management pack melee understanding mom 2005 management packs n.
Skip this Video
Loading SlideShow in 5 Seconds..
Management Pack Melee: Understanding MOM 2005 Management Packs PowerPoint Presentation
Download Presentation
Management Pack Melee: Understanding MOM 2005 Management Packs

Loading in 2 Seconds...

play fullscreen
1 / 52

Management Pack Melee: Understanding MOM 2005 Management Packs - PowerPoint PPT Presentation

  • Uploaded on

Highlights. Management Pack Melee: Understanding MOM 2005 Management Packs. Gordon McKenna MOM – MVP Inframon. Management Pack Melee: Understanding MOM 2005 Management Packs . Gordon McKenna MOM – MVP Inframon. Outline. MOM 2005 Introduction What’s new for MPs with MOM 2005

I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
Download Presentation

Management Pack Melee: Understanding MOM 2005 Management Packs

An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.

- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript
management pack melee understanding mom 2005 management packs1

Management Pack Melee:Understanding MOM 2005 Management Packs

Gordon McKenna



  • MOM 2005 Introduction
  • What’s new for MPs with MOM 2005
  • State Monitoring
  • Tasks
  • Responses
  • Service Discovery
  • Management Pack Tools
mom 2005 delivers

Event and performance management

Enterprise event collection

Rules-based filtering and consolidation

Proactive alerting/action response

Enterprise ready

Central console

Full redundancy




Web-based management reports

Scheduled Publishing

MOM 2005 Delivers





Applications/Role Monitoring

Health Model

Rules libraries

Built-in knowledge-base

mom rule unit of instruction policy
Event Rules

Collection rules

Filtering rules

Missing event rules

Consolidation rules

Duplicate Alert Suppression

Performance Rules



Alert Rules







SNMP trap




Managed Code

File Transfer

NT event log

Perfmon data



Log files


Product Knowledge

Links to Vendor

Company Knowledge

Links to Centralised Company knowledge


Wheresource=DCOM and Event ID=1006

MOM Rule: Unit Of Instruction/Policy
management pack overview

Management Pack Overview

Gordon McKenna



what can management packs provide
What Can Management Packs Provide?
  • Monitor line of business applications or business process
  • Monitor the state of your business
  • Monitor third party applications and components
  • Understand how my applications are actually being used
what s new for mps with mom 2005
What’s New For MPs With MOM 2005?
  • State Monitoring
  • Topology
  • SQL Server Reporting Services Reports
  • Tasks
  • Service Discovery
  • Improved Knowledge
mom 2000 management packs and mom 2005
MOM 2000 Management Packs And MOM 2005
  • MOM 2000 Management Packs run fine on MOM 2005 servers Investment in MOM 2000 Management Packs preserved
  • Exceptions
    • MOM 2000 Access-based reports do not migrate forward to MOM 2005
    • Some scripts use objects that were deprecated in MOM 2000 and are gone in MOM 2005
management packs
Management Packs
  • Management Pack imported via MOM Server
  • Discovery finds computers in need of a given Management Pack
  • MOM deploys appropriate Management Packs
    • No need to touch managed nodes to install Management Packs
  • Rules: Implement all MOM monitoring behavior
    • Watch for indicators of problems
    • Verify key elements of functionality
  • Management Packs provide a definition of server health
management pack features
Management Pack Features
  • Alerts: Calls attention to critical events that require administrator intervention
    • Product Knowledge: Provides guidance for administrators to resolve outstanding alerts
  • Views: Provide targeted drill down details about server health
    • Performance plots, collections of specific events/alerts, groups of servers , topology, etc.
  • State Monitoring: At a glance view of the state of my servers and applications by server role
    • Detail to component level
  • Tasks: Enable administrators to investigate and repair issues from the MOM console
    • Context sensitive diagnostics and remediation
  • Reports: Historical data analytics
    • Assess operations performance and capacity planning
health and diagnostic modeling concept
Health And Diagnostic Modeling Concept
  • What is a Health Model?
    • Health States
    • State Transitions: Defined by indicators (e.g., events)
  • Organizes health indicators into an end-user digestible context
  • Alert = actionable health state transition
health modeling process
Health Modeling Process
  • List all Events and Performance Counters
  • Analyze each Event and Performance Threshold
    • For each define
      • State Before, State After
      • Probability
      • Auto-Retry (self-healing)
      • “Anti Event” (indicates situation was corrected)
      • Resolution (action required)
  • Analyze data to define Event and Performance Threshold Groups (e.g., EG1;PG1)
  • Produce Health Model Diagram
example cluster management pack
Example: Cluster Management Pack
  • Health model translates into 38 rules
  • Most rules fairly straightforward
    • Match event source
    • Match one or more event IDs
  • Example: Quorum Space Alert
    • Source = Clussvc
    • ID = 1170, 1171, 1021 or 1022
state rules
State Rules
  • Advantages
    • State is always current
      • “What is the server status now?”
    • Problem taxonomy
      • What aspect of my server is having the problem?
        • Role (Exchange, DNS, etc.)
        • Component (Services, Queues, Mail Flow, Databases)
  • Typical candidates for state-based rules
    • Numeric thresholds (e.g., perf counters)
    • Service State
event monitoring
Event Monitoring
  • Event rules can be used for state monitoring
  • An event rule which adjusts state must match at least two event IDs using a regular expression
  • Regular expressions are written in the form 1 | 2 | 3 and wrapped with ^(expression)$ to prevent mismatches
event monitoring in action
Event Monitoring in Action

