Kevin Holman's System Center Blog

Posts in this blog are provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified in the Terms of UseAre you interested in having a dedicated engineer that will be your Mic

Repeating event monitor alert description variables don't work

Repeating event monitor alert description variables don't work

  • Comments 5
  • Likes

 

This is current as of RC-SP1 version of OpsMgr 2007.

When you create a repeating event monitor, and use the GUI to add in some Alert description variables, such as event ID, Description, etc... you will find that they do not work.  Below are the correct variables to use for repeating event monitors:

 

EventDisplayNumber (Event ID):              $Data/Context/Context/DataItem/EventDisplayNumber$

EventDescription (Description):                $Data/Context/Context/DataItem/EventDescription$

Publisher Name (Event Source):               $Data/Context/Context/DataItem/PublisherName$

EventCategory:                                      $Data/Context/Context/DataItem/EventCategory$

LoggingComputer:                                  $Data/Context/Context/DataItem/LoggingComputer$

EventLevel:                                            $Data/Context/Context/DataItem/EventLevel$

Channel:                                               $Data/Context/Context/DataItem/Channel$

UserName:                                            $Data/Context/Context/DataItem/UserName$

EventNumber:                                        $Data/Context/Context/DataItem/EventNumber$

Comments
  • <p>Hi,</p> <p> &nbsp; &nbsp;Thanks for this. Using $Data/Context/Context/DataItem/EventDescription$ I can get the alert description to print in the alert now. My problrm is a bit deeper than that. I need to configure the repeat settings to count instances where the event description or a portion of it is identical? However event description is not a choice under &quot;edit consolidation event properties and only parameters represented as integers can be entered in the other event parameters section. This doesn't seem to work possibly because it is looking by default at $Data/Context/EventDescription$ </p> <p>regards Lyndon</p>

  • <p>Did Lyndon ever manage to get a result for this? i too am having the same problem with R2.</p> <p>Thanks</p> <p>Jeff</p>

  • <p>Kevin, </p> <p>When I enter the parameter for alert description in my repeating event monitor my script will not run, however when I take out the parameter my script runs. &nbsp;Do you have any advice you could offer on this? </p>

  • <p>For my repeated event monitor I also have an event to resolve the monitor. Is there a way to make the alert CLOSED email show the descrption from the evetn that closed the alert rather than the event that opened the alert?</p>

  • <p>For my repeated event monitor I also have an event to resolve the monitor. Is there a way to make the alert CLOSED email show the descrption from the evetn that closed the alert rather than the event that opened the alert?</p>

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment
Search Blogs