timer Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Timer Condition module fails to initialize.	N/A
Collect Windows Workflow 4.0 Module events	FALSE	FALSE	N/A	Collects events generated by the Windows Workflow 4.0 module.	If you want to enable this monitoring scenario
Windows Workflow 4.0 Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Windows Workflow 4.0 Module fails to initialize.	N/A
Windows Workflow 4.0 Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Windows Workflow 4.0 Module experiences a runtime failure.	N/A
Collect WMI Event Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Event module.	N/A
Workflow Runtime: Failed to run a WMI query	TRUE	TRUE	Warning	This rule generates alerts when the WMI Event module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI for WMI events	TRUE	TRUE	Error	This rule generates alerts when the WMI Event module fails to initialize.	N/A
WMI Event Module Item Contains Large Array	TRUE	TRUE	Warning	This rule generates alerts when the WMI Event module retrieves a data item with a very large array.	N/A
Collect WMI Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Probe module.	N/A
Workflow Runtime: Failed to run a WMI query	TRUE	TRUE	Warning	This rule generates alerts when the WMI Probe module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI	TRUE	TRUE	Error	This rule generates alerts when the WMI Probe module fails to initialize.	N/A
WMI Probe Module Item Contains Large Array	TRUE	TRUE	Warning	This rule generates alerts when the WMI Probe module retrieves a data item with a very large array.	N/A
Collect WMI Raw Performance Counter Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Raw Performance Counter module.	N/A
Workflow Runtime: Failed to run a WMI query for performance data	TRUE	TRUE	Warning	This rule generates alerts when the WMI Raw Performance Counter module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI for performance data	TRUE	TRUE	Error	This rule generates alerts when the WMI Raw Performance Counter module fails to initialize.	N/A
Web Service Management Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects WSMan (Web Services for Management) module events.	If you want to enable this monitoring scenario

View	Description	Rules and Monitors that Populate the View
Active Alerts	Alerts generated from agents and agent watcher	All rules and monitors that apply to agent
Agent Events	Events collected from Agents	All rules and monitors that apply to agent
Agent Health State	Health State of Agents and Agent Watchers
Agent Performance	Performance Data for Agents
Agents by Version	Tracks version of each Agent

Report	Description	Class Selection Criteria
Agents by Health State	The Agents by Health State report provides lists of agents broken down the state that the agents are in.	Class name
Agent Counts by Date, Management Group and Version	This report shows detail information for agent accounts during specified time interval.

Agents by Health State

The Agents by Health State report provides lists of agents broken down the state that the agents are in.

Class name

Agent Counts by Date, Management Group and Version

This report shows detail information for agent accounts during specified time interval.

Management Server

Discovery Information

The discovery of Management Servers is defined in the System Center Internal Library Management Pack.

Note that the monitors listed in this table list the effective configuration of monitors on a Management Server. Management Server monitoring consists of several classes, such as Management Health Service, the Management Server class, and the Collection Management Server class. This table lists all of these monitors.

