Home
  •  

Alert on Job Status stopped

Microsoft.SystemCenter.ServiceManagementAutomation.RuleAlert.JobStatusStopped (Rule)

Creates an alert when event is received indicating that a job has changed status to stopped.

Knowledge Base article:

Summary

Creates alert in response to event 3184.

Causes

A workflow defined in System Center Orchestrator - Service Management Automation was unable to start or complete a job either due to invalid configuration or manually stopped by a user.

Resolution

To troubleshoot the issue, navigate to the Windows Azure Pack portal and select the Automation resource. Select Runbooks and use the filter option to select the runbook specified in the Alert and view the Jobs status. Once selected, view the History of the Job Summary to determine the cause of the failure.

Configuration

The following options can be configured on this rule:

Option

Definition

Default

Enabled

Specifies whether the rule should run.

True

Alert Priority

Priority of the alert generated by this rule.

0 = Low

1 = Medium

2 = High

Medium

Alert Severity

Severity of the alert generated by this rule.

0 = Information

1 = Warning

2 = Critical

Critical

Element properties:

TargetMicrosoft.SystemCenter.ServiceManagementAutomation.Server.RunbookWorker
CategoryAlert
EnabledFalse
Event_ID3184
Event SourceMicrosoft-ServiceManagementAutomation
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Job status changed to stopped.
{0}
Event LogMicrosoft-ServiceManagementAutomation/Operational

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SystemCenter.ServiceManagementAutomation.RuleAlert.JobStatusStopped" Target="Microsoft.SystemCenter.ServiceManagementAutomation.Server.RunbookWorker" Enabled="false" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>

      <LogName>Microsoft-ServiceManagementAutomation/Operational</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>3184</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Microsoft-ServiceManagementAutomation</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>1</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.SystemCenter.ServiceManagementAutomation.RuleAlert.JobStatusStopped.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDescription$</AlertParameter1>

      </AlertParameters>

    </WriteAction>

  </WriteActions>

</Rule>