• FSRM
  • Microsoft.Windows.FileServer.Service.FSRM
  • Server Service (SMB) Role Discovery
  • Clustered Server Service (SMB) Role Discovery
  • References to Microsoft Windows Server File Services
  • Scom file Server 2012




    Download 449.5 Kb.
    bet6/6
    Sana04.01.2022
    Hajmi449.5 Kb.
    #4961
    1   2   3   4   5   6
    Discovery Information

    Interval

    Enabled

    When to Enable

    4 hours

    True or False

    Always

    Related Monitors

    Monitor

    Data source

    Interval

    Alert

    Reset Behavior

    Corresponding Rule

    Enabled

    When to Enable

    Deduplication Enabled

    Get-DedupVolume PowerShell command

    4 hours

    True

    Automatic

    Rule name

    True

    Always

    Optimization Run

    Get-DedupStatus
    PowerShell command


    4 hours

    True

    Automatic

    Rule name

    True

    Always

    Garbage Collection Run

    Get-DedupStatus
    PowerShell command


    4 hours

    True

    Automatic

    Rule name

    True

    Always

    Scrubbing Run

    Get-DedupStatus
    PowerShell command


    4 hours

    True

    Automatic

    Rule name

    True

    Always

    Optimization Schedule Enabled

    Get-DedupStatus
    PowerShell command


    4 hours

    True

    Automatic

    Rule name

    True

    Always

    Garbage Collection Schedule Enabled

    Get-DedupStatus
    PowerShell command


    4 hours

    True

    Automatic

    Rule name

    True

    Always

    Scrubbing Schedule Enabled

    Get-DedupStatus
    PowerShell command


    4 hours

    True

    Automatic

    Rule name

    True

    Always

    Related Rules

    Rule

    Data source

    Alert

    Notes

    Corresponding Monitor

    Enabled

    When to Enable

    Collect
    Savings
    Rate

    Get-DedupStatus PowerShell

    True

    Collects savings rate per volume and looks at SCOM performance data for each volume and ensures it is correct




    True

    Always

    Collect Completion Percent

    Get-DedupStatus PowerShell

    True

    Collects completion percent per volume and then compares it to the SCOM performance data for each volume and ensures it is correct




    True

    Always

    Too
    Many
    Corruptions
    Found

    Event Viewer Query

    True

    Looks for event ID 12806 for a specific volume


    ?

    True

    Always

    Related Views

    View

    Description

    Rules and Monitors that Populate the View

    Alert View

    All alerts for deduplication only

    All Rules and Monitor Alerts

    State View

    All instances of deduplication running on servers being monitored

    • Deduplication Enabled

    Volume State View

    All deduplication volume objects across all monitored servers that have deduplication installed


    • Optimization Run

    • Garbage Collection Run

    • Scrubbing Run

    • Optimization Schedule Enabled

    • Garbage Collection Schedule Enabled

    • Scrubbing Schedule Enabled


    FSRM

    Microsoft.Windows.FileServer.Service.FCI


    Discovery Information

    Interval

    Enabled

    When to Enable

    4 hours

    True

    As long as FSRM feature is installed

    Related Monitors

    Monitor

    Data source

    Interval

    Alert

    Reset Behavior

    Corresponding Rule

    Enabled

    When to Enable

    FCI.ClassificationAborted

    SrmSvc Events: 8241, 8242, 8247

    SrmReports Events: 906, 908






    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    FCI Initialized

    SrmReports Event: 906

    SrmSvc Event: 8236






    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    Orphaned Mountpoint

    SrmReports Events: 906, 908, 602

    SrmSvc Event: 8233






    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    FCI Service

    Verify SrmSvc is running




    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    AD Property sync

    SrmSvc Event: 12344

    86400

    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    DAC Filter

    Verify “cbafilt” driver is running




    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    NTFS Case Sensitivity

    Registry: SYSTEM\CurrentControlSet\Control\Session Manager\kernel\obcaseinsensitive

    28800

    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True



    Microsoft.Windows.FileServer.Service.FSRM


    Discovery Information

    Interval

    Enabled

    When to Enable

    4 hours

    True

    As long as FSRM feature is installed

    Related Monitors

    Monitor

    Data source

    Interval

    Alert

    Reset Behavior

    Corresponding Rule

    Enabled

    When to Enable

    FSRM.Service

    Verify SrmSvc is running




    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    FSRM.QuotaDriverLoaded

    Verify “quota” driver is running




    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True




    FSRM.DatascrnDriverLoaded

    Verify “datascrn” driver is running




    True

    Alert priority: Normal

    Alert severity: Error


    Automatic

    N/A

    True





    Microsoft.Windows.FileServer.Service.iSCSITarget


    Discovery Information

    Interval

    Enabled

    When to Enable

    2 hours

    True

    iSCSI Target feature is installed

    Related Monitors

    Monitor

    Data source

    Interval

    Alert

    Reset Behavior

    Corresponding Rule

    Enabled

    When to Enable

    FirewallSettings

    System configuration

    2hours

    True

    Alert Priority: Normal

    Alert Severity: MatchMonitorHealth


    Automatic




    True




    Service

    ServiceControlManager

    Default

    True

    Alert Priority: Normal

    Alert Severity: MatchMonitorHealth


    Automatic




    True




    Related Rules

    Rule

    Data source

    Alert

    Notes

    Corresponding Monitor

    Enabled

    When to Enable

    FailedLogin.InvalidTarget

    Windows.EventProvider

    True

    Alert priority:1

    Alert severity:2








    True




    FailedLogin.InitiatorNoteDefined

    Windows.EventProvider

    True

    Alert priority:1

    Alert severity:2








    True




    FailedLogin.TargetDisabled

    Windows.EventProvider

    True

    Alert priority:1

    Alert severity:2








    True




    FailedInitVHD

    Windows.EventProvider

    True

    Alert priority:1



    Alert severity:2







    True



    SMB


    The Management Pack for Server Service (SMB) discovers the object types described in the following sections. Not all of the objects are automatically discovered. Use overrides to discover those objects that are not discovered automatically.

    Server Service (SMB) Role Discovery


    Discovery Information

    Interval

    Enabled

    When to Enable

    14400

    True

    Always

    Clustered Server Service (SMB) Role Discovery


    Discovery Information

    Interval

    Enabled

    When to Enable

    14400

    True

    Always


    References to Microsoft Windows Server File Services

    Distributed File Server - Namespace

    Distributed File Server Replication



    Download 449.5 Kb.
    1   2   3   4   5   6




    Download 449.5 Kb.