Ops Mgr 2007 custom MP for monitoring event log size [updated!]


I have update the MP in recovery part. It was not possible to override the recovery properly, because using a standard script response does not allow overriding the ARGUMENTS parameter of the script (actually it does allow, but it does not work as expected – EventLogName is not resolved, since the target is passed as a string not an object).

So basing on Brian’s (http://blogs.technet.com/brianwren) input I created a custom write action module that allows you to override the COMPRESS flag and the Backup log destination folder as separate parameters. Attached is the corrected MP now (version It also has some built in groups to let you divide your servers based on the disk on which you want to store local event log backups (see overrides on the recovery for more details).

I have done some small work to update my backup event logs MP for MOM 2005 to 2007 (http://blogs.technet.com/alipka/archive/2006/04/09/monitoring-and-backing-up-event-logs-with-mom.aspx). I attach it to this blog post. The MP has been roughly tested on SP1 RC, but should work with SP1 RTM, for SP0 you need to change probably only the reference section.

By default it performs following:

– discovers all event logs on all computers

– monitoring is enabled by adding an override for the group “MCS EventLog monitoring computer group” to enable the discovery “Event Log File Discovery” which is disabled by default

– after monitoring is enabled you can do some customization of thresholds (80 and 90% by default AFAIR) and you have a recovery task to perform local backup (you can override script parameters, which include folder to which to backup and compression bool value – for compression I use compress.exe from Windows ResKit – it needs to be locally on the server in target location of backed up event logs).

You can then expand the MP further to add automatic recovery, shipping saved logs remotely etc.

It also ships with some default views.

Here is a preview:



image image

Enjoy. As always please do thorough testing and customization before using it on production.

Attachment(s): MCS.EventLogs.xml


~ by alipka on March 3, 2008.

2 Responses to “Ops Mgr 2007 custom MP for monitoring event log size [updated!]”

  1. Just tried installing the management pack on SCOM 2007 R2 and it seems that everything works with the exception of the recovery. I can’t seem to find the EvLocalBackupRecovery task after further investigation. I was able to open the Management Pack using the authoring console and can see the recovery task there. I would like to try to get the recovery working but, I am a bit confused on the recovery process.

  2. Hi Scott,

    I did not test the MP on R2. However you should be able to run it when the health degrades from Ops Console. If you would like to see how it looks, I believe i used raw XML, and not the authoring console. I also am not aware of what changes where made in R2, that could cause issues.. Maybe there are some breaking changes.
    I will look into the MP but it won’t be soon I’m afraid:(

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: