notifications – Maartendamen.com

In my company we are using SCOM for monitoring our server environment. Off hours we also get notified about critical alerts using a SMS/GSM modem. Using default SCOM functionality we delay the sending of notifications by 5 minutes. This works fine for alerts with a "new" state. However if an alert is closed within the 5 minute period a "closed" notification is sent out. We do not want to see the closed alerts if an alert auto-resolved within the 5 minute time period. But if a new alert that has aged 5 minutes and sent to our GSM, we definately want to see that closed alert if it auto/manual resolves into the closed state (to make sure someone actually did something about the alert) Pro tip: this post relies on basic Windows PowerShell skills. I can highly recommend O'reilly's PowerShell cookbook to improve your basic PowerShell skills. Using default SCOM functionality, this is not possible. This is why we came up with the following idea (special thanks to my colleague Frank): Using two seperate subscriptions, one for "new" alerts and one for "closed" alerts. On the new alert subscription set a channel with a powershell script to update custom field 1 when a SMS has been sent (this subscription has the 5 minute delay) On the closed alert subscription set a condition to check custom field 1 to see wheter a SMS has been sent or not. This blog post describes how this can be done within SCOM. (more…)