Monitor that checks for Error events from the source 'FAST Search FDM Worker' in the 'FAST Search' event log
This monitor checks for Error events from the source 'FAST Search FDM Worker' in the 'FAST Search' event log.
Inspect the Description field in the Alert Context/State Change Event tab for the actual event message text.
Sometimes the event log monitors trigger more often than you would like. Use the Overrides feature in SCOM to fine-tune your monitoring environment.
You can use the task Reset Log Monitors on FAST Search Server objects to reset all log monitors on the specified node(s) at the same time.
This monitor covers a wide range of failure situations. Inspect the event Description field to determine the cause.
This monitor covers a wide range of failure situations. Inspect the event Description field to resolve the issue.
Target | Microsoft.FASTSearch.MP.Entity.FDMWorker |
Parent Monitor | System.Health.AvailabilityState |
Category | AvailabilityHealth |
Enabled | True |
Alert Generate | False |
Alert Auto Resolve | True |
Monitor Type | Microsoft.Windows.2SingleEventLog2StateMonitorType |
Remotable | False |
Accessibility | Public |
RunAs | Default |
<UnitMonitor ID="Microsoft.FASTSearch.MP.Monitor.FDMWorker.Availability.Error.Log" Accessibility="Public" Enabled="true" Target="Microsoft.FASTSearch.MP.Entity.FDMWorker" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="false" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">
<Category>AvailabilityHealth</Category>
<OperationalStates>
<OperationalState ID="MonitorReset" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>
<OperationalState ID="EventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>
</OperationalStates>
<Configuration>
<FirstComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
<FirstLogName>FAST Search</FirstLogName>
<FirstExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">FAST Search FDM Worker</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventLevel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="Integer">1</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</FirstExpression>
<SecondComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
<SecondLogName>FAST Search</SecondLogName>
<SecondExpression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">4000</Value>
</ValueExpression>
</SimpleExpression>
</SecondExpression>
</Configuration>
</UnitMonitor>