I had recently setup the OMS Suite for my lab, I was able to effortlessly add my standalone machine within minutes , second step was to add my newly built SCOM 2012 R2 with UR7.

I ran into below issue.

a) My existing workspace name did not reflect in the Wizard.

b) if I selected a new workspace i got the Error 2200: Unable to register to Advisor Server. Please contact the system Administrator.

The fix is to simply ensure you import the updated management packs located under

C:\Program Files\Microsoft System Center 2012 R2\Operations Manager\Server\Management Packs for Update Rollups

You would visibly see the following changes

a) Operations Manager Suite vs System Center Advisor

b) Service registration window title would be Register to Operations Manager suite

c) You would see the drop down populated with existing workspace if any.

Hope this will get you up to speed !!

We can use inbuilt View for Rules called Ruleview, here a query which will give you the details like, RuleName, which class it is targetted and which MP it resides in.

=======================================================

select Rules.Name as WorkflowId,Rules.DisplayName as RuleName, TargetClass.TypeName as Class, ManagementPack.MPFriendlyName as MP from ruleview  as Rules

join ManagedType as TargetClass

on

Rules.TargetMonitoringClassId = TargetClass.ManagedTypeId  join ManagementPack

on

Rules.ManagementPackId = ManagementPack.ManagementPackId

where Name like 'MOmUIxxxxxxxxxxxxxxxx%'

=======================================================

Sample result is given below

Hope you find this information useful.
Cheers !!

Jeevan S Bisht

There have been few instances where the SLD Installation might rollback and you attempted this over and over again. The Windows Installer Logging could help you track down the issue and one of the interesting one is when you have a past failed solution stuck in the SharePoint. Once you enable the windows installer verbose logging the log file would reveal multiple things, check if you see the below extract

 Installer log

============

MSI (s) (7C:10) [16:08:27:301]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSI67F.tmp, Entrypoint: CAQuietExec

CAQuietExec: 

CAQuietExec:   A solution with the same name "sld_solution.wsp" or id "fe57ceb5-b12d-4a06-add2-cb466a4d02c8" already exists in the solution store.

CAQuietExec:  C:\Program Files\Service Level Dashboard 2.0\SLD_Solution.wsp: The Solution installation failed.

CAQuietExec: 

CAQuietExec:  Error 0xffffffff: Command line returned an error.

CAQuietExec:  Error 0xffffffff: CAQuietExec Failed

Action ended 16:08:31: InstallFinalize. Return value 3.

============

Solution :

Delete the failed instance of the SLD Solution by running the below command

stsadm -o deletesolution -name "SLD_Solution.wsp" 

 ( I would recommend running this command by your sharepoint admin once)

regards

Jeevan S Bisht

Apparently the List is not completely populated. Apparently this might happen if the VM propeties are not fully cached. To fix this simply make a call to get-vm and you should be good to go.

So if your powershell looked like this.

------------------------------------

Get-Vmmserver localhost

Get-VMhost | format-table-property name,vms -autosize

------------------------------------ 

Ensure you make a call to get-VM befor the get-VMHost is called.

------------------------------------

 Get-Vmmserver localhost

$tempcache=Get-VM

Get-VMhost | format-table-property name,vms -autosize

------------------------------------ 

I hope you found this information useful.

Regard

Jeevan S Bisht

This could generally happend if you have an unoptimized query , querying big tables like 'software files.'

There are multiple ways to look at it including colleval.log with sql enabled logging.

https://technet.microsoft.com/en-us/library/bb892800.aspx

If you have some experience with SQL you could try looking if the Query is a long runner. 

