Archive for the ‘Management Packs’ category

How to Create a New Override MP

May 3, 2013

 This is something that an OpsMgr admin does on a regular basis but I have added some additional bits to the process.

When a new override management pack is needed then the following steps are required.

If there is a specific alert that needs to be overridden then click on that alert and in Alert Details click on the Alert Rule/Alert Monitor.  This will show which Management Pack the alert was generated by.

 For example - the SQL Server 2008 (Monitoring) management pack.

It is best practice to create an override Management Pack for the sealed MP and put the overrides for the sealed MP into that MP. I prefer to create a new MP in the Administration tab so I can control the process rather than create the MP on the fly when overriding an alert.

Note that unsealed MPs do not need a separate MP as the override will be written directly into the MP.

Go to the Administration  tab and click on Management packs.

 In this case I have filtered the MPs to the SQL 2008 ones. 

 sql server 2008 mps

 Double click on the SQL Server 2008 (Monitoring) MP.

The 2 important fields are ID and Name. The ID must match the filename of the MP and the Name will be the name that shows up in the list of MPs.

Highlight the Name and copy (Ctrl C).

 SQL 2008 MP properties

This will give you the name of the MP – SQL Server 2008 (Monitoring).

Close the dialogue box.

Right click in the Management Pack area and chose Create Management Pack.

 Create MP Wizard

This will start the Create a Management Pack Wizard

 MP Wizard 1

 Paste the name that was copied into the Name field and add Overrides.

Some organizations put Overrides at the beginning of the name so that they show up in the MP list together. It is easy to find all MPs with overrides in the name using the Find search box on the tool bar. Therefore I do not think that  it is necessary to put the word overrides at the beginning. Putting it at the end means that the override MP shows up in the MP list next to the sealed MP so that you know that there are overrides for that MP.

 MP Wizard 2

 Note that it creates the ID name for you. But importantly does not include numbers. When the MP is created it is checked in the console to make sure it is unique. If the 2012 one was done next it would create an MP with ID of SQL.Server.Monitoring.Overrides0. This can be fixed later to match the version with the name.

The version can be any number but leave it at 1.0.0.0 for now.

 MP Wizard 3

 If you click Edit to add knowledge you will get this error message.

 VSTfO Error

In order to edit Knowledge you must have Visual Studio Tools for Office runtime installed along with Word on the computer that is running the console.

 Once it is created it can be seen in the console. It can now be used for overrides but the following steps are recommended before you create overrides. If you go to the Monitoring pane you will see a new View folder with the name of the MP.

 Empty view

 All new MPs created in the console create a top level folder so that views can be created underneath. As this will only be used for overrides the empty view is not necessary and clutters the console.

Highlight the folder and press Delete.

 Delete Empty view

Click yes.

 As noted earlier the MP created does not have 2008 in the file name. When the 2012 MP is made it will have a very similar name. I have found it is better to rename the filename to have 2008 in the name to make it easier to distinguish files outside of the console.

Go back to the Administration pane and click Management Packs.

Click on the new management pack and right click to Export Management Pack.

 export MP

 Once exported open the MP in a text editor.

 The contents will now look like this.

 SQL 2008 Override MP 1

 The key fields are ID and Name.

The ID has to be a unique name for the Management Group and MUST match the name of the file. If these two do not match you will not be able to import it back into the Management Group.

The Name is the friendly name that is seen in views and can be left.

Change the contents of the ID field from SQL.Server.Monitoring.Overrides to SQL.Server.2008.Monitoring.Overrides.

You must also change the Display String Element to match otherwise you will get a message like this.

 SQL 2008 Override MP 2

The highlighted text shows that it is the Display String Element in the Language section that is wrong as it still refers to the original name.

 Change the version number to 1.0.0.1 to show that the view has been removed, that the file name has changed.

 SQL 2008 Override MP 3

 Do a File Save As and ensure that the file name is the same as the ID.