Rule - Microsoft Operations Manager\Operations Manager 2005\Agents on all MOM roles\The incoming agent queue is full

performance monitoring
Performance Monitoring
  • Query and threshold Windows Performance counters as part of your management pack
  • Specify counter attributes to query
    • Object
    • Counter
    • Instance
  • Excellent targets for easy state monitoring
performance monitoring in action
Performance Monitoring in Action

Rule - Microsoft Operations Manager\Operations Manager 2005\Agent\Performance Threshold: MOM Service CPU

internal service monitoring
Internal Service Monitoring
  • Monitors for service changes and status
  • Scripts no longer required for service monitoring in MOM
  • Interrogates the Service Control Manager (SCM) to determine service state
  • Internal MOM events contain details of service changes and state
internal service monitoring event details
Internal Service Monitoring Event Details
  • Event ID 21207
  • Source ”Microsoft Operations Manager”
  • 1- Number of seconds from last sample
  • 2 - Display Name
  • 3 - Old State
  • 4 - New State
  • 5 - Service Name (Internal Service Name)
  • 6 - Start Up Type
  • 7 - Service Context
  • 8 - Old State (numeric)
  • 9 - New State (numeric, e.g., 1= stopped)
  • 10 - Start Up Type (numeric, e.g., 2 = automatic start)
internal service monitoring in action
Internal Service Monitoring in Action

Rule - Microsoft Operations Manager\Operations Manager 2005\Agents on all MOM roles\The WMI Service is not running

state monitoring

State Monitoring

Gordon McKenna



management pack wizard
Management Pack Wizard
  • Ships in the MOM 2005 Resource Kit
  • Build a management pack in 5 clicks containing
    • Rule Groups
    • Service Monitoring
    • Performance Thresholds
    • Event Monitoring
  • The wizard automatically generate scripts and underlying logic including regular expressions
management pack wizard1

Management Pack Wizard

Gordon McKenna



  • Tasks provide the ability to execute on demand diagnostics, corrective actions and automation processes
  • Tasks are executed by the administrator from the Management Server
  • Task scenarios
    • Automate a complex set of steps required to solve a common problem
    • Provide additional information required to diagnose a problem
    • Run administrative tools in context direct from the MOM server
task types
Task Types
  • Command-line
    • Execute Windows or Application command line tools
    • Operator Console: The tasks command line is predefined
    • Management Server or Agent Managed computer: Command line parameters are modifiable
  • Script
    • Executes custom scripts that are available inside MOM
    • Task scripts can use MOM Scripting Objects
  • Managed Code
    • Execute managed code methods
  • File Transfer
    • Leverage the file transfer response to transfer a file through a task
tasks availability
Tasks Availability
  • Console Tasks
    • Alerts
    • Events
    • Computers (including all views except groups)
  • Agent-Targeted Tasks
    • Computers (including events and alert views)
    • Computer groups (run once for each computer in the group)
  • Binaries used by tasks must be present on computer where the tasks will execute
task output and security
Task Output And Security
  • Tasks Output
    • Console task output available in task dialog
    • Agent or Management Server task output is available as MOM internal events
      • Leverage events 9897, 9898, and 9899 in your management packs to display task results
  • Security
    • “MOM Users” can not execute Agent or Management Server tasks
    • Task audit events provide details on how the task was executed
task authoring

