Share via


Monitor Alert

Applies To: Opalis 6.3

The Monitor Alert object triggers a policy when new System Center Operations Manager alerts are generated, and when existing System Center Operations Manager alerts are updated, according to filter criteria that you specify. You can use the Monitor Alert object to trigger a diagnostic and corrective policy that responds to critical alerts in your network.

The Monitor Alert object uses filters to determine which properties of an alert will trigger the policy. Each part of the alert is compared to the values of the filter to determine if they meet the criteria before triggering the policy. When matching against text fields, you select one of three different methods of comparison. An option is provided to either match or not match the filter using each method. The "Does not" version of each method causes alerts that do not match the filter to trigger the policy.

  • Equals: the property of the alert exactly matches the text specified in the filter.

  • Does not equal: the property of the alert does not exactly match the text specified in the filter.

  • Contains: the property of the alert contains the exact text specified in the filter. Unlike the Equals behavior, there can be other text surrounding the matching text.

  • Does not contain: the property of the alert does not contain the exact text specified in the filter. Unlike the Equals behavior, there can be other text surrounding the matching text.

  • Matches pattern: use wildcards to specify a pattern that the text must match. The two wildcard values are the asterisk (*) and the question mark (?). The behavior of the wildcards is similar to the Command Prompt. The asterisk will match any number of characters, while the question mark will only match one character. For example, if you have a filter specified as "a*b", the pattern would match any text that has an "a" at the beginning and a "b" at the end. So, it will match "aab", "abbbbbb", and "abbcb", but it will not match "ba" or "abba". Using the question mark, if you have a filter specified as "a?b", the pattern will match any text that has an "a" at the beginning, any single character in the middle, and "b" at the end. So this filter will match "a b", "abb", and "aqb", but it will not match "abbb" or "ab".

  • Does not match pattern: use wildcards to specify a pattern that the text must not match.

For the procedure to configure this object, see: To Configure the Monitor Alert Object.

The following tables list the filters, properties, and published data for this object. The object publishes all of the data from the required and optional properties into published data.

Monitor Alert Filters

Element Description

Category

The category name of the Management Pack

ConnectorId

The ID of the connector that generated the connection string

ConnectorStatus

The status of the connector

Context

The System Center Operations Manager context of the alert

CustomField1

The value of the first custom field

CustomField2

The value of the second custom field

CustomField3

The value of the third custom field

CustomField4

The value of the fourth custom field

CustomField5

The value of the fifth custom field

CustomField6

The value of the sixth custom field

CustomField7

The value of the seventh custom field

CustomField8

The value of the eighth custom field

CustomField9

The value of the ninth custom field

CustomField10

The value of the tenth custom field

Description

The description of the alert

Domain

The domain from which the alert came

Id

The unique ID of the alert

IsMonitorAlert

Indicates whether the alert is a monitor

LastModified

The date that the alert was last modified

LastModifiedBy

The last user to modify the alert

LastModifiedByNonConnector

Indicates whether the last modification was performed by a non-connector

MaintenanceModeLastModified

The time that the monitor maintenance mode was last changed

ManagementGroup

The Management Group to which the alert belongs

ManagementGroupId

The ID of the Management Group

MonitoringClassId

The monitoring class ID of the alert

MonitoringObjectDisplayName

The display name of the System Center Operations Manager monitoring object

MonitoringObjectFullName

The full name of the System Center Operations Manager monitoring object

MonitoringObjectHealthState

The health state of the System Center Operations Manager monitoring object

MonitoringObjectId

The ID of the System Center Operations Manager monitoring object

MonitoringObjectInMaintenanceMode

Indicates whether the System Center Operations Manager monitoring object is in maintenance mode

MonitoringObjectName

The name of the System Center Operations Manager monitoring object

MonitoringObjectPath

The path of the System Center Operations Manager monitoring object

MonitoringRuleId

The ID of the System Center Operations Manager monitoring rule

Name

The name of the alert

NetbiosComputerName

The NetBIOS computer name of the computer from which the alert came

NetbiosDomainName

The NetBIOS domain name of the domain from which the alert came

Owner

The owner of the alert

Parameters

The parameters of the alert

PrincipalName

The principal name of the computer for which the alert was created

Priority

The priority level of the alert

ProblemId

The problem ID of the alert

RepeatCount

The number of times that the alert has been repeated

ResolutionState

The resolution state of the alert

ResolvedBy

The user that resolved the alert

Server

The name of the System Center Operations Manager server

Severity

The severity level of the alert

SiteName

The site name of the alert

StateLastModified

The time that the alert state was last changed

TicketId

The ticket ID of the alert

TimeAdded

The time that the alert was added to System Center Operations Manager

TimeRaised

The time that the alert was raised

TimeResolutionStateLastModified

The time that the resolution state of the alert was last changed

TimeResolved

The time that the alert was resolved

Username

The user name that was used to access the System Center Operations Manager server

Monitor Alert Published Data

Element Description

AlertCount

The number of monitoring alerts that were found

Category

The category name of the Management Pack

Connection

The connection string to the System Center Operations Manager server that you are using

