Alert on invalid Runbook definition

Microsoft.SystemCenter.ServiceManagementAutomation.RuleAlert.RunbookDefinitionInvalid (Rule)

Creates an alert when event is received indicating that a runbook has been saved with an invalid defintion.

Knowledge Base article:

Summary

Creates alert in response to event 50006.

Causes

A workflow defined in System Center Orchestrator - Service Management Automation was unable to start or complete a job either due to invalid configuration or manually stopped by a user.

Resolution

To troubleshoot the issue, navigate to the Windows Azure Pack portal and select the Automation resource. Select Runbooks and use the filter option to select the runbook specified in the Alert and view the Jobs status. Once selected, view the History of the Job Summary to determine the cause of the failure.

Configuration

The following options can be configured on this rule:

Option

Definition

Default

Enabled

Specifies whether the rule should run.

True

Alert Priority

Priority of the alert generated by this rule.

0 = Low

1 = Medium

2 = High

Medium

Alert Severity

Severity of the alert generated by this rule.

0 = Information

1 = Warning

2 = Critical

Critical

Element properties:

TargetMicrosoft.SystemCenter.ServiceManagementAutomation.Server.WebService
CategoryAlert
EnabledFalse
Event_ID50006
Event SourceMicrosoft-ServiceManagementAutomation
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Runbook definition is invalid.
{0}
Event LogMicrosoft-ServiceManagementAutomation/Operational

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.SystemCenter.ServiceManagementAutomation.RuleAlert.RunbookDefinitionInvalid" Target="Microsoft.SystemCenter.ServiceManagementAutomation.Server.WebService" Enabled="false" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>
<LogName>Microsoft-ServiceManagementAutomation/Operational</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>50006</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-ServiceManagementAutomation</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.SystemCenter.ServiceManagementAutomation.RuleAlert.RunbookDefinitionInvalid.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
</WriteAction>
</WriteActions>
</Rule>