Too many Operations Manager Failed to Access the Windows Event Log

Saravanan Balasubramanian 266 Reputation points
2021-10-29T02:13:53.013+00:00

Hi guys,

So we have Windows Failover Cluster " Cluster01.it.it" and one of the node is "ABC01.it.it".
We are constantly getting below alert and its annoying.

  • there is a firewall rule in place in the node for RPC
  • there is another node in the cluster and it doesnt generate these alert but only this server
  • also from the error below, you can see the rule is that is doing this is Cisco UCS monitoring rule. the server we have installed is not a Cisco UCS server and so this management pack should not monitor this.

any help to resolve this will great.


Alert: Operations Manager Failed to Access the Windows Event Log
Source: ABC01.it.it
Path: ABC01.it.it
Last modified by: System
Last modified time: 10/29/2021 1:46:06 AM Alert description: The Windows Event Log Provider is still unable to open the Operations Manager event log on computer 'Cluster01.it.it'.
The Provider has been unable to open the Operations Manager event log for 720 seconds.

Most recent error details: The RPC server is unavailable.

One or more workflows were affected by this.

Workflow name: Cisco.Ucsm.Monitoring.Rule

Instance name: Cluster01.it.it

Management group: IT-SCOM-S1

Operations Manager
Operations Manager
A family of System Center products that provide infrastructure monitoring, help ensure the predictable performance and availability of vital applications, and offer comprehensive monitoring for datacenters and cloud, both private and public.
1,526 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. SChalakov 10,571 Reputation points MVP
    2021-11-03T16:17:58.913+00:00

    Hi @Saravanan Balasubramanian ,

    I think this happens, because the considers the cluster object as an actual member of another class, which is targeted by this monitor.
    I would override this Monitor for the cluster instance (Cluster.it.it) and disable it.

    Regards,
    Stoyan

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.