Microsoft KB Archive/892306

= A performance threshold rule in MOM 2005 may collect the wrong performance information when the substring of the defined performance provider contains the retrieved instance name =

Article ID: 892306

Article Last Modified on 10/27/2006

-

APPLIES TO


 * Microsoft Operations Manager (MOM) 2005

-





SYMPTOMS
When you create a performance threshold rule in the Microsoft Operations Manager (MOM) 2005 Administrator Console to monitor a specific instance name, the rule may not work as you expect. Specifically, when the substring of the defined performance provider contains the retrieved instance name, this rule may collect performance information from other instance names.

For example, this problem may occur when you try to collect the Process- %Processor Time information for the Notepad.exe process. In this scenario, the MOM agent may collect performance information from the &quot;Note.exe&quot; process or from the &quot;No.exe&quot; process instead of from the &quot;Notepad.exe&quot; process.



WORKAROUND
To work around this problem, follow these steps:
 * 1) In the left pane of the MOM Administrator Console, select the performance threshold rule.
 * 2) In the right pane, right-click the performance threshold rule, click Properties, and then click the Criteria tab.
 * 3) Click to select the from instance check box, and then specify the full instance name that you want to monitor.
 * 4) Click OK to close the Threshold Rule Properties dialog box.
 * 5) Commit the performance threshold rule. Or, wait for the agents to automatically receive the updated rule.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.



Steps to reproduce the problem
 Create a performance provider for a particular computer in the MOM Administrator Console, as in the following example:

Performance object: Process

Counter: % Processor Time

Instance: notepad

Note Make sure that you configure an interval, such as five minutes, when you perform this operation. Create a performance threshold rule for the MOM agent. Make sure that this rule is based on the performance provider that you created in step 1. In the Threshold Rule Properties dialog box, click the Threshold tab, and then set the less than the following value setting to 100. On the Alert tab, configure this rule to generate an &quot;alert&quot; message. Commit the performance threshold rule changes. On the MOM agent, open the %windir% folder. Copy and paste the Notepad.exe file to the MOM agent, and then change the file name to &quot;Note.exe.&quot; On the MOM agent, start the Note.exe program.

Note Wait several minutes.</li> Open the Alerts view in the MOM Operator Console. The MOM agent has generated an &quot;alert&quot; message for the Note.exe process.</li></ol>

Additional query words: capture precisely

Keywords: kbperfmon kbtshoot kbprb KB892306

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.