Monthly Archives: March 2011

Searching for text in text files or Powershell Grepping


Ask any linux admin and they’ll tell you how useful grep is. Grep is a command in linux allow you go search through piped outputs and/or files for certain strings. Grep also allows for the use for regular expression to search for more complex criterias. For a long time Microsoft users have not have such […]

Asterisk Failover (Virtual IP) solution


I have been searching for a solution that allows for a cluster of Asterisk servers to co-operate and fail over as necessary. Usually with the original configuration of Asterisk, if configured correctly, will restart itself automatically should the instance crashes. This results in somewhat of a resilient server that recovers itself, the downside is that […]

Performance Module could not find a performance counter


This is a bug in SP1. After installing SP1, users will see this error flooding the Alerts screen (and email if they have a subscription enabled for it) There is currently no hotfix or patches for it yet. There is a work around, however, please follow the following steps to overide this error until Microsoft […]

Root Management Server Unavailable


Alert: Root Management Server Unavailable. Source: SCOM01.DOMAIN.LOCAL Path: SCOM01.DOMAIN.LOCAL Last modified by: System Last modified time: 9/2/2008 1:18:19 AM Alert description: The root management server (Healthservice) has stopped heartbeating soon after 9/2/2008 1:17:18 AM. This adversely affects all availability calculation for the entire management group. After the upgrade to SP1, our SCOM server started to […]

Windows 2008 Security Events


Events Windows 2008 Security Group Management Event ID Title 4727 A security-enabled global group was created. 4728 A member was added to a security-enabled global group. 4729 A member was removed from a security-enabled global group. 4730 A security-enabled global group was deleted. 4731 A security-enabled local group was created. 4732 A member was added […]

Windows 2003 Security Events


Events Windows 2003 Event ID Title 624 User Account Created 630 User Account Deleted 631 Global security group created 632 Group member added to Global security group 633 Group member removed from global security group 634 Global Group deleted 635 Local Security Group created 636 Group member added to local security group 637 Group member […]

Parameter replacement during creation of the alert failed.


So we have SCOM scours through our Domain Controllers in event logs in Agentless mode to look for security event IDs such as account lockout, deletion, creation, etc. Recently, we ran into an issue where SCOM was throwing caution alerts in the monitor view of SCOM with the following description: Parameter replacement during creation of […]