Critical Alert on CCMS Event (Unsuppressed)

ozsoft.sap.alerts.AlertOnCCMSEventForSAPSubComponentCritical.Unsuppressed (Rule)

Generates Unsuppressed Critical Alerts on CCMS Event for SAP SubComponent

Knowledge Base article:

Summary

OZSoft SAP Management Pack Add-On rule for Unsuppressed CCMS Alerts

While turning the suppression of the duplicates CCMS alerts in SCOM some of the CCMS alerts need to stay unique, such as Job Faulter etc.

Configuration

The SAP Management Pack configuration allows for selective alert suppression

A configuration parameter can contain a list of Regex values that matched against alert ObjectName and FieldName properties. If an alert is matching one of the Regex values the alert is marked as "Unique" and this rule will handle it ignoring teh suppression criteria

Please refer to the Users's Guide for the instructions

Element properties:

Target	ozsoft.sap.SubComponent
Category	Alert
Enabled	True
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
SdkDataSource	DataSource	Microsoft.SystemCenter.SdkEventProvider	Default
FilterCCMS	ConditionDetection	ozsoft.sap.ConditionDetection.Events.CCMSAlert.Unique	Default
WriteAction	WriteAction	ozsoft.sap.alerts.WriteAction.CCMSAlert.Unsuppressed	Default

Source Code:

<Rule ID="ozsoft.sap.alerts.AlertOnCCMSEventForSAPSubComponentCritical.Unsuppressed" Enabled="true" Target="OZMP4SAP!ozsoft.sap.SubComponent" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="SdkDataSource" TypeID="SC!Microsoft.SystemCenter.SdkEventProvider"/>

  </DataSources>

  <ConditionDetection ID="FilterCCMS" TypeID="OZMP4SAP!ozsoft.sap.ConditionDetection.Events.CCMSAlert.Unique">

    <AlertValue>1</AlertValue>

    <Unique>true</Unique>

  </ConditionDetection>

  <WriteActions>

    <WriteAction ID="WriteAction" TypeID="ozsoft.sap.alerts.WriteAction.CCMSAlert.Unsuppressed">

      <Priority>1</Priority>

      <Severity>2</Severity>

    </WriteAction>

  </WriteActions>

</Rule>