System Management

Running MP2xml.exe in NON-MOM management server

2008-04-23T23:35:00.000-07:00

Someone in MOMcommunity.com asked us if we could run the MP2XML.exe outside the MOM Management server. So here is how you do it.

To run MP2xml.exe outside the MOM management servers do the following.

1) Copy the following DLL's to the MP2XML.exe folder.
2) Register the DLL's (some of the DLL's may not register)
3) Run the MP2XML.exe.

CMSupportCom.dll
EemConfigSnapIn.dll
EemConsoleSnapIn.dll
EEMEnginePS.dll
EemGuiCommon.dll
EemMonitorSnapIn.dll
EemRulesSnapIn.dll
MOMCommon.dll
MOMConfig.dll
MOMEngine.dll
MOMMPSupport.dll
MonitorGui.dll

NetIQ Appmanager - Query to find the Stopped job ID’s and the Server names

2008-03-19T03:28:00.000-07:00

Below is the SQL query to find the Stopped job ID’s and the Server names in NetIQ AppManager.

select a.Jobid, b.Name from job a, Object b where a.status&0xFF=4 And a.machineobjid = b.objid AND ParentJobID IS NOT NULL AND ParentJobID <> 0

I have customized a KS which event/alerts if there are any stopped jobs and restarts then optionally and it also gives you the server name on which the jobs are stopped. Please contact me if you need the KS.

NetIQ - SQL Query to find Grayed Out machine in NetIQ AppManager

2008-03-19T02:50:00.000-07:00

Below is the query to find the list of servers which are currently grayed-out in NetIQ AppManager.

SELECT Name FROM Object WHERE (TypeID = 2 OR TypeID = 16) AND Status & 0x40 = 0x40 AND Status & 0x08000000 = 0

How to query the list of servers currently monitored in NetIQ QDB database?

2008-01-16T23:38:00.000-08:00

The below query will give all the currently monitored server names of both UNIX and WINDOWS server.

Execute the following query in the MSSQL query analyzer.
"Select name from object where typeid = '2' or typeid = '16'"

Sending Custom SNMP Trap from MOM 2005

2007-12-28T04:01:00.000-08:00

After a long time I have written a script for MOM 2005, someone from my company requested if we could send a custom SNMP trap in MOM 2005, below is a VB script which sends a Custom SNMP trap in MOM 2005.

The script below uses Trapgen.exe which is freely available from www.ncomtech.com

You can download the trapgen.exe from http://ncomtech.com/downloads/windows/trapgen28.zip

The VBscript below need to run as a response to an Event rule which generates an alert, whenever an alert is raised the script gets the Description, Domain and Machine Name, and the Severity of the alert and then passes it as a parameter to trapgen.exe

Note: Need to specify the path for the trapgen.exe in the VBscript below and also you can add your own Alert field/object in the script for more information on available Alert fields/object, please check the Microsoft Operations Manager SDK help file.

'**********************Custom SNMP Trap VBScript*********************

Option Explicit

Dim objAlert
Dim strComputer, strDesc, stralertsource, strRuleName, Stralertlevel
Dim c1,c2,c3,c0
Dim c4,c5,c6
Dim c7,c8,c9
Dim c10,c11,c12,c13,C14, c15
Dim strCmdLine, wshShell

'Collecting the Alert details

If (ScriptContext.IsAlert()) Then

Set objAlert = ScriptContext.Alert

if objAlert.AlertLevel = 50 then

Stralertlevel = "Critical Error"

elseif objAlert.AlertLevel = 60 then

Stralertlevel = "Security Issue"

elseif objAlert.AlertLevel = 70 then

Stralertlevel = "Service Unavailable"

end if

set wshShell = CreateObject ("WSCript.shell")

'This is a test SNMP trap, obvious you need to provide the path below for trapgen.exe.

