SCOM S2D Storage File Share Close Alert Rule

Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.CloseAlert.Rule (Rule)

This rule monitors fault events for the File Share. It closes an Operations Manager alert for an existing fault on the File Share when a close type of the fault is raised.

Knowledge Base article:

Summary

This rule monitors fault events for the File Share. It closes an Operations Manager alert for an existing fault on the File Share when a close type of the fault is raised.

Element properties:

TargetMicrosoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare
CategoryCustom
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
WmiEventProviderDS DataSource Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FaultWmiEventDataSource Default
CloseAlert WriteAction Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.CloseAlertWriteAction System.PrivilegedMonitoringAccount

Source Code:

<Rule ID="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.CloseAlert.Rule" Enabled="true" Target="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Custom</Category>
<DataSources>
<DataSource ID="WmiEventProviderDS" TypeID="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FaultWmiEventDataSource">
<TargetInstanceUniqueID>$Target/Property[Type="MicrosoftStorageLibrary!Microsoft.Storage.Library.Windows.FileShare"]/UniqueID$</TargetInstanceUniqueID>
<TargetInstanceObjectID>$Target/Property[Type="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare"]/ObjectId$</TargetInstanceObjectID>
<ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<PollInterval>15</PollInterval>
<WQLQuery>Select SourceUniqueId, Reason, FaultingObjectLocation, FaultingObjectDescription, RecommendedActions, FaultId, PerceivedSeverity, SourceObjectId From MSFT_StorageFaultEvent Where SourceClassName = 'MSFT_FileShare' And ChangeType = 1</WQLQuery>
<TargetId>$Target/Id$</TargetId>
<TimeoutSeconds>300</TimeoutSeconds>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="CloseAlert" TypeID="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.CloseAlertWriteAction" Target="SystemCenter!Microsoft.SystemCenter.AllManagementServersPool" RunAs="System!System.PrivilegedMonitoringAccount">
<FaultId>$Data/Property[@Name='FaultId']$</FaultId>
<SourceUniqueId>$Data/Property[@Name='SourceUniqueId']$</SourceUniqueId>
<SourceObjectId>$Data/Property[@Name='SourceObjectId']$</SourceObjectId>
<TimeoutSeconds>300</TimeoutSeconds>
<RuleId1>$MPElement[Name="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.Rule"]$</RuleId1>
<RuleId2>$MPElement[Name="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.RefreshAlert.Rule"]$</RuleId2>
<RuleId3>$MPElement[Name="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.SyncAlert.Rule"]$</RuleId3>
</WriteAction>
</WriteActions>
</Rule>