SCOM 2012: ACS Forwarder Security Log Retention Monitor

Standard

In an OpsMgr Audit Collection Services implementation the local security logs on the forwarders are the queue when the collector is not available. So the retention time of the Security Log is a very important, but out-of-the-box not monitored by OpsMgr. Today I decided to create a PowerShell monitor which monitors the retention time of the security event log. This PowerShell monitor uses the following script to define the retention of the Security event logĀ of an ACS forwarder.

Continue reading

SCOM 2012: Failed to start a process due to lack of resources

Standard

Last month I presented a solution for alerting based on security events. This solution was based on an event rule and a PowerShell command channel which closes the unwanted alerts. I used this scenario for creating logon alerts. Based on my experience the volume of this kind of alerts was too high. So I received the following alerts: ‘Operations Manager failed to start a process due to lack of resources’

Continue reading