question

shankar431-9012 avatar image
0 Votes"
shankar431-9012 asked Crystal-MSFT commented

Alerts did not trigger a Command Subscription in SCOM 2019

Hi All,

We are running SCOM 2019, we have enabled Command Subscriptions for the alerts however for some of the alerts they are not getting ticketed even though the alert is enabled for subscription.

upon looking at the Event viewer we see event iD 21410 Event Source Health Service Modules.

Event Description is as below

The process could not be created because the maximum number of asynchronous responses (5) has already been reached, and it will be dropped.

Command executed: "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "& '"D:\scripts\SetServerTypeandGroup.ps1"'" -AlertID '{ef33c380-dcdc-2c06-b833-22e8619f43ac}' -XXXXXX'
Working Directory: C:\Windows\System32\WindowsPowerShell\v1.0\

One or more workflows were affected by this.

Workflow name: Subscription6a66b0d9_569a_4169_958a_955c4cfg8d69
Instance name: Alert Notification Subscription Server
Instance ID: {E42E3ksB-53BC-ax15-1634-5A6E023d9230}
Management group: SCOM Group

Can you please help me what is causing this issue.

Regards,
Ravi shankar

msc-operations-manager
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT avatar image
0 Votes"
Crystal-MSFT answered Crystal-MSFT commented

@shankar431-9012, For the event, it seems there are too many alerts which need to be processed by the Notification channels. we can create registry key under the following location and set it to a higher value than the default one 5.
Note: Be careful with changing this setting to a higher value, this can cause serious performance issues on your management server which is processing the notifications.
HKEY_LOCAL_MACHINE\Software\Microsoft\Microsoft Operations Manager\3.0\Modules\Global\Command Executer\AsyncProcessLimit

After changing the value, schedule a non-business time to restart the server to see if it is working.

Here is a link with the detailed steps for the reference.
https://www.vroege.biz/?p=890
Note: Non-Microsoft link, just for the reference.

Hope it can help.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@shankar431-9012, Hope everything is going well/ I am writing to see if we have the opportunity to try the above actions. If there's any update, feel free to let us know.

0 Votes 0 ·

Thank you Crystal,

your post helped us to solve my issue.

Regards,
Ravi shankar

0 Votes 0 ·

@shankar431-9012, Thanks for the update. I am glad to hear that the issue is resolved. Congratulations! If there's anything else we can help, feel free to post in our Q&A.

Thanks for your time and have a nice day!

0 Votes 0 ·
AndrewTabar-3601 avatar image
0 Votes"
AndrewTabar-3601 answered

that usually means that there are a bunch of PS1/command channels already opened up by SCOM that are still running. How many copies of powershell (triggered by SCOM) are running according to Task Manager?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.