One thing that I always find slightly counter intuitive with SCOM is overriding rules and monitors for the Exchange MP. Normally when we have an alert that an engineer wants overridden or tweaked in someway the easy method is to right click the alert that was generated– select–overrides–summary–and then target the override at the appropriate object–modify thresholds or settings–save to custom mp–and were done.
With Exchange Alerts it often doesn’t work that way. A few days ago when I started getting requests for overrides I followed my normal technique in this case the alerts were for:
Alert Description: Retry Remote Delivery Queue Length – sustained for 30 minutes – Red (>1) – Hub Transport.
Alert Description: The database copy is low on log volume space. The volume has reached error levels.
So as usual I clicked the alert selected overrides–summary–targeted at the Exchange Server object I wanted to override and then found myself staring at this screen for slightly longer than I would like to admit:
Where were my enable alerts, my thresholds, the things that I could change to make my Exchange engineer happy?
As my brain slowly began to process that I was looking at a rule and not a monitor I remembered that I just needed to find the associated monitor and make the necessary modifications. In the past when I have gone monitor hunting I would go to Authoring–Management Pack Objects–Monitors and then search for the appropriate monitor. If you are doing this once, this is fine but with the Exchange 2010 MP the frequency of override requests is bit more persistent.
I have found that a better way of locating the associated monitor to override is to right-click the troublesome alert and instead of going to override, select Open–Health Explorer (If the entity is now in a healthy state and the alert is technically closed remove the Filter Monitors which automatically Scope to only unhealthy child monitors in 2012)
Then you have all the monitors that you might want to tweak right in front of you without having to navigate to authoring.
Now you can right click the individual monitors and select monitor properties and from there the overrides tab.
This is one of those simple SCOM 101 things that I am sure most SCOM admins will look at and go “well duh”, but the more I use SCOM the more I find these little inefficiencies in how I work with the application.