Delta Threshold Module Initialization Failure

Microsoft.SystemCenter.DeltaThresholdModule.FailedInitialization.Alert (Rule)

This rule generates alerts when the Delta Threshold module experiences an initialization failure.

Knowledge Base article:

Summary

The Delta Threshold Module encountered an error during initialization. As a result, the module will unload causing associated rules to unload as well.

Causes

The failure may have happened due to several reasons. Information about the failure is available in the associated event.

The cause of the failure could be:

Some configuration value is invalid. The associated event description contains the specific value that was rejected.
The specified computer could not be reached. The associated event description contains the specific error.
Insufficient credentials for operation. The associated event description has more information.
The specified performance counter information was invalid. The associated event description contains the specific error code.

Resolutions

Identify and correct the configuration causing a problem by examining the associated event description.

This could be either:

Correct the erroneous configuration element from the error event.
Provide correct credentials or fix network issues that might prevent the remote computer from being accessed.
Verify whether the counter information is correct, and whether it can be sampled using Performance Monitor.

Element properties:

Target

Microsoft.SystemCenter.HealthService

Category

Alert

Enabled

True

Alert Generate

True

Alert Severity

Error

Alert Priority

Normal

Remotable

True

Alert Message

Delta Threshold Module Failed Initialization

{0}

Event Log

Operations Manager

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.EventProvider	Default
GenerateAlert	WriteAction	System.Health.GenerateAlert	Default

Source Code:

<Rule ID="Microsoft.SystemCenter.DeltaThresholdModule.FailedInitialization.Alert" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.HealthService" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Operations Manager</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Health Service Modules</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <Value Type="String">$Target/ManagementGroup/Name$</Value>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[1]</XPathQuery>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <And>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="UnsignedInteger">10110</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <RegExExpression>

                  <ValueExpression>

                    <XPathQuery Type="UnsignedInteger">EventDescription</XPathQuery>

                  </ValueExpression>

                  <Operator>ContainsSubstring</Operator>

                  <Pattern>DeltaThreshold</Pattern>

                </RegExExpression>

              </Expression>

            </And>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.SystemCenter.DeltaThresholdModule.FailedInitialization.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

      <Suppression>

        <SuppressionValue/>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>