SCOM servers in maintenance mode are still getting alerts?

Question

SCOM:

We put some servers in MM for a month, but four days later the server had a new alert? we checked the servers and they are still in MM, but they have a new alert? I was under the impression that MM temporarily stops all new alerting. Has anyone run into this issue before and how to troubleshoot and resolve this?

Answer 1

Hi,

It sounds like you're experiencing an unexpected behavior with your Maintenance Mode (MM) setup. Typically, MM should suppress alerts, but there are a few scenarios where alerts might still be generated. Here are some steps to troubleshoot and resolve this issue:

1. Double-check that the servers are indeed in MM and that the MM settings are correctly applied. Sometimes, MM might not be applied to all components or might have expired earlier than expected.
2. Ensure that there are no alert rules or overrides that might be configured to bypass MM. Some critical alerts might be set to trigger even during MM for high-priority issues.
3. Look at the alert history and logs to understand the nature of the new alerts. This can provide clues about why the alerts were generated despite MM.
4. In some cases, clearing the cache and restarting the monitoring services can resolve issues related to stale configurations or data

Is there anything else you'd like to know or any specific details you can provide about the alerts?