Discussion:
monitoring windows tasks by SCOM 2007
(too old to reply)
smeeta
2008-03-03 08:08:04 UTC
Permalink
Hi,
i want to monitor one windows scheduled task.
i am going with Alert Generating Rules/Event Based/windows NT eventlog.
taking two parameter as:
event source equals app name
and Event Type equals Error.
what my concern is can it check whether the password has expired for the
scheduled task?

Thanks,
Smeeta
Anders Bengtsson [MVP]
2008-03-03 09:40:04 UTC
Permalink
Hi smeeta,

If you want to monitor scheduled tasks, please take a look at http://contoso.se/blog/?p=206
but if you want to monitor the service account for a task you can check a
script like this http://contoso.se/blog/?p=232
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se



s> Hi,
s> i want to monitor one windows scheduled task.
s> i am going with Alert Generating Rules/Event Based/windows NT
s> eventlog.
s> taking two parameter as:
s> event source equals app name
s> and Event Type equals Error.
s> what my concern is can it check whether the password has expired for
s> the
s> scheduled task?
s> Thanks,
s> Smeeta
smeeta
2008-03-05 06:16:00 UTC
Permalink
Hi Anders,
i want to go with both monitoring the scheduled task and the service
account for that.
but how can i apply that script at http://contoso.se/blog/?p=232 to my
task. and how can it be monitored by SCOM?

Thanks,
Smeeta
Post by Anders Bengtsson [MVP]
Hi smeeta,
If you want to monitor scheduled tasks, please take a look at http://contoso.se/blog/?p=206
but if you want to monitor the service account for a task you can check a
script like this http://contoso.se/blog/?p=232
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se
s> Hi,
s> i want to monitor one windows scheduled task.
s> i am going with Alert Generating Rules/Event Based/windows NT
s> eventlog.
s> event source equals app name
s> and Event Type equals Error.
s> what my concern is can it check whether the password has expired for
s> the
s> scheduled task?
s> Thanks,
s> Smeeta
Anders Bengtsson [MVP]
2008-03-05 07:01:43 UTC
Permalink
Hi smeeta,

scheduled task has a logfile, that you can monitor according to my link.
The other script is a script that can check your service account if the password
is about to expire. You run them with time based rules.
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se



s> Hi Anders,
s> i want to go with both monitoring the scheduled task and the
s> service
s> account for that.
s> but how can i apply that script at http://contoso.se/blog/?p=232 to
s> my task. and how can it be monitored by SCOM?
s>
s> Thanks,
s> Smeeta
s> he"Anders Bengtsson [MVP]" wrote:
s>
Post by Anders Bengtsson [MVP]
Hi smeeta,
If you want to monitor scheduled tasks, please take a look at
http://contoso.se/blog/?p=206 but if you want to monitor the service
account for a task you can check a script like this
http://contoso.se/blog/?p=232
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se
s> Hi,
s> i want to monitor one windows scheduled task.
s> i am going with Alert Generating Rules/Event Based/windows NT
s> eventlog.
s> event source equals app name
s> and Event Type equals Error.
s> what my concern is can it check whether the password has expired for
s> the
s> scheduled task?
s> Thanks,
s> Smeeta
smeeta
2008-03-05 11:42:00 UTC
Permalink
Hi Anders,
the scheduled task that i am monitoring is logging to aplication log only.
but only distinct parameter is Event source. so i used custom expression
"Event type" equals Error.
but it's not working. it's looging the following error :
Description:
The Microsoft Operations Manager Expression Filter Module failed to query
the delivered item, item was dropped.
Property Expression: Event Type
Error: 0x80004005
One or more workflows were affected by this.
then i tried with Params/param1. but i didn't get any alerts.

Thanks,
Smeeta
Post by Anders Bengtsson [MVP]
Hi smeeta,
scheduled task has a logfile, that you can monitor according to my link.
The other script is a script that can check your service account if the password
is about to expire. You run them with time based rules.
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se
s> Hi Anders,
s> i want to go with both monitoring the scheduled task and the
s> service
s> account for that.
s> but how can i apply that script at http://contoso.se/blog/?p=232 to
s> my task. and how can it be monitored by SCOM?
s>
s> Thanks,
s> Smeeta
s>
Post by Anders Bengtsson [MVP]
Hi smeeta,
If you want to monitor scheduled tasks, please take a look at
http://contoso.se/blog/?p=206 but if you want to monitor the service
account for a task you can check a script like this
http://contoso.se/blog/?p=232
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se
s> Hi,
s> i want to monitor one windows scheduled task.
s> i am going with Alert Generating Rules/Event Based/windows NT
s> eventlog.
s> event source equals app name
s> and Event Type equals Error.
s> what my concern is can it check whether the password has expired for
s> the
s> scheduled task?
s> Thanks,
s> Smeeta
Anders Bengtsson [MVP]
2008-03-05 21:51:05 UTC
Permalink
Hi smeeta,

Try to start with something really simple like event ID, then add more criterias.
Also I think you should try with [] , as Params/Param[1]
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se



s> The Microsoft Operations Manager Expression Filter Module failed to
s> query
s>
smeeta
2008-03-06 05:43:03 UTC
Permalink
Hi Anders,
i don't have any particular eventid. what i have is only the event
source and i want to send alert for error events.
i tried with a rule taking the criteria as:
event source equals GeoLookUpService(app name) and
Params/Param[1] equals Error.

but it's not looging any alerts on SCOM server.
can you please provide some insight into this issue.
Thanks,
Smeeta
Post by Anders Bengtsson [MVP]
Hi smeeta,
Try to start with something really simple like event ID, then add more criterias.
Also I think you should try with [] , as Params/Param[1]
--
Anders Bengtsson
Microsoft MVP - Operations Manager
http://www.contoso.se
s> The Microsoft Operations Manager Expression Filter Module failed to
s> query
s>
Loading...