Evaluate whether alert grooming is working.  No result is good. $Threshold=(Get-Date).AddDays(-(get-defaultsetting)[42].Value-1).ToUniversalTime().Date.AddMinutes(30);Get-Alert | Where {$_.TimeResolved -and $_.TimeResolved -lt $Threshold} | Measure...

Beware of word wrap. foreach ($rule in get-rule | where {$_.category -eq "EventCollection"} | foreach-object {$_.DataSourceCollection})     {     if ($rule.get_configuration().ToString() -match " event number...

Count all alerts, group by date $array = @();foreach ($date in Get-Alert | foreach-object {$_.get_TimeRaised().ToLocalTime().toShortDateString()}) {$array += $date};$array | Group-Object | select-object count,@{name="Date";expression={foreach...

Enable Agent Proxying, by Health Service Id $a=get-agent | where {$_.hostedHealthService.id -eq " guid "};$a.set_proxyingEnabled($true);$a.applyChanges() main menu

Find Agent, by Health Service Id get-agent | where {$_.hostedHealthService.id -eq " guid "} | select-object name main menu

Get BaseManagedEntityId for Agent get-agent | where {$_.ComputerName -eq " netbios_name "} | select {$_.HostedHealthService.id},name main menu

Get HOST class properties (if any) get-monitoringclass | where {$_.name -eq " class_name "} | foreach-object {$_.findHostClass().PropertyCollection} | ft name main menu

$query = New-LdapQueryDiscoveryCriteria -domain domain -ldapquery "(cn= target_netbios_name )" $discoverycfg = New-WindowsDiscoveryConfiguration -ldapquery $query $discoveryResults = Start-Discovery -managementServer (get-managementServer) ...

Get agent state (Windows Computer Instance) get-agent | where {$_.computername -eq " netbios_name "} | ft name,HealthState main menu

Returns the Management Pack which contains specific rule. (get-rule | where {$_.displayname -eq " rule name "}).getManagementPack() | ft DisplayName,Name –auto main menu

Top 10 REPEATING alerts (not closed) get-alert | where {$_.RepeatCount -gt 0 -AND $_.resolutionState -ne 255} | sort-object RepeatCount -desc | select-object -first 10 repeatcount,name | ft –auto main menu

Resolve all open alerts in date range get-alert | where {$_.TimeRaised.ToLocalTime().date -ge " mm/dd/yyyy " -and $_.TimeRaised.ToLocalTime().date -le " mm/dd/yyyy " -and $_.resolutionState -ne 255} | resolve-alert main menu

Resolve all open alerts, by Alert Name get-alert | where {$_.Name -eq " alert_name " -AND $_.resolutionState -ne 255} | resolve-alert main menu

Resolve all open alerts generated by specific Agent get-alert | where {$_.netbiosComputerName -eq " netbios_name " -AND $_.resolutionState -ne 255} | Resolve-Alert To use Criteria Expression for better performance get-alert -criteria 'NetbiosComputerName...

Resolve all alerts in specific Resolution State get-alert | where {$_.resolutionState -eq resolution_state_number } | Resolve-Alert main menu

Get class properties get-monitoringclass | where {$_.name -eq " class_name "} | foreach-object {$_.getMonitoringProperties()} | select-object name main menu

Get HOST class get-monitoringclass | where {$_.name -eq " class_name "} | foreach-object {$_.findHostClass()} | select-object DisplayName main menu

Approve Manual Installation for single agent Get-AgentPendingAction | where {$_.AgentName –match “ netbios_name ”} | Approve-AgentPendingAction Approve Manual Installation for all pending agents Get-AgentPendingAction | where {$_.AgentPendingActionType...

Get group members and contained instance state, by group name foreach ($group in get-monitoringobjectGroup) {if($group.DisplayName -eq " group_name ") {$group.GetRelatedMonitoringObjects() | ft DisplayName,HealthState}} main menu

Find collection rule that is writing specific performance object to the database Foreach ($rule in (get-rule | where {$_.category -eq "PerformanceCollection"} | foreach-object {$_.DataSourceCollection}))     {    ...

Resolve UIGeneratedRule to a Rule Name get-rule | where {$_.name -eq " UIGeneratedRule "} | select DisplayName main menu

Which Management Pack contains this Monitor? (get-monitor | where {$_.displayname -eq " monitor "}).getManagementPack() | ft DisplayName,Name –auto main menu

Resolve UIGeneratedMonitor to a Monitor Name get-monitor | where {$_.name -eq " UIGeneratedMonitor "} | select DisplayName main menu

New alert count get-alert -criteria "ResolutionState = 0" | measure-object main menu

Open alert count (all resolution states, except new and closed) $states = 2..254;get-alert | where {$states -contains $_.resolutionState} | measure-object main menu