Monitor Alert
Applies To: Opalis 6.3
The Monitor Alert object triggers a policy when new System Center Operations Manager alerts are generated, and when existing System Center Operations Manager alerts are updated, according to filter criteria that you specify. You can use the Monitor Alert object to trigger a diagnostic and corrective policy that responds to critical alerts in your network.
The Monitor Alert object uses filters to determine which properties of an alert will trigger the policy. Each part of the alert is compared to the values of the filter to determine if they meet the criteria before triggering the policy. When matching against text fields, you select one of three different methods of comparison. An option is provided to either match or not match the filter using each method. The "Does not" version of each method causes alerts that do not match the filter to trigger the policy.
Equals: the property of the alert exactly matches the text specified in the filter.
Does not equal: the property of the alert does not exactly match the text specified in the filter.
Contains: the property of the alert contains the exact text specified in the filter. Unlike the Equals behavior, there can be other text surrounding the matching text.
Does not contain: the property of the alert does not contain the exact text specified in the filter. Unlike the Equals behavior, there can be other text surrounding the matching text.
Matches pattern: use wildcards to specify a pattern that the text must match. The two wildcard values are the asterisk (*) and the question mark (?). The behavior of the wildcards is similar to the Command Prompt. The asterisk will match any number of characters, while the question mark will only match one character. For example, if you have a filter specified as "a*b", the pattern would match any text that has an "a" at the beginning and a "b" at the end. So, it will match "aab", "abbbbbb", and "abbcb", but it will not match "ba" or "abba". Using the question mark, if you have a filter specified as "a?b", the pattern will match any text that has an "a" at the beginning, any single character in the middle, and "b" at the end. So this filter will match "a b", "abb", and "aqb", but it will not match "abbb" or "ab".
Does not match pattern: use wildcards to specify a pattern that the text must not match.
For the procedure to configure this object, see: To Configure the Monitor Alert Object.
The following tables list the filters, properties, and published data for this object. The object publishes all of the data from the required and optional properties into published data.
Monitor Alert Filters
| Element | Description |
|---|---|
Category |
The category name of the Management Pack |
ConnectorId |
The ID of the connector that generated the connection string |
ConnectorStatus |
The status of the connector |
Context |
The System Center Operations Manager context of the alert |
CustomField1 |
The value of the first custom field |
CustomField2 |
The value of the second custom field |
CustomField3 |
The value of the third custom field |
CustomField4 |
The value of the fourth custom field |
CustomField5 |
The value of the fifth custom field |
CustomField6 |
The value of the sixth custom field |
CustomField7 |
The value of the seventh custom field |
CustomField8 |
The value of the eighth custom field |
CustomField9 |
The value of the ninth custom field |
CustomField10 |
The value of the tenth custom field |
Description |
The description of the alert |
Domain |
The domain from which the alert came |
Id |
The unique ID of the alert |
IsMonitorAlert |
Indicates whether the alert is a monitor |
LastModified |
The date that the alert was last modified |
LastModifiedBy |
The last user to modify the alert |
LastModifiedByNonConnector |
Indicates whether the last modification was performed by a non-connector |
MaintenanceModeLastModified |
The time that the monitor maintenance mode was last changed |
ManagementGroup |
The Management Group to which the alert belongs |
ManagementGroupId |
The ID of the Management Group |
MonitoringClassId |
The monitoring class ID of the alert |
MonitoringObjectDisplayName |
The display name of the System Center Operations Manager monitoring object |
MonitoringObjectFullName |
The full name of the System Center Operations Manager monitoring object |
MonitoringObjectHealthState |
The health state of the System Center Operations Manager monitoring object |
MonitoringObjectId |
The ID of the System Center Operations Manager monitoring object |
MonitoringObjectInMaintenanceMode |
Indicates whether the System Center Operations Manager monitoring object is in maintenance mode |
MonitoringObjectName |
The name of the System Center Operations Manager monitoring object |
MonitoringObjectPath |
The path of the System Center Operations Manager monitoring object |
MonitoringRuleId |
The ID of the System Center Operations Manager monitoring rule |
Name |
The name of the alert |
NetbiosComputerName |
The NetBIOS computer name of the computer from which the alert came |
NetbiosDomainName |
The NetBIOS domain name of the domain from which the alert came |
Owner |
The owner of the alert |
Parameters |
The parameters of the alert |
PrincipalName |
The principal name of the computer for which the alert was created |
Priority |
The priority level of the alert |
ProblemId |
The problem ID of the alert |
RepeatCount |
The number of times that the alert has been repeated |
ResolutionState |
The resolution state of the alert |
ResolvedBy |
The user that resolved the alert |
Server |
The name of the System Center Operations Manager server |
Severity |
The severity level of the alert |
SiteName |
The site name of the alert |
StateLastModified |
The time that the alert state was last changed |
TicketId |
The ticket ID of the alert |
TimeAdded |
The time that the alert was added to System Center Operations Manager |
TimeRaised |
The time that the alert was raised |
TimeResolutionStateLastModified |
The time that the resolution state of the alert was last changed |
TimeResolved |
The time that the alert was resolved |
Username |
The user name that was used to access the System Center Operations Manager server |
Monitor Alert Published Data
| Element | Description |
|---|---|
AlertCount |
