Ambari General Error rule

Ambari.SCOM.GeneralErrorCollectionRule (Rule)

This rule detects general errors for Ambari API.

Knowledge Base article:

Summary

This rule detects general errors for Ambari API

Causes

This rule generates alert when Management Pack handles some general exception which is not handled by other monitors and rules. You can find more details about error in Windows Event Log.

Resolutions

Check Event log on the watcher computer for details about the error.

Element properties:

Target

Ambari.SCOM.AmbariWatcherNode

Category

EventCollection

Enabled

True

Alert Generate

True

Alert Severity

Warning

Alert Priority

High

Remotable

True

Alert Message

Error on watcher {0}.

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Ambari.SCOM.Module.CustomEventProvider	Default
GenerateAlert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Ambari.SCOM.GeneralErrorCollectionRule" ConfirmDelivery="false" Enabled="true" Priority="Normal" Remotable="true" Target="Ambari.SCOM.AmbariWatcherNode">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Ambari.SCOM.Module.CustomEventProvider">

      <ComputerName>$Target/Host/Property[Type='Windows!Microsoft.Windows.Computer']/NetworkName$</ComputerName>

      <LogName>Operations Manager</LogName>

      <EventNumber>1901</EventNumber>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>2</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="Ambari.SCOM.GeneralErrorCollectionRule.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SuppressionValue>

      </Suppression>

    </WriteAction>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>