Welcome to Community Answers

Question

Solved Monitor Type with 1 expression for healthy and 2 for warning

0

Patrik Hansson 19 Rep. 16 Nov, 2018

Trying to get this to work but all shows healthy when there are som that should be warning.
Anyone notice where i might have gone wrong, cant find that many examples online.

<ConditionDetection ID="UnderWarningFilter" TypeID="System!System.ExpressionFilter">
        <Expression>
          <SimpleExpression>
            <ValueExpression>
              <XPathQuery Type="Integer">Property[@Name='PendingCount']</XPathQuery>
            </ValueExpression>
            <Operator>LessEqual</Operator>
            <ValueExpression>
              <Value Type="Integer">$Config/PendingCountThreshold$</Value>
            </ValueExpression>
          </SimpleExpression>
        </Expression>
      </ConditionDetection>
      <ConditionDetection ID="OverWarningFilter" TypeID="System!System.ExpressionFilter">
        <Expression>
          <And>
            <Expression>
              <SimpleExpression>
                <ValueExpression>
                  <XPathQuery Type="Integer">Property[@Name='PendingCount']</XPathQuery>
                </ValueExpression>
                <Operator>Greater</Operator>
                <ValueExpression>
                  <Value Type="Integer">$Config/PendingCountThreshold$</Value>
                </ValueExpression>
              </SimpleExpression>
            </Expression>
            <Expression>
              <SimpleExpression>
                <ValueExpression>
                  <XPathQuery Type="Integer">Property[@Name='DaysSincePatched']</XPathQuery>
                </ValueExpression>
                <Operator>Greater</Operator>
                <ValueExpression>
                  <Value Type="Integer">$Config/DaysSincePatchedThreshold$</Value>
                </ValueExpression>
              </SimpleExpression>
            </Expression>
          </And>
        </Expression>
      </ConditionDetection>

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

<XPathQuery Type="Integer">Property[@Name='PendingCount']</XPathQuery>

</ValueExpression>

<Operator>LessEqual</Operator>

<Value Type="Integer">$Config/PendingCountThreshold$</Value>

</ValueExpression>

</SimpleExpression>

</Expression>

</ConditionDetection>

<And>

<XPathQuery Type="Integer">Property[@Name='PendingCount']</XPathQuery>

</ValueExpression>

<Operator>Greater</Operator>

<Value Type="Integer">$Config/PendingCountThreshold$</Value>

</ValueExpression>

</SimpleExpression>

</Expression>

<XPathQuery Type="Integer">Property[@Name='DaysSincePatched']</XPathQuery>

</ValueExpression>

<Operator>Greater</Operator>

<Value Type="Integer">$Config/DaysSincePatchedThreshold$</Value>

</ValueExpression>

</SimpleExpression>

</Expression>

</And>

</Expression>

</ConditionDetection>

scom

Patrik Hansson selected answer 20 Nov, 2018

Best answer

0

Patrik Hansson 19 Rep. 20 Nov, 2018

It works as expected. There was a blank space before a ‘ in the add.propertybag part of the MP.

Patrik Hansson selected as best answer 20 Nov, 2018

2 answers

Toggle fullscreen

Write

Answer this question

To reply or comment, use the 'Comment' link on the relevant answer or question.

score 0 · Answer 1 · 2018-11-17T16:53:05+00:00

0

Andi Patrick 26 Rep. 17 Nov, 2018

An <And> expression means ALL of the expressions inside must resolve in order for the filter to be selected.

You need to use an <Or> expression which means if ANY one of the expressions inside resolves then the filter is selected.

Patrik Hansson commented 17 Nov, 2018

Patrik Hansson - 17 Nov, 2018

Hi I only want warning if both warningexpressions is true. Then AND must be correct right ? So there should only be an alert if Pendingcount and Dayssincepatched are BOTH over the configured values. And i have examples of servers were both these are true but it's still shown as healthy. (have a eventlog write in the ps script that collects the propertybag for troubleshooting)

score 0 · Answer 2 · 2018-11-17T18:13:09+00:00

0

Andi Patrick 26 Rep. 17 Nov, 2018

Have you run it through the workflow analyser?

Patrik Hansson commented 17 Nov, 2018

Patrik Hansson - 17 Nov, 2018

No, did try that with some other problem though. But was unable to get any data from remote agents. Can run the exe on management servers and connect to agents but only get enter/exit. Not really ever gotten it to work correctly.

Solved Monitor Type with 1 expression for healthy and 2 for warning

Best answer

2 answers

Answer this question

Related Questions