Monitor Name	Enabled	Alert	Alert Severity	Description	When to Enable
Data Warehouse Watcher Availability Roll Up	TRUE	FALSE	N/A	Rolls up availability health to the Operations Manager Data Warehouse Watcher from the Management Server accessing the Data Warehouse	N/A
Operations Manager Datawarehouse Watcher Performance Roll Up	TRUE	FALSE	N/A	Rolls up performance health to the Operations Manager Datawarehouse Watcher from the Management Server accessing the Data Warehouse	N/A
Data Access Service - Database Connectivity	TRUE	TRUE	Error	Monitors the database connectivity of the Data Access service.	N/A
Data Access Service - Port Availability	TRUE	TRUE	Error	Monitors the port availability of the Data Access service.	N/A
Data Access Service - Windows Service	TRUE	TRUE	Error	Data Access service unit monitor.	N/A
Service Running State	FALSE	TRUE	Error	Monitors the current status of the Windows service. An alert from this monitor indicates the Windows Service is not currently running	Never
Data Warehouse Data Collection Performance State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse data collection process performance state from the perspective of a Management Server	N/A
Data Warehouse Data Collection State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse data collection state from the perspective of a Management Server	N/A
Data Warehouse Event Data Collection Writer First Chance State	TRUE	FALSE	N/A	This monitor switches to warning state once Data Warehouse event data collection writer experiences a problem	N/A
Data Warehouse Event Data Collection Writer Recovery State	TRUE	TRUE	Error	This monitor switches to warning state once Data Warehouse event data collection writer experiences a problem and does not recover from that problem in a configured amount of time	N/A
Data Warehouse Event Data Collection Writer State	TRUE	FALSE	N/A	Data Warehouse event data collection writer process state for a Management Server	N/A
Data Warehouse Event Data Collection State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse event data collection state from the perspective of a Management Server	N/A
Data Warehouse Event Data Collection Event State	TRUE	TRUE	Error	Data Warehouse event data collection event state for a Management Server	N/A
Data Warehouse Event Data Collection SQL Server Authentication State	TRUE	TRUE	Error	Data Warehouse event data collection SQL Server Authentication state for a Management Server	N/A
Data Warehouse Event Data Collection Writer Periodic Data Maintenance First Chance State	TRUE	FALSE	N/A	This monitor switches to warning state once Data Warehouse event data collection writer periodic data maintenance process experiences a problem	N/A
Data Warehouse Event Data Collection Writer Periodic Data Maintenance Recovery State	TRUE	TRUE	Error	This monitor switches to warning state once Data Warehouse event data collection writer periodic data maintenance process experiences a problem and does not recover from that problem in a configured amount of time	N/A
Data Warehouse Event Data Maintenance State for Data Writer	TRUE	FALSE	N/A	Data Warehouse event data maintenance process state from the perspective of the data writer process on a Management Server	N/A
Data Warehouse Performance State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse performance state from the perspective of a Management Server	N/A
Data Warehouse Performance Data Collection Writer First Chance State	TRUE	FALSE	N/A	This monitor switches to warning state once Data Warehouse performance data collection writer experiences a problem	N/A
Data Warehouse Performance Data Collection Writer Recovery State	TRUE	TRUE	Error	This monitor switches to warning state once Data Warehouse performance data collection writer experiences a problem and does not recover from that problem in a configured amount of time	N/A
Data Warehouse Performance Data Collection Writer State	TRUE	FALSE	N/A	Data Warehouse performance data collection writer process state for a Management Server	N/A
Data Warehouse Performance Data Collection State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse performance data collection state from the perspective of a Management Server	N/A
Data Warehouse Performance Data Collection Performance State	TRUE	TRUE	Error	Data Warehouse performance data collection performance state for a Management Server	N/A
Data Warehouse Performance Data Collection SQL Server Authentication State	TRUE	TRUE	Error	Data Warehouse performance data collection SQL Server Authentication state for a Management Server	N/A
Data Warehouse Performance Data Collection Writer Periodic Data Maintenance First Chance State	TRUE	FALSE	N/A	This monitor switches to warning state once Data Warehouse performance data collection writer periodic data maintenance process experiences a problem	N/A
Data Warehouse Performance Data Collection Writer Periodic Data Maintenance Recovery State	TRUE	TRUE	Error	This monitor switches to warning state once Data Warehouse performance data collection writer periodic data maintenance process experiences a problem and does not recover from that problem in a configured amount of time	N/A
Data Warehouse Performance Data Maintenance State for Data Writer	TRUE	FALSE	N/A	Data Warehouse performance data maintenance process state from the perspective of the data writer process on a Management Server	N/A
Data Warehouse Object Health State Data Collection Writer First Chance State	TRUE	FALSE	N/A	This monitor switches to warning state once Data Warehouse object health state data collection writer experiences a problem	N/A
Data Warehouse Object Health State Data Collection Writer Recovery State	TRUE	TRUE	Error	This monitor switches to warning state once Data Warehouse object health state data collection writer experiences a problem and does not recover from that problem in a configured amount of time	N/A
Data Warehouse Object Health State Data Collection Writer State	TRUE	FALSE	N/A	Data Warehouse entity health state data collection writer process state for a Management Server	N/A
Data Warehouse Object Health State Data Collection State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse object health state data collection state from the perspective of a Management Server	N/A
Data Warehouse Object Health State Data Collection Performance State	TRUE	TRUE	Error	Data Warehouse object health state data collection performance state for a Management Server	N/A
Data Warehouse Object Health State Data Collection SQL Server Authentication State	TRUE	TRUE	Error	Data Warehouse object health state data collection SQL Server Authentication state for a Management Server	N/A
Data Warehouse Object Health State Data Collection Writer Periodic Data Maintenance First Chance State	TRUE	FALSE	N/A	This monitor switches to a warning state once Data Warehouse object health state data collection writer periodic data maintenance process experiences a problem	N/A
Data Warehouse Object Health State Data Collection Writer Periodic Data Maintenance Recovery State	TRUE	TRUE	Error	This monitor switches to a warning state once Data Warehouse object health state data collection writer periodic data maintenance process experiences a problem and does not recover from that problem in a configured amount of time	N/A
Data Warehouse Object Health State Data Maintenance State for Data Writer	TRUE	FALSE	N/A	Data Warehouse object health state data maintenance process state from the perspective of the data writer process on a Management Server	N/A
Health Service Handle Count Threshold	TRUE	FALSE	N/A	This monitor ensures that the "Process\Handle Count" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	N/A
Health Service Private Bytes Threshold	TRUE	FALSE	N/A	This monitor ensures that the "Process\Private Bytes" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	N/A
No End to End Event for 45 Minutes (Critical Level)	FALSE	FALSE	N/A	This monitor detects if the local System Center Management Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.	Never
Local End to End Event Health	FALSE	FALSE	N/A	This roll-up monitor represents the health for a System Center Management Health Service's functionality to process events.	Never
No End to End Event for 30 Minutes (Warning Level)	FALSE	FALSE	N/A	This monitor detects if the local System Center Management Health Service was able to log an event in the last 30 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.	Never
WMI Service Availability	TRUE	FALSE	N/A	WMI Service Availability roll-up monitor.	N/A
AVIcode Intercept service found	FALSE	TRUE	Warning	Monitor that watches for an installer error raised to indicate that an AVIcode .NET Enterprise Agent is on the system. This monitor is disabled by default but you might want to enable it to verify which portion of your agents are still running the AVIcode Intercept service as opposed to the new APM feature inSystem Center 2012 - Operations Manager.	Never
Valid Host No APM Agent	FALSE	FALSE	N/A	Monitor that watches for .NET Framework installed on a system with an Operations Manager health service that does not have the APM service installed	Never
Audit Collection Availability	TRUE	FALSE	N/A	Audit Collection Availability roll up monitor.	N/A
System Center Management Health Service Availability	TRUE	FALSE	N/A	System Center Management Health Service Availability roll-up monitor.	N/A
Expiration Check of Certificate Used for Authentication	TRUE	TRUE	Error	This monitor checks the status of the certificate used for authentication and sends an alert when the certificate is about to expire.	N/A
Configuration Processing	FALSE	FALSE	N/A	This monitor indicates whether the System Center Management Health Service could load the configuration successfully or not.	Never
Configuration 90 Minutes Out of Date (Critical Level)	FALSE	FALSE	N/A	This monitor indicates that the System Center Management Health Service has had a stale configuration for a long period of time.	Never
System Center Management Health Service Configuration Processing	FALSE	TRUE	Error	Indicates whether the System Center Management Health Service configuration processing is successful and current.	Never
Configuration 45 Minutes Out of Date (Warning Level)	FALSE	FALSE	N/A	This monitor indicates that the System Center Management Health Service has had a stale configuration for some period of time.	Never
System Center Management Health Service Credentials Not Found	onStandardMonitoring	TRUE	Error	This monitor raises an alert when the Operations Manager agent cannot resolve Secure Reference override.	N/A
Send Queue % Used	TRUE	TRUE	Error	This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.	N/A
System Center Management Health Service Performance	TRUE	FALSE	N/A	System Center Management Health Service performance roll-up monitor.	N/A
Agent processor utilization	FALSE	TRUE	Error	Monitor all agent processes to identify potential issues with the agent using too much processor time.	Never
Data Validity Check	FALSE	TRUE	Warning	Monitors the validity of data arriving at this System Center Management Health Service.	Never
Data Integrity	TRUE	FALSE	N/A	Monitors the integrity of data flowing into the System Center Management Health Service.	N/A
Spoofed Data Check	TRUE	TRUE	Warning	This monitor reports on spoofed data received by this System Center Management Health Service.	N/A
System Center Management Health Service Security	TRUE	FALSE	N/A	Security roll-up for the System Center Management Health Service.	N/A
System Center Management Health Service Memory Utilization	TRUE	FALSE	N/A	This monitor aggregates state from four unit monitors that measure memory utilization of the System Center Management Health Service. When this monitor changes to critical, it starts a recovery task that restarts the System Center Management Health Service.	N/A
System Center Management Health Service Modules Performance Rollup	TRUE	FALSE	N/A	System Center Management Health Service modules performance roll-up monitor.	N/A
System Center Management Health Service Modules Rollup	TRUE	FALSE	N/A	System Center Management Health Service modules roll-up monitor.	N/A
Many Corrupt or Unreadable Windows Events	TRUE	TRUE	Warning	This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.	N/A
Failed Accessing Windows Event Log	TRUE	TRUE	Warning	This monitor checks access to Windows event logs.	N/A
Processing Backlogged Events Taking a Long Time	TRUE	TRUE	MatchMonitorHealth	This monitor checks if the Windows Event Log module is processing backlogged events for a period of time.	N/A
Event Log Data Source Module	TRUE	FALSE	N/A	Event Log Data Source module roll-up monitor.	N/A
Unable to Process Windows Event Log	TRUE	TRUE	Warning	This monitor checks if the Windows Event Log monitor is unable to process events from one or more event logs.	N/A
Run As Account Verification	TRUE	TRUE	Warning	Monitor that verifies Run As accounts.	N/A
Run As Account Authorization	TRUE	TRUE	Error	This monitor checks that a set of Run As accounts are authorized. Authorization can be restricted when an administrator runs the HSLockdown tool.	N/A
Run As Account and Password Expiration	TRUE	TRUE	MatchMonitorHealth	Checks for expiring Run As accounts and their passwords	N/A
