Account used to log on to Windows 2000 by users to create
service accounts, install Microsoft Operations Manager 2000
components, and have access to the Configuration snap-in.
Administrators are members of the Administrators group and have
full control over the domain or computer.
agent
Service that runs on every computer you want to monitor. An
agent captures information from the computer on which it is
running. An agent applies predefined processing rules to the
captured data and performs actions as defined by the processing
rules.
Agent Manager
Part of the Consolidator component that tracks computer groups
and processing rules, and installs and uninstalls agents as
necessary.
alert
An indication of a significant event. Alerts are defined by
processing rules.
alert forwarding
Feature that sends alerts from one configuration group to
another. Allows the creation of an efficient hierarchical alert
management structure for large enterprise networks.
alert rule
Processing rule that specifies one response for a number of
previously defined alerts.
alert severity
Property of an alert indicating its seriousness. Examples
include Service Unavailable, Security Breach, Critical Error,
Error, Warning, Information, and Success.
alert view
Window that displays specified alerts in the configuration
group.
attribute
Computer characteristic, typically defined by a Registry key or
value.
attribute view
Window that displays specified computer attributes in the
configuration group.
B
Boolean regular expressions
Search criteria for text pattern matching that allow you to
combine regular expressions using the Boolean operators and,
or, and not.
C
company knowledge base
Information you add to alerts or processing rules about
resolving the indicated condition.
computer group
Collection of computers with some attribute in common. Computer
groups are defined by computer grouping rules for similar event
management.
computer group view
Window that displays specified computer groups in the
configuration group.
computer grouping rule
Rule that combines computers with common attributes into a
group to be similarly managed and monitored.
computer view
Window that displays specified computers in the configuration
group.
configuration group
Group of computers containing the following Microsoft
Operations Manager 2000 components: one database, one or more
Data Access Servers, one or more Consolidators, and one or more
agents.
computer rule formula
Regular expression or wildcards used to create a computer
grouping rule. For example: Windows_Version = 2000 AND
(MSMQ_Installed).
component
Individual part of the product: agent, Consolidator, Data
Access Server (DAS), or database.
conditional filter
Filter that allows Microsoft Operations Manager 2000 to
evaluate further processing rules, but does not insert events into
the database unless another processing rule match occurs.
Consolidator
Collects and sends collected information from agents through
the Data Access Server (DAS) to the database. Acts as an agent on
its local computer. The Consolidator and Agent Manager install
together on a central computer.
consolidation rule
Processing rule for grouping multiple events from a computer
into a single summary event.
D
Data Access Server (DAS)
Component that receives events from the Consolidators and
inserts them into the database. Requests for data from the database
and requests to insert data into the database typically go through
the DAS.
database
Central product component that stores information including
events, alerts, rules, and scripts.
database filter
Filter that allows Microsoft Operations Manager 2000 to
evaluate further processing rules, but does not insert matching
events into the database.
datastream
Flow of events, alerts, and performance information from the
agents to the Consolidator, from the Consolidator to the DAS, and
from the DAS to the database.
duplicate alert suppression
Feature that combines multiple identical alerts within a
specified period of time into one alert.
E
event
Any significant occurrence in the system or an application that
requires a user to be notified or an entry to be added to a
log.
Microsoft Operations Manager 2000 monitors events logged in
Windows 2000 event logs and other application logs, among
others.
event consolidation
Combines multiple events into one event. The single event
identifies the number of consolidated events and when the first and
last consolidated events occurred.
event rule
Processing rule for generating an alert when specific events
occur.
event view
Window that displays specified events in the configuration
group.
F
filter
See filtering rule.
filtering rule
Processing rule for excluding an event, alert, or performance
data from some or all processing by Microsoft Operations
Manager 2000. Types of filters include pre-filters,
conditional filters, and database filters.
forwarding
See alert forwarding.
G
No Glossary entries.
H
heartbeat
Periodic pulse from the agent that contains information related
to its viability. The heartbeat also informs the Consolidator of
the current rules evaluated by the agent, requesting updates if
necessary.
I
No Glossary entries.
J
No Glossary entries.
K
knowledge base
A collection of rule comments that embodies knowledge about the
meaning and importance of events. The Microsoft Knowledge
Base contains predefined information from Microsoft. The
company knowledge base contains information entered by the
Microsoft Operations Manager 2000 user.
L
No Glossary entries.
M
Managed Computers list
List of computers matching the Managed Computer rule for an
Agent Manager.
Managed Computer rule
Rule that specifies the computers on which an Agent Manager is
responsible for installing and uninstalling agents.
Management Pack modules
Predefined solutions from Microsoft. Contain computer groups
and processing rules, with filters, performance counters, and
alerts defined for specific customer applications such as Microsoft
Exchange.
master configuration group
Configuration group to which zone configuration groups forward
alerts.
measuring rule
Processing rule for collecting a numeric value from
Windows NT performance counters. See performance
measure.
missing event
An event that was supposed to occur within a specified time
interval, but did not occur.
missing event rule
Processing rule for generating an alert when particular events
do not occur during a specified time. See missing
event.