  Import the new MP into the Management group.

 As this has a unique name (ID) it does not overwrite the original MP.

 Multiple MPs

The 1.0.0.0 MP can now be deleted and the new MP is ready for overrides.

 Rather than going through the whole process again for the SQL Server 2012 overrides the existing XML file can be edited by changing 2008 to 2012 in the 4 lines highlighted.

 SQL 2008 Override MP 5a

Do a file save as SQL.Server.2012.Monitoring.Overrides.xml and the new MP can be imported in.

 new sql 2008 override MP

 This template can now be used for any new override MP.

 Override MP Template

 When a new MP is need replace FILENAME with the name of the file which reflects the MP name and must be unique with no spaces and in the 2 Name fields replace MPNAME with a friendly name.

 Here is the text file to use as a template.  

<?xml version=”1.0″ encoding=”UTF-8″?>
<ManagementPack ContentReadable=”true” SchemaVersion=”2.0″ OriginalSchemaVersion=”1.1″ xmlns:xsd=”http://www.w3.org/2001/XMLSchema” xmlns:xsl=”http://www.w3.org/1999/XSL/Transform” >
   <Manifest>
      <Identity>
         <ID>FILENAME.Overrides</ID>
         <Version>1.0.0.1</Version>
      </Identity>
      <Name>MPNAME Overrides</Name>
      <References>
         <Reference Alias=”SystemCenter”>
            <ID>Microsoft.SystemCenter.Library</ID>
            <Version>7.0.8432.0</Version>
            <PublicKeyToken>31bf3856ad364e35</PublicKeyToken>
         </Reference>
      </References>
   </Manifest>
   <LanguagePacks>
      <LanguagePack ID=”ENU” IsDefault=”false”>
         <DisplayStrings>
            <DisplayString ElementID=”FILENAME.Overrides”>
               <Name>MPNAME Overrides</Name>
            </DisplayString>
         </DisplayStrings>
      </LanguagePack>
   </LanguagePacks>
</ManagementPack> 

NOTE – when copying this text ensure that the quotation marks are the straight ones (“”) and not the curly ones(“ “). This can happen when copying and pasting from certain programs and web pages.

 

Management Pack Catalog Revamp

July 12, 2010

After Microsoft moved the MP Catalogue to PinPoint (or PainPoint as I called it) it was incredibly difficult to find MPs. The site has been revamped allowing you to filter by product (OpsMgr, ConfigMgr etc) instead of all lumped together. Then you can filter by company that made the MP and also sort by release date or name. Brilliant. We are back where we started.

The link is here http://pinpoint.microsoft.com/en-US/systemcenter.

Post SQL MP

February 5, 2010

If you have installed SQL MP  v6.06648.0 (read Kevin Holman’s post on why you need it) issued on 23rd July 2009 you may think that you are now monitoring SQL. Not quite. Here are some things to consider.

SQL Agent Jobs

According to the MP Guide the discovery for  SQL Agent Jobs is not turned on but you can obviously override that. I had a customer complain that they found out a job had been failing but there was no alert. Luckily Jimmy Harper posted about this. Apparently the discoveries do not work if certain fields are blank with Description being the main culprit. The customer did not want to go through each job and put in a description but luckily Jimmy’s post contains new MPs to replace the discovery ones in the SQL MP. This worked a treat and the jobs started showing up in the console. The customer created a new SQL Agent Job with nothing in the description and that was picked up. A must have if you want to monitor SQL Agent Jobs. Nice one Jimmy. Hopefully that will be fixed in the next version.

The other thing that I had a long discussion about with the customer was SQL jobs failing. When they fail they are picked up but when the job is set to carry on with the rest of the jobs in sequence after a fail nothing is shown in the console. The customer appreciates why this is. After all if you do not think that one part of a sequence is important enough to stop the other jobs running you can’t call it a failure. They can see it if they look at SQL but in the OpsMgr console there is nothing. We tested it with a few jobs. They would like to see something – even if it is information. As they said if it fails once it is not important but if it keeps on failing it needs investigating. Something else for the next version of the MP.

