<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="http://blogs.technet.com/utility/FeedStylesheets/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/"><channel><title>Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx</link><description>Do you want auditing information on how many alerts are being closed or modified by your OpsMgr users? You can use the following queries to get this information from the data warehouse, and I have attached some reports below as well: To get all raw alert</description><dc:language>en-US</dc:language><generator>CommunityServer 2.1 SP1 (Build: 61025.2)</generator><item><title>System Center Forum   -  Powershell Tip: Auditing Alerts from the Command Shell in Operations Manager 2007 </title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3109435</link><pubDate>Thu, 21 Aug 2008 06:55:07 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3109435</guid><dc:creator>System Center Forum   -  Powershell Tip: Auditing Alerts from the Command Shell in Operations Manager 2007 </dc:creator><description>&lt;p&gt;PingBack from &lt;a rel="nofollow" target="_new" href="http://www.systemcenterforum.org/powershell-tip-auditing-alerts-from-the-command-shell-in-operations-manager-2007/"&gt;http://www.systemcenterforum.org/powershell-tip-auditing-alerts-from-the-command-shell-in-operations-manager-2007/&lt;/a&gt;&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3131413</link><pubDate>Thu, 02 Oct 2008 18:14:23 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3131413</guid><dc:creator>Richard</dc:creator><description>&lt;p&gt;This looks very good Kevin, I have been looking for a report like this, how do i import into opsmgr?&lt;/p&gt;
</description></item><item><title>re: how to import</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3131429</link><pubDate>Thu, 02 Oct 2008 18:35:40 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3131429</guid><dc:creator>kevinhol</dc:creator><description>&lt;p&gt;You can upload the reports I post for the opsDB if you create a data source... and then create a folder to upload them to:&lt;/p&gt;
&lt;p&gt;&lt;a rel="nofollow" target="_new" href="http://blogs.technet.com/kevinholman/archive/2008/06/27/creating-a-new-data-source-for-reporting-against-the-operational-database.aspx"&gt;http://blogs.technet.com/kevinholman/archive/2008/06/27/creating-a-new-data-source-for-reporting-against-the-operational-database.aspx&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;To import you simply upload the file to a folder.&lt;/p&gt;
&lt;p&gt;I document how to create reports from scratch - using a SQL query in a basic example here:&lt;/p&gt;
&lt;p&gt;&lt;a rel="nofollow" target="_new" href="http://blogs.technet.com/kevinholman/archive/2008/09/03/using-opsmgr-to-see-which-servers-have-not-been-logged-on-to-via-rdp.aspx"&gt;http://blogs.technet.com/kevinholman/archive/2008/09/03/using-opsmgr-to-see-which-servers-have-not-been-logged-on-to-via-rdp.aspx&lt;/a&gt;&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3131870</link><pubDate>Fri, 03 Oct 2008 15:28:06 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3131870</guid><dc:creator>Richard</dc:creator><description>&lt;p&gt;Thanks for the information, Have you ever tried to map the alert to which management pack raised the alert?&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3269569</link><pubDate>Fri, 31 Jul 2009 08:14:26 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3269569</guid><dc:creator>kldsts</dc:creator><description>&lt;p&gt;This is good may i know how can i get a open alerts pending for closing with respective of operations group instead of users. Please help me on this query.&lt;/p&gt;
</description></item><item><title>re: open alerts pending for closing with respective of operations group instead of users</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3269571</link><pubDate>Fri, 31 Jul 2009 08:22:38 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3269571</guid><dc:creator>kevinhol</dc:creator><description>&lt;p&gt;If you can explain that again in English - I will do my best. &amp;nbsp;:-)&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3269599</link><pubDate>Fri, 31 Jul 2009 10:11:31 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3269599</guid><dc:creator>kldsts</dc:creator><description>&lt;p&gt;I want to find the open alerts based on the operator groups. i.e we have operators group and users are assigned in the groups. the alerts are assigned to users now i want to find the count of assigned alerts based on operators group instead of users as given above.&lt;/p&gt;
&lt;p&gt;please let me know if you are not clear i can give example.&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3269609</link><pubDate>Fri, 31 Jul 2009 10:55:42 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3269609</guid><dc:creator>kldsts</dc:creator><description>&lt;p&gt;operator group we have&lt;/p&gt;
&lt;p&gt;---------------------&lt;/p&gt;
&lt;p&gt;AV opgroup1 - user1,user-2,user-3&lt;/p&gt;
&lt;p&gt;AD opgroup2 - user1,user-4,user-2&lt;/p&gt;
&lt;p&gt;EX opgroup3 - user7,user-5,user-3&lt;/p&gt;
&lt;p&gt;SQL opgroup4- user6.&lt;/p&gt;
&lt;p&gt;I need the report as shown below if we have 25 alerts where alerts are assigned &lt;/p&gt;
&lt;p&gt;user1 &amp;nbsp;- 2 AV alerts , 2 AD alerts.&lt;/p&gt;
&lt;p&gt;user2 &amp;nbsp;- 5 EX alerts, 1 AV alerts&lt;/p&gt;
&lt;p&gt;user3 &amp;nbsp;- 2 EX alerts, 2 AV alerts.&lt;/p&gt;
&lt;p&gt;user7 &amp;nbsp;- 2 EX alerts, &lt;/p&gt;
&lt;p&gt;user6 &amp;nbsp;- 6 SQL alerts, &lt;/p&gt;
&lt;p&gt;user4 &amp;nbsp;- 3 AD alerts, &lt;/p&gt;
&lt;p&gt;user5 &amp;nbsp;- 2 EX alerts, &lt;/p&gt;
&lt;p&gt;reports should be as below.&lt;/p&gt;
&lt;p&gt;---------- &amp;nbsp; ------ -------&lt;/p&gt;
&lt;p&gt;AV opgroup1 &amp;nbsp;| &amp;nbsp;5&lt;/p&gt;
&lt;p&gt;AD opgroup2 &amp;nbsp;| &amp;nbsp;5&lt;/p&gt;
&lt;p&gt;EX opgroup3 &amp;nbsp;| &amp;nbsp;6&lt;/p&gt;
&lt;p&gt;SQL opgroup4 | &amp;nbsp;6&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3270199</link><pubDate>Mon, 03 Aug 2009 08:15:14 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3270199</guid><dc:creator>kldsts</dc:creator><description>&lt;p&gt;Hi Kevin,&lt;/p&gt;
&lt;p&gt;Hope you understand my requirement. In detail the alerts raised and assigned/ closed based on the operator group we need a count instead of alerts closed by each individual operator as your first script above.&lt;/p&gt;
&lt;p&gt;Please let me know if you need more details for the request.&lt;/p&gt;
&lt;p&gt;Thanks in advance.&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3272332</link><pubDate>Tue, 11 Aug 2009 14:28:41 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3272332</guid><dc:creator>kldsts</dc:creator><description>&lt;p&gt;can come one help me out on this.&lt;/p&gt;
</description></item><item><title>re: Auditing on Alerts from the Data Warehouse</title><link>http://blogs.technet.com/kevinholman/archive/2008/07/21/auditing-on-alerts-from-the-data-warehouse.aspx#3276676</link><pubDate>Tue, 25 Aug 2009 15:48:23 GMT</pubDate><guid isPermaLink="false">d5e57398-b9ef-4490-9955-07cbb4e4a80d:3276676</guid><dc:creator>kldsts</dc:creator><description>&lt;p&gt;can some one help me to find the relation between alerts table and operators group ?&lt;/p&gt;
</description></item></channel></rss>