Run As Account Logon Locally	TRUE	TRUE	Error	This monitor checks if the computer is configured to allow all Run As accounts to log on locally.	N/A
Run As Accounts	TRUE	FALSE	N/A	Monitors health of Run As accounts executing on this System Center Management Health Service.	N/A
Run As Account or Password Expired or Incorrect	TRUE	TRUE	Error	This monitor checks if a Run As account can successfully log on with the configured username and password.	N/A
Network Monitoring Timeouts	TRUE	TRUE	Warning	This monitor checks whether Network Monitoring is experiencing excessive timeouts	N/A
Secure Exchange Key Synchronization Check	TRUE	FALSE	N/A	Changes state when an issue synchronizing the secure exchange key exists	N/A
Default Action Account Type	TRUE	TRUE	Error	This monitor detects when the account type used for the agent's default Action Account is incorrect.	N/A
Run As Account Configuration Processing	TRUE	TRUE	Error	Detects when Run As account configuration processing has failed	N/A
Windows Management Instrumentation Service	TRUE	TRUE	Warning	This monitor checks the state of the Windows Management Instrumentation Service.	N/A
Network Monitoring SNMP Trap port is already in use by another program	TRUE	TRUE	Error	This monitor checks whether Network Discovery failed for a SNMP Trap port is already in use by another program.	N/A
Audit Collection Collector - Windows Service	TRUE	FALSE	N/A	This monitor checks the state of the ACS collector windows service.	N/A
Data Warehouse Data Dedicated Maintenance Process State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse dedicated data maintenance process state	N/A
Data Warehouse Data Maintenance State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse data maintenance state from the perspective of a Management Server	N/A
Data Warehouse Connectivity and Processes State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse processes state from the perspective of a Management Server	N/A
Data Warehouse Data Writer Maintenance State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse data writer maintenance state from the perspective of a Management Server	N/A
File Upload Quota	TRUE	TRUE	Warning	This unit monitor monitors the file upload quotas.	N/A
Failed Authentication Attempts Check	TRUE	TRUE	Warning	Monitors failed authentication attempts to this management server.	N/A
APM .NET Object Discovery	TRUE	TRUE	MatchMonitorHealth	This monitor verifies that the Management Server has successfully created objects that are needed for APM monitoring. The monitor turns to a warning state when a failure occurs during APM objects discovery, as this will prevent configuration from being distributed to agents. The monitor resets to Healthy when object discovery succeeds.	N/A
APM Write Action Availability	TRUE	TRUE	MatchMonitorHealth	This monitor verifies that the APM Write Actions are successfully storing events in the Operations Database. The monitor turns to a warning state when an APM Event fails to be submitted to the database, and resets to Healthy when insertion resumes.	N/A
Remote Collection Management Server Availability	TRUE	FALSE	N/A	Remote collection management server availability roll-up monitor.	N/A
Remote Data Access Service Check	FALSE	TRUE	Error	This monitor checks connectivity to the Data Access service from each of the Collection Management Server(s).	N/A
(Deprecated) Management Configuration Service Availability	FALSE	FALSE	N/A	Management Configuration Service Availability roll-up monitor.	Never
(Deprecated) Configuration service could not connect to the database in the last 30 min.(Critical Level)	FALSE	TRUE	Error	The configuration service cannot receive any configuration changes from the database in this state.	Never
(Deprecated) Configuration Service Database Connectivity	FALSE	FALSE	N/A	Management Configuration Service Database Connectivity roll-up monitor.	Never
(Deprecated) Management Configuration service could not connect to the database in the last 15 min.(Warning Level)	FALSE	FALSE	N/A	The Management Configuration service cannot receive any configuration changes from the database in this state.	Never
(Deprecated) Management Configuration Service Database Notification	FALSE	FALSE	N/A	Management Configuration service database notification roll-up monitor.	Never
(Deprecated) Configuration service could not read changes from the database in the last 30 min.(Critical Level)	FALSE	TRUE	Error	The configuration service cannot receive any configuration changes from the database in this state.	Never
(Deprecated) Management Configuration Service Database Read Consistency	FALSE	FALSE	N/A	Management Configuration service database read consistency roll-up monitor.	Never
(Deprecated) Configuration service could not read changes from the database in the last 15 min.(Warning Level)	FALSE	FALSE	N/A	The configuration service cannot receive any configuration changes from the database in this state.	Never
(Deprecated) Configuration service engine has been unhealthy for 120 min.(Critical Level)	FALSE	TRUE	Error	The configuration service engine cannot respond to state sync requests in this state.	Never
(Deprecated) Management Configuration Service Engine	FALSE	FALSE	N/A	Management Configuration service engine roll-up monitor.	Never
(Deprecated) Management Configuration service engine has been unhealthy for 60 min. (Warning Level)	FALSE	FALSE	N/A	The Management Configuration service engine cannot respond to state sync requests in this state.	Never
(Deprecated) Management Configuration Service - Windows Service State	FALSE	TRUE	Error	This monitor checks the state of the Management Configuration service Windows service.	Never
(Deprecated) Alert Subscription Acknowledgment Performance Monitor	FALSE	TRUE	Warning	Alert Subscription Data Source Module Acknowledgment performance threshold monitor.	Never
(Deprecated) Alert Subscription Availability Monitor	FALSE	TRUE	Error	Alert Subscription Data Source Module availability monitor.	Never
(Deprecated) Alert Subscription Configuration Monitor	FALSE	TRUE	Error	This monitor checks if a rule or monitor using the Alert Subscription Data Source module is providing the right configuration.	Never
(Deprecated) Alert Subscription Data Source Module	FALSE	FALSE	N/A	Alert Subscription Data Source module performance roll-up monitor.	Never
(Deprecated) Alert Subscription Query Performance Monitor	FALSE	TRUE	Warning	This monitor checks the query performance of the Alert Subscription Data Source module.	Never
(Deprecated) Alert Subscription Data Source Module	FALSE	FALSE	N/A	Alert Subscription Data Source module roll-up monitor.	Never
(Deprecated) Product Expiration - Error	FALSE	TRUE	Error	(Deprecated) Monitor detecting that product evaluation has expired.	Never
(Deprecated) Root Connector Data Validity Check	FALSE	TRUE	Warning	(Deprecated) Monitors the validity of data items sent from the Root Health service to the Data Access service and the Management Configuration service.	Never
(Deprecated) Data Access Service Availability	FALSE	FALSE	N/A	Rolls up health for the Data Access service availability.	Never
Data Access Service - Database Connectivity deprecated	FALSE	TRUE	Error	Monitors the database connectivity of the Data Access service.	Never
Data Access Service - Port Availability deprecated	FALSE	TRUE	Error	Monitors the port availability of the Data Access service.	Never
Data Access Service - Windows Service deprecated	FALSE	TRUE	Error		Never
Sql Broker Availability Monitor	FALSE	TRUE	Error	A monitor that looks at Sql Broker status for Operations Manager functionality.	Never
Agent assignment state	TRUE	FALSE	N/A	Checks the state of the agent assignment process	N/A
Configuration Store maintenance state	TRUE	FALSE	N/A	Checks Configuration Store maintenance processes state	N/A
Data Access Service connectivity recovery state	TRUE	TRUE	Error	Checks if Management Configuration Service can connect to local Data Access Service after a period of time	N/A
Data Access Service connectivity first chance state	TRUE	FALSE	N/A	Checks if Management Configuration Service can connect to local Data Access Service	N/A
Data Access Service connectivity state	TRUE	FALSE	N/A	Checks if Management Configuration Service can connect to local Data Access Service	N/A
Delta synchronization state	TRUE	FALSE	N/A	Checks the state of the delta synchronization work item	N/A
Dirty notification state	TRUE	FALSE	N/A	Checks the state of the dirty notification work item	N/A
Get next work item process state	TRUE	FALSE	N/A	Checks the state of process responsible for building next work item	N/A
Configuration Store grooming state	TRUE	FALSE	N/A	Checks the state of the Configuration Store grooming process	N/A
Management Service connectivity recovery state	TRUE	TRUE	Error	Checks if Management Configuration Service can connect to local Management Service after a period of time	N/A
Management Service connectivity first chance state	TRUE	FALSE	N/A	Checks if Management Configuration Service can connect to local Management Service	N/A
Management Service connectivity state	TRUE	FALSE	N/A	Checks if Management Configuration Service can connect to local Management Service	N/A
Configuration Store index optimization state	TRUE	FALSE	N/A	Checks the state of the Configuration Store index optimization work item	N/A
Local dirty notification state	TRUE	FALSE	N/A	Checks the state of the local dirty notification work item	N/A
Memory optimization state	TRUE	FALSE	N/A	Checks the state of the memory optimization work item	N/A
Agent pool management state	TRUE	FALSE	N/A	Checks the state of the dynamic agent pool management process	N/A
Agent request processing state	TRUE	FALSE	N/A	Checks if Management Configuration Service can successfully process agent configuration requests	N/A
Agent request processing recovery state	TRUE	TRUE	Error	Checks if Management Configuration Service can successfully process agent configuration requests after a period of time	N/A
Agent request processing first chance state	TRUE	FALSE	N/A	Checks if Management Configuration Service can successfully process agent configuration requests	N/A
Service bootstrap procedure state	TRUE	TRUE	MatchMonitorHealth	Checks to see if Management Configuration Service successfully completed bootstrap procedure	N/A
Service Running State	TRUE	TRUE	Error	Monitors the current status of the Windows service. An alert from this monitor indicates the Windows Service is not currently running	N/A
Site assignment state	TRUE	FALSE	N/A	Checks the state of the site assignment process	N/A
Snapshot synchronization state	TRUE	FALSE	N/A	Checks the state of the snapshot synchronization work item	N/A
Configuration Store statistics update state	TRUE	FALSE	N/A	Checks the state of the Configuration Store statistics update work item	N/A
Synchronization state	TRUE	FALSE	N/A	Checks the state of the synchronization work items	N/A
Work item health state	TRUE	FALSE	N/A	All work item health state	N/A
Xml configuration file load state	TRUE	TRUE	Error	Checks the state of Xml configuration file loading process	N/A
Relationships between Agents and Management Servers Monitor	TRUE	TRUE	Error	This monitor detects potential problems with the operational database, by checking for corrupted records of relationships between agents and management servers that will stop generating configuration for the entire management group resulting in all systems running on old configuration.	N/A
Partitioning and grooming has completed recently	TRUE	TRUE	Error	This monitor detects if partitioning and grooming processes have not completed successfully for too many days in a row.	N/A
Operational Database Space Free (%)	TRUE	TRUE	Error	Monitors for the free space left in the operational database in percentage terms.	N/A
IIS availability health state depends on FTP service	onStandardMonitoring	FALSE	N/A		N/A
IIS availability health state depends on built-in FTP service	onStandardMonitoring	FALSE	N/A		N/A
IIS availability health state depends on SMTP service	onStandardMonitoring	FALSE	N/A		N/A
IIS availability health state depends on W3SVC service	onStandardMonitoring	FALSE	N/A		N/A
Web Management service availability	onStandardMonitoring	TRUE	Warning		N/A
IIS Admin Service availability	onStandardMonitoring	TRUE	Error		N/A
Microsoft Audit Collector Service Collector Connection Establishment State	TRUE	TRUE	N/A	Monitors the ability of the Microsoft Audit Collector Service Collector to accept new connections	N/A
Microsoft Audit Collection Services Collector Availability	TRUE	TRUE	N/A		N/A
Microsoft Audit Collector Service Collector Database Connection Establishment State	TRUE	TRUE	N/A	Monitors the state of the Microsoft Audit Collector Service Collector's connection to its database	N/A
Microsoft Audit Collector Service Collector Connection Maintenance State	TRUE	FALSE	N/A	Monitors the ability of the Microsoft Audit Collector Service Collector to maintain client connections	N/A
Microsoft Audit Collection Services Collector Running State	TRUE	TRUE	Error	Monitors the current status of the Microsoft Audit Collection Collector service. An alert from this monitor indicates the Microsoft Audit Collection Service Collector is not currently running	N/A

