SCOM – Alert subscription query low watermark / high watermark

SCOM-ul ( Versiunea 2007 SP1 ) a inceput sa genereze urmatoarea alerta (aproximativ 2-3 / zi):
Event Type: Warning    Event Source: Health Service Modules
Event Category: None    Event ID: 11410
Date:  08.03.2011     Time:  15:19:10
User: N/A   Computer: <<RMSServer>>
Description: Alert subscription data source module encountered alert subscriptions that took a long time to execute their database query. Check the database and/or simplify the alert subscription criteria. Alert subscription ruleid, Alert subscription query low watermark, Alert subscription query high watermark: <> <> <>

Foarte ciudata si fara nici un sfat cum se poate rezolva.  Am avut norocul ca in aceeasi perioada sa mai observer alte 2 Eventuri:

Event Type: Error     Event Source: ESENT
Event Category: Transaction Manager      Event ID: 623
Date:  08.03.2011   Time:  15:06:30
User:  N/A          Computer: <<RMS Server>>
Description:    Microsoft.MOM.UI.Console (6308) The version store for this instance (0) has reached its maximum size of 3Mb. It is likely that a long-running transaction is preventing cleanup of the version store and causing it to build up in size. Updates will be rejected until the long-running transaction has been completely committed or rolled back.

Event Type: Warning     Event Source: Userenv
Event Category: None       Event ID: 1524
Date:  08.03.2011     Time:  15:53:28
User:  <<USer>>      Computer: <<RMSServer>>
Description:    Windows cannot unload your classes registry file – it is still in use by other applications or services. The file will be unloaded when it is no longer in use.

Am zis hai sa sterg profilele, nu ma lasa sa sterg NTUSER.DAT  era lockuit cu toate ca utilizatorul nu mai era logat si nu mai avea nici un proces pornit. Ups! Dupa ce l-am lasat vre-o 2-3 ore am reincercat.. a mers sa il sterg.. curios!
In urmatoarele 5 zile, totul bine si frumos nici o alerta… si deodata alerta reapare?!?!. Intru pe Server si gasesc acelasi user  logat avand un profil nou!. Dau Logof la utilizator, incerc sa sterg profilul… nimic fisierul era locked! Dupa 2-3 ore nu a mers sa il sterg, asa ca restart la SCOM ( RMS-ul e Cluster si am mutat in prealabil resursele ). Acum am putut sa sterg profilul de la respectivul user dar am sters si restul profilelor ca masura preventiva.

Rezolvarea… Stergeti profilele utilizatorilor de pe RMS ( ATENTIE nu stergeti profilele conturilor forlosite de SCOM! ) si nu mai lasati oameni sa se logheze pe RMS 🙂

Edit 19-04-2011: Cu parere de rau.. va anunt ca nu s-a rezlvat problema prin stergerea de profile doar de pe RMS. Urmatorul pas pe care l-am facut a fost sa sterg cache-ul de la SCOM din toate profilele.. si astept…

VN:F [1.9.20_1166]
Rating: 0.0/10 (0 votes cast)
VN:F [1.9.20_1166]
Rating: 0 (from 0 votes)

Leave a Reply