This monitor detects if the Local Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the Health Services ability to process events.
This monitor detects if an event that is logged periodically is not detected. The default threshold is listed in the Configuration Section in this knowledge article.
The default configuration is to enter a warning state when the expected event is not detected within 45 minutes.
This can be caused if there is problem logging events to the Windows Event Log or if there is a problem reading and collecting this event from the Event Log.
Check if there are any script errors in the Operations Manager event log for the LogEndToEndEvent.js script. This script logs the event that this monitor detects.
If there is no script error, check if there are any errors with the Windows Event Log Module having problems reading from the Operations Manager event log; this may be caused the action account not having enough permissions to either write or read from the event log.
Target | Microsoft.SystemCenter.HealthService |
Parent Monitor | Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorRollup |
Category | Custom |
Enabled | False |
Alert Generate | False |
Alert Auto Resolve | False |
Monitor Type | Microsoft.Windows.MissingEventLogSingleEventLog2StateMonitorType |
Remotable | True |
Accessibility | Public |
RunAs | Default |
<UnitMonitor ID="Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorError" Accessibility="Public" Enabled="false" Target="SCLibrary!Microsoft.SystemCenter.HealthService" ParentMonitorID="Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorRollup" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.MissingEventLogSingleEventLog2StateMonitorType" ConfirmDelivery="false">
<Category>Custom</Category>
<OperationalStates>
<OperationalState ID="EventFound" MonitorTypeStateID="EventRaised" HealthState="Success"/>
<OperationalState ID="MissingFor45Min" MonitorTypeStateID="MissingEventRaised" HealthState="Error"/>
</OperationalStates>
<Configuration>
<ComputerName>.</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">6022</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Health Service Script</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
<MissingComputerName>.</MissingComputerName>
<MissingLogName>Operations Manager</MissingLogName>
<MissingExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">6022</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Health Service Script</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</MissingExpression>
<Consolidator>
<ConsolidationProperties/>
<TimeControl>
<GenericSchedule>
<SimpleReccuringSchedule>
<Interval Unit="Minutes">45</Interval>
</SimpleReccuringSchedule>
<ExcludeDates/>
</GenericSchedule>
</TimeControl>
<CountingCondition>
<CountMode>OnNewItemNOP_OnTimerOutputRestart</CountMode>
</CountingCondition>
</Consolidator>
</Configuration>
</UnitMonitor>