exchange 2010 MP for scom = room for improvement

At first I really liked this MP, it knows a LOT about exchange and there was some serious effort put into making sure it grabs everything. After a while though, there are some things you need to be able to change, but can’t.

Take this alert for disk space, we want to change the % that it alerts on, well guess what you can change with the override?

That’s right, the only thing you can do is enable or disable the rule.. that’s it. And while we’re on the subject of disabling a rule, that’s not working for at least this one:

Here’s a few of the instances of this alert..

And if you look at the overrides, this rule is clearly disabled… but still alerting.

I’m still trying to figure both of these out.

Advertisement

weird scom error

I’m getting this repeatedly in SCOM and not sure why. Can’t seem to find out anything about it.

• Event data collection process unable to write data to the Data Warehouse. Failed to store data in the Data Warehouse. The operation will be retried.
  Exception ‘InvalidOperationException’: The given value of type Int32 from the data source cannot be converted to type tinyint of the specified target column.

 

urlscan issue

I have the following URLscan value:

 

RuleList=DenyUserAgent

 
[DenyUserAgent]
DenyDataSection=AgentStrings
ScanHeaders=User-Agent

[AgentStrings]
Mozilla/5.0 (Windows; U; Windows NT 5.1; ru; rv:1.8.1.1) Gecko/20061204 Firefox/2.0.0.1
Opera/9.02 (Windows NT 5.1; U; ru)

In the logfiles I am seeing where it is blocking non russian mozillas, like this:

2010-11-05 21:49:23 76.94.140.86 896362 GET /programs/images/t8.jpg Rejected rule+’DenyUserAgent’+triggered User-Agent: mozilla/5.0+(windows;+u;+windows+nt+6.1;+en-us;+rv:1.9.2.3)+gecko/20100401+firefox/3.6.3 mozilla/5.0+(windows

(The logfile truncates after a certain length.) I do not understand why it is blocking this mozilla version with a totally different user agent. ???

Looking for an answer on this one….