blog community

Welcome to blog community Sign in | Join | Help
in Search

SYSTEM OPERATIONS [Michel Kamp]

The challenge to ease system operations

HOWTO: Notify on cleared MOM alerts. (Alert Resolution states)

It's a pity that the power of WMI is not know by many people.

 

Standard in MOM there isn't. BUT however you can use the WMI classes for this: 

If you installed the MOM SDK then you will get a WMI namespace "root\MOM".

This namespace contains a MSFT_alert class. Make a event filter with the following WQL:

 

SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA
'MSFT_alert' and TargetInstance.ResolutionState<> PreviousInstance.ResolutionState

 

Make a WMI consumer binding to the SMTP consumer.

This is all WMI related.(Install the WMI tools form Microsoft to do this.)

 

OR you can do it all from the MOM administrator console:

1) Create a new Event filter in a rule group that contains the MOM management computer group.

2) Choose the Provider tap. And create a new data provider of type WMI.

3) Fill in the following property's.

Name : test resolution state

Namespace: root\MOM

Query:

SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA
'MSFT_alert' and TargetInstance.ResolutionState<> PreviousInstance.ResolutionState

4) on the alert tab enable the alert with a state you prefer. 

5) Create a new Alert rule with a notification response OR go to on the responses tab (from the above event rule) and add a notification group.

6) Commit the changes

7) and to test change a resolution state. You will get a mail.

 

I've tested this and it works.

 

Have fun.

 

Published Thursday, October 13, 2005 6:50 AM by michel kamp
Filed under: ,
Anonymous comments are disabled
Powered by Community Server, by Telligent Systems