Note that the rules listed in this table list the effective configuration of rules on a Management Server. Management Server monitoring consists of several classes, such as Management Health Service, the Management Server class, and the Collection Management Server class. This table lists all of these rules.

Rule Name	Enabled	Alert	Alert Severity	Description	When to Enable
Collects Operations Manager Data Access Service Client Connections	TRUE	FALSE	N/A	Collects data from the Operations Manager Data Access Service Client Connections counter.	N/A
Operations Manager Data Access Service Event Collector Rule	TRUE	FALSE	N/A	This rule collects Operations Manager Data Access Service events.	N/A
Data Access Service SPN Registration	TRUE	TRUE	Error	Rule to alert if a service principal name (SPN) for the account running the System Center Data Access service isn't registered.	N/A
Collect Event Log Events	TRUE	FALSE	N/A	Rule that collects service control events about the monitored service.	N/A
Handle Count	TRUE	FALSE	N/A	Number of handles in the monitored service.	N/A
Collect Process\% Processor Time	TRUE	FALSE	N/A	This rule collects processor utilization for the windows service.	N/A
Collect Process\Private Bytes	TRUE	FALSE	N/A	This rule collects memory usage for the windows service.	N/A
Thread Count	TRUE	FALSE	N/A	Number of threads in the monitored service.	N/A
Working Set	TRUE	FALSE	N/A	Working set of the monitored service.	N/A
Data Warehouse related event collection	TRUE	FALSE	N/A	This rule collections events related to Data Warehouse operation	N/A
Data Warehouse performance collection: writer average batch processing time	TRUE	FALSE	N/A		N/A
Data Warehouse performance collection: writer average batch size	TRUE	FALSE	N/A		N/A
Data Warehouse performance collection: writer batches per second	TRUE	FALSE	N/A		N/A
Data Warehouse performance collection: writer data items per second	TRUE	FALSE	N/A		N/A
Data Warehouse performance collection: writer dropped batch count	TRUE	FALSE	N/A		N/A
Data Warehouse performance collection: writer dropped data item count	TRUE	FALSE	N/A		N/A
Data Warehouse performance collection: writer errors per second	TRUE	FALSE	N/A		N/A
Data Warehouse performance collection: writer total error count	TRUE	FALSE	N/A		N/A
Collect System\System Uptime	TRUE	FALSE	N/A	Collects the System\System Uptime performance counter object for testing performance collection.	N/A
Collect Restart System Center Management Health Service Events	TRUE	FALSE	N/A	Collects the Restart System Center Management Health Service events.	N/A
Log Distributed Workflow Test Event	TRUE	FALSE	N/A	This rule logs an event at each System Center Management Health Service that will be collected to test event collection.	N/A
Collect Service Control Manager failed to start events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process failing to start.	N/A
Collect Service Control Manager started or stopped events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process starting and stopping.	N/A
Collect Service Control Manager process terminated events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process terminating.	N/A
Alert Invalid Override Value	TRUE	TRUE	Error	Invalid value used when overriding alert priority or severity. Runtime adjusted the value to the closest allowed.	N/A
Parameter Replacement Failure During Alert Creation	TRUE	TRUE	Warning	Parameter replacement failed during alert creation.	N/A
Critical Parameter Replacement Failure During Alert Creation	FALSE	TRUE	Error	Parameter replacement failed during alert creation. This will cause the workflow to unload.	Never
Parameter Replacement Failure Event Collection Rule	FALSE	FALSE	N/A	This rule collects System Center Management Health Service events related to parameter replacement failures.	Never
Replacement Failure For Suppression During Alert Creation	TRUE	TRUE	Error	Replacement failed for suppression tag during alert creation.	N/A
Alert generation was temporarily suspended due to too many alerts.	TRUE	TRUE	Warning	Alert generation was temporarily suspended for a rule because the number of alerts generated exceeded the threshold within the specified time interval. This is done to prevent excessive load against the management group.	N/A
Collect Alert Subscription Module Events	TRUE	FALSE	N/A	Collects Alert Subscription module events.	N/A
Syslog Module Events Collector Rule	TRUE	FALSE	N/A	This rule collects Syslog module events.	N/A
Collect Application Log Module Events	TRUE	FALSE	N/A	Collects events generated by the Application Log module.	N/A
Application Log Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Application Log module experiences a runtime failure.	N/A
Application Log Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Application Log module fails to initialize.	N/A
Average Threshold Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Average Threshold module experiences an initialization failure.	N/A
Alert on Backward Compatibility Script Errors.	TRUE	TRUE	Warning	This rule generates alerts when Backward Compatibility script errors occur.	N/A
Collect Backward Compatibility Module Events	TRUE	FALSE	N/A	Collects Backward Compatibility module events.	N/A
Collect Baselining Modules Event	TRUE	FALSE	N/A	Collects the series of events for the numeric baselining module.	N/A
Baselining Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Baselining Module experiences an initialization failure.	N/A
Alert on Dropped Batch Responses	TRUE	TRUE	Warning	The rule generates alerts when batch responses are dropped.	N/A
Workflow Initialization: Failed to start a process or script	TRUE	TRUE	Warning	This rule generates alerts when a rule or monitor attempts to execute a process and the process cannot be started.	N/A
Workflow Initialization: Failed to start a workflow that runs a process or script	TRUE	TRUE	Warning	This rule generates alerts when failed to start a workflow that runs a process or script.	N/A
Workflow Runtime: Failed to run a process or script	TRUE	TRUE	Warning	This rule generates alerts when batch responses fail.	N/A
Collect Batch Response Module Events	FALSE	FALSE	N/A	Collects Batch Response module events.	Never
Collect Alerts	TRUE	FALSE	N/A	System rule that collects alert data from any object.	N/A
Collect Discovery Data	TRUE	FALSE	N/A	System rule that collects discovery data from any object.	N/A
Collect state change events of all monitors in the system	TRUE	FALSE	N/A	This rule collects all state change events in the system	N/A
Collect Events	TRUE	FALSE	N/A	System rule that collects events from any object.	N/A
Collect Monitor Generated Alerts	TRUE	FALSE	N/A	System rule that collects alerts generated from monitors.	N/A
Collect Performance Data	TRUE	FALSE	N/A	System rule that collects performance data from any object.	N/A
Collect Object State	TRUE	FALSE	N/A	System rule that collects state change events from any object.	N/A
Collect Object State - Resend	TRUE	FALSE	N/A	Support rule for the Collect Object State to resend items not received by the database on the first try.	N/A
Collect Performance Signatures	TRUE	FALSE	N/A	System rule that collects performance signature data from any object.	N/A
Computer Verification Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects Computer Verification module events.	Never
Consecutive Samples Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Consecutive Samples module experiences an initialization failure.	N/A
Collect Consolidator Module Events	TRUE	FALSE	N/A	Collects events generated by the Consolidator module.	N/A
Consolidator Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Consolidator module experiences a runtime failure.	N/A
Consolidator Module Initialization Failure	TRUE	TRUE	Error	This rule generates an alert when the Consolidator module fails to initialize.	N/A
Collect Correlation Module Events	TRUE	FALSE	N/A	Collects events generated by the Correlation module.	N/A
Correlation Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Correlation module experiences a runtime failure.	N/A
Correlation Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Correlation module fails to initialize.	N/A
Entity state change collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) entity state change events for Data Warehouse collection (to default store)	N/A
Event data collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) event data for Data Warehouse collection (to default store)	N/A
Performance data collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) performance data for Data Warehouse collection (to default store)	N/A
Entity state change publisher	TRUE	FALSE	N/A	This rule collects entity state change information from all managed entities and publishes it for Data Warehouse collection on default channel	N/A
Delta Threshold Module Initialization Failure	TRUE	FALSE	Error	This rule generates alerts when the Delta Threshold module experiences an initialization failure.	N/A
Collect Dependent Service Check Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the Dependent Service Check Probe module.	N/A
Dependent Service Check Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Dependent Service Check Probe module experiences a runtime failure.	N/A
Dependent Service Check Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Dependent Service Check Probe module fails to initialize.	N/A
Collect Discovery Data Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Discovery Data Mapper module.	N/A
Discovery Data Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Discovery Data Mapper module experiences a runtime failure.	N/A
Discovery Data Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Discovery Data Mapper module fails to initialize.	N/A
Collect Expression Filter Module Events	TRUE	FALSE	N/A	Collects events generated by the Expression Filter module.	N/A
Expression Filter Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Expression Filter module fails to initialize.	N/A
File Transfer Empty File	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file path could not be determined by the file upload module.	Never
File Transfer Processing Failure	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file could not be processed by the file upload module.	Never
File Transfer Failure	FALSE	FALSE	N/A	This rule collects all failed file transfers by the file upload module.	Never
File Transfer Upload failure	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file failed to upload by the file upload module.	Never
File Transfer Invalid File name	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file path name was invalid and could not be processed by the file upload module.	Never
File Transfer Successful	FALSE	FALSE	N/A	This rule collects all successful file transfers by the file upload module.	Never
Collect Generic Event Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Generic Event Mapper module.	N/A
Generic Event Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Generic Event Mapper module experiences a runtime failure.	N/A
Generic Event Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Generic Event Mapper module fails to initialize.	N/A
Collect Generic Performance Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Generic Performance Mapper module.	N/A
Generic Performance Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Generic Performance Mapper module experiences a runtime failure.	N/A
Generic Performance Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Generic Performance Mapper module fails to initialize.	N/A
Collect Group Calculation Module Events	TRUE	FALSE	N/A	Collects Group Calculation module events.	N/A
Collect Alert Flow Events	TRUE	FALSE	N/A	Collects events that verify alerts are flowing from the System Center Management Health Service to the Operational Database.	N/A
Collect Health Service\Module Count	TRUE	FALSE	N/A	Collects Module Count performance counter.	N/A
Collect Health Service Management Group\Send Queue % Used	TRUE	FALSE	N/A	Collects Send Queue % Used performance counter.	N/A
Collect Health Service Management Group\Send Queue Size	TRUE	FALSE	N/A	Collects the Send Queue Size performance counter.	N/A
Collect Health Service\Workflow Count	TRUE	FALSE	N/A	Collects Workflow Count performance counter.	N/A
Collect Workflow Unloaded Events	TRUE	FALSE	N/A	Collects events related to unloaded workflows.	N/A
Collect Health Service Configuration Updated Events	FALSE	FALSE	N/A	Collects the series of events on the System Center Management Health Service that indicate requesting, receiving, and activating new configuration (e.g. rules and monitors). This rule is disabled by default as it can result in excessive event collections, which create overhead for the management group and consume space in the operational and data warehouse databases. If enabled, it is recommended that the rule only be enabled for a limited period of time.	Never
Collect Configuration Parse Error Events	FALSE	FALSE	N/A	Collects the events related to the failure of a System Center Management Health Service being able to parse its new configuration.	Never
System Center Management Health Service Credentials Not Defined	FALSE	TRUE		This rule raises an alert when unable to resolve Secure Reference override.	Never
System Center Management Health Service Credentials Not Found	FALSE	TRUE		This rule raises an alert when unable to resolve Secure Reference override.	Never
Collect Entity State Change Flow Error Events	TRUE	FALSE	N/A	Collects the events related to the flow of State Change Data from System Center Management Health Services to the Operational Database.	N/A
Collect Health Manager Events	TRUE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.	N/A
Collect Health Manager Events ID Parameter	FALSE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.	Never
Collect Health Manager Events Name Parameter	FALSE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of the System Center Management Health Service.	Never
Periodic System Center Management Health Service Store Maintenance	TRUE	FALSE	N/A	Rule which runs periodic maintenance of the System Center Management Health Service ESE store.	N/A
Collect Monitor State Change Flow Error Events	TRUE	FALSE	N/A	Collects the events related to the flow of monitor state change data from System Center Management Health Services to the Operational database.	N/A
Collect agent processor utilization	TRUE	FALSE	N/A	Collects the "agent processor utilization" performance counter	N/A
Collect Run As Account Failure Events	FALSE	FALSE	N/A	Collects the series of events that indicate a failure in executing a rule, monitor, or task using a specific Run As account.	Never
Collect IIS Discovery Probe Module Events	FALSE	FALSE	N/A	Collects events generated by the IIS Discovery Probe module.	Never
IIS Discovery Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Discovery Probe module experiences a runtime failure.	N/A
IIS Discovery Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Discovery Probe module fails to initialize.	N/A
Collect IIS Log Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Log Condition module.	N/A
IIS Log Condition Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Log Condition module experiences a runtime failure.	N/A
IIS Log Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Log Condition module fails to initialize.	N/A
Collect IIS Site State Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Site State Data Source module.	N/A
IIS Site State Data Source Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Site State Data Source module experiences a runtime failure.	N/A
IIS Site State Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Site State Data Source module fails to initialize.	N/A
Collect IIS Site State Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Site State Probe module.	N/A
IIS Site State Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Site State Probe module experiences a runtime failure.	N/A
IIS Site State Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Site State Probe module fails to initialize.	N/A
Collect LDAP Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the LDAP Probe module.	N/A
LDAP Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the LDAP Probe module experiences a runtime failure.	N/A
LDAP Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the LDAP Probe module fails to initialize.	N/A
Learning Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Learning Module experiences a runtime failure.	N/A
Learning Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Learning Module experiences an initialization failure.	N/A
Collect Maintenance Mode Events	TRUE	FALSE	N/A	Collects the events that indicate an object entering into maintenance mode and exiting maintenance mode.	N/A
Collect Backward Compatibility Application Log Module Events	TRUE	FALSE	N/A	Collects events generated by the Backward Compatibility Application Log module.	N/A
Backward Compatibility Application Log Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Backward Compatibility Application Log module experiences a runtime failure.	N/A
Backward Compatibility Application Log Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Backward Compatibility Application Log module fails to initialize.	N/A
Collect Backward Compatibility WMI Event Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Backward Compatibility WMI Event Mapper module.	N/A
Backward Compatibility WMI Event Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Backward Compatibility WMI Event Mapper module experiences a runtime failure.	N/A
Backward Compatibility WMI Event Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Backward Compatibility WMI Event Mapper module fails to initialize.	N/A
Collect MOM NT Performance Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the MOM NT Performance Mapper module.	N/A
MOM NT Performance Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the MOM NT Performance Mapper module experiences a runtime failure.	N/A
MOM NT Performance Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the MOM NT Performance Mapper module fails to initialize.	N/A
Collect Monitoring Host Crash Events	TRUE	FALSE	N/A	Collects the events that indicate when monitoring host crashes.	N/A
Collect Multi instance Performance Module Events	FALSE	FALSE	N/A	Collects Multi instance Performance Module Events	Never
Alert on Dropped Multi instance Performance Module	TRUE	TRUE	Error	This rule generates alerts when the Multi instance Perf Module has an invalid frequency configuration	Never
