KHI: Information Store performance problem may be impacting the performance of the database copy.

DatabaseCopyPerformance.DependsOn.InformationStorePerformance.AvailabilityRollup.RaiseAlert (Rule)

Knowledge Base article:

Correlated Alert

This alert was correlated by Microsoft Exchange. Frequently, one alert will fire and as a result, other alerts will also fire. For example, when a disk full alert fires, many other components that depend on disk storage will also fail and start firing additional alerts. This generates a lot of alerts, but the only meaningful one is the disk full alert. To eliminate the spurious alerts, Exchange groups them into one correlated alert, reporting only the 'root' alert. This greatly reduces the 'noise' on the operator's console.

Please see the 'Alert Context' tab of this 'Alert Properties' dialog for details and the 'Knowledge' links on related monitors.

Element properties:

Target	Microsoft.SystemCenter.RootManagementServer
Category	Alert
Enabled	True
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
DataSource	DataSource	Microsoft.SystemCenter.SdkEventProvider	Default
ConditionDetection	ConditionDetection	System.ExpressionFilter	Default
WriteAction	WriteAction	Microsoft.Exchange.2010.GenerateAlertFromSdkEvent	Default

Source Code:

<Rule ID="DatabaseCopyPerformance.DependsOn.InformationStorePerformance.AvailabilityRollup.RaiseAlert" Enabled="true" Target="SC!Microsoft.SystemCenter.RootManagementServer" ConfirmDelivery="false">

  <Category>Alert</Category>

  <DataSources>

    <DataSource TypeID="SC!Microsoft.SystemCenter.SdkEventProvider" ID="DataSource"/>

  </DataSources>

  <ConditionDetection TypeID="System!System.ExpressionFilter" ID="ConditionDetection">

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>500</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">DatabaseCopyPerformance.DependsOn.InformationStorePerformance.AvailabilityRollup</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </ConditionDetection>

  <WriteActions>

    <WriteAction TypeID="Microsoft.Exchange.2010.GenerateAlertFromSdkEvent" ID="WriteAction">

      <Priority>$Data/EventData/CorrelatedContext/RootCause/Priority$</Priority>

      <Severity>$Data/EventData/CorrelatedContext/RootCause/Severity$</Severity>

      <AlertName>$Data/EventData/CorrelatedContext/RootCause/AlertName$</AlertName>

      <AlertDescription>$Data/EventData/CorrelatedContext/DescriptionText$</AlertDescription>

      <AlertMessageId>$MPElement[Name="DatabaseCopyPerformance.DependsOn.InformationStorePerformance.AvailabilityRollup.AlertName"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventData/CorrelatedContext/DescriptionText$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>$Data/EventNumber$</SuppressionValue>

        <SuppressionValue>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

      </Suppression>

      <WorkflowId>$MPElement$</WorkflowId>

      <Custom1/>

      <Custom2/>

      <Custom3/>

      <Custom4/>

      <Custom5>$Data/EventData/CorrelatedContext/RootCause/MonitorType$</Custom5>

      <Custom6>$Data/EventData/CorrelatedContext/RootCause/EscalationTeam$</Custom6>

      <Custom7>$Data/EventData/CorrelatedContext/RootCause/Actionable$</Custom7>

      <Custom8>$Data/EventData/CorrelatedContext/RootCause/Urgent$</Custom8>

      <Custom9/>

      <Custom10>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</Custom10>

    </WriteAction>

  </WriteActions>

</Rule>