C1 = "e:\trapgen.exe"
C2 = "-d"
c3 = "127.0.0.1"
c4 = "-c"
c5 = "public"
c8 = "-o"
c9 = "1.3.6.1.4.1.2349"
c10 = "-v"
c11 = "1.3.6.1.4.1.2349.2.2.2.3"
C6 = "1.3.6.1.4.1.2349.2.2.2.4"
C7 = "1.3.6.1.4.1.2349.2.2.2.7"
c12 = "STRING"
C13 = chr(34) & objAlert.Description & chr(34)
C14 = chr(34) & objAlert.ComputerDomain & "\" & objAlert.Computer & chr(34)
C15 = chr(34) & Stralertlevel & chr(34)

strCmdLine = C1 & " " & C2 & " " & c3 & " " & c4 & " " & c5 & " " & c8 & " " & c9 & " " & c10 & " " & c11 & " " & c12 & " " & c15 & " " & c10 & " " & c6 & " " & c12 & " " & c14 & " " & c10 & " " & c7 & " " & c12 & " " & c13

wshShell.Run strCmdLine,1,True

set wshshell = nothing

End If

'*********************************End of Script***************************

FolderSize Monitoring

2007-05-24T07:35:00.000-07:00

I've created a script that will monitor a Folder size for MOM 2005 if the file size is Greater then the specified threshold then an Event will be raised in MOM.

Parameters - Folder_name (need to specify the Path and the Folder Name), FolderSize_Threshold (Folder size in KB) and GenerateEvent (1 to Generate Success Event and 0 to Disable Success Event)

Create New Event Rule to Monitor the Event ID 4446 for Folder size is greater then the specified Threshold.

Create New Event Rule to Monitor the Event ID 4447 for Success Event.

Create New Event Rule to Monitor the Event ID 4442 for Folder Not found Error.

If you want to change the folder size to be smaller then Specified threshold then find the below line in the script "if foldersize > FolderSizeThreshold then" and change it to "if foldersize < FolderSizeThreshold then"

'********************************************************************************

Option Explicit

Dim foldersize, fs, folder, bGenerateEvent
Dim Foldername, FolderSizeThreshold
Dim objEvt, objParameters

Const EVENT_TYPE_SUCCESS = 0
Const EVENT_TYPE_ERROR = 1
Const EVENT_TYPE_WARNING = 2
Const EVENT_TYPE_INFORMATION = 4
Const EVENT_TYPE_AUDITSUCCESS = 8
Const EVENT_TYPE_AUDITFAILURE = 16

On Error Resume next

Set objParameters = ScriptContext.Parameters

Foldername = objParameters.get("Folder_name")
FolderSizeThreshold = objParameters.get("FolderSize_Threshold")
bGenerateEvent = objParameters.get("GenerateEvent")

Set fs=CreateObject("Scripting.FileSystemObject")

Set folder=fs.GetFolder(Foldername)

If Err.Number > 0 Then

Set objEvt = ScriptContext.CreateEvent
objEvt.Message = "Cannot find the folder " & Err.Number & " on the server " & objEvt.LoggingComputer
objEvt.EventSource = "FolderSizeMonitor"
objEvt.EventType = EVENT_TYPE_ERROR
objEvt.EventNumber = 4442
ScriptContext.Submit(objEvt)
ScriptContext.Quit

Else

foldersize = folder.Size / 1024

if foldersize > FolderSizeThreshold then
Set objEvt = ScriptContext.CreateEvent
objEvt.Message = "The Folder " & Foldername & " on " & objEvt.LoggingComputer & " is greater then the specified threshold (threshold =" & FolderSizeThreshold & ")"
objEvt.EventSource = "FolderSizeMonitor"
objEvt.EventType = EVENT_TYPE_ERROR
objEvt.EventNumber = 4446
ScriptContext.Submit(objEvt)
ScriptContext.Quit

Else

if bGenerateEvent = 1 then

Set objEvt = ScriptContext.CreateEvent
objEvt.Message = "The Folder " & Foldername & " on " & objEvt.LoggingComputer & " is less then the specified threshold (threshold =" & FolderSizeThreshold & ")"
objEvt.EventSource = "FolderSizeMonitor"
objEvt.EventType = EVENT_TYPE_SUCCESS
objEvt.EventNumber = 4447
ScriptContext.Submit(objEvt)
ScriptContext.Quit

End if

End If

End if

Recent MOM Alerts

2007-05-24T07:31:00.000-07:00

I've created a SQL query to generate Recent MOM alerts in MOM.

Recent MOM Alerts

The below query need to be run against OnePoint database and you need specify the date, time and the server name.
This query will generate only alerts from warning and above and the alerts which are not resolved, you could also change the alert severity by the changing the AlertLevel value.

-******************************************************************************
-- Below is the Severity (AlertLevel) values for the MOM alerts in MOM 2005.
-- Severity Value:
-- SUCCESS ALERT = 10
-- INFORMATION ALERT= 20
-- WARNING ALERT = 30
-- ERROR ALERT = 40
-- CRITICAL ERROR ALERT= 50
-- SECURITY BREACH ALERT = 60
-- SERVICE UNAVAILABLE ALERT = 70

-- SQL Query:

--***************************

Declare @SDateTime DateTime
Declare @EDateTime DateTime
Declare @Server varchar(30)
Declare @ID Varchar(1000)

--***************************

SET @SDateTime = '10/05/2006 12:00:00 AM' -- Format MM/DD/YYYY 12:00:00 AM/PM
SET @EDateTime = '10/12/2006 12:00:00 AM' -- Format MM/DD/YYYY 12:00:00 AM/PM
SET @Server = 'your Server name'

select @ID = idComputer from computer where name = @server
Select Name, Description, Culprit, AlertLevel, ResolutionState, RepeatCount, TimeOffirstevent, TimeofLastevent from alert WHERE (TimeOfFirstEvent BETWEEN @SDateTime AND @EDateTime) And (TimeOfLastEvent BETWEEN @SDateTime AND @EDateTime) AND idComputer=@ID and AlertLevel > 20 and ResolutionState <> 255

FileSize Monitoring for MOM 2005

2007-05-24T06:59:00.000-07:00

I've created a script that will monitor a file size for MOM 2005 if the file size is less then the specified threshold it will generate and event in MOM.

NAME: FilesizeMonitor.vbs

Parameters - File_name (need to specify the Path and the file Name)and FileSize_Threshold (File size in KB)

Create New Event Rule to Monitor the Event ID 4444 for File Threshold Exceed and Event 4441 for File Not found Error.

'*****************************************************************
Option Explicit
Dim filesize, fs, file
Dim Filename, FileSizeThreshold
Dim objEvt, objParameters

Const EVENT_TYPE_SUCCESS = 0
Const EVENT_TYPE_ERROR = 1
Const EVENT_TYPE_WARNING = 2
Const EVENT_TYPE_INFORMATION = 4
Const EVENT_TYPE_AUDITSUCCESS = 8
Const EVENT_TYPE_AUDITFAILURE = 16

On Error Resume next

Set objParameters = ScriptContext.Parameters
Filename = objParameters.get("File_name")
FileSizeThreshold = objParameters.get("FileSize_Threshold")

Set fs=CreateObject("Scripting.FileSystemObject")
Set file=fs.GetFile(Filename)

If Err.Number > 0 Then

Set objEvt = ScriptContext.CreateEvent
objEvt.Message = "Cannot find the file " & Filename & " on the server " & objEvt.LoggingComputer
objEvt.EventSource = "FileSizeMonitor"
objEvt.EventType = EVENT_TYPE_ERROR

objEvt.EventNumber = 4441

ScriptContext.Submit(objEvt)

ScriptContext.Quit
Else
filesize = file.Size / 1024

if filesize <>

Set objEvt = ScriptContext.CreateEvent

objEvt.Message = "The File " & Filename & " on " & objEvt.LoggingComputer & " is less then the specified threshold (threshold =" & FileSizeThreshold & ")"

objEvt.EventSource = "FileSizeMonitor"

objEvt.EventType = EVENT_TYPE_ERROR

objEvt.EventNumber = 4444

ScriptContext.Submit(objEvt)

ScriptContext.Quit

End If
End if