OleDb Probe Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects OleDb Probe module events.	Never
Collect Performance Data Source Module Events	FALSE	FALSE	N/A	Collects Performance Data module events.	Never
Performance Data Source Module could not find a performance counter	FALSE	TRUE	Error	This rule generates alerts when the Performance Data Source Module module is unable to find the performance counter that the workflow has been configured to collect or alert on.	Never
Alert on Dropped Power Shell Scripts	TRUE	TRUE	Warning	Alerts on dropped Power Shell scripts.	N/A
Alert on Failure to Create PowerShell Run space for Power Shell Script	TRUE	TRUE	Warning	Alerts when a rule or monitor attempts to execute a Power Shell script and the Power Shell Run space cannot be started.	N/A
Alert on Failure to Load a Power Shell SnapIn	TRUE	TRUE	Warning	Alerts when a rule or monitor attempts to execute a Power Shell script and a Power Shell snap-in cannot be loaded.	N/A
Alert on Failed Power Shell Scripts	TRUE	TRUE	Warning	Alerts on failed Power Shell scripts.	N/A
Alert on Power Shell Not Installed	TRUE	TRUE	Warning	Alerts when Power Shell scripts are being used where Power Shell is not installed.	N/A
Collect Power Shell Module Events	TRUE	FALSE	N/A	Collects Power Shell module events.	N/A
Read Discovery Data	TRUE	FALSE	N/A	This rule reads and publishes discovery data created by scheduled discoveries	N/A
Collect Registry Probe Module Events	TRUE	FALSE	N/A	This rule collects Registry Probe module events.	N/A
Schedule Manager Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Schedule Manager fails to initialize.	N/A
Collect Scheduler Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the Scheduler Condition module.	N/A
Scheduler Condition Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Condition module experiences a runtime execution failure.	N/A
Scheduler Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Condition module fails to initialize.	N/A
Collect Scheduler Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the Scheduler Data Source module.	N/A
Scheduler Data Source Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Data Source module experiences a runtime execution failure.	N/A
Scheduler Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Data Source module fails to initialize.	N/A
Collect Service Check Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the Service Check Data Source module.	N/A
Service Check Data Source Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Service Check Data Source module experiences a runtime failure.	N/A
Service Check Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Service Check Data Source module fails to initialize.	N/A
Collect Service Check Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the Service Check Probe module.	N/A
Service Check Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Service Check Probe module experiences a runtime failure.	N/A
Service Check Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Service Check Probe module fails to initialize.	N/A
Collect Timer Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the Timer Condition module.	N/A
Timer Condition Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Timer Condition module experiences a runtime failure.	N/A
Timer Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Timer Condition module fails to initialize.	N/A
Collect Windows Workflow 4.0 Module events	FALSE	FALSE	N/A	Collects events generated by the Windows Workflow 4.0 module.	Never
Windows Workflow 4.0 Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Windows Workflow 4.0 Module fails to initialize.	N/A
Windows Workflow 4.0 Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Windows Workflow 4.0 Module experiences a runtime failure.	N/A
Collect WMI Event Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Event module.	N/A
Workflow Runtime: Failed to run a WMI query for WMI events	TRUE	TRUE	Warning	This rule generates alerts when the WMI Event module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI for WMI events	TRUE	TRUE	Error	This rule generates alerts when the WMI Event module fails to initialize.	N/A
WMI Event Module Item Contains Large Array	TRUE	TRUE	Warning	This rule generates alerts when the WMI Event module retrieves a data item with a very large array.	N/A
Collect WMI Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Probe module.	N/A
Workflow Runtime: Failed to run a WMI query	TRUE	TRUE	Warning	This rule generates alerts when the WMI Probe module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI	TRUE	TRUE	Error	This rule generates alerts when the WMI Probe module fails to initialize.	N/A
WMI Probe Module Item Contains Large Array	TRUE	TRUE	Warning	This rule generates alerts when the WMI Probe module retrieves a data item with a very large array.	N/A
Collect WMI Raw Performance Counter Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Raw Performance Counter module.	N/A
Workflow Runtime: Failed to run a WMI query for performance data	TRUE	TRUE	Warning	This rule generates alerts when the WMI Raw Performance Counter module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI for performance data	TRUE	TRUE	Error	This rule generates alerts when the WMI Raw Performance Counter module fails to initialize.	N/A
Web Service Management Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects WSMan (Web Services for Management) module events.	N/A
Failed to perform initialization of IIS discovery module	TRUE	TRUE	Warning		N/A
Failed to perform Web Application discovery	TRUE	TRUE	Warning		N/A
Failed to perform Web Server properties discovery	TRUE	TRUE	Warning		N/A
Failed to perform Web Site discovery	TRUE	TRUE	Warning		N/A
Failed to find Application Pool while attempting to retrieve state	TRUE	TRUE	Warning		N/A
Failed to find site while attempting to retrieve state	TRUE	TRUE	Warning		N/A
Failed to perform Application Pool discovery	TRUE	TRUE	Warning		N/A
Failed to perform FTP server discovery	TRUE	TRUE	Warning		N/A
Failed to perform FTP site discovery	TRUE	TRUE	Warning		N/A
IIS component discovery failed due to insufficient privileges	TRUE	TRUE	Warning		N/A
Failed to perform initialization of IIS state monitoring module	TRUE	TRUE	Warning		N/A
Failed to retrieve site state	TRUE	TRUE	Warning		N/A
Failed to retrieve Application Pool state	TRUE	TRUE	Warning		N/A
Agent update that is required for IIS 7.0 monitoring is not installed	TRUE	TRUE	Error	This rule generates an alert if the agent update that is required for IIS 7.0 monitoring is not installed	N/A
Stress.CollectSDKPrivateBytesPerfCounters.Rule	TRUE	FALSE	N/A		N/A
Collect Distributed Workflow Test Event	TRUE	FALSE	N/A	Collects events logged by the "Log Distributed Workflow Test Event" rule.	N/A
Syslog: Module Error	TRUE	TRUE	Warning	This rule generates alerts when the "Syslog" module fails on this System Center Management Health Service.	N/A
CEIP Listener - Port Unavailable	TRUE	TRUE	Warning	This rule generates alerts when CEIP Listener fails to start because the port is not available.	N/A
AEM: Bad URL Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules receive an invalid or unexpected URL request on this management server.	N/A
AEM: Error Group Communication Timeout	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting an error group report and/or related cab to "watson.microsoft.com" on this management server.	N/A
AEM: [System] Error Group Processing Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot process an error group or system error group successfully on this management server.	N/A
AEM: File Share Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules encounter an error while interacting with the file share from this management server.	N/A
AEM: Invalid Error Group Response	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid error group response on this management server.	N/A
AEM: Invalid Proxy Error	TRUE	TRUE	Warning	This rule generates alerts when Agentless Exception Monitoring (AEM) detects invalid proxy configuration on this management server.	N/A
AEM: Invalid System Error Group Response	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid system error group response on this management server.	N/A
AEM: Module Creation Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be created on this management server.	N/A
AEM Module Events Collector Rule	TRUE	FALSE	N/A	This rule collects Agentless Exception Monitoring (AEM) module events.	N/A
AEM: Module Start Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be started on this management server.	N/A
AEM: Network Error	TRUE	TRUE	Warning	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network error while communicating to watson/oca services or a permissions error while trying to operate with the Operations Manager database on this management server.	N/A
AEM: Error Group Parameter Error	TRUE	TRUE	Warning	This rule generates an alert when one or more of the Agentless Exception Monitoring (AEM) modules encounters a parameter in an error group containing characters considered invalid by AEM.	N/A
AEM: Permissions Error	TRUE	TRUE	Warning	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network permissions error on this management server.	N/A
AEM: System Error Group Communication Timeout	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting a system error group report/cab to "oca.microsoft.com" on this management server.	N/A
An error occurred during computer verification from the discovery wizard	TRUE	TRUE	Warning	This rule generates alerts when the computer verification process fails during the discovery wizard.	N/A
A generic error occurred during computer verification from the discovery wizard	TRUE	TRUE	Error	This rule generates alerts when the computer verification process generically fails during the discovery wizard.	N/A
Computer Verification: Module Execution Error	FALSE	TRUE	Error	This rule generates alerts when the Computer Verification module fails to verify at least 1 or more computer names during execution on this System Center Management Health Service.	Never
Agent proxy not enabled	TRUE	TRUE	Error	The agent was not able to submit data on behalf of another computer because agent proxy is not enabled.
File size too large to transfer	FALSE	FALSE	N/A	This rule collects all rejected file transfers due to file size being over limit and so could not be processed by the file upload module.	N/A
Collects data from the Health Service\Active File Uploads performance counter	TRUE	FALSE	N/A	Collects data from the Health Service\Active File Uploads performance counter.	N/A
Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter	TRUE	FALSE	N/A	Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter.	N/A
Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter	TRUE	FALSE	N/A	Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter.	N/A
System Center Management Health Service Connector Bind Failure	FALSE	TRUE	Error	This rule raises an alert when unable to listen on required TCP port.	Never
(Deprecated) Collects data from the Processor\% Processor Time performance counter	TRUE	TRUE	N/A	Collects data from the Processor\% Processor Time performance counter on the System Center Management Health Service Process (HealthService.exe).	Never
Remote Certificate Not Trusted	TRUE	TRUE	Error	This rule generates alerts when it detects that the remote certificate is not trusted.	N/A
Remote Certificate Name Not Resolved	TRUE	TRUE	Warning	This rule generates alerts when it detects that the common name (CN) in the remote certificate cannot be resolved.	N/A
(Deprecated) Monitoring Host Handle Count Threshold (Management Server)	FALSE	TRUE	Error	Restarts the Health service when the "MonitoringHost.exe" process exceeds the Process\Handle Count threshold.	Never
(Deprecated) Monitoring Host Private Bytes Handle Count	FALSE	TRUE	Error	Restarts the Health service when the Monitoring Host process exceeds the Process\Private Bytes threshold.	Never
OleDbProbe: Results Error	TRUE	TRUE	Error	This rule generates alerts when the results from the OleDb Probe module on this System Center Management Health Service contain failure information.	N/A
OleDbProbe: Module Execution Error	TRUE	TRUE	Warning	This rule generates alerts when the OleDb Probe module fails during execution on this System Center Management Health Service.	N/A
OleDbProbe: Module Initialization Error	TRUE	TRUE	Warning	This rule generates alerts when the OleDb Probe module fails to initialize on this System Center Management Health Service.	N/A
All Management Servers Resource Pool Unavailable	TRUE	TRUE	Warning	This rule generates alerts when the All Management Servers Resource Pool is not available.	N/A
(Deprecated) Health Service Cannot Find Management Group	FALSE	TRUE	Warning	This rule generates alerts when it detects that a Health service is unable to find a management group to communicate with.	Never
Web Service Management: Enumerator Module Error	TRUE	TRUE	Warning	This rule generates alerts when the Web Service Management Enumerator module fails on this System Center Management Health Service.	N/A
Web Service Management: Getter Module Error	TRUE	TRUE	Warning	This rule generates alerts when the Web Service Management Getter module fails on this System Center Management Health Service.	N/A
Web Service Management: Invoker Module Error	TRUE	TRUE	Warning	This rule generates alerts when the Web Service Management Invoker module fails on this System Center Management Health Service.	N/A
Web Service Management: Version Error	TRUE	TRUE	Warning	This rule generates alerts when one of the Web Service Management modules detects an unsupported version of Windows Remote Management on this System Center Management Health Service.	N/A
Logfile Module Alert Rule	TRUE	TRUE	Warning	Alert rule for Logfile module error messages.	N/A
UNIX/Linux Run As Account Alert Rule	TRUE	TRUE	Warning	Alert rule for UNIX/Linux Run As account error messages.	N/A
(Deprecated) Data Access Service SPN Registration	FALSE	FALSE	Error	Rule to alert if a service principal name (SPN) for the account running the System Center Data Access service isn't registered.	Never
(Deprecated) Collect SDK Event Data	FALSE	FALSE	N/A	Collects all SDK event data	Never
(Deprecated) Collect SDK Performance Data	FALSE	FALSE	N/A	Collects all SDK performance data	Never
Dependency Monitor Remote Contributor Receiver	TRUE	FALSE	N/A	System rule for receiving data for dependency monitors with contributors on other systems.	N/A
Collect Operations Manager DB Write Action Modules\Avg. Batch Size	TRUE	FALSE	N/A	Collects Average Batch Size performance counter.	N/A
Collect Operations Manager DB Write Action Modules\Avg. Processing Time	TRUE	FALSE	N/A	Collects Average Processing Time performance counter.	N/A
Notify Dependency Monitor Update	TRUE	FALSE	N/A	System rule that notifies the sender when dependency monitor updates have been processed.	N/A
Notify Object State Insertion	TRUE	FALSE	N/A	System rule that notifies that state change events from any object has inserted into database.	N/A
(Deprecated) Collects Operations Manager SDK Service\Client Connections	FALSE	FALSE	N/A	Collects data from the Operations Manager SDK Service\Client Connections counter.	Never
(Deprecated) Operations Manager SDK Service Event Collector Rule	FALSE	FALSE	N/A	This rule collects Operations Manager SDK Service events.	Never
Product Expiration - Last Day	TRUE	TRUE	Warning	Rule detecting that product evaluation will expire tomorrow.	N/A
Product Expiration - Hourly alerts	TRUE	TRUE	Warning	Rule detecting that product evaluation will expire soon. This rule will alert every hour.	N/A
Product Expiration - Less than 30 Days	TRUE	TRUE	Warning	Rule detecting that product evaluation will expire in less than 30 days.	N/A
Product Expiration - Less than 60 Days	TRUE	TRUE	Warning	Rule detecting that product evaluation will expire in less than 60 days.	N/A
The System Center Data Access service is unable to write security audit events.	TRUE	TRUE	Error	This rule generates an alert if the System Center Data Access service reports that it is unable to write security audit events to the security event log.	N/A
IIS 7.0 Discovery	TRUE	FALSE	N/A	This rule runs runs on the Management Server and discovers IIS 7.0 Web Sites and Web applications on the agent.	N/A
Internal Network Management Discovery Data Collector	TRUE	FALSE	N/A	Internal rule to collect discovery data from network discovery	N/A
Submit Trap Discovery Request	TRUE	FALSE	N/A	Rule to submit trap discovery requests to Network Discovery Servers	N/A
Deprecated Validate Alert Subscription	FALSE	FALSE	N/A	Deprecated Validate Alert Subscription	Never
Collect ACS Collector Connected Clients	TRUE	FALSE	N/A	Collects ACS Collector Connected Clients Performance Counter	N/A
Collect ACS Collector Database Queue Backoff Threshold in %	TRUE	FALSE	N/A	Collects ACS Collector Database Queue Backoff Threshold in % performance counter	N/A
Collect ACS Collector Database Queue Disconnect Threshold in %	TRUE	FALSE	N/A	Collects ACS Collector Database Queue Disconnect Threshold in % performance counter	N/A
Collect ACS Collector Database Queue % Full	TRUE	FALSE	N/A	Collects ACS Collector Database Queue % Full performance counter	N/A
Collect ACS Collector DB Loader Event Inserts/sec	TRUE	FALSE	N/A	Collects ACS Collector DB Loader Event Inserts/sec performance counter	N/A
Collect ACS Collector DB String Cache Hit %	TRUE	FALSE	N/A	Collects ACS Collector DB String Cache Hit % performance counter	N/A
Collect ACS Collector Incoming Events/sec	TRUE	FALSE	N/A	Collects ACS Collector Incoming Events/sec performance counter	N/A
Microsoft Audit Collection Services Collector Database Operation Failure	TRUE	TRUE	Warning		N/A
Microsoft Audit Collection Services Collector Event Collection Rule	TRUE	FALSE	N/A	This rule collects all events associated with the Microsoft Audit Collection Services Collector service	N/A
Microsoft Audit Collection Services Collector Event Stream Gap Detected	TRUE	TRUE	Warning		N/A
Microsoft Audit Collection Services Collector Forwarder Disconnect	TRUE	TRUE	Warning	Microsoft Audit Collection Services Collector disconnected Forwarder to due timeout waiting for heartbeat	N/A
Microsoft Audit Collection Services Collector Rejected Forwarder	TRUE	TRUE	Warning	Microsoft Audit Collection Services Collector Rejected Forwarder due to an error	N/A

