Disable all alerts/rules generated by management pack

Question

How do I disable all alerts generated by monitors/rules from a specific mgmt pack?

Answer 1

Hi,

I've downloaded the mp bundle from systemwiki, imported it in the lab. No rule and 7 monitors are found in this management pack.

To disable them, we can find each monitor (in Authoring pane), create an overrides and save it in an unsealed management pack.

screenshots for your reference

Get-SCOMManagementPack -DisplayName "pki certificate validation v2" | Get-SCOMRule

disable the monitor

Alex
If the response is helpful, please click "Accept Answer" and upvote it.

Answer 2

Use the following powershell

1) The Name management pack which i want to disable all its of alerts/rules is "Microsoft System Center Management Pack for Windows 10 (Monitoring)"
2) The override is save in the MP ,'samplemp'.

You should modify the above parameter in your PowerShell cmdlet

$MP=get-scommanagementpack -displayname 'samplemp'
$monitors=get-scommanagementpack -displayname 'Microsoft System Center Management Pack for Windows 10 (Monitoring)'|get-scommonitor
foreach ($monitor in $monitors) {
Disable-SCOMMonitor -ManagementPack $MP -Monitor $Monitor -Enforce
}

$rules=get-scommanagementpack -displayname 'Microsoft System Center Management Pack for Windows 10 (Monitoring)'|get-scomrule
foreach ($rule in $rules) {
Disable-SCOMRule -ManagementPack $MP -Rule $Rule -Enforce
}

Roger

Answer 3

Hi,

Yes, the cmdlet will output all the rules/monitors in the specified (sealed) management pack. If the number is small (in above example, only 7 monitors), we can disable it (via overrides) manually. If the number is larger, we can use Roger's excellent script to automate the process.

$MP = get-scommanagementpack -displayname 'pa'  
$monitors = Get-SCOMManagementPack -DisplayName "pki certificate validation v2" | Get-SCOMMonitor  
foreach ($monitor in $monitors)   
{  
 Disable-SCOMMonitor -ManagementPack $MP -Monitor $Monitor -Enforce  
}  
  

quick lab test screenshot:

Alex
If the response is helpful, please click "Accept Answer" and upvote it.