Category Archives: Authoring

Expression Filter in the 2.0 schema

Until recently I used a performance mapper to get consecutive samples for my custom monitors or rules. This is not optimal since the data is transformed into performance [..]

Authoring, SCOM 2012

Customize your log file monitoring

Problem A customer wants to monitor a text log file for an event. There is also a correlated event that will indicate a good state. There shouldn’t be [..]

Authoring, SCOM 2012

SchedulerFilter in Web Application monitoring

A customer asked to limit the monitoring for a web site during a specific timeframe. In this Technet Forum thread it was suggested to add the SchedulerFilter to [..]

Authoring, SCOM 2012, Web Application Monitoring

Author Reports for SCOM part 1

Part 1: Create the report Part 1: Create the report Part 2: Design the report Part 3: Import the report into Operations Manager In this series of blog posts will demonstrate [..]

Authoring, Reports, SCOM 2007 R2, SCOM 2012

Correct time zone in reports

I recently observed that one of my custom alert reports didn’t show the correct timestamp for each alert. After some troubleshooting I found out that this report didn’t compensate [..]

Authoring, Reports

Invoke-WebRequest in PowerShell discovery fail

Today I encountered an error with a TimedPowerShell discovery. The Invoke-WebRequest command was the cause as I found out in the Event Log. The targeted server was running [..]

Authoring, SCOM 2012

Regular expression support in System Center Operations Manager

Microsoft has published a new KB describing the Regular expression support in System Center Operations Manager 2007 and 2012. In group calculation, PERL regular expression syntax is used [..]

Authoring, Knowledge Base, SCOM 2007 R2, SCOM 2012

Text log monitoring in Operations Manager part 2

Part 2: Log parser monitor Part 1: Built-in monitor Part 2: Log parser monitor In part 1 I showed how to use the built-in text log rule in the Authoring Console. [..]

Authoring, SCOM 2007 R2, SCOM 2012

Authoring – Error with Event ID 11903

Background A custom Management Pack with a rule matching an event in the Application log isn’t generating any alerts. Event ID 11903 Looking in the OperationsManager Event log on the [..]


Author Process monitoring

In this post I will create a Process monitor in the Authoring Console. There are some pitfalls, for example the instance Count variable and to use lower-case in [..]

Authoring, SCOM 2007 R2