Work with the Alerts View

The available data for an Alerts view is displayed in the Results pane when you click the Alert view name in the Navigation pane of the MOM Operator console. You can also click the alert name in Public Viewsor My Viewsin the Navigation pane. Each row in the Results pane represents a data instance generated for the view.

By default, all the data is displayed for all the computer groups in the scope that you selected. For example, if you are logged on with an account that is a member of the MOM Administrator group, you see all the data for the MOM Administrator Scope. If you want to refine the selection of data in the Results pane, select a specific computer group in the MOM Administrator Scope from the Computer Grouplist, such as Microsoft Operations Manager 2005 Agents. In addition to viewing Alerts view data, you can:

Personalize the View

The Alertsview displays the data by using a predetermined selection of elements (seen as column headings) organized in a predetermined order. You can sort the data in ascending or descending order by clicking the column title that you want to sort by. To get the best performance for alerts, sort by TimeRaised(either ascending or descending).

To change the data elements that display as columns, or their sequence, right-click anywhere in the Results pane, and click Personalize Viewto open the Personalize Viewdialog box.

The dialog box lists the Available columnsand the Displayed columns.

To add an item to the columns that are displayed
Select the item that you want in the Available columnslist, and then click Addto move it to the Displayed columnslist.
To remove an item from the columns that are displayed
Select the item in the Displayed columnslist, and then click Removeto move it back to the Available columnslist.
To change the order that columns are displayed
Select the item in the Displayed columnslist, and then click Move Upor Move Downto move the item.

The following tables summarize the displayed and available column titles, or data fields for an Alerts view.

Displayed column Description
Severity Indicates the severity of the alert, such as Service Unavailableor Success.
Maintenance Mode Indicates whether the alert is in maintenance mode.
Domain Specifies the domain to which the computer belongs.
Computer Specifies the computer on which an agent generated the alert.
Time Last Modified Specifies the date and time that the alert was last changed.
Resolution State Indicates the status of the resolution process of the alert, such as Newor Resolved. The resolution state indicates whether the resolution process has begun.
Time in State Specifies the amount of time that the alert has been in the current resolution state.
Problem State Indicates what problem state the alert is in.
Repeat Count Specifies the number of identical duplicate alerts that this instance represents.
Name Specifies the name of the rule that generated the alert.
Source Indicates where the alert was generated, for example, from MOM, or a specific server.
Ticket Id Specifies the ticket ID assigned to the alert.
Owner Specifies the person responsible for tracking and resolving the alert.
Available column Description
Description Specifies the description of the alert. This column uses the text that Windows provides in the event description.
Time of Last Event Specifies the date and time that the last event was detected.
Time Raised Specifies the date and time that the alert was raised.
Alert ID Specifies the unique identifier for the alert.
Rule ID Specifies the unique identifier for the rule that generated the alert.
Rule Name Specifies the name of the rule that generated the alert.
CustomField n Specifies the values of user-defined alert fields.
Time Added Specifies the date and time that the alert was added to the list.
Time of First Event Specifies the date and time that the alert was first raised. The time is shown in the time zone of local computer.
Time Resolved Specifies the date and time that the alert was resolved. The time is shown in the time zone of local computer.
Resolved By Specifies the person who resolved the alert.
Modified By Specifies the person who last modified the alert.
Computer Custom Data n Specifies the values of user-defined computer data fields.
Maintenance Mode End Date and time that maintenance mode ended for this alert.
Maintenance Mode User Specifies the person who put the alert in maintenance mode.
Maintenance Mode Reason Indicates why the alert was put into maintenance mode.
Note  Note   

You might not see Custom Field nas an option. You can change the name of a custom field, or your MOM Administrator might have changed the custom field names.

See or Change View Properties

To see or change the Alert view properties, right-click anywhere in the Results pane and click Alert View Propertiesto open the Alert View Propertiesdialog box. This dialog box has two tabs: Criteriaand General.

