Auto resolve SCOM alerts

Share |

Browse Library

Tags

Previous | Next | View all files | View Slideshow

Download

posted by tao.yang

06-02-2009

Downloads: 596

File size: 2.1kB

Embed

Auto resolve SCOM alerts

#================================================================================================= 
# AUTHOR:  Tao Yang  
# DATE:    22/12/2008 
# Version: 1.0 
# COMMENT: To be scheduled in Windows scheduler to close any alerts that are more than 7 days old. 
#================================================================================================= 
$CriticalEarlistDate = (Get-Date).adddays(-7) 
$WarningEarlistDate = (Get-Date).adddays(-7) 
$InfoEarlistDate = (Get-Date).adddays(-1) 
$erroractionpreference = "SilentlyContinue" 
$closed = "255" 
##Initiate SCOM PSSnapin 
$RMS = "<ENTER_ROOT_MANAGEMENT_SERVER_FQDN_HERE>" 
#adding SCOM PSSnapin 
if ((Get-PSSnapin | where-Object { $_.Name -eq 'Microsoft.EnterpriseManagement.OperationsManager.Client' }) -eq $null) 
{  
 Add-PSSnapin Microsoft.EnterpriseManagement.OperationsManager.Client -ErrorAction SilentlyContinue -ErrorVariable Err 
} 
if ((Get-PSDrive | where-Object { $_.Name -eq 'Monitoring' }) -eq $null) 
{ 
 New-PSDrive -Name:Monitoring -PSProvider:OperationsManagerMonitoring -Root:\ -ErrorAction SilentlyContinue -ErrorVariable Err | Out-Null 
} 
#Connect to RMS 
Set-Location "OperationsManagerMonitoring::" 
new-managementGroupConnection -ConnectionString:$RMS | Out-Null 
Set-Location Monitoring:\$RMS 
 
#Critical Alerts 
$CriticalAlerts = get-alert -criteria "Severity = '2'"| where { $_.resolutionstate -ne $closed -and $_.timeRaised -le $CriticalEarlistDate } 
foreach ($alert in $CriticalAlerts) 
{ 
 $alert.ResolutionState = $closed 
 $alert.update("") 
} 
#Warning Alerts 
$WarningAlerts = get-alert -criteria "Severity = '1'" | where { $_.resolutionstate -ne $closed -and $_.timeRaised -le $WarningEarlistDate } 
foreach ($alert in $WarningAlerts) 
{ 
 $alert.ResolutionState = $closed 
 $alert.update("") 
} 
#Info Alerts 
$InfoAlerts = get-alert -criteria "Severity = '0'" | where { $_.resolutionstate -ne $closed -and $_.timeRaised -le $InfoEarlistDate } 
foreach ($alert in $InfoAlerts) 
{ 
 $alert.ResolutionState = $closed 
 $alert.update("") 
} 
##Make sure the script is closed 
if ($error.count -eq "0") 
{ 
 #$host.setShouldExit(0) 
} 
else 
{ 
 #$host.setShouldExit(1) 
} 

When I was implementing SCOM 2007, I couldn't find a setting in SCOM to auto resolve alerts that are older than certain days. - This functionality is available in MOM 2005. Therefore I wrote this Powershell script and created a Windows scheduled task to run it daily