Task Authoring

Gordon McKenna



  • Responses run on timed basis or when a given condition is observed
    • Investigate/Resolve issue
    • Perform advanced monitoring
  • Response types
    • Script
    • Execute a command
    • Update a state variable
    • File Transfer
    • Managed Code Response
  • Note: Responses can now be run before alert suppression
    • Send notifications or perform responses even if the MOM database is not available
response execution


Response Execution
  • Script and Managed Code responses execute under the dedicated Action Account
  • Processes are hosted in the MOMHost process
    • Dedicated Host process per management group
  • Multiple instances of the same script can run at the same time
  • The MOMHost process is monitored by MOM

Action Account

script responses
Script Responses
  • Script responses are significantly improved and more reliable with the MOMHost process
  • Response timeout is now specified per script
managed code response
Managed Code Response
  • Managed code responses execute predefined managed code assemblies
  • A response may be executed by a rule or task
  • MOM does not distribute assemblies
  • Responses can leverage any .NET language
    • Visual Basic .NET, C#, C++ .NET
  • Response execute any publicly exposed method in your assembly
file transfer response
File Transfer Response
  • The file transfer response leverages BITS to transfer files between computers via port 80
  • File Transfer responses may
    • Download files to the agent
    • Upload files from the agent
  • File transfer responses may be called from either rules or tasks
file transfer scenarios
File Transfer Scenarios
  • Upload transaction log files to a central location
    • Archiving data as required by law
  • Upload a file to assist with troubleshooting
    • Have a task upload data on demand from the agent
  • Download a file to the MOM Agent required by a Management Pack


Gordon McKenna



service discovery
Service Discovery
  • Service discovery is the mechanism MOM uses to discover information about what it is monitoring.
  • Service discovery is used for:
    • Instances – discovery instances of the role you are monitoring. For example Drive Instances, SQL Server Instances, Queue Instances
    • Attributes – information about the instances you are monitoring. For example Drive Type, SQL Server Version, Queue Name
service discovery1

Service Discovery

Gordon McKenna



management pack xml
Management Pack XML
  • Management Packs can now be converted to XML using tools from the Management Pack Toolkit
  • Management Pack XML can be used for
    • Documentation
    • Change control
    • Understanding management pack internals
    • Configuration queries

Management Pack XML is not supported by Microsoft and the XML schema will likely change in future releases of MOM

differencing scenarios
Differencing Scenarios
  • What changes have I made to optimize my management pack?
  • Are my management packs the same?
  • Is the management pack version running in my branch office the same as my master copy?
  • What has Microsoft changed with this service release of the management packs I am running and how will it affect me?
management pack tools

Management Pack Tools

Gordon McKenna



stay current
Stay Current
  • Sign up for Management Newsletter
    • Notice of updates to
      • New & Updated Management Packs
      • Microsoft Management Product News
      • Solutions

mom resources
MOM Resources
  • Microsoft Operations Manager
  • Getting Started Resources
    • Technical Walkthrough
    • Key Documentation
    • MOM Evaluation Download
  • Partner Product Catalog
  • MOM Community
  • Solution Accelerators
gordon mckenna mom mvp uk
Gordon McKenna MOM – MVP (UK)

Microsoft Management Specialist

Inframon Ltd

07873 830790


© 2005 Microsoft Corporation. All rights reserved.

This presentation is for informational purposes only. Microsoft makes no warranties, express or implied, in this summary.