easy way to create alerts in scom 2019 installed Microsoft windows 2019 server

Question

I want to test SCOM 2019 integration with other systems. So I want lot of alerts to be present in SCOM 2019 environment.

Can someone please let me know easy way to create multiple scom alerts

Thanks,
Mahesh

Answer 1

Import the Management Packs corresponding to the roles/features/applications that are running in your environment.
(AD, PKI, IIS, SQL, Exchange, whatever).

Answer 2

HI @mahesh palem ,

what Cyril suggested will do the job. Another easy way would be to configure one Alert Generating Rule for an event and then generate the event wioth PowerShell. Each time when an event ios genarted, SCOM will pick it up and fire an alert.
Here is some info on the topic:

You can check Leon's article om how to create alert genarating tule in SCOM:

SCOM - Alert basics
https://social.technet.microsoft.com/wiki/contents/articles/53579.scom-alert-basics.aspx#Rule

and here is also how you can generate any event with any ID and from any source, suing PowerShell:

How to Use PowerShell to Write to Event Logs
https://devblogs.microsoft.com/scripting/how-to-use-powershell-to-write-to-event-logs/

Hope we could help!

Regards,
Stoyan

Answer 3

Hi @Alankar Vishnoi ,

the most likely reason for this is that you haven't created the rule properly. Let me give you some guidances:

• You need to create an event based alert generating rule for NT Event Logs:

• Target the rule at a class, which the server you are creating the events is member of, but leave the rule disabled, so that you avoid all servers generating alerts. Later you will enable to rule for only the specific server you are generating the events on:

• Chose in which Log the events will be picked up from. This will be the same log that you give in the "-LogName" parameter in PowerShell. In my example I chose "Application" and will later generate the event in this same log.

• Specify the event parameters like Event Id and Source:

• Chose serverity and Priority at the next step and click on "Create"
• The last step in SCOM would be to enable the rule for the server, on which you are generating the events. In my example, this is the SCOM01.demo.local:

• The last step would be to use powershell on this same server and create an event in the Application Log with the ID 777 and source DEMOQANDA":

And there are your alerts in SCOM:

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Best regards,
Stoyan

Answer 4

Hi @SChalakov

I followed all steps you have given, to create a rule, still, I am not able to get those events(NTlog events) in SCOM 2019 Operation Console.

Please check the attached screenshots.

I have a doubt. currently, we have 3 Windows Computer where the Windows Operating system part is showing "Not Monitored". So is it the reason the operation console not synching with our windows 2019 server Event Viewer?
If this is the reason how can we change Windows Operating system status to Monitored for a specific host.

Answer 5

Hi,

the Windows OS shows as not monitored most probably because you haven't installed the Windows Server OS MP:

Microsoft System Center Management Pack for Windows Server Operating System 2016 and 1709 Plus
https://www.microsoft.com/en-us/download/details.aspx?id=54303

The problem is somewhere else, though... On the screenshot you have 3x systems and 2 of them are not monitpored - one has the state "not monitired" and the other is greyed out. This means that you cannot get alerts from both of them. Additionaly you have an issue with your management server.
Please make sure you get all your agents and management servers green and healthy again, it should work then.
Use the Health Explorer to check what is wrong with the management server.
Make sure you fix the agent that is greyed out.

Regards,
Stoyan