The rule oversees the Event Log and watches for error events submitted by SSAS management pack. If one of the workflows (discovery, rule or monitor) fails, an event is logged and a critical alert is reported.
The rule oversees the Event Log and watches for error events submitted by SSAS management pack. If one of the workflows (discovery, rule or monitor) fails, the event is logged and a critical alert is reported.
Workflow may fail due to the number of reasons, including (but not limited to):
RunAs account misconfiguration
Lack of permissions
WMI corruption
Timeouts
Other unexpected conditions
The resolution(s) depend upon the root causes, which must be investigated in each case when the issue occurs. The remediation action depends on the root cause. General recommendations are as follows:
The administrator should consult Microsoft support if the alert message appears to be cryptic or unclear.
Disable the monitor entirely if conditions described in Causes section of this article are not a concern for the server.
Name | Description | Default Value |
Enabled | Enables or disables the workflow | Yes |
Priority | Defines Alert Priority | 2 |
Severity | Defines Alert Severity | 2 |
Target | Microsoft.SQLServer.AnalysisServices.Windows.EventLogCollectionTarget | ||
Category | Alert | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | High | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | Operations Manager |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
Alert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="Microsoft.SQLServer.AnalysisServices.Windows.Monitoring.Rule.EventLogCollectionTarget.ModuleError" Target="SQLAS!Microsoft.SQLServer.AnalysisServices.Windows.EventLogCollectionTarget" Enabled="true" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">4221</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventLevel</XPathQuery>
</ValueExpression>
<Operator>LessEqual</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>MatchesWildcard</Operator>
<Pattern>SQL Server Analysis Services *</Pattern>
</RegExExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery>Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>^Management Group: "$Target/ManagementGroup/Name$"</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>2</Priority>
<Severity>2</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.SQLServer.AnalysisServices.Windows.Monitoring.Rule.EventLogCollectionTarget.ModuleError.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>