The number of monitoring alerts that were found |
Category |
The category name of the Management Pack |
Connection |
The connection string to the System Center Operations Manager server that you are using |
ConnectorId |
The ID of the connector that generated the connection string |
ConnectorStatus |
The status of the connector |
Context |
The System Center Operations Manager context of the alert |
CustomField1 |
The value of the first custom field |
CustomField2 |
The value of the second custom field |
CustomField3 |
The value of the third custom field |
CustomField4 |
The value of the fourth custom field |
CustomField5 |
The value of the fifth custom field |
CustomField6 |
The value of the sixth custom field |
CustomField7 |
The value of the seventh custom field |
CustomField8 |
The value of the eighth custom field |
CustomField9 |
The value of the ninth custom field |
CustomField10 |
The value of the tenth custom field |
Description |
The description of the alert |
Domain |
The domain from which the alert came |
Id |
The unique ID of the alert |
IsMonitorAlert |
Indicates whether the alert is a monitor |
LastModified |
The date that the alert was last modified |
LastModifiedBy |
The last user to modify the alert |
LastModifiedByNonConnector |
Indicates whether the last modification was performed by a non-connector |
MaintenanceModeLastModified |
The time that the monitor maintenance mode was last changed |
ManagementGroup |
The Management Group to which the alert belongs |
ManagementGroupId |
The ID of the Management Group |
MonitoringClassId |
The monitoring class ID of the alert |
MonitoringObjectDisplayName |
The display name of the System Center Operations Manager monitoring object |
MonitoringObjectFullName |
The full name of the System Center Operations Manager monitoring object |
MonitoringObjectHealthState |
The health state of the System Center Operations Manager monitoring object |
MonitoringObjectId |
The ID of the System Center Operations Manager monitoring object |
MonitoringObjectInMaintenanceMode |
Indicates whether the System Center Operations Manager monitoring object is in maintenance mode |
MonitoringObjectName |
The name of the System Center Operations Manager monitoring object |
MonitoringObjectPath |
The path of the System Center Operations Manager monitoring object |
MonitoringRuleId |
The ID of the System Center Operations Manager monitoring rule |
Name |
The name of the alert |
NetbiosComputerName |
The NetBIOS computer name of the computer from which the alert came |
NetbiosDomainName |
The NetBIOS domain name of the domain from which the alert came |
Owner |
The owner of the alert |
Parameters |
The parameters of the alert |
PrincipalName |
The principal name of the computer for which the alert was created |
Priority |
The priority level of the alert |
ProblemId |
The problem ID of the alert |
RepeatCount |
The number of times that the alert has been repeated |
ResolutionState |
The resolution state of the alert |
ResolvedBy |
The user that resolved the alert |
Server |
The name of the System Center Operations Manager server |
Severity |
The severity level of the alert |
SiteName |
The site name of the alert |
StateLastModified |
The time that the alert state was last changed |
TicketId |
The ticket ID of the alert |
TimeAdded |
The time that the alert was added to System Center Operations Manager |
TimeRaised |
The time that the alert was raised |
TimeResolutionStateLastModified |
The time that the resolution state of the alert was last changed |
TimeResolved |
The time that the alert was resolved |
Username |
The user name that was used to access the System Center Operations Manager server |
Configuring the Monitor Alert Object
To configure the Monitor Alert object
From the Objects pane, drag a Monitor Alert object to the active policy.
Double-click the Monitor Alert object icon. The Properties dialog opens.
Configure the settings in the Details tab:
In the Server section, click the ellipsis button (...), and select the Operations Manager server Connection that you want to use for this object. Click OK.
In the Triggers section, select the type(s) of alerts, New and/or Updated, that are applicable to this policy. Each alert of the specified trigger type will be compared to the values of the filter(s) to determine if they meet the criteria before triggering the policy.
In the Filters section, at least one filter is required to define the object. Click Add. In the Name box, click the down arrow and select a property from the list.
In the Relation box, click the down arrow and select a filter type.
In the Value box, enter the value you want to use.
You can also use published data to automatically populate the value of the property from the data output by a previous object in the workflow.
To use published data
Right-click the property value box, click Subscribe, and then click Published Data.
Click the Object drop-down box and select the object from which you want to obtain the data.
To view additional data elements common across the policy, select Show Common Published Data.
Click the published data element you want to use, and then click OK.
For a list of the data elements published by each object, see the Published Data tables in the object topic. For information about the Common Published Data items, refer to the "Policy Workflow Rules" chapter of the Opalis Integration Server Client User Guide (https://go.microsoft.com/fwlink/?LinkId=205284)..
Click OK to save the filter settings.
Add additional filters as needed, and then click Finish.
Tip
Filter properties can only be used once in an object. For example, if your search criteria for an alert includes a date range, you cannot use the TimeAdded filter property twice in the same object. However, you may be able to use the TimeAdded After Date and TimeRaised Before Date filter properties to achieve the desired results.
To make changes to a filter, click the filter and then click Edit. Make the changes, and then click OK.
To remove a filter, click the filter and then click Remove.
For information about the settings on the General and Run Behavior tabs, see Common Configuration Instructions for All Objects.
Click Finish.
Other Objects
The Integration Pack for System Center Operations Manager contains the following additional objects: