SCOM S2D Storage File Share Refresh Alert Rule

Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.RefreshAlert.Rule (Rule)

This rule is required to keep the alerts related to the storage File Share in actual state. Depending on the current condition, it opens new alerts, updates the existing alerts, and closes non-actual alerts.

Knowledge Base article:

Element properties:

Member Modules:

Source Code:

<Rule ID="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.RefreshAlert.Rule" Enabled="true" Target="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Custom</Category>

  <DataSources>

    <DataSource ID="WmiEventProviderDS" TypeID="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FaultWmiAlertEventDataSource">

      <InstanceType>FS</InstanceType>

      <TargetInstanceUniqueID>$Target/Property[Type="MicrosoftStorageLibrary!Microsoft.Storage.Library.Windows.FileShare"]/UniqueID$</TargetInstanceUniqueID>

      <TargetInstanceObjectID>$Target/Property[Type="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare"]/ObjectId$</TargetInstanceObjectID>

      <ComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <PollInterval>15</PollInterval>

      <WQLQuery>Select SourceObjectId, AlertType from MSFT_StorageAlertEvent Where AlertType=2</WQLQuery>

      <TargetId>$Target/Id$</TargetId>

      <TimeoutSeconds>300</TimeoutSeconds>

      <DebugMode>false</DebugMode>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.GenerateAlertWriteAction">

      <Priority>2</Priority>

      <Severity>$Data/Property[@Name='Severity']$</Severity>

      <AlertMessageId>$MPElement[Name="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.Rule.AlertMessage"]$</AlertMessageId>

      <AlertParam1>$Data/Property[@Name='SourceUniqueId']$</AlertParam1>

      <AlertParam2>$Data/Property[@Name='Reason']$</AlertParam2>

      <AlertParam3>$Data/Property[@Name='FaultingObjectDescription']$</AlertParam3>

      <AlertParam4>$Data/Property[@Name='RecommendedActions']$</AlertParam4>

      <SuppressionValue>$Data/Property[@Name='FaultId']$</SuppressionValue>

      <Custom1>fault</Custom1>

      <Custom2>$Data/Property[@Name='FaultId']$</Custom2>

      <AlertParam5>$Data/Property[@Name='FaultingObjectLocation']$</AlertParam5>

    </WriteAction>

    <WriteAction ID="CloseAlert" TypeID="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.CloseAlertsWriteAction" RunAs="System!System.PrivilegedMonitoringAccount" Target="SystemCenter!Microsoft.SystemCenter.AllManagementServersPool">

      <FaultId>$Data/Property[@Name='FaultId']$</FaultId>

      <StorageUniqueID>$Data/Property[@Name='SourceUniqueId']$</StorageUniqueID>

      <StorageObjectID>$Data/Property[@Name='SourceObjectId']$</StorageObjectID>

      <TargetId>$Data/Property[@Name='TargetId']$</TargetId>

      <DataType>$Data/Property[@Name='DataType']$</DataType>

      <TimeoutSeconds>300</TimeoutSeconds>

      <RuleId1>$MPElement[Name="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.Rule"]$</RuleId1>

      <RuleId2>$MPElement[Name="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.RefreshAlert.Rule"]$</RuleId2>

      <RuleId3>$MPElement[Name="Microsoft.Windows.Server.10.0.Storage.StorageSpacesDirect.FileShare.SyncAlert.Rule"]$</RuleId3>

    </WriteAction>

  </WriteActions>

</Rule>