SQL Replication

Replication is also not discovered by default. When turned on it discovers replication servers but there are no rules or monitors. So if you need to monitor SQL Replication you have to do it yourself.

SQL Mirroring

If you want to monitor SQL Mirroring pick up the Extended SQL Server MP by Matt Goedtel on OpsManJam.

Noisy DBCC Rule

DBCC Check comes up every now and then with an information alert that says no errors. I have always thought that bizarre but never had time to investigate. Jimmy Harper’s post on it explains why that is and how to fix it to give you useful warning and critical alerts when there are real problems with DBCC. Another good post from Jimmy.

SQL DB Properties

Jimmy also has a post on SQL DB properties not being discovered and how to fix it.

 SQL Server Full Text Search Service Monitor

As Jimmy Harper says it is mentioned in the guide but his post goes into great detail on it. This is usually the case for servers running MSDE like WSUS. Also mention by Kerrie and Cameron in their OpsMgr R2 by Example which goes into a lot of information about the typical alerts that come up for SQL MP and some resolutions for those. Required reading after the MP Guide.

SQL 2008

If you have SQL 2008 in your environment then you will need to install the SQL DMO bits as they are no longer shipped with SQL but the SQL MP still needs them. This shows up as no space performance counters for SQL 2008 DBs and event 4000 in the OpsMgr log.  Marnix Wolf (Thoughts on OpsMgr) has posted a good set of articles on this. First here which includes showing what to download and install and then problem with DMO Installation.

Conclusion. You may think that after you import the SQL MP that you are monitoring SQL. But unless you dig into the documentation and the MP you may find that critical bits are not being monitored.

Silect MP Studio v4.1

February 4, 2010

Silect have just released their latest version of MP Studio.

We’re pleased to announce the availability of our latest release of MP Studio available for upgrade now for all MP Studio customers currently on maintenance. MP Studio v4.1 has now added additional capabilities to help you further decrease complexity, speed implementation, eliminate risk and increase productivity with System Center Operations Manager:

MP Studio Enhancements Included in this Release:

New Column Creation Wizard for more flexible custom Management Pack Documentation reporting.  MP Studio’s already powerful MP documentation capabilities have been enhanced to include an easy-to-use column creation wizard, where users can extract a subset of data such as Event ID or Frequency and have the data neatly displayed in a dedicated column.

Override Management has become even more flexible with added support for targeting of Groups. Bulk override management has also been extended to allow users to modify the targets for the block of overrides they are creating.

The MP Development Center now supports offline creation of management pack contents such as Targets, Event Rules and Service Monitors. This new operation provides enhanced flexibility when developing an MP where access to a server hosting the line of business application may not be available.

Additional Installation and Administrative Features have also been enhanced in this new version.

Try it for Yourself:

Now is the perfect time to start a free trial of MP Studio for System Center Operations Manager to test drive these new features for yourself.

Request a Product Download or contact us today for more information or a demo of any of these exciting new features at info@silect.com.

Ian, Feb 2010

File Services MP Beta

January 22, 2010

Just seen that the File Services MP for SCOM 2007 has been released as a beta (i.e. not supported).

http://blogs.technet.com/askds/archive/2010/01/22/file-services-management-pack-for-system-center-operations-manager-2007-beta-now-open.aspx

It is on Connect if you want to try the beta. It is nice to see the Product Groups improving on the MPs and releasing betas for feedback.

Supported OS Versions

The following table describes which File Services role service can be monitored with the beta management pack on various Windows Server versions:

Role Service and OS Version Supported

  • DFS Namespaces
    • Windows Server 2003, 2003 R2, 2008, 2008 R2
  • DFS Replication
    • Windows Server 2003 R2, 2008, 2008 R2
  • File Classification Infrastructure
    • Windows Server 2008 R2
  • File Server Resource Manager
    • Windows Server 2008 R2
  • NFS File Sharing
    • Windows Server 2008 R2
  • SMB File Sharing
    • Windows Server 2008 R2
New Features

Here are  several of the key features provided in this beta management pack:

Agentless Monitoring

Ability to monitor file services on servers without deploying a SCOM agent to the specific server

Highly Available Cluster Instance Monitoring

Ability to monitor the health status of a Highly Available File Server deployed on a Failover Cluster

NFS Role Service

Monitor activity logging, NIS configuration, port registration, portmaper service, NFS service driver, username mapping service, and more

FSRM Role Service

Monitor FSRM service, quota driver, filescreen driver, file classification task progress, and orphaned mountpoints

DFSR Role Service

Monitor the health of DFS Replication service, communications with replication partners, database recovery, communications with Domain Controllers, free space on volume containing a replicated folder, USN journal wrap events, overlap with FRS, inconsistent configuration, and more

DFSR Backlog Tracking

Ability to display the backlog count per connection for a DFS replication group

DFSR Performance Counters

Track data for bandwidth ravings, replication conflicts, deleted files and staging area

DFS Namespace Role Service

Monitor DFS namespace service, health of a single namespace hosted on multiple servers, health of the AD component of DFS namespaces, site table initialization, namespace initialization, Namespace Synchronization with AD, Folder Target Health and more

SMB Role Service

Monitor the health of Lanman server service, creation of shares at system startup, IRP stack overflow events, firewall port configuration

Beta Management Packs for SharePoint Server 2010 Beta and SharePoint Foundation 2010 beta

January 12, 2010

If you are testing out the new SharePoint 2010 betas then you may want to look at the beta MPs for them as well. They work with both SP1 and R2.

Details of the improvements to the packs are here which includes the links to the download locations.

The post highlights the fact that they have significantly increased the number of discoveries, classes and monitors but have reduced the rules. But as we all know more does not always mean better. In fact one of Microsoft’s big advertising themes for Windows Server was “Do More With Less”. I would rather have 1 good quality monitor than 10 poor ones. But it looks like they have improved the health monitoring as shown in the screenshots. Significant improvements for large SharePoint installations.

In 2010 you can monitor multiple farms, multiple servers, services, shared services, SharePoint Health Analyzer rules (Which saves you a trip to central admin which also means that System Center Operation Manager console is your one stop shop for all monitoring requirements) and web applications.

In case you were not aware SharePoint Foundation is the new name for Windows SharePoint services. So SharePoint Foundation 2010 is actually WSS v4.0. Note that the new versions of SharePoint are 64 bit only.

The main MP covers

  • SharePoint Server 2010
  • Project Server 2010
  • Search Server 2010

DNSSec Zone TrustAnchors

December 18, 2009

I started to see this error as I moved servers in my test environment to Windows 2008 R2.

Alert

Name

DNS 2008 Monitor Zone Resolution Alert

Description

Zone TrustAnchors on DNS Server VDC01.Cosiris.local is not responding to queries.

Source

TrustAnchors (VDC01.Cosiris.local)

The MP is DNS 2008 MP v6.0.6480.0 and OpsMgr 2007R2.

I had not seen this before and as i was having some general problems with the test environment I thought that it might be linked. In fact it seems to be a new feature of Windows 2008 R2. A bit of searching brought in some more information on DNSSec (DNS Security).

http://tools.ietf.org/html/draft-ietf-dnsop-dnssec-trust-anchor-03

http://www.dnssec-tools.org/wiki/index.php/Trust_Anchor

http://blogs.technet.com/sseshad/archive/2008/10/30/dnssec-in-windows-7.aspx

DNSSEC in Windows Server 2008 R2

From http://technet.microsoft.com/en-us/library/ee649277(WS.10).aspx

A trust anchor is a preconfigured public key associated with a specific zone. Windows Server 2008 R2 supports the configuration of trust anchors by using DNSKEY resource records.

