Using OMS Log Search to Troubleshoot SCOM (or any other application)

I was recently working with a customer where I was engaged to assist with troubleshooting several errors that were occurring in the Operations Manager event log across a SCOM Management Group.  Because there were multiple errors occurring across several agents, the customer was having a difficult time tracking down which errors were occurring and which server they were occurring on.  It proved very difficult to parse alerts and log into individual servers and event logs to try and identify issues, much less correlate the issues across the environment.  After taking some time to understand the challenge, it seemed to me like a great opportunity to use OMS!

OMS Log Search gives us the ability to 1) identify all error events occurring in the Operations Manager event log (or almost any other log) across all servers in the environment and 2) allows us to then show all computers where each error is occurring without ever logging into a server.  Very cool!

Continue reading


SCOM – Create a Dashboard To Show Whether an Alert Is Generated By a Monitor or Rule

In a blog I posted last year called “What’s the difference between a rule and a monitor…the simple version“, I ended my post alluding to a follow up to show some options to identify whether an alert is being generated by a rule or a monitor. I have recently been reminded that I never followed through on my next post, so here it is!  This is nothing new and has been blogged about in the past, but I still find quite a few engineers that are not aware of this capability so hopefully this will help some folks out.

Continue reading

No More SQL Run As Account?

A good friend of mine, Ralph Kyttle, who works at Microsoft as an MCS Consultant in the DC area, recently pinged me about a new configuration he was testing which circumvented the use of a traditional SQL Run As Account.  Rather than configuring the traditional SQL Run As Account (we all know how much fun that is), the Health Service was configured to use a Service Security Identifier (SID) which allows the SCOM agent to monitor SQL server without all of the tedious permission configuration.  To add even more value, Kevin Holman published a great blog post yesterday highlighting the details of this configuration and added a really cool monitor and tasks to help ensure that this configuration is functioning properly. Very cool stuff!

Have a look at Kevin’s blog post here for more details.


Redesigned Active Directory Management Pack Coming Soon!

I noticed today on the momteam TechNet blog that a new, redesigned Active Directory management pack will be released with Windows Server 2016.  There are a lot of really cool changes in the management pack, including a major change to replication monitoring and a move from the current event driven model to synthetic monitors. Exciting stuff!  I have included a link to the blog post below, which includes  link to the preview management pack.


SQL MP Version Removed Due To Transaction Log And Visualization Issues

UPDATE: (12/14/2015): Version has now been released and is the current version.

UPDATE (11/12/2015): Version which includes a fix for the issue mentioned below has been released. Please see Released: System Center Management Pack for SQL Server and Replication ( for more information.

Microsoft has posted a mitigation as a workaround to resolve issues caused by importing the new SQL management pack (version   As stated in the SQL Release Services blog, the management pack has been removed for download and will be re-released once the issue is resolved.

New SQL Dashboards – BIG changes in SQL dashboards in the new SQL MP

The new SQL Management Pack has been released, and by far the biggest change that I have noticed is visualization aspects.  The OOB Database Instance and Database dashboards are GONE.  These dashboards have been replaced by a SQL Server x Summary Dashboard and the Datacenter Dashboard and Instance View Dashboards, both of which I will detail below.

You can download the new management pack here.

Continue reading