HPE Windows (SNMP) Physical Drive Status Change.

HewlettPackard.Servers.ProLiant.SNMP.Physical_Drive_Status_Change._1_Rule (Rule)

Physical Drive Status Change.

Knowledge Base article:

Summary

Physical Drive Status Change.

Causes

This could be caused by the following:

Resolutions

If the physical drive failed or predicting failure, replace the drive.

Related Events

The following are monitored NT Event Log entries by this rule:

Event ID

Publisher

Log Message

3

Storage Agents

Physical Drive Status Change. Status is now %d for a physical drive on bus %d.
(This event signifies that the agent has detected a change physical drive. The variable indicates the current physical drive status)
[SNMP TRAP: 3 in CPQIDA.MIB]

3003

Storage Agents

Physical Drive Status Change. Status is now %d for a physical drive on bus %d.
(This event signifies that the agent has detected a change physical drive. The variable indicates the current physical drive status)
[SNMP TRAP: 3003 in CPQIDA.MIB]

3010

Storage Agents

Physical Drive Status Change. Status is now %d for a physical drive on bus %d.
(This event signifies that the agent has detected a change physical drive. The variable indicates the current physical drive status)
[SNMP TRAP: 3010 in CPQIDA.MIB]

3018

Storage Agents

Physical Drive Status Change. Physical Drive Status is now %d.
(This event signifies that the agent has detected a change physical drive. The variable indicates the current physical drive status)
[SNMP TRAP: 3018 in CPQIDA.MIB]

Related Links

See latest information of HPE ProLiant Management Packs:

Insight Control for Microsoft System Center documentation

Management Pack Information

HPE ProLiant Servers SNMP Management Pack

Element properties:

TargetHewlettPackard.Servers.ProLiant.SNMP.HPProLiantSNMPServerStorage
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityHigh
RemotableTrue
Event LogSystem
CommentCustomer Issues RM 7.0

Member Modules:

ID Module Type TypeId RunAs 
_907D4578_146C_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="HewlettPackard.Servers.ProLiant.SNMP.Physical_Drive_Status_Change._1_Rule" Comment="Customer Issues RM 7.0" Enabled="true" Target="HewlettPackard.Servers.ProLiant.SNMP.HPProLiantSNMPServerStorage" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Storage Agents</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>MatchesMOM2005BooleanRegularExpression</Operator>
<Pattern>^(3|3003|3010|3018)$</Pattern>
</RegExExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventLevel</XPathQuery>
</ValueExpression>
<Operator>LessEqual</Operator>
<ValueExpression>
<Value>2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>2</Priority>
<Severity>2</Severity>
<AlertName>HPE Windows (SNMP) Physical Drive Status Change.</AlertName>
<AlertDescription>$Data/EventDescription$</AlertDescription>
<AlertOwner/>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>