Criteria
This tab contains two fields, one for selecting alerts and one for specifying the corresponding descriptive parameters to qualify the alert. To select an alert in the Which alerts do you want to view?list, select the appropriate alert check box. When you select an alert, a corresponding hyperlink is displayed in the View description (click the underlined value to edit)input area. Click the hyperlink to open a dialog box, and then provide the required information. The following table lists the available alerts and describes the associated information that you are prompted to provide.
General
This tab has two input areas: View nameand Description. The description is optional. You can change the name or description by clicking the appropriate text box to delete or add text.

Work with View Details

The Results pane for the Alerts view is divided into two sections. The top section displays the alerts that you click to see detailed information displayed in the bottom section of the pane. Alert Detailscontains the following information:

Properties
When you click the Propertiestab, the following information, where available, is displayed in the Detail pane: Alert ID, Severity, Resolution State, Repeat Count, Time First Raised, Time Last Raised, Alert Latency, Name, Source Computer, Rule, Age, Description, Class Id, Class instance key value, Parent class instance id, Error code, Rule id of the discovery event.

The Ruleproperty displays as (enabled), you can click this text to disable the rule.

The Ageproperty displays, in seconds, how long it took to resolve the alert.

Note  Note   

Basic properties are displayed by default, but the contents of the Detail pane depend on the properties that are defined for any specific alert.

Custom Properties
When you click the Custom Propertiestab, a form is displayed in the Detail pane that shows the values for the selected alert. These values are: Alert Owner, Ticket ID, and CustomField n.
Note  Note   

If you select multiple alerts, Custom Propertiesis the only active tab and the fields are empty.

Events
When you click the Eventstab, all the events related to the Alert are displayed as rows in the Detail pane. These events have the following column headings: Type, Time, Source Computer, Provider Type, Provider Name, and Source. You can sort these rows in ascending or descending order by clicking the column titles.

You can also switch to the Events view for a specific event. To see the Events view for an event, right-click the event in the Detail pane, and select View Events.

Product Knowledge
When you click the Product Knowledgetab in the Detail pane, any product knowledge content that exists is displayed in the input area. You can also click Viewto see the content in a separate window.
Company Knowledge
When you click the Company Knowledgetab, any company knowledge content that exists is displayed in the Detail pane. If you want to insert or edit content, click Editto open the Company Knowledgedialog box.
History
When you click the Historytab, a brief description of the Alert history is displayed in the Detail pane. This information includes: the source, a date and time stamp, the GUID for the rule that generated the alert, and the name of the management group. If you want to add more information to the history, click Append.

See Also

Work with the Events View

Alert Required view description information
from specified source Click the link to open the Sourcedialog box. Type a complete text string or use wildcards to identify the alert source.
with specified alert severity Click the link to open the Severitydialog box. Select the appropriate check box to identify the level of severity. To choose all levels of severity, click Select All.
generated in a specific time period Click the link to open the Date and Time Generateddialog box. Specify a time range or a time interval.
owned by specified person Click the link to open the Ownerdialog box. Type a complete text string or use wildcards to identify the alert owner.
with specified text in alert description Click the link to open the Descriptiondialog box. Type a complete text string or use wildcards to identify the alert description.
raised by specified computer Click the link to open the Computer Namedialog box. Type a complete text string or use wildcards to provide the Domainand Computerinformation.
with specified resolution state Click the link to open the Resolution Statedialog box. Select the check box beside a resolution state ( Select resolution states for which to search) or apply logical operators against a resolution state ( Display only alerts with resolution state:).
that violated specified service level agreement Click the link to open the Service Level Exceptiondialog box. Accept or change the time parameters listed under Custom service level agreementor switch to the Default company service level agreement.
with specified name Click the link to open the Alert Namedialog box. Type a complete text string or use wildcards to search for the alert name.
with specified string in CustomField n Click the link to open the Custom Field ndialog box. Type a complete text string or use wildcards to search for the text in a custom field.
Note  Note   

You might not see Custom Field nas an option. You can change the name of a custom field, or your MOM Administrator might have changed the custom field names.

with specified GUID Click the link to open the Alert GUIDdialog box. Type the GUID for which you want to search.
raised by computers in a specified group Click the link to open the Computer Groupdialog box. Type a complete text string or use wildcards to search for the computer group name.
with specified Computer Custom Data n Click the link to open the Computer Custom Data ndialog box. Type a complete text string or use wildcards to search for the custom data field.