Are your agents restarting every 10 minutes? Are you sure?

re: Are your agents restarting every 10 minutes? Are you sure?

Layne — Wed, 22 Apr 2009 20:09:21 GMT

Kevin, any idea why when trying to override the Health Service Private Bytes Threshold monitor you cannot override it for a group of computer objects that you've created if you choose override "for a group"? The only groups that appear in the list to choose from are groups that are created by management packs, etc., not any user created groups. In order to override for a group you've created you have to choose override "for all objects of another type", view all targets, and then choose the group you've created.

Conversly, the rule for Monitoring Host Private Bytes Threshold will allow you to override for a group that you've created if you choose "override for a group".

Great articles, keep up the good work.

re: where is my group?

kevinhol — Wed, 22 Apr 2009 20:27:05 GMT

This is a bug in SP1 - when you try and do this from the Authoring pane.

Open Health Explorer - create the override there, and you will see your group. :-(

re: Are your agents restarting every 10 minutes? Are you sure?

DilipManchala — Mon, 25 May 2009 04:57:07 GMT

Hi Kevin, As suggested by you in the above blog I have made changes Health Service Private bytes to 200MB for a particular SCOM agent. But I still see my agent not getting restarted.

I am running nworks application on this particular computer and also see my healthservicestore.edb size growing 220 MB.Is this normal??

I also see the below errors in the event log on the same agent machine.

Event ID:4506

Event Source:HealthService

Description:

Data was dropped due to too much outstanding data in rule "many" running for instance "many" with id:"many" in management group "XXXXXX".

re: Nworks

kevinhol — Tue, 26 May 2009 15:56:54 GMT

The Nworks MP causes an agent to act as a proxy - and load workflows and collect data for potentially a HUGE number of machines. Therefore it is common that this agent will need more memory for this.

This is documented in the Nworks documentation I believe.

I would disable these monitors for those instances - and measure how much they *consume* and how fast they consume it - and stop bouncing them.

If you must set a value - I would start at 600-800MB for privatebytes.... and monitor the consumption closely.

re: Are your agents restarting every 10 minutes? Are you sure?

JHBoricua — Wed, 27 May 2009 22:16:02 GMT

I've created the custom rules and the custom view per your post, but the 'Source' column on my alerts show "Microsoft(R) Windows(R) Server 2003, Enterprise Edition" rather than the actual server name as shown on your screenshot. How did you get it to show the server name in the Source column of your custom view?

re: servername in the view?

kevinhol — Wed, 27 May 2009 23:08:08 GMT

You need to personalize the view - and add "Path" next to "source".

This is true for any alert view - depending on the target class of an alert, the FQDN will either be in Source or Path.... not always both and not consistent.

re: Are your agents restarting every 10 minutes? Are you sure?

snajgel — Tue, 09 Jun 2009 13:39:22 GMT

When working with multihomed agents you need to do the override in the other management group as well.

re: Multi-homed agents

kevinhol — Tue, 09 Jun 2009 16:44:45 GMT

Yep - I just ran into that yesterday with a customer. He had some restarting all the time - because they were multi-homed with his pre-prod management group.

re: Are your agents restarting every 10 minutes? Are you sure?

snajgel — Tue, 09 Jun 2009 22:55:38 GMT

Do you think it is becouse they are multi-homed they restart?

re: are the restarting because they are multi-homed?

kevinhol — Tue, 09 Jun 2009 23:39:26 GMT

No - they are restarting because BOTH management groups are monitoring the SAME healthservice process... and the lower value from either MG will bounce the service.

Overrides will need to be kept in synch for each management group - for this.

re: R2

kevinhol — Tue, 09 Jun 2009 23:40:58 GMT

By the way - this has changed quite a bit in R2 - when I have some time - I am going to document how that works.... and how it is different than SP1.

re: Are your agents restarting every 10 minutes? Are you sure?

Dominique — Thu, 22 Oct 2009 01:57:07 GMT

The Agents do not restart but I have "MonitoringHost.exe Handle Count Threshold Alert Message" how could I measure the actual value used so I could override with something closed to it.

Thanks,

Dom