Appendix: Monitoring Pack Contents

Updated: April 1, 2012

Applies To: System Center 2012 - Operations Manager

The Operations Manager Monitoring Pack discovers the object types described in the following sections. Not all of the objects are automatically discovered. Use overrides to discover those objects that are not discovered automatically.

ImportantImportant
Any workflow (rule, monitor, discovery, and so forth) that has “Deprecated” in its name should never be enabled.

Reports

To see the Operational Data Reporting reports, in the Operations console, click Reporting. In the Reporting pane, expand Reporting, and then click Microsoft ODR Report Library. The management pack includes the following reports:

  • Instance Space Report

    This report shows the number of instances of each class (for example, Exchange Servers) that are created in your management group. By default, this report needs no parameters, but it is possible to modify the start and end dates.

  • Management Group Report

    This report shows the operating system version used in the Operations Manager infrastructure (management servers). By default, this report needs no parameters, but it is possible to modify the start and end dates.

  • Management Packs Report

    This report shows the versions of each management pack that is installed in your environment. It also summarizes all the overrides you have defined in your environment, as well as custom rules and monitors you have authored. By default, this report needs no parameters, but it is possible to modify the start and end dates.

  • Most Common Alerts Report

    This report shows the most common alerts generated within the report period (by default one week). It also shows this data by management pack. By default, this report needs no parameters, but it is possible to modify the start and end dates.

  • Alerts Per Day Report

    This report shows the number of alerts generated per day from each rule or monitor that alerted within the report period (by default one week). By default, this report needs no parameters, but it is possible to modify the start and end dates.

Agent

Discovery Information

The discovery of agents is defined in the System Center Internal Library Management Pack.

Related Monitors

Note that the monitors listed in this table list the effective configuration of monitors on an Agent. Agent monitoring consists of several classes, such as Management Health Service and the Agent class. This table lists all of these monitors.

 

Monitor Name Enabled Alert Alert Severity Description When to Enable

Agent and Operating System architecture are the same

TRUE

TRUE

Warning

This monitor detects if the 32-bit agent has been installed on a 64-bit operating system.

N/A

Agent Version Monitor

TRUE

TRUE

Warning

This monitor checks for the agent version, and generates an alert if the version of an agent is less than the minimum version that is provided.

N/A

Health Service Handle Count Threshold

FALSE

FALSE

N/A

This monitor ensures that the "Process\Handle Count" counter for the "MonitoringHost.exe" processes do not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

N/A

Health Service Private Bytes Threshold

FALSE

FALSE

N/A

This monitor ensures that the "Process\Private Bytes" counter for the "MonitoringHost.exe" processes do not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

Never (this monitoring is handled by a separate monitor for agents)

Audit Collection Forwarder – Windows Service

TRUE

FALSE

N/A

This monitor checks the state of the ACS forwarder windows service.

N/A

Send Queue % Used

TRUE

TRUE

Error

This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.

N/A

WMI Health Monitor

TRUE

TRUE

Error

This monitor checks whether WMI is healthy by periodically performing a WMI query

N/A

WMI Memory Usage Monitor

TRUE

TRUE

Match Monitor Health

This monitor checks WMI memory utilization on the computer.

N/A

Monitoring Host Handle Count Threshold

TRUE

FALSE

N/A

This monitor ensures that the "Process\Handle Count" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

N/A

Monitoring Host Private Bytes Threshold

TRUE

FALSE

N/A

This monitor ensures that the "Process\Private Bytes" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

N/A

No End to End Event for 45 minutes (Critical Level)

FALSE

FALSE

N/A

This monitor detects if the local System Center Management Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.

Enable if you want to track end to end event monitoring

Local End to End Event Health

FALSE

FALSE

N/A

This roll-up monitor represents the health for a System Center Management Health Service's functionality to process events.

Enable if you want to track end to end event monitoring

No End to End Event for 30 minutes (Warning Level)

FALSE

FALSE

N/A

This monitor detects if the local System Center Management Health Service was able to log an event in the last 30 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.

Enable if you want to track end to end event monitoring

WMI Service Availability

TRUE

FALSE

N/A

WMI Service Availability roll-up monitor.

N/A

AVIcode Intercept service found

FALSE

TRUE

Warning

Monitor that watches for an installer error raised to indicate that an old AVIcode .NET Enterprise Agent is on the system. This monitor is disabled by default but you might want to enable it to verify which portion of your agents are still running the AVIcode Intercept service as opposed to the new APM feature in Operations Manager2012.

See description

Valid Host No APM Agent

FALSE

FALSE

N/A

Monitor that watches for .NET installed on a system with an Operations Manager health service that does not have the APM service installed

If you want to monitor for agents that do not have the right version of .NET installed

Audit Collection Availability

TRUE

FALSE

N/A

Audit Collection Availability roll up monitor.

N/A

System Center Management Health Service Availability

TRUE

FALSE

N/A

System Center Management Health Service Availability roll-up monitor.

N/A

Expiration Check of Certificate Used for Authentication

TRUE

TRUE

Error

This monitor checks the status of the certificate used for authentication and sends an alert when the certificate is about to expire.

N/A

Configuration Processing

FALSE

FALSE

N/A

This monitor indicates whether the System Center Management Health Service could load the configuration successfully or not.

If you want to enable configuration monitoring

Configuration 90 minutes out of Data (Critical Level)

FALSE

FALSE

N/A

This monitor indicates that the System Center Management Health Service has had a stale configuration for a long period of time.

If you want to enable stale configuration monitoring

System Center Management Health Service Configuration Processing

FALSE

TRUE

Error

Indicates whether the System Center Management Health Service configuration processing is successful and current.

If you want to enable configuration monitoring

Configuration 45 minutes Out of Date (Warning Level)

FALSE

FALSE

N/A

This monitor indicates that the System Center Management Health Service has had a stale configuration for some period of time.

If you want to enable stale configuration monitoring

Send Queue % Used (Health Service)

FALSE

TRUE

Error

This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.

Never (this monitoring is handled by a separate monitor for agents)

System Center Management Health Service Performance

TRUE

FALSE

N/A

System Center Management Health Service performance roll-up monitor.

N/A

Agent processor utilization

TRUE

TRUE

Error

Monitor all agent processes to identify potential issues with the agent using too much processor time.

N/A

Data Validity Check

FALSE

TRUE

Warning

Monitors the validity of data arriving at this System Center Management Health Service.

If you want to enable this monitoring scenario

Data Integrity

TRUE

FALSE

N/A

Monitors the integrity of data flowing into the System Center Management Health Service.

N/A

Spoofed Data Check

TRUE

TRUE

Warning

This monitor reports on spoofed data received by this System Center Management Health Service.

N/A

System Center Management Health Service Security

TRUE

FALSE

N/A

Security roll-up for the System Center Management Health Service.

N/A

System Center Management Health Service Memory Utilization

TRUE

FALSE

N/A

This monitor aggregates state from four unit monitors that measure memory utilization of the System Center Management Health Service. When this monitor changes to critical, it starts a recovery task that restarts the System Center Management Health Service.

N/A

System Center Management Health Service Performance

TRUE

FALSE

N/A

System Center Management Health Service modules performance roll-up monitor.

N/A

System Center Management Health Service Modules Performance Rollup

TRUE

FALSE

N/A

System Center Management Health Service modules roll-up monitor.

N/A

Many Corrupt or Unreadable Windows Events

TRUE

TRUE

Warning

This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.

N/A

Failed Accessing Windows Event Log

TRUE

TRUE

Warning

This monitor checks access to Windows event logs.

N/A

Processing Backlogged Events Taking a Long Time

TRUE

TRUE

Match Monitor Health

This monitor checks the if the Windows Event Log module is processing backlogged events for a period of time.

N/A

Event Log Data Source Module

TRUE

FALSE

N/A

Event Log Data Source module roll-up monitor.

N/A

Unable to Process Windows Event Log

TRUE

TRUE

Warning

This monitor checks if the Windows Event Log monitor is unable to process events from one or more event logs.

N/A

Run As Account Verification

TRUE

TRUE

Warning

Monitor that verifies Run As accounts.

N/A

Run As Account Authorization

TRUE

TRUE

Error

This monitor checks that a set of Run As accounts are authorized. Authorization can be restricted when an administrator runs the HSLockdown tool.

N/A

Run As Account and Password Expiration

TRUE

TRUE

Match Monitor Health

Checks for expiring Run As accounts and their passwords

N/A

Run As Account Logon Locally

TRUE

TRUE

Error

This monitor checks if the computer is configured to allow all Run As accounts to log on locally.

N/A

Run As Accounts

TRUE

FALSE

N/A

Monitors health of Run As accounts executing on this System Center Management Health Service.

N/A

Run As Account or Password Expired or Incorrect

TRUE

TRUE

Error

This monitor checks if a Run As account can successfully log on with the configured username and password.

N/A

Network Monitoring Timeouts

TRUE

TRUE

Warning

This monitor checks whether Network Monitoring is experiencing excessive timeouts

N/A

Secure Exchange Key Synchronization Check

TRUE

FALSE

N/A

Changes state when an issue synchronizing the secure exchange key exists

N/A

Default Action Account Type

TRUE

TRUE

Error

This monitor detects when the account type used for the agent's default Action Account is incorrect.

N/A

Run As Account Configuration Processing

TRUE

TRUE

Error

Detects when Run As account configuration processing has failed

N/A

Windows Management Instrumentation Service

TRUE

TRUE

Warning

This monitor checks the state of the Windows Management Instrumentation Service.

N/A

Network Monitoring SNMP Trap port is already in use by another program

TRUE

TRUE

Error

This monitor checks whether Network Discovery failed for a SNMP Trap port is already in use by another program.

N/A

Related Rules

Note that the rules listed in this table list the effective configuration of monitors on an Agent. Agent monitoring consists of several classes, such as Management Health Service and the Agent class. This table lists all of these rules.

 

Rule Name Enabled Alert Alert Severity Description When to Enable

Collect System\System Uptime

TRUE

FALSE

N/A

Collects the System\System Uptime performance counter object for testing performance collection.

N/A

Collect Restart System Center Management Health Service Events

TRUE

FALSE

N/A

Collects the Restart System Center Management Health Service events.

N/A

Log Distributed Workflow Test Event

TRUE

FALSE

N/A

This rule logs an event at each System Center Management Health Service that will be collected to test event collection.

N/A

Collect Service Control Manager failed to start events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process failing to start.

N/A

Collect Service Control Manager started or stopped events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process starting and stopping.

N/A

Collect Service Control Manager process terminated events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process terminating.

N/A

Alert Invalid Override Value

TRUE

TRUE

Error

Invalid value used when overriding alert priority or severity. Runtime adjusted the value to the closest allowed.

N/A

Parameter Replacement Failure During Alert Creation

TRUE

TRUE

Warning

Parameter replacement failed during alert creation.

N/A

Critical Parameter Replacement Failure During Alert Creation

FALSE

TRUE

Error

Parameter replacement failed during alert creation. This will cause the workflow to unload.

If you want to enable this monitoring scenario

Parameter Replacement Failure Event Collection Rule

FALSE

FALSE

N/A

This rule collects System Center Management Health Service events related to parameter replacement failures.

N/A

Replacement Failure For Suppression During Alert Creation

TRUE

TRUE

Error

Replacement failed for suppression tag during alert creation.

N/A

Alert generation was temporarily suspended due to too many alerts.

TRUE

TRUE

Warning

Alert generation was temporarily suspended for a rule because the number of alerts generated exceeded the threshold within the specified time interval. This is done to prevent excessive load against the management group.

N/A

Collect Alert Subscription Module Events

TRUE

FALSE

N/A

Collects Alert Subscription module events.

N/A

Syslog Module Events Collector Rule

TRUE

FALSE

N/A

This rule collects Syslog module events.

N/A

Collect Application Log Module Events

TRUE

FALSE

N/A

Collects events generated by the Application Log module.

N/A

Application Log Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Application Log module experiences a runtime failure.

N/A

Application Log Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Application Log module fails to initialize.

N/A

Average Threshold Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Average Threshold module experiences an initialization failure.

N/A

Alert on Backward Compatibility Script Errors.

TRUE

TRUE

Warning

This rule generates alerts when Backward Compatibility script errors occur.

N/A

Collect Backward Compatibility Module Events

TRUE

FALSE

N/A

Collects Backward Compatibility module events.

N/A

Collect Baselining Modules Event

TRUE

FALSE

N/A

Collects the series of events for the numeric baselining module.

N/A

Baselining Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Baselining Module experiences an initialization failure.

N/A

Alert on Dropped Batch Responses

TRUE

TRUE

Warning

The rule generates alerts when batch responses are dropped.

N/A

Workflow Initialization: Failed to start a process or script

TRUE

TRUE

Warning

This rule generates alerts when a rule or monitor attempts to execute a process and the process cannot be started.

N/A

Workflow Initialization: Failed to start a workflow that runs a process or script

TRUE

TRUE

Warning

This rule generates alerts when failed to start a workflow that runs a process or script.

N/A

Workflow Runtime: Failed to run a process or script

TRUE

TRUE

Warning

This rule generates alerts when batch responses fail.

N/A

Collect Batch Response Module Events

FALSE

FALSE

N/A

Collects Batch Response module events.

If you want to enable this monitoring scenario

Collect Alerts

TRUE

FALSE

N/A

System rule that collects alert data from any object.

N/A

Collect Discovery Data

TRUE

FALSE

N/A

System rule that collects discovery data from any object.

N/A

Entity state change collector

TRUE

FALSE

N/A

This rule collects all state change events in the system

N/A

Event data collector

TRUE

FALSE

N/A

System rule that collects events from any object.

N/A

Collect Monitor Generated Alerts

TRUE

FALSE

N/A

System rule that collects alerts generated from monitors.

N/A

Collect Performance Data

TRUE

FALSE

N/A

System rule that collects performance data from any object.

N/A

Collect Object State

TRUE

FALSE

N/A

System rule that collects state change events from any object.

N/A

Collect Object State - Resend

TRUE

FALSE

N/A

Support rule for the Collect Object State to resend items not received by the database on the first try.

N/A

Collect Performance Signatures

TRUE

FALSE

N/A

System rule that collects performance signature data from any object.

N/A

Computer Verification Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects Computer Verification module events.

N/A

Consecutive Samples Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Consecutive Samples module experiences an initialization failure.

N/A

Collect Consolidator Module Events

TRUE

FALSE

N/A

Collects events generated by the Consolidator module.

N/A

Consolidator Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Consolidator module experiences a runtime failure.

N/A

Consolidator Module Initialization Failure

TRUE

TRUE

Error

This rule generates an alert when the Consolidator module fails to initialize.

N/A

Collect Correlation Module Events

TRUE

FALSE

N/A

Collects events generated by the Correlation module.

N/A

Correlation Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Correlation module experiences a runtime failure.

N/A

Correlation Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Correlation module fails to initialize.

N/A

Entity state change collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) entity state change events for Data Warehouse collection (to default store)

N/A

Event data collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) event data for Data Warehouse collection (to default store)

N/A

Performance data collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) performance data for Data Warehouse collection (to default store)

N/A

Entity state change publisher

TRUE

FALSE

N/A

This rule collects entity state change information from all managed entities and publishes it for Data Warehouse collection on default channel

N/A

Delta Threshold Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Delta Threshold module experiences an initialization failure.

N/A

Collect Dependent Service Check Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the Dependent Service Check Probe module.

N/A

Dependent Service Check Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Dependent Service Check Probe module experiences a runtime failure.

N/A

Dependent Service Check Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Dependent Service Check Probe module fails to initialize.

N/A

Collect Discovery Data Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Discovery Data Mapper module.

N/A

Discovery Data Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Discovery Data Mapper module experiences a runtime failure.

N/A

Discovery Data Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Discovery Data Mapper module fails to initialize.

N/A

Collect Expression Filter Module Events

TRUE

FALSE

N/A

Collects events generated by the Expression Filter module.

N/A

Expression Filter Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Expression Filter module fails to initialize.

N/A

File Transfer Empty File

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file path could not be determined by the file upload module.

If you want to enable this monitoring scenario

File Transfer Processing Failure

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file could not be processed by the file upload module.

If you want to enable this monitoring scenario

File Transfer Failure

FALSE

FALSE

N/A

This rule collects all failed file transfers by the file upload module.

If you want to enable this monitoring scenario

File Transfer Upload failure

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file failed to upload by the file upload module.

If you want to enable this monitoring scenario

File Transfer Invalid File name

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file path name was invalid and could not be processed by the file upload module.

If you want to enable this monitoring scenario

File Transfer Successful

FALSE

FALSE

N/A

This rule collects all successful file transfers by the file upload module.

If you want to enable this monitoring scenario

Collect Generic Event Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Generic Event Mapper module.

N/A

Generic Event Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Generic Event Mapper module experiences a runtime failure.

N/A

Generic Event Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Generic Event Mapper module fails to initialize.

N/A

Collect Generic Performance Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Generic Performance Mapper module.

N/A

Generic Performance Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Generic Performance Mapper module experiences a runtime failure.

N/A

Generic Performance Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Generic Performance Mapper module fails to initialize.

N/A

Collect Group Calculation Module Events

TRUE

FALSE

N/A

Collects Group Calculation module events.

N/A

Collect Alert Flow Events

TRUE

FALSE

N/A

Collects events that verify alerts are flowing from the System Center Management Health Service to the Operational Database.

N/A

Collect Health Service\Module Count

TRUE

FALSE

N/A

Collects Module Count performance counter.

N/A

Collect Health Service Management Group\Send Queue % Used

TRUE

FALSE

N/A

Collects Send Queue % Used performance counter.

N/A

Collect Health Service Management Group\Send Queue Size

TRUE

FALSE

N/A

Collects the Send Queue Size performance counter.

N/A

Collect Health Service\Workflow Count

TRUE

FALSE

N/A

Collects Workflow Count performance counter.

N/A

Collect Workflow Unloaded Events

TRUE

FALSE

N/A

Collects events related to unloaded workflows.

N/A

Collect Health Service Configuration Updated Events

FALSE

FALSE

N/A

Collects the series of events on the System Center Management Health Service that indicate requesting, receiving, and activating new configuration (e.g. rules and monitors). This rule is disabled by default as it can result in excessive event collections, which create overhead for the management group and consume space in the operational and data warehouse databases. If enabled, it is recommended that the rule only be enabled for a limited period of time.

See description

Collect Configuration Parse Error Events

FALSE

FALSE

N/A

Collects the events related to the failure of a System Center Management Health Service being able to parse its new configuration.

If you want to enable this monitoring scenario

System Center Management Health Service Credentials Not Defined

TRUE

TRUE

Error

This rule raises an alert when unable to resolve Secure Reference override.

N/A

System Center Management Health Service Credentials Not Found

TRUE

TRUE

Error

This rule raises an alert when unable to resolve Secure Reference override.

N/A

Collect Entity State Change Flow Error Events

TRUE

FALSE

N/A

Collects the events related to the flow of State Change Data from System Center Management Health Services to the Operational Database.

N/A

Collect Health Manager Events

TRUE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.

N/A

Collect Health Manager Events ID Parameter

FALSE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.

N/A

Collect Health Manager Events Name Parameter

FALSE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of the System Center Management Health Service.

If you want to enable this monitoring scenario

Periodic System Center Management Health Service Store Maintenance

TRUE

FALSE

N/A

Rule which runs periodic maintenance of the System Center Management Health Service ESE store.

N/A

Collect Monitor State Change Flow Error Events

TRUE

FALSE

N/A

Collects the events related to the flow of monitor state change data from System Center Management Health Services to the Operational database.

N/A

Collect agent processor utilization

TRUE

FALSE

N/A

Collects the "agent processor utilization" performance counter

N/A

Collect Run As Account Failure Events

FALSE

FALSE

N/A

Collects the series of events that indicate a failure in executing a rule, monitor, or task using a specific Run As account.

If you want to enable this monitoring scenario

Collect IIS Discovery Probe Module Events

FALSE

FALSE

N/A

Collects events generated by the IIS Discovery Probe module.

If you want to enable this monitoring scenario

IIS Discovery Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Discovery Probe module experiences a runtime failure.

N/A

IIS Discovery Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Discovery Probe module fails to initialize.

N/A

Collect IIS Log Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Log Condition module.

N/A

IIS Log Condition Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Log Condition module experiences a runtime failure.

N/A

IIS Log Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Log Condition module fails to initialize.

N/A

Collect IIS Site State Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Site State Data Source module.

N/A

IIS Site State Data Source Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Site State Data Source module experiences a runtime failure.

N/A

IIS Site State Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Site State Data Source module fails to initialize.

N/A

Collect IIS Site State Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Site State Probe module.

N/A

IIS Site State Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Site State Probe module experiences a runtime failure.

N/A

IIS Site State Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Site State Probe module fails to initialize.

N/A

Collect LDAP Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the LDAP Probe module.

N/A

LDAP Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the LDAP Probe module experiences a runtime failure.

N/A

LDAP Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the LDAP Probe module fails to initialize.

N/A

Learning Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Learning Module experiences a runtime failure.

N/A

Learning Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Learning Module experiences an initialization failure.

N/A

Collect Maintenance Mode Events

TRUE

FALSE

N/A

Collects the events that indicate an object entering into maintenance mode and exiting maintenance mode.

N/A

Collect Backward Compatibility Application Log Module Events

TRUE

FALSE

N/A

Collects events generated by the Backward Compatibility Application Log module.

N/A

Backward Compatibility Application Log Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Backward Compatibility Application Log module experiences a runtime failure.

N/A

Backward Compatibility Application Log Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Backward Compatibility Application Log module fails to initialize.

N/A

Collect Backward Compatibility WMI Event Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Backward Compatibility WMI Event Mapper module.

N/A

Backward Compatibility WMI Event Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Backward Compatibility WMI Event Mapper module experiences a runtime failure.

N/A

Backward Compatibility WMI Event Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Backward Compatibility WMI Event Mapper module fails to initialize.

N/A

Collect MOM NT Performance Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the MOM NT Performance Mapper module.

N/A

MOM NT Performance Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the MOM NT Performance Mapper module experiences a runtime failure.

N/A

MOM NT Performance Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the MOM NT Performance Mapper module fails to initialize.

N/A

Collect Monitoring Host Crash Events

TRUE

FALSE

N/A

Collects the events that indicate when monitoring host crashes.

N/A

Collect Multi instance Performance Module Events

FALSE

FALSE

N/A

Collects Multi instance Performance Module Events

If you want to enable this monitoring scenario

Alert on Dropped Multi instance Performance Module

TRUE

TRUE

Error

This rule generates alerts when the Multi instance Perf Module has an invalid frequency configuration

N/A

OleDb Probe Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects OleDb Probe module events.

If you want to enable this monitoring scenario

Collect Performance Data Source Module Events

FALSE

FALSE

N/A

Collects Performance Data module events.

If you want to enable this monitoring scenario

Performance Data Source Module could not find a performance counter

FALSE

TRUE

Error

This rule generates alerts when the Performance Data Source Module module is unable to find the performance counter that the workflow has been configured to collect or alert on.

If you want to enable this monitoring scenario

Alert on Dropped Power Shell Scripts

TRUE

TRUE

Warning

Alerts on dropped Power Shell scripts.

N/A

Alert on Failure to Create PowerShell Run space for Power Shell Script

TRUE

TRUE

Warning

Alerts when a rule or monitor attempts to execute a Power Shell script and the Power Shell Run space cannot be started.

N/A

Alert on Failure to Load a Power Shell SnapIn

TRUE

TRUE

Warning

Alerts when a rule or monitor attempts to execute a Power Shell script and a Power Shell snap-in cannot be loaded.

N/A

Alert on Failed Power Shell Scripts

TRUE

TRUE

Warning

Alerts on failed Power Shell scripts.

N/A

Alert on Power Shell Not Installed

TRUE

TRUE

Warning

Alerts when Power Shell scripts are being used where Power Shell is not installed.

N/A

Collect Power Shell Module Events

TRUE

FALSE

N/A

Collects Power Shell module events.

N/A

Read Discovery Data

TRUE

FALSE

N/A

This rule reads and publishes discovery data created by scheduled discoveries

N/A

Collect Registry Probe Module Events

TRUE

FALSE

N/A

This rule collects Registry Probe module events.

N/A

Schedule Manager Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Schedule Manager fails to initialize.

N/A

Collect Scheduler Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the Scheduler Condition module.

N/A

Scheduler Condition Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Condition module experiences a runtime execution failure.

N/A

Scheduler Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Condition module fails to initialize.

N/A

Collect Scheduler Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the Scheduler Data Source module.

N/A

Scheduler Data Source Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Data Source module experiences a runtime execution failure.

N/A

Scheduler Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Data Source module fails to initialize.

N/A

Collect Service Check Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the Service Check Data Source module.

N/A

Service Check Data Source Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Service Check Data Source module experiences a runtime failure.

N/A

Service Check Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Service Check Data Source module fails to initialize.

N/A

Collect Service Check Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the Service Check Probe module.

N/A

Service Check Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Service Check Probe module experiences a runtime failure.

N/A

Service Check Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Service Check Probe module fails to initialize.

N/A

Collect Timer Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the Timer Condition module.

N/A

Timer Condition Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Timer Condition module experiences a runtime failure.

N/A

Timer Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Timer Condition module fails to initialize.

N/A

Collect Windows Workflow 4.0 Module events

FALSE

FALSE

N/A

Collects events generated by the Windows Workflow 4.0 module.

If you want to enable this monitoring scenario

Windows Workflow 4.0 Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Windows Workflow 4.0 Module fails to initialize.

N/A

Windows Workflow 4.0 Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Windows Workflow 4.0 Module experiences a runtime failure.

N/A

Collect WMI Event Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Event module.

N/A

Workflow Runtime: Failed to run a WMI query

TRUE

TRUE

Warning

This rule generates alerts when the WMI Event module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI for WMI events

TRUE

TRUE

Error

This rule generates alerts when the WMI Event module fails to initialize.

N/A

WMI Event Module Item Contains Large Array

TRUE

TRUE

Warning

This rule generates alerts when the WMI Event module retrieves a data item with a very large array.

N/A

Collect WMI Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Probe module.

N/A

Workflow Runtime: Failed to run a WMI query

TRUE

TRUE

Warning

This rule generates alerts when the WMI Probe module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI

TRUE

TRUE

Error

This rule generates alerts when the WMI Probe module fails to initialize.

N/A

WMI Probe Module Item Contains Large Array

TRUE

TRUE

Warning

This rule generates alerts when the WMI Probe module retrieves a data item with a very large array.

N/A

Collect WMI Raw Performance Counter Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Raw Performance Counter module.

N/A

Workflow Runtime: Failed to run a WMI query for performance data

TRUE

TRUE

Warning

This rule generates alerts when the WMI Raw Performance Counter module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI for performance data

TRUE

TRUE

Error

This rule generates alerts when the WMI Raw Performance Counter module fails to initialize.

N/A

Web Service Management Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects WSMan (Web Services for Management) module events.

If you want to enable this monitoring scenario

Related Views

 

View Description Rules and Monitors that Populate the View

Active Alerts

Alerts generated from agents and agent watcher

All rules and monitors that apply to agent

Agent Events

Events collected from Agents

All rules and monitors that apply to agent

Agent Health State

Health State of Agents and Agent Watchers

Agent Performance

Performance Data for Agents

Agents by Version

Tracks version of each Agent

Related Reports

 

Report Description Class Selection Criteria

Agents by Health State

The Agents by Health State report provides lists of agents broken down the state that the agents are in.

Class name

Agent Counts by Date, Management Group and Version

This report shows detail information for agent accounts during specified time interval.

Management Server

Discovery Information

The discovery of Management Servers is defined in the System Center Internal Library Management Pack.

Related Monitors

Note that the monitors listed in this table list the effective configuration of monitors on a Management Server. Management Server monitoring consists of several classes, such as Management Health Service, the Management Server class, and the Collection Management Server class. This table lists all of these monitors.

 

Monitor Name Enabled Alert Alert Severity Description When to Enable

Data Warehouse Watcher Availability Roll Up

TRUE

FALSE

N/A

Rolls up availability health to the Operations Manager Data Warehouse Watcher from the Management Server accessing the Data Warehouse

N/A

Operations Manager Datawarehouse Watcher Performance Roll Up

TRUE

FALSE

N/A

Rolls up performance health to the Operations Manager Datawarehouse Watcher from the Management Server accessing the Data Warehouse

N/A

Data Access Service - Database Connectivity

TRUE

TRUE

Error

Monitors the database connectivity of the Data Access service.

N/A

Data Access Service - Port Availability

TRUE

TRUE

Error

Monitors the port availability of the Data Access service.

N/A

Data Access Service - Windows Service

TRUE

TRUE

Error

Data Access service unit monitor.

N/A

Service Running State

FALSE

TRUE

Error

Monitors the current status of the Windows service. An alert from this monitor indicates the Windows Service is not currently running

Never

Data Warehouse Data Collection Performance State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse data collection process performance state from the perspective of a Management Server

N/A

Data Warehouse Data Collection State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse data collection state from the perspective of a Management Server

N/A

Data Warehouse Event Data Collection Writer First Chance State

TRUE

FALSE

N/A

This monitor switches to warning state once Data Warehouse event data collection writer experiences a problem

N/A

Data Warehouse Event Data Collection Writer Recovery State

TRUE

TRUE

Error

This monitor switches to warning state once Data Warehouse event data collection writer experiences a problem and does not recover from that problem in a configured amount of time

N/A

Data Warehouse Event Data Collection Writer State

TRUE

FALSE

N/A

Data Warehouse event data collection writer process state for a Management Server

N/A

Data Warehouse Event Data Collection State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse event data collection state from the perspective of a Management Server

N/A

Data Warehouse Event Data Collection Event State

TRUE

TRUE

Error

Data Warehouse event data collection event state for a Management Server

N/A

Data Warehouse Event Data Collection SQL Server Authentication State

TRUE

TRUE

Error

Data Warehouse event data collection SQL Server Authentication state for a Management Server

N/A

Data Warehouse Event Data Collection Writer Periodic Data Maintenance First Chance State

TRUE

FALSE

N/A

This monitor switches to warning state once Data Warehouse event data collection writer periodic data maintenance process experiences a problem

N/A

Data Warehouse Event Data Collection Writer Periodic Data Maintenance Recovery State

TRUE

TRUE

Error

This monitor switches to warning state once Data Warehouse event data collection writer periodic data maintenance process experiences a problem and does not recover from that problem in a configured amount of time

N/A

Data Warehouse Event Data Maintenance State for Data Writer

TRUE

FALSE

N/A

Data Warehouse event data maintenance process state from the perspective of the data writer process on a Management Server

N/A

Data Warehouse Performance State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse performance state from the perspective of a Management Server

N/A

Data Warehouse Performance Data Collection Writer First Chance State

TRUE

FALSE

N/A

This monitor switches to warning state once Data Warehouse performance data collection writer experiences a problem

N/A

Data Warehouse Performance Data Collection Writer Recovery State

TRUE

TRUE

Error

This monitor switches to warning state once Data Warehouse performance data collection writer experiences a problem and does not recover from that problem in a configured amount of time

N/A

Data Warehouse Performance Data Collection Writer State

TRUE

FALSE

N/A

Data Warehouse performance data collection writer process state for a Management Server

N/A

Data Warehouse Performance Data Collection State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse performance data collection state from the perspective of a Management Server

N/A

Data Warehouse Performance Data Collection Performance State

TRUE

TRUE

Error

Data Warehouse performance data collection performance state for a Management Server

N/A

Data Warehouse Performance Data Collection SQL Server Authentication State

TRUE

TRUE

Error

Data Warehouse performance data collection SQL Server Authentication state for a Management Server

N/A

Data Warehouse Performance Data Collection Writer Periodic Data Maintenance First Chance State

TRUE

FALSE

N/A

This monitor switches to warning state once Data Warehouse performance data collection writer periodic data maintenance process experiences a problem

N/A

Data Warehouse Performance Data Collection Writer Periodic Data Maintenance Recovery State

TRUE

TRUE

Error

This monitor switches to warning state once Data Warehouse performance data collection writer periodic data maintenance process experiences a problem and does not recover from that problem in a configured amount of time

N/A

Data Warehouse Performance Data Maintenance State for Data Writer

TRUE

FALSE

N/A

Data Warehouse performance data maintenance process state from the perspective of the data writer process on a Management Server

N/A

Data Warehouse Object Health State Data Collection Writer First Chance State

TRUE

FALSE

N/A

This monitor switches to warning state once Data Warehouse object health state data collection writer experiences a problem

N/A

Data Warehouse Object Health State Data Collection Writer Recovery State

TRUE

TRUE

Error

This monitor switches to warning state once Data Warehouse object health state data collection writer experiences a problem and does not recover from that problem in a configured amount of time

N/A

Data Warehouse Object Health State Data Collection Writer State

TRUE

FALSE

N/A

Data Warehouse entity health state data collection writer process state for a Management Server

N/A

Data Warehouse Object Health State Data Collection State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse object health state data collection state from the perspective of a Management Server

N/A

Data Warehouse Object Health State Data Collection Performance State

TRUE

TRUE

Error

Data Warehouse object health state data collection performance state for a Management Server

N/A

Data Warehouse Object Health State Data Collection SQL Server Authentication State

TRUE

TRUE

Error

Data Warehouse object health state data collection SQL Server Authentication state for a Management Server

N/A

Data Warehouse Object Health State Data Collection Writer Periodic Data Maintenance First Chance State

TRUE

FALSE

N/A

This monitor switches to a warning state once Data Warehouse object health state data collection writer periodic data maintenance process experiences a problem

N/A

Data Warehouse Object Health State Data Collection Writer Periodic Data Maintenance Recovery State

TRUE

TRUE

Error

This monitor switches to a warning state once Data Warehouse object health state data collection writer periodic data maintenance process experiences a problem and does not recover from that problem in a configured amount of time

N/A

Data Warehouse Object Health State Data Maintenance State for Data Writer

TRUE

FALSE

N/A

Data Warehouse object health state data maintenance process state from the perspective of the data writer process on a Management Server

N/A

Health Service Handle Count Threshold

TRUE

FALSE

N/A

This monitor ensures that the "Process\Handle Count" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

N/A

Health Service Private Bytes Threshold

TRUE

FALSE

N/A

This monitor ensures that the "Process\Private Bytes" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

N/A

No End to End Event for 45 Minutes (Critical Level)

FALSE

FALSE

N/A

This monitor detects if the local System Center Management Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.

Never

Local End to End Event Health

FALSE

FALSE

N/A

This roll-up monitor represents the health for a System Center Management Health Service's functionality to process events.

Never

No End to End Event for 30 Minutes (Warning Level)

FALSE

FALSE

N/A

This monitor detects if the local System Center Management Health Service was able to log an event in the last 30 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.

Never

WMI Service Availability

TRUE

FALSE

N/A

WMI Service Availability roll-up monitor.

N/A

AVIcode Intercept service found

FALSE

TRUE

Warning

Monitor that watches for an installer error raised to indicate that an AVIcode .NET Enterprise Agent is on the system. This monitor is disabled by default but you might want to enable it to verify which portion of your agents are still running the AVIcode Intercept service as opposed to the new APM feature inSystem Center 2012 - Operations Manager.

Never

Valid Host No APM Agent

FALSE

FALSE

N/A

Monitor that watches for .NET Framework installed on a system with an Operations Manager health service that does not have the APM service installed

Never

Audit Collection Availability

TRUE

FALSE

N/A

Audit Collection Availability roll up monitor.

N/A

System Center Management Health Service Availability

TRUE

FALSE

N/A

System Center Management Health Service Availability roll-up monitor.

N/A

Expiration Check of Certificate Used for Authentication

TRUE

TRUE

Error

This monitor checks the status of the certificate used for authentication and sends an alert when the certificate is about to expire.

N/A

Configuration Processing

FALSE

FALSE

N/A

This monitor indicates whether the System Center Management Health Service could load the configuration successfully or not.

Never

Configuration 90 Minutes Out of Date (Critical Level)

FALSE

FALSE

N/A

This monitor indicates that the System Center Management Health Service has had a stale configuration for a long period of time.

Never

System Center Management Health Service Configuration Processing

FALSE

TRUE

Error

Indicates whether the System Center Management Health Service configuration processing is successful and current.

Never

Configuration 45 Minutes Out of Date (Warning Level)

FALSE

FALSE

N/A

This monitor indicates that the System Center Management Health Service has had a stale configuration for some period of time.

Never

System Center Management Health Service Credentials Not Found

onStandardMonitoring

TRUE

Error

This monitor raises an alert when the Operations Manager agent cannot resolve Secure Reference override.

N/A

Send Queue % Used

TRUE

TRUE

Error

This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.

N/A

System Center Management Health Service Performance

TRUE

FALSE

N/A

System Center Management Health Service performance roll-up monitor.

N/A

Agent processor utilization

FALSE

TRUE

Error

Monitor all agent processes to identify potential issues with the agent using too much processor time.

Never

Data Validity Check

FALSE

TRUE

Warning

Monitors the validity of data arriving at this System Center Management Health Service.

Never

Data Integrity

TRUE

FALSE

N/A

Monitors the integrity of data flowing into the System Center Management Health Service.

N/A

Spoofed Data Check

TRUE

TRUE

Warning

This monitor reports on spoofed data received by this System Center Management Health Service.

N/A

System Center Management Health Service Security

TRUE

FALSE

N/A

Security roll-up for the System Center Management Health Service.

N/A

System Center Management Health Service Memory Utilization

TRUE

FALSE

N/A

This monitor aggregates state from four unit monitors that measure memory utilization of the System Center Management Health Service. When this monitor changes to critical, it starts a recovery task that restarts the System Center Management Health Service.

N/A

System Center Management Health Service Modules Performance Rollup

TRUE

FALSE

N/A

System Center Management Health Service modules performance roll-up monitor.

N/A

System Center Management Health Service Modules Rollup

TRUE

FALSE

N/A

System Center Management Health Service modules roll-up monitor.

N/A

Many Corrupt or Unreadable Windows Events

TRUE

TRUE

Warning

This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.

N/A

Failed Accessing Windows Event Log

TRUE

TRUE

Warning

This monitor checks access to Windows event logs.

N/A

Processing Backlogged Events Taking a Long Time

TRUE

TRUE

MatchMonitorHealth

This monitor checks if the Windows Event Log module is processing backlogged events for a period of time.

N/A

Event Log Data Source Module

TRUE

FALSE

N/A

Event Log Data Source module roll-up monitor.

N/A

Unable to Process Windows Event Log

TRUE

TRUE

Warning

This monitor checks if the Windows Event Log monitor is unable to process events from one or more event logs.

N/A

Run As Account Verification

TRUE

TRUE

Warning

Monitor that verifies Run As accounts.

N/A

Run As Account Authorization

TRUE

TRUE

Error

This monitor checks that a set of Run As accounts are authorized. Authorization can be restricted when an administrator runs the HSLockdown tool.

N/A

Run As Account and Password Expiration

TRUE

TRUE

MatchMonitorHealth

Checks for expiring Run As accounts and their passwords

N/A

Run As Account Logon Locally

TRUE

TRUE

Error

This monitor checks if the computer is configured to allow all Run As accounts to log on locally.

N/A

Run As Accounts

TRUE

FALSE

N/A

Monitors health of Run As accounts executing on this System Center Management Health Service.

N/A

Run As Account or Password Expired or Incorrect

TRUE

TRUE

Error

This monitor checks if a Run As account can successfully log on with the configured username and password.

N/A

Network Monitoring Timeouts

TRUE

TRUE

Warning

This monitor checks whether Network Monitoring is experiencing excessive timeouts

N/A

Secure Exchange Key Synchronization Check

TRUE

FALSE

N/A

Changes state when an issue synchronizing the secure exchange key exists

N/A

Default Action Account Type

TRUE

TRUE

Error

This monitor detects when the account type used for the agent's default Action Account is incorrect.

N/A

Run As Account Configuration Processing

TRUE

TRUE

Error

Detects when Run As account configuration processing has failed

N/A

Windows Management Instrumentation Service

TRUE

TRUE

Warning

This monitor checks the state of the Windows Management Instrumentation Service.

N/A

Network Monitoring SNMP Trap port is already in use by another program

TRUE

TRUE

Error

This monitor checks whether Network Discovery failed for a SNMP Trap port is already in use by another program.

N/A

Audit Collection Collector - Windows Service

TRUE

FALSE

N/A

This monitor checks the state of the ACS collector windows service.

N/A

Data Warehouse Data Dedicated Maintenance Process State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse dedicated data maintenance process state

N/A

Data Warehouse Data Maintenance State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse data maintenance state from the perspective of a Management Server

N/A

Data Warehouse Connectivity and Processes State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse processes state from the perspective of a Management Server

N/A

Data Warehouse Data Writer Maintenance State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse data writer maintenance state from the perspective of a Management Server

N/A

File Upload Quota

TRUE

TRUE

Warning

This unit monitor monitors the file upload quotas.

N/A

Failed Authentication Attempts Check

TRUE

TRUE

Warning

Monitors failed authentication attempts to this management server.

N/A

APM .NET Object Discovery

TRUE

TRUE

MatchMonitorHealth

This monitor verifies that the Management Server has successfully created objects that are needed for APM monitoring. The monitor turns to a warning state when a failure occurs during APM objects discovery, as this will prevent configuration from being distributed to agents. The monitor resets to Healthy when object discovery succeeds.

N/A

APM Write Action Availability

TRUE

TRUE

MatchMonitorHealth

This monitor verifies that the APM Write Actions are successfully storing events in the Operations Database. The monitor turns to a warning state when an APM Event fails to be submitted to the database, and resets to Healthy when insertion resumes.

N/A

Remote Collection Management Server Availability

TRUE

FALSE

N/A

Remote collection management server availability roll-up monitor.

N/A

Remote Data Access Service Check

FALSE

TRUE

Error

This monitor checks connectivity to the Data Access service from each of the Collection Management Server(s).

N/A

(Deprecated) Management Configuration Service Availability

FALSE

FALSE

N/A

Management Configuration Service Availability roll-up monitor.

Never

(Deprecated) Configuration service could not connect to the database in the last 30 min.(Critical Level)

FALSE

TRUE

Error

The configuration service cannot receive any configuration changes from the database in this state.

Never

(Deprecated) Configuration Service Database Connectivity

FALSE

FALSE

N/A

Management Configuration Service Database Connectivity roll-up monitor.

Never

(Deprecated) Management Configuration service could not connect to the database in the last 15 min.(Warning Level)

FALSE

FALSE

N/A

The Management Configuration service cannot receive any configuration changes from the database in this state.

Never

(Deprecated) Management Configuration Service Database Notification

FALSE

FALSE

N/A

Management Configuration service database notification roll-up monitor.

Never

(Deprecated) Configuration service could not read changes from the database in the last 30 min.(Critical Level)

FALSE

TRUE

Error

The configuration service cannot receive any configuration changes from the database in this state.

Never

(Deprecated) Management Configuration Service Database Read Consistency

FALSE

FALSE

N/A

Management Configuration service database read consistency roll-up monitor.

Never

(Deprecated) Configuration service could not read changes from the database in the last 15 min.(Warning Level)

FALSE

FALSE

N/A

The configuration service cannot receive any configuration changes from the database in this state.

Never

(Deprecated) Configuration service engine has been unhealthy for 120 min.(Critical Level)

FALSE

TRUE

Error

The configuration service engine cannot respond to state sync requests in this state.

Never

(Deprecated) Management Configuration Service Engine

FALSE

FALSE

N/A

Management Configuration service engine roll-up monitor.

Never

(Deprecated) Management Configuration service engine has been unhealthy for 60 min. (Warning Level)

FALSE

FALSE

N/A

The Management Configuration service engine cannot respond to state sync requests in this state.

Never

(Deprecated) Management Configuration Service - Windows Service State

FALSE

TRUE

Error

This monitor checks the state of the Management Configuration service Windows service.

Never

(Deprecated) Alert Subscription Acknowledgment Performance Monitor

FALSE

TRUE

Warning

Alert Subscription Data Source Module Acknowledgment performance threshold monitor.

Never

(Deprecated) Alert Subscription Availability Monitor

FALSE

TRUE

Error

Alert Subscription Data Source Module availability monitor.

Never

(Deprecated) Alert Subscription Configuration Monitor

FALSE

TRUE

Error

This monitor checks if a rule or monitor using the Alert Subscription Data Source module is providing the right configuration.

Never

(Deprecated) Alert Subscription Data Source Module

FALSE

FALSE

N/A

Alert Subscription Data Source module performance roll-up monitor.

Never

(Deprecated) Alert Subscription Query Performance Monitor

FALSE

TRUE

Warning

This monitor checks the query performance of the Alert Subscription Data Source module.

Never

(Deprecated) Alert Subscription Data Source Module

FALSE

FALSE

N/A

Alert Subscription Data Source module roll-up monitor.

Never

(Deprecated) Product Expiration - Error

FALSE

TRUE

Error

(Deprecated) Monitor detecting that product evaluation has expired.

Never

(Deprecated) Root Connector Data Validity Check

FALSE

TRUE

Warning

(Deprecated) Monitors the validity of data items sent from the Root Health service to the Data Access service and the Management Configuration service.

Never

(Deprecated) Data Access Service Availability

FALSE

FALSE

N/A

Rolls up health for the Data Access service availability.

Never

Data Access Service - Database Connectivity deprecated

FALSE

TRUE

Error

Monitors the database connectivity of the Data Access service.

Never

Data Access Service - Port Availability deprecated

FALSE

TRUE

Error

Monitors the port availability of the Data Access service.

Never

Data Access Service - Windows Service deprecated

FALSE

TRUE

Error

Never

Sql Broker Availability Monitor

FALSE

TRUE

Error

A monitor that looks at Sql Broker status for Operations Manager functionality.

Never

Agent assignment state

TRUE

FALSE

N/A

Checks the state of the agent assignment process

N/A

Configuration Store maintenance state

TRUE

FALSE

N/A

Checks Configuration Store maintenance processes state

N/A

Data Access Service connectivity recovery state

TRUE

TRUE

Error

Checks if Management Configuration Service can connect to local Data Access Service after a period of time

N/A

Data Access Service connectivity first chance state

TRUE

FALSE

N/A

Checks if Management Configuration Service can connect to local Data Access Service

N/A

Data Access Service connectivity state

TRUE

FALSE

N/A

Checks if Management Configuration Service can connect to local Data Access Service

N/A

Delta synchronization state

TRUE

FALSE

N/A

Checks the state of the delta synchronization work item

N/A

Dirty notification state

TRUE

FALSE

N/A

Checks the state of the dirty notification work item

N/A

Get next work item process state

TRUE

FALSE

N/A

Checks the state of process responsible for building next work item

N/A

Configuration Store grooming state

TRUE

FALSE

N/A

Checks the state of the Configuration Store grooming process

N/A

Management Service connectivity recovery state

TRUE

TRUE

Error

Checks if Management Configuration Service can connect to local Management Service after a period of time

N/A

Management Service connectivity first chance state

TRUE

FALSE

N/A

Checks if Management Configuration Service can connect to local Management Service

N/A

Management Service connectivity state

TRUE

FALSE

N/A

Checks if Management Configuration Service can connect to local Management Service

N/A

Configuration Store index optimization state

TRUE

FALSE

N/A

Checks the state of the Configuration Store index optimization work item

N/A

Local dirty notification state

TRUE

FALSE

N/A

Checks the state of the local dirty notification work item

N/A

Memory optimization state

TRUE

FALSE

N/A

Checks the state of the memory optimization work item

N/A

Agent pool management state

TRUE

FALSE

N/A

Checks the state of the dynamic agent pool management process

N/A

Agent request processing state

TRUE

FALSE

N/A

Checks if Management Configuration Service can successfully process agent configuration requests

N/A

Agent request processing recovery state

TRUE

TRUE

Error

Checks if Management Configuration Service can successfully process agent configuration requests after a period of time

N/A

Agent request processing first chance state

TRUE

FALSE

N/A

Checks if Management Configuration Service can successfully process agent configuration requests

N/A

Service bootstrap procedure state

TRUE

TRUE

MatchMonitorHealth

Checks to see if Management Configuration Service successfully completed bootstrap procedure

N/A

Service Running State

TRUE

TRUE

Error

Monitors the current status of the Windows service. An alert from this monitor indicates the Windows Service is not currently running

N/A

Site assignment state

TRUE

FALSE

N/A

Checks the state of the site assignment process

N/A

Snapshot synchronization state

TRUE

FALSE

N/A

Checks the state of the snapshot synchronization work item

N/A

Configuration Store statistics update state

TRUE

FALSE

N/A

Checks the state of the Configuration Store statistics update work item

N/A

Synchronization state

TRUE

FALSE

N/A

Checks the state of the synchronization work items

N/A

Work item health state

TRUE

FALSE

N/A

All work item health state

N/A

Xml configuration file load state

TRUE

TRUE

Error

Checks the state of Xml configuration file loading process

N/A

Relationships between Agents and Management Servers Monitor

TRUE

TRUE

Error

This monitor detects potential problems with the operational database, by checking for corrupted records of relationships between agents and management servers that will stop generating configuration for the entire management group resulting in all systems running on old configuration.

N/A

Partitioning and grooming has completed recently

TRUE

TRUE

Error

This monitor detects if partitioning and grooming processes have not completed successfully for too many days in a row.

N/A

Operational Database Space Free (%)

TRUE

TRUE

Error

Monitors for the free space left in the operational database in percentage terms.

N/A

IIS availability health state depends on FTP service

onStandardMonitoring

FALSE

N/A

N/A

IIS availability health state depends on built-in FTP service

onStandardMonitoring

FALSE

N/A

N/A

IIS availability health state depends on SMTP service

onStandardMonitoring

FALSE

N/A

N/A

IIS availability health state depends on W3SVC service

onStandardMonitoring

FALSE

N/A

N/A

Web Management service availability

onStandardMonitoring

TRUE

Warning

N/A

IIS Admin Service availability

onStandardMonitoring

TRUE

Error

N/A

Microsoft Audit Collector Service Collector Connection Establishment State

TRUE

TRUE

N/A

Monitors the ability of the Microsoft Audit Collector Service Collector to accept new connections

N/A

Microsoft Audit Collection Services Collector Availability

TRUE

TRUE

N/A

N/A

Microsoft Audit Collector Service Collector Database Connection Establishment State

TRUE

TRUE

N/A

Monitors the state of the Microsoft Audit Collector Service Collector's connection to its database

N/A

Microsoft Audit Collector Service Collector Connection Maintenance State

TRUE

FALSE

N/A

Monitors the ability of the Microsoft Audit Collector Service Collector to maintain client connections

N/A

Microsoft Audit Collection Services Collector Running State

TRUE

TRUE

Error

Monitors the current status of the Microsoft Audit Collection Collector service. An alert from this monitor indicates the Microsoft Audit Collection Service Collector is not currently running

N/A

Related Rules

Note that the rules listed in this table list the effective configuration of rules on a Management Server. Management Server monitoring consists of several classes, such as Management Health Service, the Management Server class, and the Collection Management Server class. This table lists all of these rules.

 

Rule Name Enabled Alert Alert Severity Description When to Enable

Collects Operations Manager Data Access Service Client Connections

TRUE

FALSE

N/A

Collects data from the Operations Manager Data Access Service Client Connections counter.

N/A

Operations Manager Data Access Service Event Collector Rule

TRUE

FALSE

N/A

This rule collects Operations Manager Data Access Service events.

N/A

Data Access Service SPN Registration

TRUE

TRUE

Error

Rule to alert if a service principal name (SPN) for the account running the System Center Data Access service isn't registered.

N/A

Collect Event Log Events

TRUE

FALSE

N/A

Rule that collects service control events about the monitored service.

N/A

Handle Count

TRUE

FALSE

N/A

Number of handles in the monitored service.

N/A

Collect Process\% Processor Time

TRUE

FALSE

N/A

This rule collects processor utilization for the windows service.

N/A

Collect Process\Private Bytes

TRUE

FALSE

N/A

This rule collects memory usage for the windows service.

N/A

Thread Count

TRUE

FALSE

N/A

Number of threads in the monitored service.

N/A

Working Set

TRUE

FALSE

N/A

Working set of the monitored service.

N/A

Data Warehouse related event collection

TRUE

FALSE

N/A

This rule collections events related to Data Warehouse operation

N/A

Data Warehouse performance collection: writer average batch processing time

TRUE

FALSE

N/A

N/A

Data Warehouse performance collection: writer average batch size

TRUE

FALSE

N/A

N/A

Data Warehouse performance collection: writer batches per second

TRUE

FALSE

N/A

N/A

Data Warehouse performance collection: writer data items per second

TRUE

FALSE

N/A

N/A

Data Warehouse performance collection: writer dropped batch count

TRUE

FALSE

N/A

N/A

Data Warehouse performance collection: writer dropped data item count

TRUE

FALSE

N/A

N/A

Data Warehouse performance collection: writer errors per second

TRUE

FALSE

N/A

N/A

Data Warehouse performance collection: writer total error count

TRUE

FALSE

N/A

N/A

Collect System\System Uptime

TRUE

FALSE

N/A

Collects the System\System Uptime performance counter object for testing performance collection.

N/A

Collect Restart System Center Management Health Service Events

TRUE

FALSE

N/A

Collects the Restart System Center Management Health Service events.

N/A

Log Distributed Workflow Test Event

TRUE

FALSE

N/A

This rule logs an event at each System Center Management Health Service that will be collected to test event collection.

N/A

Collect Service Control Manager failed to start events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process failing to start.

N/A

Collect Service Control Manager started or stopped events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process starting and stopping.

N/A

Collect Service Control Manager process terminated events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process terminating.

N/A

Alert Invalid Override Value

TRUE

TRUE

Error

Invalid value used when overriding alert priority or severity. Runtime adjusted the value to the closest allowed.

N/A

Parameter Replacement Failure During Alert Creation

TRUE

TRUE

Warning

Parameter replacement failed during alert creation.

N/A

Critical Parameter Replacement Failure During Alert Creation

FALSE

TRUE

Error

Parameter replacement failed during alert creation. This will cause the workflow to unload.

Never

Parameter Replacement Failure Event Collection Rule

FALSE

FALSE

N/A

This rule collects System Center Management Health Service events related to parameter replacement failures.

Never

Replacement Failure For Suppression During Alert Creation

TRUE

TRUE

Error

Replacement failed for suppression tag during alert creation.

N/A

Alert generation was temporarily suspended due to too many alerts.

TRUE

TRUE

Warning

Alert generation was temporarily suspended for a rule because the number of alerts generated exceeded the threshold within the specified time interval. This is done to prevent excessive load against the management group.

N/A

Collect Alert Subscription Module Events

TRUE

FALSE

N/A

Collects Alert Subscription module events.

N/A

Syslog Module Events Collector Rule

TRUE

FALSE

N/A

This rule collects Syslog module events.

N/A

Collect Application Log Module Events

TRUE

FALSE

N/A

Collects events generated by the Application Log module.

N/A

Application Log Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Application Log module experiences a runtime failure.

N/A

Application Log Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Application Log module fails to initialize.

N/A

Average Threshold Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Average Threshold module experiences an initialization failure.

N/A

Alert on Backward Compatibility Script Errors.

TRUE

TRUE

Warning

This rule generates alerts when Backward Compatibility script errors occur.

N/A

Collect Backward Compatibility Module Events

TRUE

FALSE

N/A

Collects Backward Compatibility module events.

N/A

Collect Baselining Modules Event

TRUE

FALSE

N/A

Collects the series of events for the numeric baselining module.

N/A

Baselining Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Baselining Module experiences an initialization failure.

N/A

Alert on Dropped Batch Responses

TRUE

TRUE

Warning

The rule generates alerts when batch responses are dropped.

N/A

Workflow Initialization: Failed to start a process or script

TRUE

TRUE

Warning

This rule generates alerts when a rule or monitor attempts to execute a process and the process cannot be started.

N/A

Workflow Initialization: Failed to start a workflow that runs a process or script

TRUE

TRUE

Warning

This rule generates alerts when failed to start a workflow that runs a process or script.

N/A

Workflow Runtime: Failed to run a process or script

TRUE

TRUE

Warning

This rule generates alerts when batch responses fail.

N/A

Collect Batch Response Module Events

FALSE

FALSE

N/A

Collects Batch Response module events.

Never

Collect Alerts

TRUE

FALSE

N/A

System rule that collects alert data from any object.

N/A

Collect Discovery Data

TRUE

FALSE

N/A

System rule that collects discovery data from any object.

N/A

Collect state change events of all monitors in the system

TRUE

FALSE

N/A

This rule collects all state change events in the system

N/A

Collect Events

TRUE

FALSE

N/A

System rule that collects events from any object.

N/A

Collect Monitor Generated Alerts

TRUE

FALSE

N/A

System rule that collects alerts generated from monitors.

N/A

Collect Performance Data

TRUE

FALSE

N/A

System rule that collects performance data from any object.

N/A

Collect Object State

TRUE

FALSE

N/A

System rule that collects state change events from any object.

N/A

Collect Object State - Resend

TRUE

FALSE

N/A

Support rule for the Collect Object State to resend items not received by the database on the first try.

N/A

Collect Performance Signatures

TRUE

FALSE

N/A

System rule that collects performance signature data from any object.

N/A

Computer Verification Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects Computer Verification module events.

Never

Consecutive Samples Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Consecutive Samples module experiences an initialization failure.

N/A

Collect Consolidator Module Events

TRUE

FALSE

N/A

Collects events generated by the Consolidator module.

N/A

Consolidator Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Consolidator module experiences a runtime failure.

N/A

Consolidator Module Initialization Failure

TRUE

TRUE

Error

This rule generates an alert when the Consolidator module fails to initialize.

N/A

Collect Correlation Module Events

TRUE

FALSE

N/A

Collects events generated by the Correlation module.

N/A

Correlation Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Correlation module experiences a runtime failure.

N/A

Correlation Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Correlation module fails to initialize.

N/A

Entity state change collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) entity state change events for Data Warehouse collection (to default store)

N/A

Event data collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) event data for Data Warehouse collection (to default store)

N/A

Performance data collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) performance data for Data Warehouse collection (to default store)

N/A

Entity state change publisher

TRUE

FALSE

N/A

This rule collects entity state change information from all managed entities and publishes it for Data Warehouse collection on default channel

N/A

Delta Threshold Module Initialization Failure

TRUE

FALSE

Error

This rule generates alerts when the Delta Threshold module experiences an initialization failure.

N/A

Collect Dependent Service Check Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the Dependent Service Check Probe module.

N/A

Dependent Service Check Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Dependent Service Check Probe module experiences a runtime failure.

N/A

Dependent Service Check Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Dependent Service Check Probe module fails to initialize.

N/A

Collect Discovery Data Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Discovery Data Mapper module.

N/A

Discovery Data Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Discovery Data Mapper module experiences a runtime failure.

N/A

Discovery Data Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Discovery Data Mapper module fails to initialize.

N/A

Collect Expression Filter Module Events

TRUE

FALSE

N/A

Collects events generated by the Expression Filter module.

N/A

Expression Filter Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Expression Filter module fails to initialize.

N/A

File Transfer Empty File

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file path could not be determined by the file upload module.

Never

File Transfer Processing Failure

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file could not be processed by the file upload module.

Never

File Transfer Failure

FALSE

FALSE

N/A

This rule collects all failed file transfers by the file upload module.

Never

File Transfer Upload failure

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file failed to upload by the file upload module.

Never

File Transfer Invalid File name

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file path name was invalid and could not be processed by the file upload module.

Never

File Transfer Successful

FALSE

FALSE

N/A

This rule collects all successful file transfers by the file upload module.

Never

Collect Generic Event Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Generic Event Mapper module.

N/A

Generic Event Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Generic Event Mapper module experiences a runtime failure.

N/A

Generic Event Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Generic Event Mapper module fails to initialize.

N/A

Collect Generic Performance Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Generic Performance Mapper module.

N/A

Generic Performance Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Generic Performance Mapper module experiences a runtime failure.

N/A

Generic Performance Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Generic Performance Mapper module fails to initialize.

N/A

Collect Group Calculation Module Events

TRUE

FALSE

N/A

Collects Group Calculation module events.

N/A

Collect Alert Flow Events

TRUE

FALSE

N/A

Collects events that verify alerts are flowing from the System Center Management Health Service to the Operational Database.

N/A

Collect Health Service\Module Count

TRUE

FALSE

N/A

Collects Module Count performance counter.

N/A

Collect Health Service Management Group\Send Queue % Used

TRUE

FALSE

N/A

Collects Send Queue % Used performance counter.

N/A

Collect Health Service Management Group\Send Queue Size

TRUE

FALSE

N/A

Collects the Send Queue Size performance counter.

N/A

Collect Health Service\Workflow Count

TRUE

FALSE

N/A

Collects Workflow Count performance counter.

N/A

Collect Workflow Unloaded Events

TRUE

FALSE

N/A

Collects events related to unloaded workflows.

N/A

Collect Health Service Configuration Updated Events

FALSE

FALSE

N/A

Collects the series of events on the System Center Management Health Service that indicate requesting, receiving, and activating new configuration (e.g. rules and monitors). This rule is disabled by default as it can result in excessive event collections, which create overhead for the management group and consume space in the operational and data warehouse databases. If enabled, it is recommended that the rule only be enabled for a limited period of time.

Never

Collect Configuration Parse Error Events

FALSE

FALSE

N/A

Collects the events related to the failure of a System Center Management Health Service being able to parse its new configuration.

Never

System Center Management Health Service Credentials Not Defined

FALSE

TRUE

This rule raises an alert when unable to resolve Secure Reference override.

Never

System Center Management Health Service Credentials Not Found

FALSE

TRUE

This rule raises an alert when unable to resolve Secure Reference override.

Never

Collect Entity State Change Flow Error Events

TRUE

FALSE

N/A

Collects the events related to the flow of State Change Data from System Center Management Health Services to the Operational Database.

N/A

Collect Health Manager Events

TRUE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.

N/A

Collect Health Manager Events ID Parameter

FALSE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.

Never

Collect Health Manager Events Name Parameter

FALSE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of the System Center Management Health Service.

Never

Periodic System Center Management Health Service Store Maintenance

TRUE

FALSE

N/A

Rule which runs periodic maintenance of the System Center Management Health Service ESE store.

N/A

Collect Monitor State Change Flow Error Events

TRUE

FALSE

N/A

Collects the events related to the flow of monitor state change data from System Center Management Health Services to the Operational database.

N/A

Collect agent processor utilization

TRUE

FALSE

N/A

Collects the "agent processor utilization" performance counter

N/A

Collect Run As Account Failure Events

FALSE

FALSE

N/A

Collects the series of events that indicate a failure in executing a rule, monitor, or task using a specific Run As account.

Never

Collect IIS Discovery Probe Module Events

FALSE

FALSE

N/A

Collects events generated by the IIS Discovery Probe module.

Never

IIS Discovery Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Discovery Probe module experiences a runtime failure.

N/A

IIS Discovery Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Discovery Probe module fails to initialize.

N/A

Collect IIS Log Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Log Condition module.

N/A

IIS Log Condition Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Log Condition module experiences a runtime failure.

N/A

IIS Log Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Log Condition module fails to initialize.

N/A

Collect IIS Site State Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Site State Data Source module.

N/A

IIS Site State Data Source Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Site State Data Source module experiences a runtime failure.

N/A

IIS Site State Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Site State Data Source module fails to initialize.

N/A

Collect IIS Site State Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Site State Probe module.

N/A

IIS Site State Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Site State Probe module experiences a runtime failure.

N/A

IIS Site State Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Site State Probe module fails to initialize.

N/A

Collect LDAP Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the LDAP Probe module.

N/A

LDAP Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the LDAP Probe module experiences a runtime failure.

N/A

LDAP Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the LDAP Probe module fails to initialize.

N/A

Learning Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Learning Module experiences a runtime failure.

N/A

Learning Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Learning Module experiences an initialization failure.

N/A

Collect Maintenance Mode Events

TRUE

FALSE

N/A

Collects the events that indicate an object entering into maintenance mode and exiting maintenance mode.

N/A

Collect Backward Compatibility Application Log Module Events

TRUE

FALSE

N/A

Collects events generated by the Backward Compatibility Application Log module.

N/A

Backward Compatibility Application Log Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Backward Compatibility Application Log module experiences a runtime failure.

N/A

Backward Compatibility Application Log Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Backward Compatibility Application Log module fails to initialize.

N/A

Collect Backward Compatibility WMI Event Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Backward Compatibility WMI Event Mapper module.

N/A

Backward Compatibility WMI Event Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Backward Compatibility WMI Event Mapper module experiences a runtime failure.

N/A

Backward Compatibility WMI Event Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Backward Compatibility WMI Event Mapper module fails to initialize.

N/A

Collect MOM NT Performance Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the MOM NT Performance Mapper module.

N/A

MOM NT Performance Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the MOM NT Performance Mapper module experiences a runtime failure.

N/A

MOM NT Performance Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the MOM NT Performance Mapper module fails to initialize.

N/A

Collect Monitoring Host Crash Events

TRUE

FALSE

N/A

Collects the events that indicate when monitoring host crashes.

N/A

Collect Multi instance Performance Module Events

FALSE

FALSE

N/A

Collects Multi instance Performance Module Events

Never

Alert on Dropped Multi instance Performance Module

TRUE

TRUE

Error

This rule generates alerts when the Multi instance Perf Module has an invalid frequency configuration

Never

OleDb Probe Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects OleDb Probe module events.

Never

Collect Performance Data Source Module Events

FALSE

FALSE

N/A

Collects Performance Data module events.

Never

Performance Data Source Module could not find a performance counter

FALSE

TRUE

Error

This rule generates alerts when the Performance Data Source Module module is unable to find the performance counter that the workflow has been configured to collect or alert on.

Never

Alert on Dropped Power Shell Scripts

TRUE

TRUE

Warning

Alerts on dropped Power Shell scripts.

N/A

Alert on Failure to Create PowerShell Run space for Power Shell Script

TRUE

TRUE

Warning

Alerts when a rule or monitor attempts to execute a Power Shell script and the Power Shell Run space cannot be started.

N/A

Alert on Failure to Load a Power Shell SnapIn

TRUE

TRUE

Warning

Alerts when a rule or monitor attempts to execute a Power Shell script and a Power Shell snap-in cannot be loaded.

N/A

Alert on Failed Power Shell Scripts

TRUE

TRUE

Warning

Alerts on failed Power Shell scripts.

N/A

Alert on Power Shell Not Installed

TRUE

TRUE

Warning

Alerts when Power Shell scripts are being used where Power Shell is not installed.

N/A

Collect Power Shell Module Events

TRUE

FALSE

N/A

Collects Power Shell module events.

N/A

Read Discovery Data

TRUE

FALSE

N/A

This rule reads and publishes discovery data created by scheduled discoveries

N/A

Collect Registry Probe Module Events

TRUE

FALSE

N/A

This rule collects Registry Probe module events.

N/A

Schedule Manager Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Schedule Manager fails to initialize.

N/A

Collect Scheduler Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the Scheduler Condition module.

N/A

Scheduler Condition Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Condition module experiences a runtime execution failure.

N/A

Scheduler Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Condition module fails to initialize.

N/A

Collect Scheduler Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the Scheduler Data Source module.

N/A

Scheduler Data Source Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Data Source module experiences a runtime execution failure.

N/A

Scheduler Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Data Source module fails to initialize.

N/A

Collect Service Check Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the Service Check Data Source module.

N/A

Service Check Data Source Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Service Check Data Source module experiences a runtime failure.

N/A

Service Check Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Service Check Data Source module fails to initialize.

N/A

Collect Service Check Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the Service Check Probe module.

N/A

Service Check Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Service Check Probe module experiences a runtime failure.

N/A

Service Check Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Service Check Probe module fails to initialize.

N/A

Collect Timer Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the Timer Condition module.

N/A

Timer Condition Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Timer Condition module experiences a runtime failure.

N/A

Timer Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Timer Condition module fails to initialize.

N/A

Collect Windows Workflow 4.0 Module events

FALSE

FALSE

N/A

Collects events generated by the Windows Workflow 4.0 module.

Never

Windows Workflow 4.0 Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Windows Workflow 4.0 Module fails to initialize.

N/A

Windows Workflow 4.0 Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Windows Workflow 4.0 Module experiences a runtime failure.

N/A

Collect WMI Event Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Event module.

N/A

Workflow Runtime: Failed to run a WMI query for WMI events

TRUE

TRUE

Warning

This rule generates alerts when the WMI Event module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI for WMI events

TRUE

TRUE

Error

This rule generates alerts when the WMI Event module fails to initialize.

N/A

WMI Event Module Item Contains Large Array

TRUE

TRUE

Warning

This rule generates alerts when the WMI Event module retrieves a data item with a very large array.

N/A

Collect WMI Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Probe module.

N/A

Workflow Runtime: Failed to run a WMI query

TRUE

TRUE

Warning

This rule generates alerts when the WMI Probe module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI

TRUE

TRUE

Error

This rule generates alerts when the WMI Probe module fails to initialize.

N/A

WMI Probe Module Item Contains Large Array

TRUE

TRUE

Warning

This rule generates alerts when the WMI Probe module retrieves a data item with a very large array.

N/A

Collect WMI Raw Performance Counter Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Raw Performance Counter module.

N/A

Workflow Runtime: Failed to run a WMI query for performance data

TRUE

TRUE

Warning

This rule generates alerts when the WMI Raw Performance Counter module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI for performance data

TRUE

TRUE

Error

This rule generates alerts when the WMI Raw Performance Counter module fails to initialize.

N/A

Web Service Management Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects WSMan (Web Services for Management) module events.

N/A

Failed to perform initialization of IIS discovery module

TRUE

TRUE

Warning

N/A

Failed to perform Web Application discovery

TRUE

TRUE

Warning

N/A

Failed to perform Web Server properties discovery

TRUE

TRUE

Warning

N/A

Failed to perform Web Site discovery

TRUE

TRUE

Warning

N/A

Failed to find Application Pool while attempting to retrieve state

TRUE

TRUE

Warning

N/A

Failed to find site while attempting to retrieve state

TRUE

TRUE

Warning

N/A

Failed to perform Application Pool discovery

TRUE

TRUE

Warning

N/A

Failed to perform FTP server discovery

TRUE

TRUE

Warning

N/A

Failed to perform FTP site discovery

TRUE

TRUE

Warning

N/A

IIS component discovery failed due to insufficient privileges

TRUE

TRUE

Warning

N/A

Failed to perform initialization of IIS state monitoring module

TRUE

TRUE

Warning

N/A

Failed to retrieve site state

TRUE

TRUE

Warning

N/A

Failed to retrieve Application Pool state

TRUE

TRUE

Warning

N/A

Agent update that is required for IIS 7.0 monitoring is not installed

TRUE

TRUE

Error

This rule generates an alert if the agent update that is required for IIS 7.0 monitoring is not installed

N/A

Stress.CollectSDKPrivateBytesPerfCounters.Rule

TRUE

FALSE

N/A

N/A

Collect Distributed Workflow Test Event

TRUE

FALSE

N/A

Collects events logged by the "Log Distributed Workflow Test Event" rule.

N/A

Syslog: Module Error

TRUE

TRUE

Warning

This rule generates alerts when the "Syslog" module fails on this System Center Management Health Service.

N/A

CEIP Listener - Port Unavailable

TRUE

TRUE

Warning

This rule generates alerts when CEIP Listener fails to start because the port is not available.

N/A

AEM: Bad URL Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules receive an invalid or unexpected URL request on this management server.

N/A

AEM: Error Group Communication Timeout

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting an error group report and/or related cab to "watson.microsoft.com" on this management server.

N/A

AEM: [System] Error Group Processing Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot process an error group or system error group successfully on this management server.

N/A

AEM: File Share Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules encounter an error while interacting with the file share from this management server.

N/A

AEM: Invalid Error Group Response

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid error group response on this management server.

N/A

AEM: Invalid Proxy Error

TRUE

TRUE

Warning

This rule generates alerts when Agentless Exception Monitoring (AEM) detects invalid proxy configuration on this management server.

N/A

AEM: Invalid System Error Group Response

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid system error group response on this management server.

N/A

AEM: Module Creation Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be created on this management server.

N/A

AEM Module Events Collector Rule

TRUE

FALSE

N/A

This rule collects Agentless Exception Monitoring (AEM) module events.

N/A

AEM: Module Start Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be started on this management server.

N/A

AEM: Network Error

TRUE

TRUE

Warning

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network error while communicating to watson/oca services or a permissions error while trying to operate with the Operations Manager database on this management server.

N/A

AEM: Error Group Parameter Error

TRUE

TRUE

Warning

This rule generates an alert when one or more of the Agentless Exception Monitoring (AEM) modules encounters a parameter in an error group containing characters considered invalid by AEM.

N/A

AEM: Permissions Error

TRUE

TRUE

Warning

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network permissions error on this management server.

N/A

AEM: System Error Group Communication Timeout

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting a system error group report/cab to "oca.microsoft.com" on this management server.

N/A

An error occurred during computer verification from the discovery wizard

TRUE

TRUE

Warning

This rule generates alerts when the computer verification process fails during the discovery wizard.

N/A

A generic error occurred during computer verification from the discovery wizard

TRUE

TRUE

Error

This rule generates alerts when the computer verification process generically fails during the discovery wizard.

N/A

Computer Verification: Module Execution Error

FALSE

TRUE

Error

This rule generates alerts when the Computer Verification module fails to verify at least 1 or more computer names during execution on this System Center Management Health Service.

Never

Agent proxy not enabled

TRUE

TRUE

Error

The agent was not able to submit data on behalf of another computer because agent proxy is not enabled.

File size too large to transfer

FALSE

FALSE

N/A

This rule collects all rejected file transfers due to file size being over limit and so could not be processed by the file upload module.

N/A

Collects data from the Health Service\Active File Uploads performance counter

TRUE

FALSE

N/A

Collects data from the Health Service\Active File Uploads performance counter.

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter

TRUE

FALSE

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter.

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter

TRUE

FALSE

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter.

N/A

System Center Management Health Service Connector Bind Failure

FALSE

TRUE

Error

This rule raises an alert when unable to listen on required TCP port.

Never

(Deprecated) Collects data from the Processor\% Processor Time performance counter

TRUE

TRUE

N/A

Collects data from the Processor\% Processor Time performance counter on the System Center Management Health Service Process (HealthService.exe).

Never

Remote Certificate Not Trusted

TRUE

TRUE

Error

This rule generates alerts when it detects that the remote certificate is not trusted.

N/A

Remote Certificate Name Not Resolved

TRUE

TRUE

Warning

This rule generates alerts when it detects that the common name (CN) in the remote certificate cannot be resolved.

N/A

(Deprecated) Monitoring Host Handle Count Threshold (Management Server)

FALSE

TRUE

Error

Restarts the Health service when the "MonitoringHost.exe" process exceeds the Process\Handle Count threshold.

Never

(Deprecated) Monitoring Host Private Bytes Handle Count

FALSE

TRUE

Error

Restarts the Health service when the Monitoring Host process exceeds the Process\Private Bytes threshold.

Never

OleDbProbe: Results Error

TRUE

TRUE

Error

This rule generates alerts when the results from the OleDb Probe module on this System Center Management Health Service contain failure information.

N/A

OleDbProbe: Module Execution Error

TRUE

TRUE

Warning

This rule generates alerts when the OleDb Probe module fails during execution on this System Center Management Health Service.

N/A

OleDbProbe: Module Initialization Error

TRUE

TRUE

Warning

This rule generates alerts when the OleDb Probe module fails to initialize on this System Center Management Health Service.

N/A

All Management Servers Resource Pool Unavailable

TRUE

TRUE

Warning

This rule generates alerts when the All Management Servers Resource Pool is not available.

N/A

(Deprecated) Health Service Cannot Find Management Group

FALSE

TRUE

Warning

This rule generates alerts when it detects that a Health service is unable to find a management group to communicate with.

Never

Web Service Management: Enumerator Module Error

TRUE

TRUE

Warning

This rule generates alerts when the Web Service Management Enumerator module fails on this System Center Management Health Service.

N/A

Web Service Management: Getter Module Error

TRUE

TRUE

Warning

This rule generates alerts when the Web Service Management Getter module fails on this System Center Management Health Service.

N/A

Web Service Management: Invoker Module Error

TRUE

TRUE

Warning

This rule generates alerts when the Web Service Management Invoker module fails on this System Center Management Health Service.

N/A

Web Service Management: Version Error

TRUE

TRUE

Warning

This rule generates alerts when one of the Web Service Management modules detects an unsupported version of Windows Remote Management on this System Center Management Health Service.

N/A

Logfile Module Alert Rule

TRUE

TRUE

Warning

Alert rule for Logfile module error messages.

N/A

UNIX/Linux Run As Account Alert Rule

TRUE

TRUE

Warning

Alert rule for UNIX/Linux Run As account error messages.

N/A

(Deprecated) Data Access Service SPN Registration

FALSE

FALSE

Error

Rule to alert if a service principal name (SPN) for the account running the System Center Data Access service isn't registered.

Never

(Deprecated) Collect SDK Event Data

FALSE

FALSE

N/A

Collects all SDK event data

Never

(Deprecated) Collect SDK Performance Data

FALSE

FALSE

N/A

Collects all SDK performance data

Never

Dependency Monitor Remote Contributor Receiver

TRUE

FALSE

N/A

System rule for receiving data for dependency monitors with contributors on other systems.

N/A

Collect Operations Manager DB Write Action Modules\Avg. Batch Size

TRUE

FALSE

N/A

Collects Average Batch Size performance counter.

N/A

Collect Operations Manager DB Write Action Modules\Avg. Processing Time

TRUE

FALSE

N/A

Collects Average Processing Time performance counter.

N/A

Notify Dependency Monitor Update

TRUE

FALSE

N/A

System rule that notifies the sender when dependency monitor updates have been processed.

N/A

Notify Object State Insertion

TRUE

FALSE

N/A

System rule that notifies that state change events from any object has inserted into database.

N/A

(Deprecated) Collects Operations Manager SDK Service\Client Connections

FALSE

FALSE

N/A

Collects data from the Operations Manager SDK Service\Client Connections counter.

Never

(Deprecated) Operations Manager SDK Service Event Collector Rule

FALSE

FALSE

N/A

This rule collects Operations Manager SDK Service events.

Never

Product Expiration - Last Day

TRUE

TRUE

Warning

Rule detecting that product evaluation will expire tomorrow.

N/A

Product Expiration - Hourly alerts

TRUE

TRUE

Warning

Rule detecting that product evaluation will expire soon. This rule will alert every hour.

N/A

Product Expiration - Less than 30 Days

TRUE

TRUE

Warning

Rule detecting that product evaluation will expire in less than 30 days.

N/A

Product Expiration - Less than 60 Days

TRUE

TRUE

Warning

Rule detecting that product evaluation will expire in less than 60 days.

N/A

The System Center Data Access service is unable to write security audit events.

TRUE

TRUE

Error

This rule generates an alert if the System Center Data Access service reports that it is unable to write security audit events to the security event log.

N/A

IIS 7.0 Discovery

TRUE

FALSE

N/A

This rule runs runs on the Management Server and discovers IIS 7.0 Web Sites and Web applications on the agent.

N/A

Internal Network Management Discovery Data Collector

TRUE

FALSE

N/A

Internal rule to collect discovery data from network discovery

N/A

Submit Trap Discovery Request

TRUE

FALSE

N/A

Rule to submit trap discovery requests to Network Discovery Servers

N/A

Deprecated Validate Alert Subscription

FALSE

FALSE

N/A

Deprecated Validate Alert Subscription

Never

Collect ACS Collector Connected Clients

TRUE

FALSE

N/A

Collects ACS Collector Connected Clients Performance Counter

N/A

Collect ACS Collector Database Queue Backoff Threshold in %

TRUE

FALSE

N/A

Collects ACS Collector Database Queue Backoff Threshold in % performance counter

N/A

Collect ACS Collector Database Queue Disconnect Threshold in %

TRUE

FALSE

N/A

Collects ACS Collector Database Queue Disconnect Threshold in % performance counter

N/A

Collect ACS Collector Database Queue % Full

TRUE

FALSE

N/A

Collects ACS Collector Database Queue % Full performance counter

N/A

Collect ACS Collector DB Loader Event Inserts/sec

TRUE

FALSE

N/A

Collects ACS Collector DB Loader Event Inserts/sec performance counter

N/A

Collect ACS Collector DB String Cache Hit %

TRUE

FALSE

N/A

Collects ACS Collector DB String Cache Hit % performance counter

N/A

Collect ACS Collector Incoming Events/sec

TRUE

FALSE

N/A

Collects ACS Collector Incoming Events/sec performance counter

N/A

Microsoft Audit Collection Services Collector Database Operation Failure

TRUE

TRUE

Warning

N/A

Microsoft Audit Collection Services Collector Event Collection Rule

TRUE

FALSE

N/A

This rule collects all events associated with the Microsoft Audit Collection Services Collector service

N/A

Microsoft Audit Collection Services Collector Event Stream Gap Detected

TRUE

TRUE

Warning

N/A

Microsoft Audit Collection Services Collector Forwarder Disconnect

TRUE

TRUE

Warning

Microsoft Audit Collection Services Collector disconnected Forwarder to due timeout waiting for heartbeat

N/A

Microsoft Audit Collection Services Collector Rejected Forwarder

TRUE

TRUE

Warning

Microsoft Audit Collection Services Collector Rejected Forwarder due to an error

N/A

Related Views

 

View Description Rules and Monitors that Populate the View

Management Group Health Dashboard

Shows overall Management Group health

Shows state of critical components of the Management Group, such as Management Servers, Databases.

Management Group Health Trend Dashboard

Shows active alerts over time and agent health state over time

Collection rules for active alerts in the Management Group and agent health

Management Configuration Service

Lists state and alerts for the Management Configuration Services on all Management Servers

Configuration Service state and alerts

Management Data Access

Lists state and alerts for the Data Access Services on all Management Servers

Data Access Service state and alerts

Management Server

Lists state and alerts for Management Servers

Management Server state and alerts

Related Reports

 

Report Description Class Selection Criteria

Gateway Server

Discovery Information

The discovery of Gateway Servers is defined in the System Center Internal Library Management Pack.

Related Monitors

Note that the monitors listed in this table list the effective configuration of monitors on a Gateway Server. Gateway Server monitoring consists of several classes, such as Management Health Service and the Management Server class. This table lists all of these monitors.

 

Monitor Name Enabled Alert Alert Severity Description When to enable

Health Service Handle Count Threshold

TRUE

FALSE

N/A

This monitor ensures that the "Process\Handle Count" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

Never

Health Service Private Bytes Threshold

TRUE

FALSE

N/A

This monitor ensures that the "Process\Private Bytes" counter for the "HealthService.exe" process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the "Health Service State" monitor. The "Health Service State" monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.

Never

No End to End Event for 45 Minutes (Critical Level)

FALSE

FALSE

N/A

This monitor detects if the local System Center Management Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.

Never

Local End to End Event Health

FALSE

FALSE

N/A

This roll-up monitor represents the health for a System Center Management Health Service's functionality to process events.

Never

No End to End Event for 30 Minutes (Warning Level)

FALSE

FALSE

N/A

This monitor detects if the local System Center Management Health Service was able to log an event in the last 30 minutes as a synthetic transaction to check the System Center Management Health Service's ability to process events.

Never

WMI Service Availability

TRUE

FALSE

N/A

WMI Service Availability roll-up monitor.

Never

AVIcode Intercept service found

FALSE

TRUE

Warning

Monitor that watches for an installer error raised to indicate that an old AVIcode .NET Enterprise Agent is on the system. This monitor is disabled by default but you might want to enable it to verify which portion of your agents are still running the AVIcode Intercept service as opposed to the new APM feature inSystem Center 2012 - Operations Manager.

Never

Valid Host No APM Agent

FALSE

FALSE

N/A

Monitor that watches for .NET Framework installed on a system with an Operations Manager health service that does not have the APM service installed.

Never

Audit Collection Availability

TRUE

FALSE

N/A

Audit Collection Availability roll up monitor.

N/A

System Center Management Health Service Availability

TRUE

FALSE

N/A

System Center Management Health Service Availability roll-up monitor.

N/A

Expiration Check of Certificate Used for Authentication

TRUE

TRUE

Error

This monitor checks the status of the certificate used for authentication and sends an alert when the certificate is about to expire.

N/A

Configuration Processing

FALSE

FALSE

N/A

This monitor indicates whether the System Center Management Health Service could load the configuration successfully or not.

Never

Configuration 90 Minutes Out of Date (Critical Level)

FALSE

FALSE

N/A

This monitor indicates that the System Center Management Health Service has had a stale configuration for a long period of time.

Never

System Center Management Health Service Configuration Processing

FALSE

TRUE

Error

Indicates whether the System Center Management Health Service configuration processing is successful and current.

Never

Configuration 45 Minutes Out of Date (Warning Level)

FALSE

FALSE

N/A

This monitor indicates that the System Center Management Health Service has had a stale configuration for some period of time.

Never

System Center Management Health Service Credentials Not Found

onStandardMonitoring

TRUE

Error

This monitor raises an alert when the Operations Manager agent cannot resolve Secure Reference override.

N/A

Send Queue % Used

TRUE

TRUE

Error

This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.

N/A

System Center Management Health Service Performance

TRUE

FALSE

N/A

System Center Management Health Service performance roll-up monitor.

N/A

Agent processor utilization

onStandardMonitoring

TRUE

Error

Monitor all agent processes to identify potential issues with the agent using too much processor time.

N/A

Data Validity Check

FALSE

TRUE

Warning

Monitors the validity of data arriving at this System Center Management Health Service.

Never

Data Integrity

TRUE

FALSE

N/A

Monitors the integrity of data flowing into the System Center Management Health Service.

N/A

Spoofed Data Check

TRUE

TRUE

Warning

This monitor reports on spoofed data received by this System Center Management Health Service.

N/A

System Center Management Health Service Security

TRUE

FALSE

N/A

Security roll-up for the System Center Management Health Service.

N/A

System Center Management Health Service Memory Utilization

TRUE

FALSE

N/A

This monitor aggregates state from four unit monitors that measure memory utilization of the System Center Management Health Service. When this monitor changes to critical, it starts a recovery task that restarts the System Center Management Health Service.

N/A

System Center Management Health Service Modules Performance Rollup

TRUE

FALSE

N/A

System Center Management Health Service modules performance roll-up monitor.

N/A

System Center Management Health Service Modules Rollup

TRUE

FALSE

N/A

System Center Management Health Service modules roll-up monitor.

N/A

Many Corrupt or Unreadable Windows Events

TRUE

TRUE

Warning

This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.

N/A

Failed Accessing Windows Event Log

TRUE

TRUE

Warning

This monitor checks access to Windows event logs.

N/A

Processing Backlogged Events Taking a Long Time

TRUE

TRUE

MatchMonitorHealth

This monitor checks the if the Windows Event Log module is processing backlogged events for a period of time.

N/A

Event Log Data Source Module

TRUE

FALSE

N/A

Event Log Data Source module roll-up monitor.

N/A

Unable to Process Windows Event Log

TRUE

TRUE

Warning

This monitor checks if the Windows Event Log monitor is unable to process events from one or more event logs.

N/A

Run As Account Verification

TRUE

TRUE

Warning

Monitor that verifies Run As accounts.

N/A

Run As Account Authorization

TRUE

TRUE

Error

This monitor checks that a set of Run As accounts are authorized. Authorization can be restricted when an administrator runs the HSLockdown tool.

N/A

Run As Account and Password Expiration

TRUE

TRUE

MatchMonitorHealth

Checks for expiring Run As accounts and their passwords

N/A

Run As Account Logon Locally

TRUE

TRUE

Error

This monitor checks if the computer is configured to allow all Run As accounts to log on locally.

N/A

Run As Accounts

TRUE

FALSE

N/A

Monitors health of Run As accounts executing on this System Center Management Health Service.

N/A

Run As Account or Password Expired or Incorrect

TRUE

TRUE

Error

This monitor checks if a Run As account can successfully log on with the configured username and password.

N/A

Network Monitoring Timeouts

TRUE

TRUE

Warning

This monitor checks whether Network Monitoring is experiencing excessive timeouts.

N/A

Secure Exchange Key Synchronization Check

TRUE

FALSE

N/A

Changes state when an issue synchronizing the secure exchange key exists.

N/A

Default Action Account Type

TRUE

TRUE

Error

This monitor detects when the account type used for the agent's default Action Account is incorrect.

N/A

Run As Account Configuration Processing

TRUE

TRUE

Error

Detects when Run As account configuration processing has failed.

N/A

Windows Management Instrumentation Service

TRUE

TRUE

Warning

This monitor checks the state of the Windows Management Instrumentation Service.

N/A

Network Monitoring SNMP Trap port is already in use by another program

TRUE

TRUE

Error

This monitor checks whether Network Discovery failed for a SNMP Trap port is already in use by another program.

N/A

Audit Collection Collector - Windows Service

TRUE

FALSE

N/A

This monitor checks the state of the ACS collector windows service.

N/A

Data Warehouse Data Dedicated Maintenance Process State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse dedicated data maintenance process state.

N/A

Data Warehouse Data Maintenance State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse data maintenance state from the perspective of a Management Server

N/A

Data Warehouse Connectivity and Processes State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse processes state from the perspective of a Management Server

N/A

Data Warehouse Data Writer Maintenance State

TRUE

FALSE

N/A

Rollup monitor for Data Warehouse data writer maintenance state from the perspective of a Management Server.

N/A

File Upload Quota

TRUE

TRUE

Warning

This unit monitor monitors the file upload quotas.

N/A

Failed Authentication Attempts Check

TRUE

TRUE

Warning

Monitors failed authentication attempts to this management server.

N/A

Related Rules

 

Rule Name Enabled Alert Alert Severity Description When to enable

Collect System\System Uptime

TRUE

FALSE

N/A

Collects the System\System Uptime performance counter object for testing performance collection.

N/A

Collect Restart System Center Management Health Service Events

TRUE

FALSE

N/A

Collects the Restart System Center Management Health Service events.

N/A

Log Distributed Workflow Test Event

TRUE

FALSE

N/A

This rule logs an event at each System Center Management Health Service that will be collected to test event collection.

N/A

Collect Service Control Manager failed to start events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process failing to start.

N/A

Collect Service Control Manager started or stopped events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process starting and stopping.

N/A

Collect Service Control Manager process terminated events for System Center Management Health Service

TRUE

FALSE

N/A

This rule collects the Service Control Manager events related to the "HealthService.exe" process terminating.

N/A

Alert Invalid Override Value

TRUE

TRUE

Error

Invalid value used when overriding alert priority or severity. Runtime adjusted the value to the closest allowed.

N/A

Parameter Replacement Failure During Alert Creation

TRUE

TRUE

Warning

Parameter replacement failed during alert creation.

N/A

Critical Parameter Replacement Failure During Alert Creation

FALSE

TRUE

Error

Parameter replacement failed during alert creation. This will cause the workflow to unload.

Never

Parameter Replacement Failure Event Collection Rule

FALSE

FALSE

N/A

This rule collects System Center Management Health Service events related to parameter replacement failures.

N/A

Replacement Failure For Suppression During Alert Creation

TRUE

TRUE

Error

Replacement failed for suppression tag during alert creation.

N/A

Alert generation was temporarily suspended due to too many alerts.

TRUE

TRUE

Warning

Alert generation was temporarily suspended for a rule because the number of alerts generated exceeded the threshold within the specified time interval. This is done to prevent excessive load against the management group.

N/A

Collect Alert Subscription Module Events

TRUE

FALSE

N/A

Collects Alert Subscription module events.

N/A

Syslog Module Events Collector Rule

TRUE

FALSE

N/A

This rule collects Syslog module events.

N/A

Collect Application Log Module Events

TRUE

FALSE

N/A

Collects events generated by the Application Log module.

N/A

Application Log Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Application Log module experiences a runtime failure.

N/A

Application Log Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Application Log module fails to initialize.

N/A

Average Threshold Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Average Threshold module experiences an initialization failure.

N/A

Alert on Backward Compatibility Script Errors.

TRUE

TRUE

Warning

This rule generates alerts when Backward Compatibility script errors occur.

N/A

Collect Backward Compatibility Module Events

TRUE

FALSE

N/A

Collects Backward Compatibility module events.

N/A

Collect Baselining Modules Event

TRUE

FALSE

N/A

Collects the series of events for the numeric baselining module.

N/A

Baselining Module Initialization Failure

TRUE

TRUE

error

This rule generates alerts when the Baselining Module experiences an initialization failure.

N/A

Alert on Dropped Batch Responses

TRUE

TRUE

Warning

The rule generates alerts when batch responses are dropped.

N/A

Workflow Initialization: Failed to start a process or script

TRUE

TRUE

Warning

This rule generates alerts when a rule or monitor attempts to execute a process and the process cannot be started.

N/A

Workflow Initialization: Failed to start a workflow that runs a process or script

TRUE

TRUE

Warning

This rule generates alerts when failed to start a workflow that runs a process or script.

N/A

Workflow Runtime: Failed to run a process or script

TRUE

TRUE

Warning

This rule generates alerts when batch responses fail.

N/A

Collect Batch Response Module Events

FALSE

FALSE

N/A

Collects Batch Response module events.

Never

Collect Alerts

TRUE

FALSE

N/A

System rule that collects alert data from any object.

N/A

Collect Discovery Data

TRUE

FALSE

N/A

System rule that collects discovery data from any object.

N/A

Collect state change events of all monitors in the system

TRUE

FALSE

N/A

This rule collects all state change events in the system

N/A

Collect Events

TRUE

FALSE

N/A

System rule that collects events from any object.

N/A

Collect Monitor Generated Alerts

TRUE

FALSE

N/A

System rule that collects alerts generated from monitors.

N/A

Collect Performance Data

TRUE

FALSE

N/A

System rule that collects performance data from any object.

N/A

Collect Object State

TRUE

FALSE

N/A

System rule that collects state change events from any object.

N/A

Collect Object State - Resend

TRUE

FALSE

N/A

Support rule for the Collect Object State to resend items not received by the database on the first try.

N/A

Collect Performance Signatures

TRUE

FALSE

N/A

System rule that collects performance signature data from any object.

N/A

Computer Verification Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects Computer Verification module events.

Never

Consecutive Samples Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Consecutive Samples module experiences an initialization failure.

N/A

Collect Consolidator Module Events

TRUE

FALSE

N/A

Collects events generated by the Consolidator module.

N/A

Consolidator Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Consolidator module experiences a runtime failure.

N/A

Consolidator Module Initialization Failure

TRUE

TRUE

Error

This rule generates an alert when the Consolidator module fails to initialize.

N/A

Collect Correlation Module Events

TRUE

FALSE

N/A

Collects events generated by the Correlation module.

N/A

Correlation Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Correlation module experiences a runtime failure.

N/A

Correlation Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Correlation module fails to initialize.

N/A

Entity state change collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) entity state change events for Data Warehouse collection (to default store)

N/A

Event data collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) event data for Data Warehouse collection (to default store)

N/A

Performance data collector

TRUE

FALSE

N/A

This rule collects all published (on default channel) performance data for Data Warehouse collection (to default store)

N/A

Entity state change publisher

TRUE

FALSE

N/A

This rule collects entity state change information from all managed entities and publishes it for Data Warehouse collection on default channel

N/A

Delta Threshold Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Delta Threshold module experiences an initialization failure.

N/A

Collect Dependent Service Check Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the Dependent Service Check Probe module.

N/A

Dependent Service Check Probe Module Runtime Failure

TRUE

TRUE

warning

This rule generates alerts when the Dependent Service Check Probe module experiences a runtime failure.

N/A

Dependent Service Check Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Dependent Service Check Probe module fails to initialize.

N/A

Collect Discovery Data Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Discovery Data Mapper module.

N/A

Discovery Data Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Discovery Data Mapper module experiences a runtime failure.

N/A

Discovery Data Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Discovery Data Mapper module fails to initialize.

N/A

Collect Expression Filter Module Events

TRUE

FALSE

N/A

Collects events generated by the Expression Filter module.

N/A

Expression Filter Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Expression Filter module fails to initialize.

N/A

File Transfer Empty File

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file path could not be determined by the file upload module.

Never

File Transfer Processing Failure

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file could not be processed by the file upload module.

Never

File Transfer Failure

FALSE

FALSE

N/A

This rule collects all failed file transfers by the file upload module.

Never

File Transfer Upload failure

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file failed to upload by the file upload module.

Never

File Transfer Invalid File name

FALSE

FALSE

N/A

This rule collects all failed file transfers as the source file path name was invalid and could not be processed by the file upload module.

Never

File Transfer Successful

FALSE

FALSE

N/A

This rule collects all successful file transfers by the file upload module.

Never

Collect Generic Event Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Generic Event Mapper module.

N/A

Generic Event Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Generic Event Mapper module experiences a runtime failure.

N/A

Generic Event Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Generic Event Mapper module fails to initialize.

N/A

Collect Generic Performance Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Generic Performance Mapper module.

N/A

Generic Performance Mapper Module Runtime Failure

TRUE

TRUE

warning

This rule generates alerts when the Generic Performance Mapper module experiences a runtime failure.

N/A

Generic Performance Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Generic Performance Mapper module fails to initialize.

N/A

Collect Group Calculation Module Events

TRUE

FALSE

N/A

Collects Group Calculation module events.

N/A

Collect Alert Flow Events

TRUE

FALSE

N/A

Collects events that verify alerts are flowing from the System Center Management Health Service to the Operational Database.

N/A

Collect Health Service\Module Count

TRUE

FALSE

N/A

Collects Module Count performance counter.

N/A

Collect Health Service Management Group\Send Queue % Used

TRUE

FALSE

N/A

Collects Send Queue % Used performance counter.

N/A

Collect Health Service Management Group\Send Queue Size

TRUE

FALSE

N/A

Collects the Send Queue Size performance counter.

N/A

Collect Health Service\Workflow Count

TRUE

FALSE

N/A

Collects Workflow Count performance counter.

N/A

Collect Workflow Unloaded Events

TRUE

FALSE

N/A

Collects events related to unloaded workflows.

N/A

Collect Health Service Configuration Updated Events

FALSE

FALSE

N/A

Collects the series of events on the System Center Management Health Service that indicate requesting, receiving, and activating new configuration (e.g. rules and monitors). This rule is disabled by default as it can result in excessive event collections, which create overhead for the management group and consume space in the operational and data warehouse databases. If enabled, it is recommended that the rule only be enabled for a limited period of time.

Never

Collect Configuration Parse Error Events

FALSE

FALSE

N/A

Collects the events related to the failure of a System Center Management Health Service being able to parse its new configuration.

Never

System Center Management Health Service Credentials Not Defined

FALSE

TRUE

Error

This rule raises an alert when unable to resolve Secure Reference override.

Never

System Center Management Health Service Credentials Not Found

FALSE

TRUE

Error

This rule raises an alert when unable to resolve Secure Reference override.

Never

Collect Entity State Change Flow Error Events

TRUE

FALSE

N/A

Collects the events related to the flow of State Change Data from System Center Management Health Services to the Operational Database.

N/A

Collect Health Manager Events

TRUE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.

N/A

Collect Health Manager Events ID Parameter

FALSE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.

Never

Collect Health Manager Events Name Parameter

FALSE

FALSE

N/A

Collects the events related to the functionality of Health Manager which is running as part of the System Center Management Health Service.

Never

Periodic System Center Management Health Service Store Maintenance

TRUE

FALSE

N/A

Rule which runs periodic maintenance of the System Center Management Health Service ESE store.

N/A

Collect Monitor State Change Flow Error Events

TRUE

FALSE

N/A

Collects the events related to the flow of monitor state change data from System Center Management Health Services to the Operational database.

N/A

Collect agent processor utilization

TRUE

FALSE

N/A

Collects the "agent processor utilization" performance counter

N/A

Collect Run As Account Failure Events

FALSE

FALSE

N/A

Collects the series of events that indicate a failure in executing a rule, monitor, or task using a specific Run As account.

Never

Collect IIS Discovery Probe Module Events

FALSE

FALSE

N/A

Collects events generated by the IIS Discovery Probe module.

Never

IIS Discovery Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Discovery Probe module experiences a runtime failure.

N/A

IIS Discovery Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Discovery Probe module fails to initialize.

N/A

Collect IIS Log Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Log Condition module.

N/A

IIS Log Condition Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Log Condition module experiences a runtime failure.

N/A

IIS Log Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Log Condition module fails to initialize.

N/A

Collect IIS Site State Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Site State Data Source module.

N/A

IIS Site State Data Source Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Site State Data Source module experiences a runtime failure.

N/A

IIS Site State Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Site State Data Source module fails to initialize.

N/A

Collect IIS Site State Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the IIS Site State Probe module.

N/A

IIS Site State Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the IIS Site State Probe module experiences a runtime failure.

N/A

IIS Site State Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the IIS Site State Probe module fails to initialize.

N/A

Collect LDAP Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the LDAP Probe module.

N/A

LDAP Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the LDAP Probe module experiences a runtime failure.

N/A

LDAP Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the LDAP Probe module fails to initialize.

N/A

Learning Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Learning Module experiences a runtime failure.

N/A

Learning Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Learning Module experiences an initialization failure.

N/A

Collect Maintenance Mode Events

TRUE

FALSE

N/A

Collects the events that indicate an object entering into maintenance mode and exiting maintenance mode.

N/A

Collect Backward Compatibility Application Log Module Events

TRUE

FALSE

N/A

Collects events generated by the Backward Compatibility Application Log module.

N/A

Backward Compatibility Application Log Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Backward Compatibility Application Log module experiences a runtime failure.

N/A

Backward Compatibility Application Log Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Backward Compatibility Application Log module fails to initialize.

N/A

Collect Backward Compatibility WMI Event Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the Backward Compatibility WMI Event Mapper module.

N/A

Backward Compatibility WMI Event Mapper Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Backward Compatibility WMI Event Mapper module experiences a runtime failure.

N/A

Backward Compatibility WMI Event Mapper Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Backward Compatibility WMI Event Mapper module fails to initialize.

N/A

Collect MOM NT Performance Mapper Module Events

TRUE

FALSE

N/A

Collects events generated by the MOM NT Performance Mapper module.

N/A

MOM NT Performance Mapper Module Runtime Failure

TRUE

FALSE

N/A

This rule generates alerts when the MOM NT Performance Mapper module experiences a runtime failure.

N/A

MOM NT Performance Mapper Module Initialization Failure

TRUE

TRUE

Warning

This rule generates alerts when the MOM NT Performance Mapper module fails to initialize.

N/A

Collect Monitoring Host Crash Events

TRUE

TRUE

Error

Collects the events that indicate when monitoring host crashes.

N/A

Collect Multi instance Performance Module Events

FALSE

FALSE

N/A

Collects Multi instance Performance Module Events

Never

Alert on Dropped Multi instance Performance Module

TRUE

TRUE

Error

This rule generates alerts when the Multi instance Perf Module has an invalid frequency configuration

N/A

OleDb Probe Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects OleDb Probe module events.

Never

Collect Performance Data Source Module Events

FALSE

FALSE

N/A

Collects Performance Data module events.

Never

Performance Data Source Module could not find a performance counter

FALSE

TRUE

Error

This rule generates alerts when the Performance Data Source Module module is unable to find the performance counter that the workflow has been configured to collect or alert on.

Never

Alert on Dropped Power Shell Scripts

TRUE

TRUE

Warning

Alerts on dropped Power Shell scripts.

N/A

Alert on Failure to Create PowerShell Run space for Power Shell Script

TRUE

TRUE

Warning

Alerts when a rule or monitor attempts to execute a Power Shell script and the Power Shell Run space cannot be started.

N/A

Alert on Failure to Load a Power Shell SnapIn

TRUE

TRUE

Warning

Alerts when a rule or monitor attempts to execute a Power Shell script and a Power Shell snap-in cannot be loaded.

N/A

Alert on Failed Power Shell Scripts

TRUE

TRUE

Warning

Alerts on failed Power Shell scripts.

N/A

Alert on Power Shell Not Installed

TRUE

TRUE

Warning

Alerts when Power Shell scripts are being used where Power Shell is not installed.

N/A

Collect Power Shell Module Events

TRUE

FALSE

N/A

Collects Power Shell module events.

N/A

Read Discovery Data

TRUE

FALSE

N/A

This rule reads and publishes discovery data created by scheduled discoveries

N/A

Collect Registry Probe Module Events

TRUE

FALSE

N/A

This rule collects Registry Probe module events.

N/A

Schedule Manager Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Schedule Manager fails to initialize.

N/A

Collect Scheduler Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the Scheduler Condition module.

N/A

Scheduler Condition Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Condition module experiences a runtime execution failure.

N/A

Scheduler Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Condition module fails to initialize.

N/A

Collect Scheduler Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the Scheduler Data Source module.

N/A

Scheduler Data Source Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Data Source module experiences a runtime execution failure.

N/A

Scheduler Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Scheduler Data Source module fails to initialize.

N/A

Collect Service Check Data Source Module Events

TRUE

FALSE

N/A

Collects events generated by the Service Check Data Source module.

N/A

Service Check Data Source Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Service Check Data Source module experiences a runtime failure.

N/A

Service Check Data Source Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Service Check Data Source module fails to initialize.

N/A

Collect Service Check Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the Service Check Probe module.

N/A

Service Check Probe Module Runtime Failure

TRUE

TRUE

Warning

This rule generates alerts when the Service Check Probe module experiences a runtime failure.

N/A

Service Check Probe Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Service Check Probe module fails to initialize.

N/A

Collect Timer Condition Module Events

TRUE

FALSE

N/A

Collects events generated by the Timer Condition module.

N/A

Timer Condition Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Timer Condition module experiences a runtime failure.

N/A

Timer Condition Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Timer Condition module fails to initialize.

N/A

Collect Windows Workflow 4.0 Module events

FALSE

FALSE

N/A

Collects events generated by the Windows Workflow 4.0 module.

N/A

Windows Workflow 4.0 Module Initialization Failure

TRUE

TRUE

Error

This rule generates alerts when the Windows Workflow 4.0 Module fails to initialize.

N/A

Windows Workflow 4.0 Module Runtime Failure

TRUE

TRUE

Error

This rule generates alerts when the Windows Workflow 4.0 Module experiences a runtime failure.

N/A

Collect WMI Event Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Event module.

N/A

Workflow Runtime: Failed to run a WMI query for WMI events

TRUE

TRUE

Warning

This rule generates alerts when the WMI Event module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI for WMI events

TRUE

TRUE

Error

This rule generates alerts when the WMI Event module fails to initialize.

N/A

WMI Event Module Item Contains Large Array

TRUE

TRUE

Warning

This rule generates alerts when the WMI Event module retrieves a data item with a very large array.

N/A

Collect WMI Probe Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Probe module.

N/A

Workflow Runtime: Failed to run a WMI query

TRUE

TRUE

Warning

This rule generates alerts when the WMI Probe module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI

TRUE

TRUE

Error

This rule generates alerts when the WMI Probe module fails to initialize.

N/A

WMI Probe Module Item Contains Large Array

TRUE

TRUE

Warning

This rule generates alerts when the WMI Probe module retrieves a data item with a very large array.

N/A

Collect WMI Raw Performance Counter Module Events

TRUE

FALSE

N/A

Collects events generated by the WMI Raw Performance Counter module.

N/A

Workflow Runtime: Failed to run a WMI query for performance data

TRUE

TRUE

Warning

This rule generates alerts when the WMI Raw Performance Counter module experiences a runtime failure.

N/A

Workflow Initialization: Failed to start a workflow that queries WMI for performance data

TRUE

TRUE

Error

This rule generates alerts when the WMI Raw Performance Counter module fails to initialize.

N/A

Web Service Management Module Events Collector Rule

FALSE

FALSE

N/A

This rule collects WSMan (Web Services for Management) module events.

Never

Stress.CollectSDKPrivateBytesPerfCounters.Rule

TRUE

FALSE

N/A

N/A

Collect Distributed Workflow Test Event

TRUE

FALSE

N/A

Collects events logged by the "Log Distributed Workflow Test Event" rule.

N/A

Syslog: Module Error

TRUE

TRUE

Warning

This rule generates alerts when the "Syslog" module fails on this System Center Management Health Service.

N/A

CEIP Listener - Port Unavailable

TRUE

TRUE

Warning

This rule generates alerts when CEIP Listener fails to start because the port is not available.

N/A

AEM: Bad URL Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules receives an invalid or unexpected URL request on this management server.

N/A

AEM: Error Group Communication Timeout

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting an error group report and/or related cab to "watson.microsoft.com" on this management server.

N/A

AEM: [System] Error Group Processing Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot process an error group or system error group successfully on this management server.

N/A

AEM: File Share Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules encounters an error while interacting with the file share from this management server.

N/A

AEM: Invalid Error Group Response

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid error group response on this management server.

N/A

AEM: Invalid Proxy Error

TRUE

TRUE

Warning

This rule generates alerts when Agentless Exception Monitoring (AEM) detects invalid proxy configuration on this management server.

N/A

AEM: Invalid System Error Group Response

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid system error group response on this management server.

N/A

AEM: Module Creation Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be created on this management server.

N/A

AEM Module Events Collector Rule

TRUE

FALSE

N/A

This rule collects Agentless Exception Monitoring (AEM) module events.

N/A

AEM: Module Start Error

TRUE

TRUE

Warning

This rule generates alerts when one or more of the Agentless Exception Monitoring (AEM) modules cannot be started on this management server.

N/A

AEM: Network Error

TRUE

TRUE

Warning

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network error while communicating to watson/oca services or a permissions error while trying to operate with the Operations Manager database on this management server.

N/A

AEM: Error Group Parameter Error

TRUE

TRUE

Warning

This rule generates an alert when one or more of the Agentless Exception Monitoring (AEM) modules encounters a parameter in an error group containing characters considered invalid by AEM.

N/A

AEM: Permissions Error

TRUE

TRUE

Warning

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a network permissions error on this management server.

N/A

AEM: System Error Group Communication Timeout

TRUE

TRUE

Error

This rule generates alerts when Agentless Exception Monitoring (AEM) encounters a time-out error while transmitting a system error group report/cab to "oca.microsoft.com" on this management server.

N/A

An error occurred during computer verification from the discovery wizard

TRUE

TRUE

Warning

This rule generates alerts when the computer verification process fails during the discovery wizard.

N/A

A generic error occurred during computer verification from the discovery wizard

TRUE

TRUE

Error

This rule generates alerts when the computer verification process generically fails during the discovery wizard.

N/A

Computer Verification: Module Execution Error

FALSE

TRUE

Error

This rule generates alerts when the Computer Verification module fails to verify at least 1 or more computer names during execution on this System Center Management Health Service.

Never

Agent proxy not enabled

TRUE

TRUE

Error

The agent was not able to submit data on behalf of another computer because agent proxy is not enabled.

N/A

File size too large to transfer

FALSE

FALSE

N/A

This rule collects all rejected file transfers due to file size being over limit and so could not be processed by the file upload module.

Never

Collects data from the Health Service\Active File Uploads performance counter

TRUE

FALSE

N/A

Collects data from the Health Service\Active File Uploads performance counter.

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter

TRUE

FALSE

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Drop Rate performance counter.

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter

TRUE

FALSE

N/A

Collects data from the Health Service Management Groups\Bind Data Source Item Incoming Rate performance counter.

N/A

System Center Management Health Service Connector Bind Failure

FALSE

TRUE

Error

This rule raises an alert when unable to listen on required TCP port.

Never

(Deprecated) Collects data from the Processor\% Processor Time performance counter

FALSE

FALSE

N/A

Collects data from the Processor\% Processor Time performance counter on the System Center Management Health Service Process (HealthService.exe).

Never

Remote Certificate Not Trusted

TRUE

TRUE

Error

This rule generates alerts when it detects that the remote certificate is not trusted.

N/A

Remote Certificate Name Not Resolved

TRUE

TRUE

Warning

This rule generates alerts when it detects that the common name (CN) in the remote certificate cannot be resolved.

N/A

(Deprecated) Monitoring Host Handle Count Threshold (Management Server)

FALSE

TRUE

Error

Restarts the Health service when the "MonitoringHost.exe" process exceeds the Process\Handle Count threshold

Never

(Deprecated) Monitoring Host Private Bytes Handle Count

FALSE

TRUE

Error

Restarts the Health service when the Monitoring Host process exceeds the Process\Private Bytes threshold.

Never

OleDbProbe: Results Error

TRUE

TRUE

Error

This rule generates alerts when the results from the OleDb Probe module on this System Center Management Health Service contain failure information.

N/A

OleDbProbe: Module Execution Error

TRUE

TRUE

Warning

This rule generates alerts when the OleDb Probe module fails during execution on this System Center Management Health Service.

N/A

OleDbProbe: Module Initialization Error

TRUE

TRUE

Warning

This rule generates alerts when the OleDb Probe module fails to initialize on this System Center Management Health Service.

N/A

All Management Servers Resource Pool Unavailable

TRUE

TRUE

Warning

This rule generates alerts when the All Management Servers Resource Pool is not available.

N/A

(Deprecated) Health Service Cannot Find Management Group

FALSE

TRUE

Warning

This rule generates alerts when it detects that a Health service is unable to find a management group to communicate with.

Never

Web Service Management: Enumerator Module Error

TRUE

TRUE

Warning

This rule generates alerts when the Web Service Management Enumerator module fails on this System Center Management Health Service.

N/A

Web Service Management: Getter Module Error

TRUE

TRUE

Warning

This rule generates alerts when the Web Service Management Getter module fails on this System Center Management Health Service.

N/A

Web Service Management: Invoker Module Error

TRUE

TRUE

Warning

This rule generates alerts when the Web Service Management Invoker module fails on this System Center Management Health Service.

N/A

Web Service Management: Version Error

TRUE

TRUE

Warning

This rule generates alerts when one of the Web Service Management modules detects an unsupported version of Windows Remote Management on this System Center Management Health Service.

N/A

Logfile Module Alert Rule

TRUE

TRUE

Warning

Alert rule for Logfile module error messages.

N/A

UNIX/Linux Run As Account Alert Rule

TRUE

TRUE

Warning

Alert rule for UNIX/Linux Run As account error messages.

N/A

Related Views

 

View Description Rules and Monitors that Populate the View

Management Group Health Dashboard

Shows overall Management Group health

Shows state of critical components of the Management Group, such as Management Servers, and Databases.

Management Group Health Trend Dashboard

Shows active alerts over time and agent health state over time

Collection rules for active alerts in the Management Group and agent health

Management Server

Lists state and alerts for Management Servers, including Gateways

Management and Gateway Server state and alerts

 

Community Additions

ADD
Show: