DPM Alert 3117: New servers found

DPM_Alert_3117__New_servers_found_1_Rule (Rule)

Knowledge Base article:

Management Pack

Summary
This alert is generated in Data Protection Manager (DPM) when DPM finds a new file server that you may want to protect. The "New servers found" alert is reported as active in DPM for seven days after a new server is discovered. The alert is generated on all DPM servers that are in the same Active Directory^® domain as the newly discovered server.

Causes
Once each day, DPM queries Active Directory to discover new file servers. During this process, a new server was discovered.

Resolutions
On the DPM server, identify the new file server and, optionally, set up data protection in DPM. To review the list of new servers found In DPM Administrator Console, in the Monitoring task area, display the Alerts tab, and select the "New servers found" alert. To display the list of new servers found, in the Details pane, click the Details link. To protect data on a new file server in DPM To protect data on a new file server, install the DPM File agent on the file server. For more information, see "How to install agents" in DPM Help at http://go.microsoft.com/fwlink/?linkid=46350. Add data sources on the new file server to a new or existing protection group. For more information, see "How to add members" and "How to create a protection group" in DPM Help.

Element properties:

Target	Microsoft.SystemCenter.DPM.Microsoft_System_Center_Data_Protection_Manager_2006_Servers_Installation
Category	EventCollection
Enabled	True
Event Source	DPM-EM
Alert Generate	False
Remotable	True
Event Log	DPM Alerts
Comment	Mom2005ID='{3A942408-FFCD-4288-98FD-CB5C90F8D19A}';MOM2005ComputerGroupID={49DAC409-542F-4A3A-A540-7E9C08CFF520}

Member Modules:

ID	Module Type	TypeId	RunAs
_0368A413_63A3_41DB_A1A2_1B6E068E9B34_	DataSource	Microsoft.Windows.EventProvider	Default
CollectEventData	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
CollectEventDataWarehouse	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default
ScriptResponse1	WriteAction	DPM_Alert_Mirroring	Default

Source Code:

<Rule ID="DPM_Alert_3117__New_servers_found_1_Rule" Target="Microsoft.SystemCenter.DPM.Microsoft_System_Center_Data_Protection_Manager_2006_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{3A942408-FFCD-4288-98FD-CB5C90F8D19A}';MOM2005ComputerGroupID={49DAC409-542F-4A3A-A540-7E9C08CFF520}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_0368A413_63A3_41DB_A1A2_1B6E068E9B34_" Comment="{0368A413-63A3-41DB-A1A2-1B6E068E9B34}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>DPM Alerts</LogName>

      <Expression>

        <And>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="String">EventDescription</XPathQuery>

              </ValueExpression>

              <Operator>MatchesMOM2005RegularExpression</Operator>

              <Pattern>.*\(ID:.3117\).*</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>DPM-EM</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="ScriptResponse1" TypeID="DPM_Alert_Mirroring">

      <AlertGeneration>

        <GenerateAlert>false</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>50</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>DPM Alert 3117: New servers found</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>