Use the SQL Management Studion and Connect to your SCCM/SMS Database

a) Run the below query on SQL

sp_who2

Find the offending SPID with high CPUTime and DISKIO eg  SPID 67

b) Find the contents of the query

dbcc inputbuffer (67)

this will show the query example below

===============================

insert into #CollTemp (MachineID,ArchitectureKey,Name,SMSID,Domain ,IsClient) select  all SMS_R_SYSTEM.ItemKey,SMS_R_SYSTEM.DiscArchKey,SMS_R_SYSTEM.Name0,SMS_R_SYSTEM.SMS_Unique_Identifier0,SMS_R_SYSTEM.Resource_Domain_OR_Workgr0,SMS_R_SYSTEM.Client0
from System_DISC AS SMS_R_System INNER JOIN vSMS_G_System_SoftwareFile AS SMS_G_System_SoftwareFile ON SMS_G_System_SoftwareFile.ClientId = SMS_R_System.ItemKey  INNER JOIN Add_Remove_Programs_DATA AS __System_ADD_REMOVE_PROGRAMS0 ON __System_ADD_REMOVE_PROGRAMS0.MachineID =
SMS_R_System.ItemKey   where (SMS_G_System_SoftwareFile.FilePath like '%C:\pwrpoint.exe%' OR __System_ADD_REMOVE_PROGRAMS0.DisplayName00 = 'SRSQuery')

 Note : The above query is a sample query

C)  Ran the below query to find the collection name based on the above query.

select * from collection_rules where collectionID in (select collectionid from collection_rules_sql where sql like '%<text snippet from step b>%')

ex.

select * from collection_rules where collectionID in (select collectionid from collection_rules_sql where sql like '%pwrpoint.exe%')

Remarks % is a wild card in SQL

d) Now you can decide to either modify the query / remove to avoid the problem.

I hope you find this post useful.

regards

Jeevan S Bisht

Thanks for all the great comments which really helped to kick start the blog again. I hope i do not disappoint folks out there !!

Environment
===========
a) ISA Configuration Storage Server is a part of domain
b) ISA Firewall Server is part of the workgroup
c) Action Account Configured for Operations Manager is Local System.

The FirewallServerRoleDisc.vbs is failing with below event.

Event Type: Error
Event Source: Health Service Script
Event Category: None
Event ID: 4001
Date:
Time:
User: N/A
Computer:
Description:
FirewallServerRoleDisc.vbs : Error - Number:-1073478746 Source:FPC.Root.1 Description:The property or method Arrays is not supported when the ISA Server computer is not connected to a Configuration Storage server.
HelpContext:0 HelpFile:

For more information, see Help and Support Center at https://go.microsoft.com/fwlink/events.asp.

Cause

The account used for running the script FirewallServerRoleDisc.vbs does not sufficient permissions to perform the operation.

Below is the failing code extract
============================
strRemoteManaged = ""
Set oFPCRoot = CreateObject("FPC.Root")
Set oFPCServer = oFPCRoot.GetContainingServer() '#### Failing query
============================

Resolution

Step 1:
Create a Local Admin Account on the Configuration Storage Server eg. ISAOPSMGRActionAccount with password X

Step 2:
Create a Local Admin Account on the Firewall Server with the same name and password eg. ISAOPSMGRActionAccount / X
(Repeat the Steps if you have multiple firewall Servers , basically mirror the accounts)

Step 3:
On the Operations Manager Console
Click : Administration Node > Run As Accounts > Accounts
i) Create a new Run As Account : Type (Action Account) , Fill in the other Details Click Next
ii) Specify Username /Password for Domain Specify the ISA Firewall Machine Name
iii) Click Next and Create (Repeat the Steps for all Firewall Machines that need to be monitored)

Step 4:
Click : Administration Node > Run As Accounts > Profiles
i) Double click Default Action Account
ii) On the Add Run As accounts Screen , select the firewall and hit Edit
iii) In the Run As Account Drop down , choose the Action account created in the previous steps
 (Repeat the Steps for all Firewall Machines that need to be monitored)

Restart the System Center Management or Health Service on the agent (Firewall)
This time the script should work fine and firewall role should be discovered.

More Information

https://technet.microsoft.com/en-us/library/cc302457.aspx

Jeevan Singh Bisht | Support Escalation Engineer

Things are getting interesting day by day, the Unix\Linux Service monitoring is quite a slick piece , apparently it goes beyond windows and helps me monitor my crucial services running on Linux/Unix boxes provided they are being managed by Operations Manager. This is fairly simple to setup but works like a champ. You can find more details below

https://technet.microsoft.com/en-us/library/dd789066.aspx

Click here to download the configuration walkthrough.

Jeevan Singh Bisht

Support Escalation Engineer

UnixLinux ProcessService Monitoring.pdf

This is something very simple yet very powerful and something we were missing for a long time, I have personally seen multiple versions to achieve this in previous versions including custom scripts but nothing is as flexible and powerful as this so decided to blog this. It is called Process Monitoring template. Thinking of usages it could be helpful in many ways

a) When a number of instance have gone below a specified number

b) When a number of instance have gone above a specified number

c) When a process is exceeding configured limits

d) Unwanted process running like known infection process

Depending upon you requirement a mix and match can give a really powerful monitoring solution

The usage steps are detailed out below on the TechNet but here is quick walk through.

Please click here to download the PDF

Jeevan Singh Bisht

Support Escalation Engineer.

Process Monitoring with OPSMGR 2007 R2.pdf

Apparently SCCM does collect the Hardware Inventory but a specified interval and it is highly unlikely that the Device be connected at that time , but if it is it will be inventoried. So the solution was to somehow monitor the device activity and then trigger inventory when the event happens, there are multiple ways to do it for example, have a service running on client or probably even have a filter driver written and distributed to client workstations.

In this example we actually will use our own custom service called "MonitorDevPluggin" which will monitor the device activity and  trigger inventory when a new device is added or existing device (which was detected earlier) reinserted.

How it works

=============

Although the there are many ways to achieve this , here is a very straight forward example based on WMI created in C#.

Step 1: We use Win32_DeviceChangeEvent Notification Class and subscribe to it and wait

https://msdn.microsoft.com/en-us/library/aa394124(VS.85).aspx

Step2 : Once the event is fired we simply initiate the Hardware Inventory

https://msdn.microsoft.com/en-us/library/cc145196.aspx

** We added a wait logic to wait at least 30 Seconds between two consecutive triggers.

 Although more granularity can be achieved based on different API and Classes(for example only trigger for Storage Class Devices etc).

using System;

using System.Collections.Generic;

using System.ComponentModel;

using System.Data;

using System.Diagnostics;

using System.ServiceProcess;

using System.Text;

using System.Threading;

using System.Management;

using System.IO;

using System.Resources;

using Microsoft.Win32;

namespace MonitorDevPluggin

{

    public partial class Service1 : ServiceBase

    {

        //Global Variables for application

        public static DateTime cur_time, temp_Time;

        public static int mins;

        public static bool firsttime = true;

        //Log File c:\connect.log

        public static string filepath = @"c:\connect.log";

        //enable/disable logging

        public static bool debug = true;

        public static Thread runner;

        public Service1()

        {

            InitializeComponent();

        }

        protected override void OnStart(string[] args)

        {

            try

            {

                Log("Starting Thread ... ");

                runner = new Thread(new ThreadStart(Starter));

                runner.Start();

                Log("Thread Started ");

            }

            catch (Exception rt)

            {

                Log("Exception :: Thread Start " + rt.Message);

            }

        }

        protected override void OnStop()

        {

            try

            {

                Log("Stopping Thread... ");

                runner.Abort();

                Log("Thread Stopped");

            }

            catch (Exception rt)

            {

                Log("Exception :: Thread Abhort " + rt.Message);

            }

        }

        static void Starter()

        {

          //Create a Log File for the first time use

            if (firsttime)

            {

                try

                {

                    System.IO.StreamWriter file = new System.IO.StreamWriter(filepath);

                    file.Close();

                }

                catch (Exception p)

                {

                    if (debug) { Log("Exception ## " + p.Message); }

                }

            }

        //Check for Debug info

        // HKLM\Software\\DevicePluginSCCM\enabled : true|false

        // This will help viewing device insertion/reconfiguration events

        try{

        RegistryKey regKeyAppRoot = Registry.LocalMachine.OpenSubKey("Software\\DevicePlugginSCCM");

        if (regKeyAppRoot == null)

        {

            if (debug) { Log("Key Not Found"); }

            regKeyAppRoot = Registry.LocalMachine.CreateSubKey("Software\\DevicePlugginSCCM");

            regKeyAppRoot.SetValue("Enabled", "false", RegistryValueKind.String);

        }

        string strWindowsState = (string)regKeyAppRoot.GetValue("enabled");

        if (strWindowsState.ToLower() == "true")

        {

            debug = true;

            Log("Debugging is ON ");

        }

        else

        {

            debug = false;

            Log("Debugging is O ");

        }

            }

            catch(Exception e)

            {

                if (debug) { Log("Exception ## " + e.Message); }

            }

        if (debug) { Log("Logging is " + debug.ToString()); }

        /// END OF DEBUG LOGIC

        //subsribe to Device Insert Events // 2 Device Arrival using WMI // 1 Configuration Changed

        string query = @"SELECT * FROM Win32_DeviceChangeEvent WHERE EventType = 2 or EventType = 1";

        string managementPath = @"\\.\root\cimv2";

        try

        {

            //Subscribe to the WMI Event Notification Class   

            ManagementEventWatcher watcher = new ManagementEventWatcher(new WqlEventQuery(query));

            ManagementScope scope = new ManagementScope(managementPath);

            scope.Connect();

            watcher.Scope = scope;

            if (debug) { Log("Listening for Device Arrival/Modification Events"); }

            temp_Time = DateTime.Now;

            ManagementBaseObject obj;

            while (true)

            {

                obj = watcher.WaitForNextEvent();

                cur_time = DateTime.Now;

                System.TimeSpan Diff_time = cur_time.Subtract(temp_Time);

                mins = Diff_time.Seconds;

                if (debug) { Log("Device Arrival/Modification Detected"); }

                //enforcing minimum 30 seconds delay between 2 consecutive usb pluggins/removals

                        if (mins > 30 || firsttime)

                        {

                                    firsttime = false;

                                    temp_Time = DateTime.Now;

                                    cur_time = temp_Time;

                                    if (debug) { Log("Initiate H/W Inventory "); }

                                    try

                                    {

                                        RunHardwareInventory();

                                    }

                                    catch (Exception Inv)

                                    {

                                        if (debug) { Log("Exception ## " + Inv.Message); }

                                    }

                        }

            }

        }

        catch (Exception n1)

        {

            if (debug) { Log("Exception ## " + n1.Message); }

        }

        }

        public static void Log(string s)

        {

            try

            {

                System.IO.StreamWriter file = new System.IO.StreamWriter(filepath, true);

                file.WriteLine("   " + DateTime.Now + "  " + s);

                file.Close();

             }

            catch (Exception er)

            {

                if (debug) { Log("Exception ## " + er.Message.ToString()); }

            }

        }

        public static void RunHardwareInventory()

        {

            try

            {

                string actionNameToRun = "Hardware Inventory Collection Cycle";

                CPAPPLETLib.CPAppletMgr controlPanelAppletManager = new CPAPPLETLib.CPAppletMgr();

                foreach (CPAPPLETLib.ClientAction possibleClientAction in controlPanelAppletManager.GetClientActions())

                {

                    if (possibleClientAction.Name == actionNameToRun)

                    {

                        possibleClientAction.PerformAction();

                        if (debug) { Log("Ran: " + possibleClientAction.Name); }

                    }

                }

            }

            catch (Exception ex)

            {

                if (debug) { Log("Exception ## " + "Failed to run action. Error: " + ex.Message); }

            }

        }

    }

}