Create alert when the Runbook Monitor process was unable to retrieve any runbooks.
This rule looks for an event indicating a failure of Runbook Running Monitor.
This error typically occurs because the monitor is not able to access the Orchestrator web service. This is most likely due to either an incorrect URL or credentials that don't have access to the web service.
Verify that the Web Server and Web Service Port properties on the Runbook Host are valid. These properies are set by the registry values WebServer and WebServicePort under the key HKLM\SOFTWARE\MPAuthor\Orchestrator on the Runbook Host.
Verify that the credentials used by the monitor do not have access to the Orchestrator web server. The credentials used by the discovery are specified by the Run As Profile called Orchestrator Web Service Account. Create a Windows Run As Account with permission to Orchestrator and assign to the Run As Configuration.
Target | MPAuthor.Orchestrator.RunbookHost | ||
Category | Alert | ||
Enabled | True | ||
Event_ID | 325 | ||
Event Source | Health Service Script | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | Operations Manager |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
Alert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="MPAuthor.Orchestrator.Rule.AlertOnRunbookMonitor" Target="MPAuthor.Orchestrator.RunbookHost" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">325</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Health Service Script</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="MPAuthor.Orchestrator.Rule.AlertOnRunbookMonitor.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Target/Property[Type="MPAuthor.Orchestrator.RunbookHost"]/WebServer$</AlertParameter1>
<AlertParameter2>$Target/Property[Type="MPAuthor.Orchestrator.RunbookHost"]/WebServicePort$</AlertParameter2>
</AlertParameters>
</WriteAction>
</WriteActions>
</Rule>