Problem: We have legacy Alert Generating Event Collection rules that legitimately create alerts so that a particular group gets notified of changes to security accounts and groups in Active Directory. In hind sight they should have been TIMER RESET event Monitors, but there are so many of these rules that it would be a significant undertaking to convert them all (read that as re-create as Timer reset Monitors). We want to close all the alerts generated from these rules as soon as they fire an email to the team since no one will ever directly address the alert.
Solution: PowerShell to the rescue! Using a command channel to call PowerShell with the alerted, we can close the alert when the subscription fires. Since all of these rules are isolated and alerted by a single subscription it makes the job that much easier.
Read more on http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/93407/Default.aspx
This posting is provided "AS IS" with no warranties.
No comments:
Post a Comment