Sus Communication Health Monitor (Mobile Device Manager Log)

Microsoft.SystemCenter.MobileDeviceManager.2008.1_1.SoftwareDistributionDriver.SusCommunication.MobileDeviceManager.WSUSConnectivety.EventBased.UnitMonitor (UnitMonitor)

Knowledge Base article:

Sus Communication (Aspect)

This aspect contains the Software Update Services (SUS) communication objects that you can monitor in the MDM Software Distribution Driver. These health monitors include the following detectors.

Green Health State

Event ID 8020: SWD_SUS_SYNC_SUCCESS - Software Distribution service updates are synchronized.

Yellow Health States

Event ID 8021: SWD_SUS_BAD_UPDATE - Software Distribution service cannot parse update X. The update may be invalid or contain unknown elements.
Event ID 8022: SWD_SUS_CONNECTION_LOST - Software Distribution service cannot parse update. The update may be invalid or contain unknown elements.
Event ID 8060: SWD_SUS_OPERATION_FAILED - Software Distribution service: WSUS operation failed.
WSUS Connectivety (Diagnoser)
This condition occurs if the MDM Software Distribution Driver cannot communicate with the Windows Server Update Services (WSUS) database. This issue may occur if any of the following conditions are true:
- There is a network connectivity issue between MDM Device Management Server and the WSUS database.
- The WSUS database is malfunctioning.
- MDM Device Management Server is not in the proper security group.
- There is a loopback security unauthorized exception.
A network connectivity issue is the most likely cause of this condition. To diagnose WSUS connection failure events, perform the following checks:

Is the server connected to the corporate network or Intranet appropriately? Is there network connectivity between MDM Device Management Server and the WSUS Server?

Check IP address configuration and connectivity.

Check database configuration and connectivity.

Verify connectivity to the database server (Resolution)
To resolve this issue, verify that MDM Device Management Server can communicate with the database server.

Verify connectivity to the WSUS database (Resolution)
To resolve this issue, verify that MDM Device Management Server can connect to the WSUS database.

Element properties:

Target

Microsoft.SystemCenter.MobileDeviceManager.2008.1_1.SoftwareDistributionDriver.ClassType

Parent Monitor

System.Health.AvailabilityState

Category

StateCollection

Enabled

True

Alert Generate

True

Alert Severity

MatchMonitorHealth

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

Sus Communication Alert

{0}

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter.MobileDeviceManager.2008.1_1.SoftwareDistributionDriver.SusCommunication.MobileDeviceManager.WSUSConnectivety.EventBased.UnitMonitor" Accessibility="Public" Enabled="onEssentialMonitoring" Target="Microsoft.SystemCenter.MobileDeviceManager.2008.1_1.SoftwareDistributionDriver.ClassType" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="Microsoft.SystemCenter.MobileDeviceManager.2008.1_1.SoftwareDistributionDriver.SusCommunication.MobileDeviceManager.WSUSConnectivety.EventBased.UnitMonitor.AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="Success" MonitorTypeStateID="FirstEventRaised" HealthState="Success"/>

    <OperationalState ID="Negative" MonitorTypeStateID="SecondEventRaised" HealthState="Warning"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>

    <FirstLogName>Mobile Device Manager</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Device Manager</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>8020</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>

    <SecondLogName>Mobile Device Manager</SecondLogName>

    <SecondExpression>

      <Or>

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>PublisherName</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>Device Manager</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>8022</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

        <Expression>

          <And>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>PublisherName</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>Device Manager</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>EventDisplayNumber</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>8060</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </And>

        </Expression>

      </Or>

    </SecondExpression>

  </Configuration>

</UnitMonitor>