SCOM configuration

[matthew.hu]

Hi,

 

who can give an instruction for how to cofigue below rule on SCOM?

 

DHCP Servers Monitoring

 

Unauthorized DHCP servers

Event Number matches (1051|1044)

DHCP service running on Servers

Event ID 1008

Scope Availability

IF 80% IP's used, It will trigger alert

SuperScopes

Event Number = 1500

[AdinE]

You should download the Windows Server DHCP Management Pack and read through the documentation (found here: http://www.microsoft.com/en-us/download/details.aspx?id=8770). For example:

 

• Feature Summary
  This management pack alerts you of the following conditions:
  • Ability to monitor for DHCP and DHCPv6 service availability (stopped state)
  • Ability to monitor for startup failures that are due to issues found within service initialization data
  • Ability to monitor for startup failures that are due to network or communication issues
  • Ability to monitor for unexpected service terminations
  • Ability to monitor DHCP and DHCPv6 scope
  • Ability to detect when unauthorized DHCP and DHCPv6 servers are on the network
  • Ability to detect when DHCP and DHCPv6 are unable to restore the DHCP database
  • Ability to monitor DHCP NAP related events
  • Ability to monitor the Link Layer filtering feature that is used to allow or deny the servicing of IP address to clients
  • Ability to monitor the Name Protection feature that is used to prevent name squatting issues caused due to non-Windows operating system computers on the network that register with DNS using a name that is already with DNS
  • Ability to monitor the scope with delay feature that is used to prevent exhaustion of IP addresses from a scope especially those deployed for redundancy such as split-scope
  • Ability to monitor the configuration changes made on DHCP and DHCPv6 scopes and certain features at DHCP and DHCPv6 server levels