A validating DNS server must be configured with one or more trust anchors in order to perform validation. At least one trust anchor is required if any DNSSEC data is to be validated by the DNS server. Additional trust anchors can be deployed to support islands of trust. DNS server management tools (DNS Manager and Dnscmd.exe) can be used to locally or remotely view and modify trust anchors. Trust anchors apply only to the zone for which they are configured.

If the DNS server is running on a domain controller, trust anchors are stored in the forest directory partition in Active Directory Domain Services (AD DS) and will be replicated to all domain controllers in the forest. On standalone DNS servers, trust anchors are stored in a file named TrustAnchors.dns in %windir%\System32\DNS.

The reason it shows up as an alert is that it appears to be a DNS zone in Windows 20089 R2. As I am not intending to run DNSSec I just put an override on this alert.

For a 12:47 video on DNSSec and a link to a deployment white paper go to this link http://edge.technet.com/Media/DNS-Security-DNSSec-Overview/.

Ian

Dec 2009

Group Policy Preprocessing (Active Directory) Alert

December 14, 2009

This error may occur on Windows 2008 servers

Group Policy Preprocessing (Active Directory) Alert
Alert Description

Source:
Server name
The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description.

Active Directory Bind Monitor

Summary

Group Policy Preprocessing (Active Directory)

Group Policy processing requires Active Directory. The Group Policy service reads and updates information stored in Active Directory. The absence of Active Directory (or a domain controller) prevents Group Policy from applying to the computer or user.

Resolutions

Correct binding to the directory

The Group Policy service logs the error code. This information appears on the Details tab of the error message in Event Viewer. The error code (displayed as a decimal) and error description fields further identify the reason for the failure. Evaluate the error code with the list below:

  • Error code 5
  • Error code 49
  • Error code 258

Error code 5 (Access is denied)

This error code might indicate that the user does not have permission to Active Directory.

To correct permissions for accessing Active Directory:

Use Active Directory troubleshooting procedures to further diagnose the problem.

Error code 49 (Invalid credentials)

This error code might indicate that the user’s password expired while the user is still logged on the computer.

To correct invalid credentials:

  • Change the user’s password.
  • Lock/unlock the workstation.
  • Check if there are any system services running as the user account.
  • Verify the password in service configuration is correct for the user account.

Error code is 258 (Timeout)

This error code might indicate that the DNS configuration is incorrect.

To correct timeout issues:

Use the nslookup tool to confirm _ldap._tcp.<domain-dns-name> records are registered and point to correct servers (where domain-dns-name is the fully qualified domain name of your Active Directory domain).

Use Active Directory troubleshooting procedures to further diagnose the problem.

Note: These steps may have varying results if your network constrains or blocks ICMP packets.

This knowledge is identical to http://technet.microsoft.com/en-us/library/cc727283(WS.10).aspx about event ID 1006.

Additional error codes for event 1058  can be found at http://technet.microsoft.com/en-us/library/cc727259(WS.10).aspx

If you follow the link in the knowledge to do troubleshooting AD then you go to http://technet.microsoft.com/en-us/library/cc732148(WS.10).aspx and get told that “The document that you are attempting to access is not yet available.” even though it is dated 7th November 2008.

There is a hotfix for Windows 2008 servers that this applies to.

http://support.microsoft.com/default.aspx?scid=kb;en-us;950876&sd=rss&spid=12925

Information

Alert is “Active Directory Search Monitor” from Group Policy 2008 MP. It is looking for event 1080 in System and is a Manual Reset monitor. The same named alert is from “Active Directory Bind Monitor” and is looking for event 1006 and is also a Manual Reset.

