AEM: Invalid System Error Group Response

Microsoft.SystemCenter.CM.AEM.InvalidSystemErrorGroupResponse.Alert (Rule)

This rule generates alerts when Agentless Exception Monitoring (AEM) receives an invalid system error group response on this management server.

Knowledge Base article:

Summary

On communicating with the Microsoft Online Crash Analysis Service, AEM received an invalid response.

Causes

When CAB file for a System Error Group was transmitted to the Microsoft Online Crash Analysis (OCA) service, the service response could not be comprehended. This can happen if the OCA service may have changed the protocol to be incompatible with AEM.

Resolutions

The Alert is a warning alert to note that a response to a System Error Group report was invalid. If this happens repeatedly, please contact support.microsoft.com or oca.microsoft.com with the error information.

Element properties:

TargetMicrosoft.SystemCenter.ManagementServer
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
AEM: Invalid System Error Group Response
{0}

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.SystemCenter.CM.AEM.AlertModule Default
GenerateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SystemCenter.CM.AEM.InvalidSystemErrorGroupResponse.Alert" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.ManagementServer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.SystemCenter.CM.AEM.AlertModule">
<EventNumber>10910</EventNumber>
<ManagementGroupName>$Target/ManagementGroup/Name$</ManagementGroupName>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertName/>
<AlertDescription/>
<AlertMessageId>$MPElement[Name='Microsoft.SystemCenter.CM.AEM.InvalidSystemErrorGroupResponse.Alert.AlertMessage']$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>