View	Description	Rules and Monitors that Populate the View
Management Group Health Dashboard	Shows overall Management Group health	Shows state of critical components of the Management Group, such as Management Servers, Databases.
Management Group Health Trend Dashboard	Shows active alerts over time and agent health state over time	Collection rules for active alerts in the Management Group and agent health
Management Configuration Service	Lists state and alerts for the Management Configuration Services on all Management Servers	Configuration Service state and alerts
Management Data Access	Lists state and alerts for the Data Access Services on all Management Servers	Data Access Service state and alerts
Management Server	Lists state and alerts for Management Servers	Management Server state and alerts

Report	Description	Class Selection Criteria

Gateway Server

Discovery Information

The discovery of Gateway Servers is defined in the System Center Internal Library Management Pack.

Note that the monitors listed in this table list the effective configuration of monitors on a Gateway Server. Gateway Server monitoring consists of several classes, such as Management Health Service and the Management Server class. This table lists all of these monitors.

Monitor Name	Enabled	Alert	Alert Severity	Description	When to enable
Health Service Handle Count Threshold	TRUE	FALSE	N/A	This monitor ensures that the "Process\Handle Count" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	Never
Health Service Private Bytes Threshold	TRUE	FALSE	N/A	This monitor ensures that the "Process\Private Bytes" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.	Never
No End to End Event for 45 Minutes (Critical Level)	FALSE	FALSE	N/A	This monitor detects if the local System Center Management Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.	Never
Local End to End Event Health	FALSE	FALSE	N/A	This roll-up monitor represents the health for a System Center Management Health Service's functionality to process events.	Never
No End to End Event for 30 Minutes (Warning Level)	FALSE	FALSE	N/A	This monitor detects if the local System Center Management Health Service was able to log an event in the last 30 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.	Never
WMI Service Availability	TRUE	FALSE	N/A	WMI Service Availability roll-up monitor.	Never
AVIcode Intercept service found	FALSE	TRUE	Warning	Monitor that watches for an installer error raised to indicate that an old AVIcode .NET Enterprise Agent is on the system. This monitor is disabled by default but you might want to enable it to verify which portion of your agents are still running the AVIcode Intercept service as opposed to the new APM feature inSystem Center 2012 - Operations Manager.	Never
Valid Host No APM Agent	FALSE	FALSE	N/A	Monitor that watches for .NET Framework installed on a system with an Operations Manager health service that does not have the APM service installed.	Never
Audit Collection Availability	TRUE	FALSE	N/A	Audit Collection Availability roll up monitor.	N/A
System Center Management Health Service Availability	TRUE	FALSE	N/A	System Center Management Health Service Availability roll-up monitor.	N/A
Expiration Check of Certificate Used for Authentication	TRUE	TRUE	Error	This monitor checks the status of the certificate used for authentication and sends an alert when the certificate is about to expire.	N/A
Configuration Processing	FALSE	FALSE	N/A	This monitor indicates whether the System Center Management Health Service could load the configuration successfully or not.	Never
Configuration 90 Minutes Out of Date (Critical Level)	FALSE	FALSE	N/A	This monitor indicates that the System Center Management Health Service has had a stale configuration for a long period of time.	Never
System Center Management Health Service Configuration Processing	FALSE	TRUE	Error	Indicates whether the System Center Management Health Service configuration processing is successful and current.	Never
Configuration 45 Minutes Out of Date (Warning Level)	FALSE	FALSE	N/A	This monitor indicates that the System Center Management Health Service has had a stale configuration for some period of time.	Never
System Center Management Health Service Credentials Not Found	onStandardMonitoring	TRUE	Error	This monitor raises an alert when the Operations Manager agent cannot resolve Secure Reference override.	N/A
Send Queue % Used	TRUE	TRUE	Error	This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.	N/A
System Center Management Health Service Performance	TRUE	FALSE	N/A	System Center Management Health Service performance roll-up monitor.	N/A
Agent processor utilization	onStandardMonitoring	TRUE	Error	Monitor all agent processes to identify potential issues with the agent using too much processor time.	N/A
Data Validity Check	FALSE	TRUE	Warning	Monitors the validity of data arriving at this System Center Management Health Service.	Never
Data Integrity	TRUE	FALSE	N/A	Monitors the integrity of data flowing into the System Center Management Health Service.	N/A
Spoofed Data Check	TRUE	TRUE	Warning	This monitor reports on spoofed data received by this System Center Management Health Service.	N/A
System Center Management Health Service Security	TRUE	FALSE	N/A	Security roll-up for the System Center Management Health Service.	N/A
System Center Management Health Service Memory Utilization	TRUE	FALSE	N/A	This monitor aggregates state from four unit monitors that measure memory utilization of the System Center Management Health Service. When this monitor changes to critical, it starts a recovery task that restarts the System Center Management Health Service.	N/A
System Center Management Health Service Modules Performance Rollup	TRUE	FALSE	N/A	System Center Management Health Service modules performance roll-up monitor.	N/A
System Center Management Health Service Modules Rollup	TRUE	FALSE	N/A	System Center Management Health Service modules roll-up monitor.	N/A
Many Corrupt or Unreadable Windows Events	TRUE	TRUE	Warning	This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.	N/A
Failed Accessing Windows Event Log	TRUE	TRUE	Warning	This monitor checks access to Windows event logs.	N/A
Processing Backlogged Events Taking a Long Time	TRUE	TRUE	MatchMonitorHealth	This monitor checks the if the Windows Event Log module is processing backlogged events for a period of time.	N/A
Event Log Data Source Module	TRUE	FALSE	N/A	Event Log Data Source module roll-up monitor.	N/A
Unable to Process Windows Event Log	TRUE	TRUE	Warning	This monitor checks if the Windows Event Log monitor is unable to process events from one or more event logs.	N/A
Run As Account Verification	TRUE	TRUE	Warning	Monitor that verifies Run As accounts.	N/A
Run As Account Authorization	TRUE	TRUE	Error	This monitor checks that a set of Run As accounts are authorized. Authorization can be restricted when an administrator runs the HSLockdown tool.	N/A
Run As Account and Password Expiration	TRUE	TRUE	MatchMonitorHealth	Checks for expiring Run As accounts and their passwords	N/A
Run As Account Logon Locally	TRUE	TRUE	Error	This monitor checks if the computer is configured to allow all Run As accounts to log on locally.	N/A
Run As Accounts	TRUE	FALSE	N/A	Monitors health of Run As accounts executing on this System Center Management Health Service.	N/A
Run As Account or Password Expired or Incorrect	TRUE	TRUE	Error	This monitor checks if a Run As account can successfully log on with the configured username and password.	N/A
Network Monitoring Timeouts	TRUE	TRUE	Warning	This monitor checks whether Network Monitoring is experiencing excessive timeouts.	N/A
Secure Exchange Key Synchronization Check	TRUE	FALSE	N/A	Changes state when an issue synchronizing the secure exchange key exists.	N/A
Default Action Account Type	TRUE	TRUE	Error	This monitor detects when the account type used for the agent's default Action Account is incorrect.	N/A
Run As Account Configuration Processing	TRUE	TRUE	Error	Detects when Run As account configuration processing has failed.	N/A
Windows Management Instrumentation Service	TRUE	TRUE	Warning	This monitor checks the state of the Windows Management Instrumentation Service.	N/A
Network Monitoring SNMP Trap port is already in use by another program	TRUE	TRUE	Error	This monitor checks whether Network Discovery failed for a SNMP Trap port is already in use by another program.	N/A
Audit Collection Collector - Windows Service	TRUE	FALSE	N/A	This monitor checks the state of the ACS collector windows service.	N/A
Data Warehouse Data Dedicated Maintenance Process State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse dedicated data maintenance process state.	N/A
Data Warehouse Data Maintenance State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse data maintenance state from the perspective of a Management Server	N/A
Data Warehouse Connectivity and Processes State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse processes state from the perspective of a Management Server	N/A
Data Warehouse Data Writer Maintenance State	TRUE	FALSE	N/A	Rollup monitor for Data Warehouse data writer maintenance state from the perspective of a Management Server.	N/A
File Upload Quota	TRUE	TRUE	Warning	This unit monitor monitors the file upload quotas.	N/A
Failed Authentication Attempts Check	TRUE	TRUE	Warning	Monitors failed authentication attempts to this management server.	N/A