NB as this is a monitor you have to do Reset Health in Health Explorer and not just Close the alert. These alerts rollup for Availability and will create the calculated alerts (AD Domain Availability Health Degraded and  AD Site Availability Health Degraded) for the domain if more than 60% of DCs are affected.

OpsMgr is R2 and AD MP is v6.0.6452.0.

Power Management MP Needs Something to Manage

December 2, 2009

According to the Power Management MP (version 6.0.6735.0 is the first version and was released on 9th Nov 2009) the Windows 2008 R2 Server hardware that qualifies for the “Enhanced Power Management” Additional Qualification logo is at

http://www.windowsservercatalog.com/results.aspx?&chtext=&cstext=&csttext=&chbtext=&bCatID=1333&cpID=0&avc=10&ava=0&avq=30&OR=1&PGS=25&ready=0

The only ones on the list (as off 2nd Dec 09) are the following 12 HP ProLiants.

  • ProLiant BL280c G6 2.93GHz Quad Core
  • ProLiant BL2x220c G6 2.53GHz Quad Core
  • ProLiant BL460c G6 2.93GHz Quad Core
  • ProLiant BL490c G6 2.93GHz Quad Core
  • ProLiant DL320 G6 2.93GHz Quad Core
  • ProLiant DL360 G6 2.93GHz Quad Core
  • ProLiant DL370 G6 3.20GHz Quad Core
  • ProLiant DL380 G6 2.93GHz Quad Core
  • ProLiant DL380 G6 3.33GHz Quad Core
  • ProLiant ML330 G6 2.53GHz Quad Core
  • ProLiant ML350 G6 2.93GHz Quad Core
  • ProLiant ML370 G6 3.20GHz Quad Core

Enhanced Power Management
The Enhanced Power Management qualifier identifies servers which support the next generation power management technology available with Windows Server 2008 R2. The software infrastructure and management interfaces in Windows Server 2008 R2 that help improve the power efficiency of the server platform and enable remote monitoring of power consumption and remote control of the power profile. There are three major requirements for a system to qualify for this Additional Qualifier;

1. The server system provides a system power meter and system power budget capability in hardware

2. The server system supports the new power metering and budgeting ACPI interface (ACPI V4.0) specification

3. The server system enables control of processor performance states by the Operating System

These new features in Server 2008 R2 will provide cost-savings associated with reducing power consumption on each server. They will also help with capacity planning by making power consumption and power budget information available to administrators. This helps enable more efficient allocation of power and cooling infrastructure in the data center. System Center Operations Manager (SCOM) 2007 R2 provides a Management Pack that takes advantage of all of these new features in Server 2008 R2. Any server that qualifies for the Enhanced Power Management qualifier has native support for the features in this Management Pack.

Unless you are rolling out Windows Server 2008 R2 on those hardware configurations and on OpsMgr R2 then you will not get any advantage of deploying this MP. Hopefully other vendors will catch up as the facilities to monitor power and carbon footprint is intriguing. It may be that some of these features can be enabled on other machines with a future BIOS update?  Or maybe they need to be built in from scratch. One to keep an eye on for the future (in more ways than one!).

Ian

Authoring PRO-Enabled Management Packs

August 26, 2009

Patrick Pendergast (SCVMM Program Manager) has posted that there is a document out to help create PRO enabled MPs.

http://blogs.technet.com/scvmm/archive/2009/08/25/writing-pro-enabled-management-packs.aspx

This is a 32 page document starting with explaining what PRO is.

Physical Resource Optimization (PRO) is extended through a System Center Operations Manager 2007 management pack.

PRO enables you to  augment the available knowledge in the management packs to make recommendations or take actions that take advantage of the additional capabilities available when workloads are running in a virtualized environment.

PRO relies on Operations Manager 2007 to monitor and collect performance data from hosts and virtual machines within an environment.

Nice diagram showing how it all fits together.

image

This document goes into a lot of XML and so is not for the faint hearted!


Follow

Get every new post delivered to your Inbox.