SCOM | Monitored Objects | What services are being monitored on monitored object.

Question

Hi,

I would like to generate a report to keep track of what services are being monitored and on which monitored object. I would like to create a similar report documenting which management packs are assigned to which monitored object.

The goal is to reduce our SCOM footprint and ensure that our devices are monitored by our global monitoring tool and identify any gaps in our monitoring.

To achieve this goal, I would like to do a side by side review between our monitoring tools.

Thank you in advance,

Raymond

Answer 1

@XinGuo-MSFT Most of that script is unnecessary. The Export-SCOMEffectiveMonitoringConfiguration cmdlet exports a CSV file. To import that file you can use the Import-CSV cmdlet with the "Delimiter '|' parameter.

$computer = "name-of-computer-goes-here"
$file = "{0}.csv" -f $computer
$dir = "drive-and-path-name-goes-here"      # Do NOT include trailing "\"

$path = join-path -Path $dir -ChildPath $file
$class = Get-SCOMClass -Name "System.Computer"
Get-SCOMClassInstance -Class $class | 
    Where-Object { $_.DisplayName -eq $computer } |
        ForEach-Object { 
            Export-SCOMEffectiveMonitoringConfiguration -Instance $_ -Path $path -RecurseContainedObjects 
        }

To import the CSV:

Import-CSV $path -Delimeter "|"

Answer 2

Hi,

You may run below script to get a CSV file and then filter out rules and monitors:

 $class = Get-SCOMClass -Name "System.Computer"
 $members= Get-SCOMClassInstance -Class $class | Where-Object {$_.DisplayName -eq $computer}
 $members | ForEach-Object { Export-SCOMEffectiveMonitoringConfiguration –Instance $_ -Path ($path + "$computer.csv") –RecurseContainedObjects }


 $lines = Get-Content ($path + "$computer.csv")
remove-item ($path + "$computer.csv")
 ForEach ($line in $lines) {
ForEach ($field in $line)
{
$Values = $field.Split('|')
$object = New-Object –TypeName PSObject
$object | Add-Member –MemberType NoteProperty –Name Class –Value $Values[0].Replace('"','')
$object | Add-Member –MemberType NoteProperty –Name InstanceName –Value $Values[1]
$object | Add-Member –MemberType NoteProperty –Name RuleMonitor –Value $Values[2]
$object | Add-Member –MemberType NoteProperty –Name Enabled –Value $Values[3]
$object | Add-Member –MemberType NoteProperty –Name GeneratesAlert –Value $Values[4]
$object | Add-Member –MemberType NoteProperty –Name AlertSeverity –Value $Values[5]
$object | Add-Member –MemberType NoteProperty –Name AlertPriority –Value $Values[6]
$object | Add-Member –MemberType NoteProperty –Name AlertType –Value $Values[7]
$object | Add-Member –MemberType NoteProperty –Name AlertDescription –Value $Values[8]
$object | Add-Member –MemberType NoteProperty –Name Overriden –Value $Values[9]
$object | Add-Member –MemberType NoteProperty –Name Parameter1 –Value $Values[10]
$object | Add-Member –MemberType NoteProperty –Name DefaultValue1 –Value $Values[11]
$object | Add-Member –MemberType NoteProperty –Name EffectiveValue1 –Value $Values[12]
$object | Add-Member –MemberType NoteProperty –Name Parameter2 –Value $Values[13]
$object | Add-Member –MemberType NoteProperty –Name DefaultValue2 –Value $Values[14]
$object | Add-Member –MemberType NoteProperty –Name EffectiveValue2 –Value $Values[15]
$object | Add-Member –MemberType NoteProperty –Name Parameter3 –Value $Values[16]
$object | Add-Member –MemberType NoteProperty –Name DefaultValue3 –Value $Values[17]
$object | Add-Member –MemberType NoteProperty –Name EffectiveValue3 –Value $Values[18]
         $object | Add-Member –MemberType NoteProperty –Name Parameter4 –Value $Values[19]
         $object | Add-Member –MemberType NoteProperty –Name DefaultValue4  –Value $Values[20]
         $object | Add-Member –MemberType NoteProperty –Name EffectiveValue4 –Value $Values[21]
         $object | Add-Member –MemberType NoteProperty –Name Name –Value $Values[22]
$array += $object
}
 }

 $array | export-csv c:\test\x.csv

Answer 3

The goal is to reduce our SCOM footprint and ensure that our devices are monitored by our global monitoring tool and identify any gaps in our monitoring.

Another approach you could do is to export all you SCOM management packs that you are using in your environment and review them using a tool called MPViewer. This allows to export the MP in excel format and review all monitor, rules, classes. Then you can sit down and decide which monitors/rules are necessary and identify the ones that you want to disable. https://kevinholman.com/2018/12/30/scom-tools/ https://github.com/JeanCloud365/mpviewer/releases/tag/R1