SCOM Powershell Monitor generated alerts for a lower threshol

Question

question

anupvtr asked May 3, '22 anupvtr commented May 4, '22

SCOM Powershell Monitor generated alerts for a lower threshol

Hi All, Thanks in advance.

We are using powershell MP.

I created a custom Monitor with powershell MP. The alert is always getting generated with a lower value

Created Event login for the property bag output. The value is successfully getting captured.
the output will always an Integer

The condition to generate an alert is if the value is greater than 100.

The current property bag value is 6. Unfortunately its generating alert on the value 6.

Troubleshooting step performed:

1) Exported the MP containing custom monitor
2) navigate the xml file and fine "XPathQuery Type" and "Value Type"
By defaul, it is string data type, you should modify it into suitable data type
3) possible data types
“Boolean”
“String”

Tried with string and integer types but bad luck unfortunately still alert is generating with a lower value.
Any help will be thankful.

Thanks & regards,
Anu

msc-operations-manager

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-05-04T15:05:10.447Z

CyrAz answered May 4, '22 anupvtr commented May 4, '22

You can add a type at the first xpathquery directly in XML, that won't be a problem and that's very likely the cause of your issue.
That can actually be demonstrated easily with PowerShell :
$counts = "6"
$counts.GetType().Name

String

$counts -gt 100

True

$counts -gt 70

False

$intCounts = 6 #not using quotes here
$intCounts.GetType().name

Int32

$intCounts -gt 100

False

That shows that when running a comparison between a string and an integer, only the first number of the integer is taken into account.
But when the comparison is made between two integers it works properly.

Also I don't understand why you made the expression like this... It states that the value must be greater than 100 and not equal to -3 and not equal to -2 and not equal to -1 : that doesn't make a lot of sense, anything greater than 100 can mathematically never have a value below 0 so there is no point specifiyng all this...

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

anupvtr · May 04 at 04:58 PM

Thank you very much @CyrAz for the detailed information. This helped me.

After adding the integer to xpathquery where ever its missing. resolved the issue.

The specific property bag will logged the values -3,-2 and -1. this was for error logging in event viewer.

Thanks
Anu

0 ·

Answer 2 · 2022-05-03T22:37:14.49Z

CyrAz answered May 3, '22

Could you show us the relevant xml code?

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 3 · 2022-05-04T06:36:42.137Z

StoyanChalakov answered May 4, '22

Hi @anupvtr,

can you please paste the script here so that we can take a look?

Thanks!
Regards,
Stoyan

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2022-05-04T11:40:34.77Z

anupvtr answered May 4, '22

@CyrAz @StoyanChalakov unfortunately i am not able to copy paste the code over here. I can attach as a screenshot for the criteria.

xml.jpg (125.5 KiB)

criteria.jpg (138.4 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 5 · 2022-05-04T13:30:38.13Z

CyrAz answered May 4, '22 anupvtr edited May 4, '22

Xpathquery has no type in the first expression and is typed as string in the following two expressions.
It should work if you type it as integer.

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

anupvtr · May 04 at 02:43 PM

Thanks @CyrAz ,

The monitor is created via console. XpathQuery has no type in the first expression.

I changed the values String to integer in the following available places, Bad luck still generating alert for lower value.

0 ·

xml1.jpg (145.3 KiB)

question