Microsoft KB Archive/299592

From BetaArchive Wiki
Knowledge Base


How to Use the Repeat Count Field to Generate a Single Alert Response to a Consolidated Event

Article ID: 299592

Article Last Modified on 10/27/2006



APPLIES TO

  • Microsoft Operations Manager 2000 Service Pack 1



This article was previously published under Q299592

SUMMARY

This article describes how to use the Repeat Count field in the Advanced Criteria of a rule to generate a single alert response to a consolidated event.

MORE INFORMATION

First, create an Event Processing Rule (EPR) in your custom Processing Rule Group (PRG):

  1. Right-click an EPR folder in a PRG.
  2. Click Alert on or Respond to an Event. Click Application as the data provider, and then click Next.
  3. In the criteria properties page, specify the properties of events that you want to match, and then click Advanced.
  4. Click Repeat Count under Field, click is at least under Condition, and then specify 3 as the value. Click Add to list, and then close the Advanced Criteria properties page.
  5. Click Next, click Always process data, click Next, and then define an alert. Finish creating the EPR, and then close the EPR.

Second, create a consolidation rule that is based on the new Event Processing Rule:

  1. Right-click the new EPR, and then click Consolidate similar events.
  2. In the Criteria properties page, click the properties of events that you want to consolidate. Make sure that the criteria that you specify are the same as the criteria of the new EPR.
  3. Click Next, finish creating the consolidation rule, and then close the rule properties pages.

The new rules take effect at the next Agent heartbeat or when you manually force the changes. To manually force the changes, stop and then restart the OnePoint service on the Agent computer.

When your rule consolidates at least three of these events, you receive an alert.

Keywords: kbenv kbinfo kbnofix KB299592