Alert Suppression question

[Nick Madge]

I'm really struggling with AD replication - but i think this is more of a
general question, as i'd like to manipulate more than just AD alerts..

My current issue lies with the "A problem has been detected with the trust
relationship between two domains" rule. I have more than two domains here,
however only care about the trust relationship between two of them.
How do i tell this rule to ignore alerts which concern the domain i'm not
monitoring?
The Alert Suppression is greyed out, presumably because it's sealed, however
I can't override it. Do i have to hack the XML?
Presumably i'd still get the monitor alert for this regardless of what i do
to the rule..

It's all very frustrating!

If anyone

[Nick Madge]

Just to clarify, i'm looking to ignore alerts with specific information in
the Event Description in this instance.

Post by Nick Madge
I'm really struggling with AD replication - but i think this is more of a
general question, as i'd like to manipulate more than just AD alerts..
My current issue lies with the "A problem has been detected with the trust
relationship between two domains" rule. I have more than two domains here,
however only care about the trust relationship between two of them.
How do i tell this rule to ignore alerts which concern the domain i'm not
monitoring?
The Alert Suppression is greyed out, presumably because it's sealed, however
I can't override it. Do i have to hack the XML?
Presumably i'd still get the monitor alert for this regardless of what i do
to the rule..
It's all very frustrating!
If anyone

[Jakub Oleksy [MSFT]]

The only way to do this is to disable the rule in the context that you don't
want it to create alerts in. For the various instances of this alert, is the
source the same?
--
Jakub Oleksy
Developer
Blog: http://blogs.msdn.com/jakuboleksy/
Log a bug or Feature Request directly to the SCOM Product Team by going to
http://connect.microsoft.com/site/sitehome.aspx?SiteID=209. This posting is
provided "AS IS" with
no warranties, and confers no rights.

Post by Nick Madge
Just to clarify, i'm looking to ignore alerts with specific information in
the Event Description in this instance.

Post by Nick Madge
I'm really struggling with AD replication - but i think this is more of a
general question, as i'd like to manipulate more than just AD alerts..
My current issue lies with the "A problem has been detected with the trust
relationship between two domains" rule. I have more than two domains here,
however only care about the trust relationship between two of them.
How do i tell this rule to ignore alerts which concern the domain i'm not
monitoring?
The Alert Suppression is greyed out, presumably because it's sealed, however
I can't override it. Do i have to hack the XML?
Presumably i'd still get the monitor alert for this regardless of what i do
to the rule..
It's all very frustrating!
If anyone

[Nick Madge]

That's my problem - I can't disable the rule, as there are other
trusts that I do want monitoring from that object. There's just no way
to customise these rules, which is very frustrating, as not all
environments are vanilla

On Thu, 3 May 2007 11:08:15 -0700, "Jakub Oleksy [MSFT]"

Post by Jakub Oleksy [MSFT]
The only way to do this is to disable the rule in the context that you don't
want it to create alerts in. For the various instances of this alert, is the
source the same?

[Jakub Oleksy [MSFT]]

Yeah, you could potentially go about writing your own rule which is more
custom for you environment. Simply disable this rule entirely and make a
copy of it in your own non-sealed MP. You could then do some sort of
filtering on the data items and only create alerts on the links you want.
Does this make sense? Which management pack is the rule you are referring to
in?
--
Jakub Oleksy
Developer
Blog: http://blogs.msdn.com/jakuboleksy/
Log a bug or Feature Request directly to the SCOM Product Team by going to
http://connect.microsoft.com/site/sitehome.aspx?SiteID=209. This posting is
provided "AS IS" with
no warranties, and confers no rights.

Post by Nick Madge
That's my problem - I can't disable the rule, as there are other
trusts that I do want monitoring from that object. There's just no way
to customise these rules, which is very frustrating, as not all
environments are vanilla
On Thu, 3 May 2007 11:08:15 -0700, "Jakub Oleksy [MSFT]"

Post by Jakub Oleksy [MSFT]
The only way to do this is to disable the rule in the context that you don't
want it to create alerts in. For the various instances of this alert, is the
source the same?

[Anders Bengtsson]

Hi

A rule that generate an alert when alert desciption not include wildcard
"other-domain" would solve it.
Then you would get an alert for your own domain but not for that other domain.

copy, paste the org rule and then disable it and modify your own copy.


---
Regards
Anders Bengtsson, MCSE:Security
http://www.contoso.se

J> Yeah, you could potentially go about writing your own rule which is
J> more custom for you environment. Simply disable this rule entirely
J> and make a copy of it in your own non-sealed MP. You could then do
J> some sort of filtering on the data items and only create alerts on
J> the links you want. Does this make sense? Which management pack is
J> the rule you are referring to in?
J>
J> "Nick Madge" <***@nothanks.net> wrote in message
J> news:***@4ax.com...
J>

Post by Nick Madge
That's my problem - I can't disable the rule, as there are other
trusts that I do want monitoring from that object. There's just no
way to customise these rules, which is very frustrating, as not all
environments are vanilla
On Thu, 3 May 2007 11:08:15 -0700, "Jakub Oleksy [MSFT]"

Post by Jakub Oleksy [MSFT]
The only way to do this is to disable the rule in the context that
you
don't
want it to create alerts in. For the various instances of this
alert, is
the
source the same?