Rule Name	Enabled	Alert	Alert Severity	Description	When to enable
Collect System\System Uptime	TRUE	FALSE	N/A	Collects the System\System Uptime performance counter object for testing performance collection.	N/A
Collect Restart System Center Management Health Service Events	TRUE	FALSE	N/A	Collects the Restart System Center Management Health Service events.	N/A
Log Distributed Workflow Test Event	TRUE	FALSE	N/A	This rule logs an event at each System Center Management Health Service that will be collected to test event collection.	N/A
Collect Service Control Manager failed to start events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process failing to start.	N/A
Collect Service Control Manager started or stopped events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process starting and stopping.	N/A
Collect Service Control Manager process terminated events for System Center Management Health Service	TRUE	FALSE	N/A	This rule collects the Service Control Manager events related to the "HealthService.exe" process terminating.	N/A
Alert Invalid Override Value	TRUE	TRUE	Error	Invalid value used when overriding alert priority or severity. Runtime adjusted the value to the closest allowed.	N/A
Parameter Replacement Failure During Alert Creation	TRUE	TRUE	Warning	Parameter replacement failed during alert creation.	N/A
Critical Parameter Replacement Failure During Alert Creation	FALSE	TRUE	Error	Parameter replacement failed during alert creation. This will cause the workflow to unload.	Never
Parameter Replacement Failure Event Collection Rule	FALSE	FALSE	N/A	This rule collects System Center Management Health Service events related to parameter replacement failures.	N/A
Replacement Failure For Suppression During Alert Creation	TRUE	TRUE	Error	Replacement failed for suppression tag during alert creation.	N/A
Alert generation was temporarily suspended due to too many alerts.	TRUE	TRUE	Warning	Alert generation was temporarily suspended for a rule because the number of alerts generated exceeded the threshold within the specified time interval. This is done to prevent excessive load against the management group.	N/A
Collect Alert Subscription Module Events	TRUE	FALSE	N/A	Collects Alert Subscription module events.	N/A
Syslog Module Events Collector Rule	TRUE	FALSE	N/A	This rule collects Syslog module events.	N/A
Collect Application Log Module Events	TRUE	FALSE	N/A	Collects events generated by the Application Log module.	N/A
Application Log Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Application Log module experiences a runtime failure.	N/A
Application Log Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Application Log module fails to initialize.	N/A
Average Threshold Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Average Threshold module experiences an initialization failure.	N/A
Alert on Backward Compatibility Script Errors.	TRUE	TRUE	Warning	This rule generates alerts when Backward Compatibility script errors occur.	N/A
Collect Backward Compatibility Module Events	TRUE	FALSE	N/A	Collects Backward Compatibility module events.	N/A
Collect Baselining Modules Event	TRUE	FALSE	N/A	Collects the series of events for the numeric baselining module.	N/A
Baselining Module Initialization Failure	TRUE	TRUE	error	This rule generates alerts when the Baselining Module experiences an initialization failure.	N/A
Alert on Dropped Batch Responses	TRUE	TRUE	Warning	The rule generates alerts when batch responses are dropped.	N/A
Workflow Initialization: Failed to start a process or script	TRUE	TRUE	Warning	This rule generates alerts when a rule or monitor attempts to execute a process and the process cannot be started.	N/A
Workflow Initialization: Failed to start a workflow that runs a process or script	TRUE	TRUE	Warning	This rule generates alerts when failed to start a workflow that runs a process or script.	N/A
Workflow Runtime: Failed to run a process or script	TRUE	TRUE	Warning	This rule generates alerts when batch responses fail.	N/A
Collect Batch Response Module Events	FALSE	FALSE	N/A	Collects Batch Response module events.	Never
Collect Alerts	TRUE	FALSE	N/A	System rule that collects alert data from any object.	N/A
Collect Discovery Data	TRUE	FALSE	N/A	System rule that collects discovery data from any object.	N/A
Collect state change events of all monitors in the system	TRUE	FALSE	N/A	This rule collects all state change events in the system	N/A
Collect Events	TRUE	FALSE	N/A	System rule that collects events from any object.	N/A
Collect Monitor Generated Alerts	TRUE	FALSE	N/A	System rule that collects alerts generated from monitors.	N/A
Collect Performance Data	TRUE	FALSE	N/A	System rule that collects performance data from any object.	N/A
Collect Object State	TRUE	FALSE	N/A	System rule that collects state change events from any object.	N/A
Collect Object State - Resend	TRUE	FALSE	N/A	Support rule for the Collect Object State to resend items not received by the database on the first try.	N/A
Collect Performance Signatures	TRUE	FALSE	N/A	System rule that collects performance signature data from any object.	N/A
Computer Verification Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects Computer Verification module events.	Never
Consecutive Samples Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Consecutive Samples module experiences an initialization failure.	N/A
Collect Consolidator Module Events	TRUE	FALSE	N/A	Collects events generated by the Consolidator module.	N/A
Consolidator Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Consolidator module experiences a runtime failure.	N/A
Consolidator Module Initialization Failure	TRUE	TRUE	Error	This rule generates an alert when the Consolidator module fails to initialize.	N/A
Collect Correlation Module Events	TRUE	FALSE	N/A	Collects events generated by the Correlation module.	N/A
Correlation Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Correlation module experiences a runtime failure.	N/A
Correlation Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Correlation module fails to initialize.	N/A
Entity state change collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) entity state change events for Data Warehouse collection (to default store)	N/A
Event data collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) event data for Data Warehouse collection (to default store)	N/A
Performance data collector	TRUE	FALSE	N/A	This rule collects all published (on default channel) performance data for Data Warehouse collection (to default store)	N/A
Entity state change publisher	TRUE	FALSE	N/A	This rule collects entity state change information from all managed entities and publishes it for Data Warehouse collection on default channel	N/A
Delta Threshold Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Delta Threshold module experiences an initialization failure.	N/A
Collect Dependent Service Check Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the Dependent Service Check Probe module.	N/A
Dependent Service Check Probe Module Runtime Failure	TRUE	TRUE	warning	This rule generates alerts when the Dependent Service Check Probe module experiences a runtime failure.	N/A
Dependent Service Check Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Dependent Service Check Probe module fails to initialize.	N/A
Collect Discovery Data Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Discovery Data Mapper module.	N/A
Discovery Data Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Discovery Data Mapper module experiences a runtime failure.	N/A
Discovery Data Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Discovery Data Mapper module fails to initialize.	N/A
Collect Expression Filter Module Events	TRUE	FALSE	N/A	Collects events generated by the Expression Filter module.	N/A
Expression Filter Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Expression Filter module fails to initialize.	N/A
File Transfer Empty File	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file path could not be determined by the file upload module.	Never
File Transfer Processing Failure	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file could not be processed by the file upload module.	Never
File Transfer Failure	FALSE	FALSE	N/A	This rule collects all failed file transfers by the file upload module.	Never
File Transfer Upload failure	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file failed to upload by the file upload module.	Never
File Transfer Invalid File name	FALSE	FALSE	N/A	This rule collects all failed file transfers as the source file path name was invalid and could not be processed by the file upload module.	Never
File Transfer Successful	FALSE	FALSE	N/A	This rule collects all successful file transfers by the file upload module.	Never
Collect Generic Event Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Generic Event Mapper module.	N/A
Generic Event Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Generic Event Mapper module experiences a runtime failure.	N/A
Generic Event Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Generic Event Mapper module fails to initialize.	N/A
Collect Generic Performance Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Generic Performance Mapper module.	N/A
Generic Performance Mapper Module Runtime Failure	TRUE	TRUE	warning	This rule generates alerts when the Generic Performance Mapper module experiences a runtime failure.	N/A
Generic Performance Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Generic Performance Mapper module fails to initialize.	N/A
Collect Group Calculation Module Events	TRUE	FALSE	N/A	Collects Group Calculation module events.	N/A
Collect Alert Flow Events	TRUE	FALSE	N/A	Collects events that verify alerts are flowing from the System Center Management Health Service to the Operational Database.	N/A
Collect Health Service\Module Count	TRUE	FALSE	N/A	Collects Module Count performance counter.	N/A
Collect Health Service Management Group\Send Queue % Used	TRUE	FALSE	N/A	Collects Send Queue % Used performance counter.	N/A
Collect Health Service Management Group\Send Queue Size	TRUE	FALSE	N/A	Collects the Send Queue Size performance counter.	N/A
Collect Health Service\Workflow Count	TRUE	FALSE	N/A	Collects Workflow Count performance counter.	N/A
Collect Workflow Unloaded Events	TRUE	FALSE	N/A	Collects events related to unloaded workflows.	N/A
Collect Health Service Configuration Updated Events	FALSE	FALSE	N/A	Collects the series of events on the System Center Management Health Service that indicate requesting, receiving, and activating new configuration (e.g. rules and monitors). This rule is disabled by default as it can result in excessive event collections, which create overhead for the management group and consume space in the operational and data warehouse databases. If enabled, it is recommended that the rule only be enabled for a limited period of time.	Never
Collect Configuration Parse Error Events	FALSE	FALSE	N/A	Collects the events related to the failure of a System Center Management Health Service being able to parse its new configuration.	Never
System Center Management Health Service Credentials Not Defined	FALSE	TRUE	Error	This rule raises an alert when unable to resolve Secure Reference override.	Never
System Center Management Health Service Credentials Not Found	FALSE	TRUE	Error	This rule raises an alert when unable to resolve Secure Reference override.	Never
Collect Entity State Change Flow Error Events	TRUE	FALSE	N/A	Collects the events related to the flow of State Change Data from System Center Management Health Services to the Operational Database.	N/A
Collect Health Manager Events	TRUE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.	N/A
Collect Health Manager Events ID Parameter	FALSE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.	Never
Collect Health Manager Events Name Parameter	FALSE	FALSE	N/A	Collects the events related to the functionality of Health Manager which is running as part of the System Center Management Health Service.	Never
Periodic System Center Management Health Service Store Maintenance	TRUE	FALSE	N/A	Rule which runs periodic maintenance of the System Center Management Health Service ESE store.	N/A
Collect Monitor State Change Flow Error Events	TRUE	FALSE	N/A	Collects the events related to the flow of monitor state change data from System Center Management Health Services to the Operational database.	N/A
Collect agent processor utilization	TRUE	FALSE	N/A	Collects the "agent processor utilization" performance counter	N/A
Collect Run As Account Failure Events	FALSE	FALSE	N/A	Collects the series of events that indicate a failure in executing a rule, monitor, or task using a specific Run As account.	Never
Collect IIS Discovery Probe Module Events	FALSE	FALSE	N/A	Collects events generated by the IIS Discovery Probe module.	Never
IIS Discovery Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Discovery Probe module experiences a runtime failure.	N/A
IIS Discovery Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Discovery Probe module fails to initialize.	N/A
Collect IIS Log Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Log Condition module.	N/A
IIS Log Condition Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Log Condition module experiences a runtime failure.	N/A
IIS Log Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Log Condition module fails to initialize.	N/A
Collect IIS Site State Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Site State Data Source module.	N/A
IIS Site State Data Source Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Site State Data Source module experiences a runtime failure.	N/A
IIS Site State Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Site State Data Source module fails to initialize.	N/A
Collect IIS Site State Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the IIS Site State Probe module.	N/A
IIS Site State Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the IIS Site State Probe module experiences a runtime failure.	N/A
IIS Site State Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the IIS Site State Probe module fails to initialize.	N/A
Collect LDAP Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the LDAP Probe module.	N/A
LDAP Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the LDAP Probe module experiences a runtime failure.	N/A
LDAP Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the LDAP Probe module fails to initialize.	N/A
Learning Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Learning Module experiences a runtime failure.	N/A
Learning Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Learning Module experiences an initialization failure.	N/A
Collect Maintenance Mode Events	TRUE	FALSE	N/A	Collects the events that indicate an object entering into maintenance mode and exiting maintenance mode.	N/A
Collect Backward Compatibility Application Log Module Events	TRUE	FALSE	N/A	Collects events generated by the Backward Compatibility Application Log module.	N/A
Backward Compatibility Application Log Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Backward Compatibility Application Log module experiences a runtime failure.	N/A
Backward Compatibility Application Log Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Backward Compatibility Application Log module fails to initialize.	N/A
Collect Backward Compatibility WMI Event Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the Backward Compatibility WMI Event Mapper module.	N/A
