A performance threshold rule in MOM 2005 may collect the wrong performance information when the substring of the defined performance provider contains the retrieved instance name (892306)


The information in this article applies to:

  • Microsoft Operations Manager 2005

SYMPTOMS

When you create a performance threshold rule in the Microsoft Operations Manager (MOM) 2005 Administrator Console to monitor a specific instance name, the rule may not work as you expect. Specifically, when the substring of the defined performance provider contains the retrieved instance name, this rule may collect performance information from other instance names.

For example, this problem may occur when you try to collect the Process- %Processor Time information for the Notepad.exe process. In this scenario, the MOM agent may collect performance information from the "Note.exe" process or from the "No.exe" process instead of from the "Notepad.exe" process.

WORKAROUND

To work around this problem, follow these steps:
  1. In the left pane of the MOM Administrator Console, select the performance threshold rule.
  2. In the right pane, right-click the performance threshold rule, click Properties, and then click the Criteria tab.
  3. Click to select the from instance check box, and then specify the full instance name that you want to monitor.
  4. Click OK to close the Threshold Rule Properties dialog box.
  5. Commit the performance threshold rule. Or, wait for the agents to automatically receive the updated rule.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

Steps to reproduce the problem

  1. Create a performance provider for a particular computer in the MOM Administrator Console, as in the following example:

    Performance object: Process
    Counter: % Processor Time
    Instance: notepad

    Note Make sure that you configure an interval, such as five minutes, when you perform this operation.
  2. Create a performance threshold rule for the MOM agent. Make sure that this rule is based on the performance provider that you created in step 1.
  3. In the Threshold Rule Properties dialog box, click the Threshold tab, and then set the less than the following value setting to 100. On the Alert tab, configure this rule to generate an "alert" message.
  4. Commit the performance threshold rule changes.
  5. On the MOM agent, open the %windir% folder. Copy and paste the Notepad.exe file to the MOM agent, and then change the file name to "Note.exe."
  6. On the MOM agent, start the Note.exe program.

    Note Wait several minutes.
  7. Open the Alerts view in the MOM Operator Console. The MOM agent has generated an "alert" message for the Note.exe process.
Modification Type:MinorLast Reviewed:6/30/2005
Keywords:kbPerfMon kbtshoot kbprb KB892306 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.