Alerts are not closed automatically in SCOM

KB ID:
1147
Product:
Veeam Management Pack for Microsoft System Center
Version:
5.x
Published:
Last Modified:
2011-11-29

Challenge

Alerts are not closed automatically in SCOM.

Cause

This behavior can be seen in one of the following scenarios:
 

  • The closing event does not arrive.
  • The event that would normally close the alert arrives so quickly after the error event that both share the same time stamp.

Solution

The first thing to check is that the closing event arrives and is logged in the nworks collector event log.

If the event is there, and matches the alert generating event, it is a good idea to pay attention to the time stamp. If both the alert generating event and the alert closing event arrive so quickly that they have the same time stamp in the event log, this is an issue with SCOM.

In SCOM SP1, it is a known issue that if the alert generating event and alert closing event have the same time stamp, the alert may not be closed automatically. There is no other option but to close it manually in this case.

More Information

As per information from Microsoft, in SCOM R2, the situation is somewhat better; however, there is still no way to ensure that the alert will be closed automatically in the scenario described.

Please be aware that we’re making changes which will restrict access to product updates for users without an active contract.

OK

Rate the quality of this KB article: 
5 out of 5 based on 1 ratings

Couldn't find what you were looking for?

Below you can submit an idea for a new knowledge base article.

Report a typo on this page:

Please select a spelling error or a typo on this page with your mouse and press CTRL + Enter to report this mistake to us. Thank you!

Spelling error in text:

Submit