MOM Administrator Console
Interface based on Microsoft Management Console (MMC)
technology, used for monitoring and event management. Can include
the Microsoft Operations Manager 2000 Monitor, Rules, and
Configuration snap-ins.
N
nested groups
Rule groups within rule groups.
notification group
List of operators and scheduled availability for receiving page
or e-mail responses.
O
OnePointOp ConfgAdms
Windows 2000 group providing member accounts with the
permissions necessary to modify the computers on which Microsoft
Operations Manager 2000 installs agents.
OnePointOp Operators
Windows 2000 group providing member accounts with the
permissions necessary to specify what information is collected and
what the product does with it.
OnePointOp System
Windows 2000 group providing member accounts with the
permission necessary for Data Access Server (DAS) and Consolidator
service accounts.
OnePointOp Users
Windows 2000 group providing member accounts with the
permissions necessary to monitor collected information. User
accounts cannot modify product functionality.
OnePointOp MOM Reporting
Windows 2000 group providing member accounts with the
permissions necessary to run reports using MOM Reporting.
operator
Person scheduled to receive e-mail or page responses from
Microsoft Operations Manager 2000.
P
performance data
Sampled numeric data collected from Windows NT performance
counters.
performance data view
Window that displays specified performance information.
performance measure
Sampled numeric data collected for capacity planning.
performance threshold
Sampled numeric data compared to a threshold value. Microsoft
Operations Manager 2000 generates an alert if the threshold is
crossed in either direction.
pre-filter
Filter that excludes an event from further processing by
Microsoft Operations Manager 2000. The event is not inserted
in the database.
private view
A view that is accessible only by the user who created it, and
is saved in the My Views folder.
processing rule
Rule that defines how Microsoft Operations Manager 2000
collects, processes, and responds to information. Types of
processing rules include event, filtering, missing event,
consolidation, alert, performance measuring, and performance
threshold.
processing rule group
Set of processing rules grouped together with a single name.
Grouping processing rules together allows you to associate more
than one processing rule with a computer group.
processing rule match
Occurs when Microsoft Operations Manager 2000 receives
information that matches a processing rule. When a processing rule
match occurs, the product performs the actions and response defined
in that rule.
provider
Source of information collected by Microsoft Operations
Manager 2000. Providers include system event logs and
performance counters, among others.
public view
A view that is accessible by anyone, and is saved in the Public
Views folder.
Q
No Glossary entries.
R
regular expressions
Search criteria for text pattern matching that provide more
flexibility than simple wildcard characters.
MOM Reporting
Interface to the database that allows you to generate reports,
including specific security auditing and general system monitoring
reports, and graphs useful for capacity planning or performance
analysis.
resolution history
Microsoft Operations Manager 2000 automatically tracks
changes to alert fields. You can also enter your own information
about an alert.
resolution state
Status in the cycle of resolving alerts. Default resolution
states include New, Acknowledged, and Resolved, among others.
response
Action that Microsoft Operations Manager 2000 initiates
when a processing rule match occurs. Notifications, command or
batch files, scripts, and SNMP traps are examples of possible
responses. Responses that occur on the Consolidator computer are
central responses. Responses that occur on the agent
computer are local responses.
rule
Method of grouping computers or identifying data to collect.
You can define two types of rules:
Computer Grouping: Rule that creates a collection of
computers for similar event management.
Processing: Rule that defines the events, alerts, and
performance data to collect, what to do with the information once
it is collected, and how to respond to the indicated
condition.
S
script
Simple program that can be added to a processing rule as a
response, or used as an extension to the event criteria
definition.
service level agreement time
The amount of time an alert can remain in an alert resolution
state before it becomes a service level exception.
service level exception
An alert that has remained longer than specified in a
resolution state. For example, the default service expectation time
for an alert to remain in the New resolution state is 10 minutes.
If an alert's resolution state is New for longer than 10 minutes,
it is considered a service level exception.
T
threshold rule
Processing rule for creating an alert when a Windows NT
performance counter value crosses a defined threshold. See
performance threshold.
U
uninstall delay
The amount of time Microsoft Operations Manager 2000 waits
before removing an unnecessary agent from a managed computer. The
default uninstall delay is 48 hours.
V
view
A window in the Microsoft Operations Manager 2000 Monitor
snap-in that displays specified data from the database.
W
Web Console
Interface that allows you to access database information from
any Windows platform that can run Microsoft Internet Explorer.
Web Console server
Component installed on a Microsoft Internet Information
Services computer that hosts the Web Console.
Web farm
Potentially hundreds of Windows 2000 servers linked in a
network environment to support a company's web site. Many thousands
of users can access a company's web farm servers in a day.
Microsoft Operations Manager 2000 helps network administrators
ensure smooth web farm operation.
X
No Glossary entries.
Y
No Glossary entries.
Z
zone configuration group
Configuration group that forwards alerts to the master
configuration group.