Backward Compatibility WMI Event Mapper Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Backward Compatibility WMI Event Mapper module experiences a runtime failure.	N/A
Backward Compatibility WMI Event Mapper Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Backward Compatibility WMI Event Mapper module fails to initialize.	N/A
Collect MOM NT Performance Mapper Module Events	TRUE	FALSE	N/A	Collects events generated by the MOM NT Performance Mapper module.	N/A
MOM NT Performance Mapper Module Runtime Failure	TRUE	FALSE	N/A	This rule generates alerts when the MOM NT Performance Mapper module experiences a runtime failure.	N/A
MOM NT Performance Mapper Module Initialization Failure	TRUE	TRUE	Warning	This rule generates alerts when the MOM NT Performance Mapper module fails to initialize.	N/A
Collect Monitoring Host Crash Events	TRUE	TRUE	Error	Collects the events that indicate when monitoring host crashes.	N/A
Collect Multi instance Performance Module Events	FALSE	FALSE	N/A	Collects Multi instance Performance Module Events	Never
Alert on Dropped Multi instance Performance Module	TRUE	TRUE	Error	This rule generates alerts when the Multi instance Perf Module has an invalid frequency configuration	N/A
OleDb Probe Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects OleDb Probe module events.	Never
Collect Performance Data Source Module Events	FALSE	FALSE	N/A	Collects Performance Data module events.	Never
Performance Data Source Module could not find a performance counter	FALSE	TRUE	Error	This rule generates alerts when the Performance Data Source Module module is unable to find the performance counter that the workflow has been configured to collect or alert on.	Never
Alert on Dropped Power Shell Scripts	TRUE	TRUE	Warning	Alerts on dropped Power Shell scripts.	N/A
Alert on Failure to Create PowerShell Run space for Power Shell Script	TRUE	TRUE	Warning	Alerts when a rule or monitor attempts to execute a Power Shell script and the Power Shell Run space cannot be started.	N/A
Alert on Failure to Load a Power Shell SnapIn	TRUE	TRUE	Warning	Alerts when a rule or monitor attempts to execute a Power Shell script and a Power Shell snap-in cannot be loaded.	N/A
Alert on Failed Power Shell Scripts	TRUE	TRUE	Warning	Alerts on failed Power Shell scripts.	N/A
Alert on Power Shell Not Installed	TRUE	TRUE	Warning	Alerts when Power Shell scripts are being used where Power Shell is not installed.	N/A
Collect Power Shell Module Events	TRUE	FALSE	N/A	Collects Power Shell module events.	N/A
Read Discovery Data	TRUE	FALSE	N/A	This rule reads and publishes discovery data created by scheduled discoveries	N/A
Collect Registry Probe Module Events	TRUE	FALSE	N/A	This rule collects Registry Probe module events.	N/A
Schedule Manager Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Schedule Manager fails to initialize.	N/A
Collect Scheduler Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the Scheduler Condition module.	N/A
Scheduler Condition Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Condition module experiences a runtime execution failure.	N/A
Scheduler Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Condition module fails to initialize.	N/A
Collect Scheduler Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the Scheduler Data Source module.	N/A
Scheduler Data Source Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Data Source module experiences a runtime execution failure.	N/A
Scheduler Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Scheduler Data Source module fails to initialize.	N/A
Collect Service Check Data Source Module Events	TRUE	FALSE	N/A	Collects events generated by the Service Check Data Source module.	N/A
Service Check Data Source Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Service Check Data Source module experiences a runtime failure.	N/A
Service Check Data Source Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Service Check Data Source module fails to initialize.	N/A
Collect Service Check Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the Service Check Probe module.	N/A
Service Check Probe Module Runtime Failure	TRUE	TRUE	Warning	This rule generates alerts when the Service Check Probe module experiences a runtime failure.	N/A
Service Check Probe Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Service Check Probe module fails to initialize.	N/A
Collect Timer Condition Module Events	TRUE	FALSE	N/A	Collects events generated by the Timer Condition module.	N/A
Timer Condition Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Timer Condition module experiences a runtime failure.	N/A
Timer Condition Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Timer Condition module fails to initialize.	N/A
Collect Windows Workflow 4.0 Module events	FALSE	FALSE	N/A	Collects events generated by the Windows Workflow 4.0 module.	N/A
Windows Workflow 4.0 Module Initialization Failure	TRUE	TRUE	Error	This rule generates alerts when the Windows Workflow 4.0 Module fails to initialize.	N/A
Windows Workflow 4.0 Module Runtime Failure	TRUE	TRUE	Error	This rule generates alerts when the Windows Workflow 4.0 Module experiences a runtime failure.	N/A
Collect WMI Event Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Event module.	N/A
Workflow Runtime: Failed to run a WMI query for WMI events	TRUE	TRUE	Warning	This rule generates alerts when the WMI Event module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI for WMI events	TRUE	TRUE	Error	This rule generates alerts when the WMI Event module fails to initialize.	N/A
WMI Event Module Item Contains Large Array	TRUE	TRUE	Warning	This rule generates alerts when the WMI Event module retrieves a data item with a very large array.	N/A
Collect WMI Probe Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Probe module.	N/A
Workflow Runtime: Failed to run a WMI query	TRUE	TRUE	Warning	This rule generates alerts when the WMI Probe module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI	TRUE	TRUE	Error	This rule generates alerts when the WMI Probe module fails to initialize.	N/A
WMI Probe Module Item Contains Large Array	TRUE	TRUE	Warning	This rule generates alerts when the WMI Probe module retrieves a data item with a very large array.	N/A
Collect WMI Raw Performance Counter Module Events	TRUE	FALSE	N/A	Collects events generated by the WMI Raw Performance Counter module.	N/A
Workflow Runtime: Failed to run a WMI query for performance data	TRUE	TRUE	Warning	This rule generates alerts when the WMI Raw Performance Counter module experiences a runtime failure.	N/A
Workflow Initialization: Failed to start a workflow that queries WMI for performance data	TRUE	TRUE	Error	This rule generates alerts when the WMI Raw Performance Counter module fails to initialize.	N/A
Web Service Management Module Events Collector Rule	FALSE	FALSE	N/A	This rule collects WSMan (Web Services for Management) module events.	Never
Stress.CollectSDKPrivateBytesPerfCounters.Rule	TRUE	FALSE	N/A		N/A
Collect Distributed Workflow Test Event	TRUE	FALSE	N/A	Collects events logged by the "Log Distributed Workflow Test Event" rule.	N/A
Syslog: Module Error	TRUE	TRUE	Warning	This rule generates alerts when the "Syslog" module fails on this System Center Management Health Service.	N/A
CEIP Listener - Port Unavailable	TRUE	TRUE	Warning	This rule generates alerts when CEIP Listener fails to start because the port is not available.	N/A
AEM: Bad URL Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules receives an invalid or unexpected URL request on this management server.	N/A
AEM: Error Group Communication Timeout	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting an error group report and/or related cab to "watson.microsoft.com" on this management server.	N/A
AEM: [System] Error Group Processing Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot process an error group or system error group successfully on this management server.	N/A
AEM: File Share Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules encounters an error while interacting with the file share from this management server.	N/A
AEM: Invalid Error Group Response	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid error group response on this management server.	N/A
AEM: Invalid Proxy Error	TRUE	TRUE	Warning	This rule generates alerts when Agentless Exception Monitoring (AEM) detects invalid proxy configuration on this management server.	N/A
AEM: Invalid System Error Group Response	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid system error group response on this management server.	N/A
AEM: Module Creation Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be created on this management server.	N/A
AEM Module Events Collector Rule	TRUE	FALSE	N/A	This rule collects Agentless Exception Monitoring (AEM) module events.	N/A
AEM: Module Start Error	TRUE	TRUE	Warning	This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be started on this management server.	N/A
AEM: Network Error	TRUE	TRUE	Warning	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network error while communicating to watson/oca services or a permissions error while trying to operate with the Operations Manager database on this management server.	N/A
AEM: Error Group Parameter Error	TRUE	TRUE	Warning	This rule generates an alert when one or more of the Agentless Exception Monitoring (AEM) modules encounters a parameter in an error group containing characters considered invalid by AEM.	N/A
AEM: Permissions Error	TRUE	TRUE	Warning	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network permissions error on this management server.	N/A
AEM: System Error Group Communication Timeout	TRUE	TRUE	Error	This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting a system error group report/cab to "oca.microsoft.com" on this management server.	N/A
An error occurred during computer verification from the discovery wizard	TRUE	TRUE	Warning	This rule generates alerts when the computer verification process fails during the discovery wizard.	N/A
A generic error occurred during computer verification from the discovery wizard	TRUE	TRUE	Error	This rule generates alerts when the computer verification process generically fails during the discovery wizard.	N/A
Computer Verification: Module Execution Error	FALSE	TRUE	Error	This rule generates alerts when the Computer Verification module fails to verify at least 1 or more computer names during execution on this System Center Management Health Service.	Never
Agent proxy not enabled	TRUE	TRUE	Error	The agent was not able to submit data on behalf of another computer because agent proxy is not enabled.	N/A
File size too large to transfer	FALSE	FALSE	N/A	This rule collects all rejected file transfers due to file size being over limit and so could not be processed by the file upload module.	Never
Collects data from the Health Service\Active File Uploads performance counter	TRUE	FALSE	N/A	Collects data from the Health Service\Active File Uploads performance counter.	N/A
Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter	TRUE	FALSE	N/A	Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter.	N/A
Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter	TRUE	FALSE	N/A	Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter.	N/A
System Center Management Health Service Connector Bind Failure	FALSE	TRUE	Error	This rule raises an alert when unable to listen on required TCP port.	Never
(Deprecated) Collects data from the Processor\% Processor Time performance counter	FALSE	FALSE	N/A	Collects data from the Processor\% Processor Time performance counter on the System Center Management Health Service Process (HealthService.exe).	Never
Remote Certificate Not Trusted	TRUE	TRUE	Error	This rule generates alerts when it detects that the remote certificate is not trusted.	N/A
Remote Certificate Name Not Resolved	TRUE	TRUE	Warning	This rule generates alerts when it detects that the common name (CN) in the remote certificate cannot be resolved.	N/A
(Deprecated) Monitoring Host Handle Count Threshold (Management Server)	FALSE	TRUE	Error	Restarts the Health service when the "MonitoringHost.exe" process exceeds the Process\Handle Count threshold	Never
(Deprecated) Monitoring Host Private Bytes Handle Count	FALSE	TRUE	Error	Restarts the Health service when the Monitoring Host process exceeds the Process\Private Bytes threshold.	Never
OleDbProbe: Results Error	TRUE	TRUE	Error	This rule generates alerts when the results from the OleDb Probe module on this System Center Management Health Service contain failure information.	N/A
OleDbProbe: Module Execution Error	TRUE	TRUE	Warning	This rule generates alerts when the OleDb Probe module fails during execution on this System Center Management Health Service.	N/A
OleDbProbe: Module Initialization Error	TRUE	TRUE	Warning	This rule generates alerts when the OleDb Probe module fails to initialize on this System Center Management Health Service.	N/A
All Management Servers Resource Pool Unavailable	TRUE	TRUE	Warning	This rule generates alerts when the All Management Servers Resource Pool is not available.	N/A
(Deprecated) Health Service Cannot Find Management Group	FALSE	TRUE	Warning	This rule generates alerts when it detects that a Health service is unable to find a management group to communicate with.	Never
Web Service Management: Enumerator Module Error	TRUE	TRUE	Warning	This rule generates alerts when the Web Service Management Enumerator module fails on this System Center Management Health Service.	N/A
Web Service Management: Getter Module Error	TRUE	TRUE	Warning	This rule generates alerts when the Web Service Management Getter module fails on this System Center Management Health Service.	N/A
Web Service Management: Invoker Module Error	TRUE	TRUE	Warning	This rule generates alerts when the Web Service Management Invoker module fails on this System Center Management Health Service.	N/A
Web Service Management: Version Error	TRUE	TRUE	Warning	This rule generates alerts when one of the Web Service Management modules detects an unsupported version of Windows Remote Management on this System Center Management Health Service.	N/A
Logfile Module Alert Rule	TRUE	TRUE	Warning	Alert rule for Logfile module error messages.	N/A
UNIX/Linux Run As Account Alert Rule	TRUE	TRUE	Warning	Alert rule for UNIX/Linux Run As account error messages.	N/A

View	Description	Rules and Monitors that Populate the View
Management Group Health Dashboard	Shows overall Management Group health	Shows state of critical components of the Management Group, such as Management Servers, and Databases.
Management Group Health Trend Dashboard	Shows active alerts over time and agent health state over time	Collection rules for active alerts in the Management Group and agent health
Management Server	Lists state and alerts for Management Servers, including Gateways	Management and Gateway Server state and alerts

AI Skills Fest

Share via

Appendix: Monitoring Pack Contents

Reports

Agent

Discovery Information

Management Server

Discovery Information

Gateway Server

Discovery Information

Additional resources

AI Skills Fest

Share via

Appendix: Monitoring Pack Contents

Reports

Agent

Discovery Information

Related Monitors

Related Rules

Related Views

Related Reports

Management Server

Discovery Information

Related Monitors

Related Rules

Related Views

Related Reports

Gateway Server

Discovery Information

Related Monitors

Related Rules

Related Views

Additional resources