ConnectorId

The ID of the connector that generated the connection string

ConnectorStatus

The status of the connector

Context

The System Center Operations Manager context of the alert

CustomField1

The value of the first custom field

CustomField2

The value of the second custom field

CustomField3

The value of the third custom field

CustomField4

The value of the fourth custom field

CustomField5

The value of the fifth custom field

CustomField6

The value of the sixth custom field

CustomField7

The value of the seventh custom field

CustomField8

The value of the eighth custom field

CustomField9

The value of the ninth custom field

CustomField10

The value of the tenth custom field

Description

The description of the alert

Domain

The domain from which the alert came

Id

The unique ID of the alert

IsMonitorAlert

Indicates whether the alert is a monitor

LastModified

The date that the alert was last modified

LastModifiedBy

The last user to modify the alert

LastModifiedByNonConnector

Indicates whether the last modification was performed by a non-connector

MaintenanceModeLastModified

The time that the monitor maintenance mode was last changed

ManagementGroup

The Management Group to which the alert belongs

ManagementGroupId

The ID of the Management Group

MonitoringClassId

The monitoring class ID of the alert

MonitoringObjectDisplayName

The display name of the System Center Operations Manager monitoring object

MonitoringObjectFullName

The full name of the System Center Operations Manager monitoring object

MonitoringObjectHealthState

The health state of the System Center Operations Manager monitoring object

MonitoringObjectId

The ID of the System Center Operations Manager monitoring object

MonitoringObjectInMaintenanceMode

Indicates whether the System Center Operations Manager monitoring object is in maintenance mode

MonitoringObjectName

The name of the System Center Operations Manager monitoring object

MonitoringObjectPath

The path of the System Center Operations Manager monitoring object

MonitoringRuleId

The ID of the System Center Operations Manager monitoring rule

Name

The name of the alert

NetbiosComputerName

The NetBIOS computer name of the computer from which the alert came

NetbiosDomainName

The NetBIOS domain name of the domain from which the alert came

Owner

The owner of the alert

Parameters

The parameters of the alert

PrincipalName

The principal name of the computer for which the alert was created

Priority

The priority level of the alert

ProblemId

The problem ID of the alert

RepeatCount

The number of times that the alert has been repeated

ResolutionState

The resolution state of the alert

ResolvedBy

The user that resolved the alert

Server

The name of the System Center Operations Manager server

Severity

The severity level of the alert

SiteName

The site name of the alert

StateLastModified

The time that the alert state was last changed

TicketId

The ticket ID of the alert

TimeAdded

The time that the alert was added to System Center Operations Manager

TimeRaised

The time that the alert was raised

TimeResolutionStateLastModified

The time that the resolution state of the alert was last changed

TimeResolved

The time that the alert was resolved

Username

The user name that was used to access the System Center Operations Manager server

Configuring the Monitor Alert Object

To configure the Monitor Alert object

  1. From the Objects pane, drag a Monitor Alert object to the active policy.

  2. Double-click the Monitor Alert object icon. The Properties dialog opens.

  3. Configure the settings in the Details tab:

    1. In the Server section, click the ellipsis button (...), and select the Operations Manager server Connection that you want to use for this object. Click OK.

    2. In the Triggers section, select the type(s) of alerts, New and/or Updated, that are applicable to this policy. Each alert of the specified trigger type will be compared to the values of the filter(s) to determine if they meet the criteria before triggering the policy.

    3. In the Filters section, at least one filter is required to define the object. Click Add. In the Name box, click the down arrow and select a property from the list.

    4. In the Relation box, click the down arrow and select a filter type.

    5. In the Value box, enter the value you want to use.

      You can also use published data to automatically populate the value of the property from the data output by a previous object in the workflow.

      To use published data

      1. Right-click the property value box, click Subscribe, and then click Published Data.

      2. Click the Object drop-down box and select the object from which you want to obtain the data.

      3. To view additional data elements common across the policy, select Show Common Published Data.

      4. Click the published data element you want to use, and then click OK.

        For a list of the data elements published by each object, see the Published Data tables in the object topic. For information about the Common Published Data items, refer to the "Policy Workflow Rules" chapter of the Opalis Integration Server Client User Guide (https://go.microsoft.com/fwlink/?LinkId=205284)..

    6. Click OK to save the filter settings.

    7. Add additional filters as needed, and then click Finish.

      Tip

      Filter properties can only be used once in an object. For example, if your search criteria for an alert includes a date range, you cannot use the TimeAdded filter property twice in the same object. However, you may be able to use the TimeAdded After Date and TimeRaised Before Date filter properties to achieve the desired results.

  4. To make changes to a filter, click the filter and then click Edit. Make the changes, and then click OK.

    To remove a filter, click the filter and then click Remove.

  5. For information about the settings on the General and Run Behavior tabs, see Common Configuration Instructions for All Objects.

  6. Click Finish.

Other Objects

The Integration Pack for System Center Operations Manager contains the following additional objects: