Event id monitoring based on time

Ravi Bhushan 126 Reputation points
2021-01-17T18:33:18.293+00:00

Hi,

I have came with a new request from the customer. I have earlier reset different types of event id monitoring, but this time they have some conditions.

There is a script . This script should run for every 1 hour.
For this a scheduled task should be created such that the script runs for every 1 hour.

Condition:-

If the script detects any errors, an event log would be generated in the event viewer with the event ID 699.
If this event occurs for every 2 hours it should be a P3 incident.
If this event occurs for more than 2 hours it should be a P2 incident.

Regards,
Ravi

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,413 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. AlexZhu-MSFT 5,551 Reputation points Microsoft Vendor
    2021-01-18T04:19:18.96+00:00

    Hi,

    It's easy for operations manager to monitor a specific Event ID, however, it's complex to achieve the logic mentioned above. Since we plan to use script, it is suggested to put the logic in the script and the output is different Event ID (for P2 and P3). After that, we can create a rule/monitor based on the specific Event ID.

    Creating event based alerting rules in SCOM 2012
    https://mytechguideblog.wordpress.com/2016/11/29/creating-event-based-alerting-rules-in-scom-2012/
    Note: this is not from MS, just for your reference.

    Hope the above information helps.

    Alex Zhu

    If the response is helpful, please click "Accept Answer" and upvote it.

    0 comments