Untitled Document

How to Configure Alert Central to Integrate SCOM

This guide describes how to enter Microsoft System Center Operations Manager (SCOM) information into Alert Central. The guide also explains how to configure Alert Central to recognize, process, and automatically assign email alerts from SCOM. SCOM alert integration is a simple process and is simple with the following steps.

When Alert Central receives an email, it needs to know how to identify the email’s source. When a rule matches the defined email data, Alert Central assigns the rule’s associated source to the email.

Alert Central also uses a series of user-configured rules to summarize the SCOM email and determine its source address and severity level. Alert Central maps the rules you configure in Alert Central to the data in the email. If text in the email matches the text defined in the Alert Central rules, Alert Central knows that any email mapping to those rules comes from the SCOM system. The final step is configuring who Alert Central assigns the SCOM email alert to.

The SCOM email shows what Alert Central can map to and process to integrate a SCOM source.

SCOM alert email Alert Central mapping

The SCOM email shows what Alert Central can map to and process to integrate a SCOM source.

To configure Alert Central to recognize, process, and assign SCOM emails:

1. Click Settings in the upper right corner of the page. The Settings link is available on any page of Alert Central.

2. Click Add New Email Alert Source, under the Alert Sources section.

SCOM alert integration step 2

3. Enter the source name.

SCOM alert integration step 3

4. Click Next.

5. Click + Add new matching rule in the Matching Rules pane.

6. Click if the From:, select contains, and enter scom@springrain.com in the Configure Rule pane.

SCOM alert integration step 6

Note: Ensure Ignore case and Ignore whitespace (treat multiple spaces as one space) in the Configure Rule pane are selected for all rules.

7. Click Next.

8. Select Subject: line and click And just use all the text we find there.

SCOM alert integration step 8

9. Click Next.

10. Select Body: message and then select And just use all the text we find there.

11. Select the exact phrase and enter 10.140.106.210, and select Include the matching text in the value we capture in the Start pane. These settings tell Alert Central where in the email to start capturing the source’s object information, and which information to capture.

Note: Ensure Ignore case and Ignore whitespace (treat multiple spaces as one space) are selected in the Start pane.

12. Select Stop as soon as we find a word or phrase, enter 10.140.106.210, and select Include the matching text in the value we capture in the Stop pane. These settings tell Alert Central what to include and where to stop capturing information.

Note: Ensure Ignore case and Ignore whitespace (treat multiple spaces as one space) are selected in the Start pane.

SCOM alert integration step 12

13. Click Next.

14. Select Subject: line and Only capture a specific section of the text. Alert Central can now capture severity-level information from the email’s subject line. Alert Central uses this information to create an alert with that same severity level.

Note: See the SolarWinds Alert Central Administrator Guide for more information on alert severity levels.

15. Select the exact phrase, enter resolution state: and select Include the matching text in the value we capture in the Start pane. All these settings tell Alert Central where in the email to start capturing the source’s object information, and which information to capture.

Note: Ensure Ignore case and Ignore whitespace (treat multiple spaces as one space) are selected in the Start pane.

16. Select Stop at the end of the current line in the Stop pane. This setting tells Alert Central where to stop capturing information.

SCOM alert integration step 16

17. Click Next.

18. Select assign the alert to Administrators in the By default field.

SCOM alert integration step 18

19. Click Next.

20. Enter the SCOM email into the Test Email pane and click Test. Alert Central tests the configured settings. Your results look like the following.

SCOM alert integration step 20

Your configuration works! Because the SCOM alert did not contain an Alert Central-standard severity level, this example adapted Alert Central’s rules to the severity level in the SCOM alert. The severity level for this email alert is Notice. You may want to assign a different severity level to the alert in Alert Central. For details on this process, see the SolarWinds Alert Central Administrator Guide.

The Route to Groups result shows that the test was unable to match a routing rule. You configured all SCOM email alerts to route to the Administrators group without adding any rules, so this configuration is correct.

21. Click Next to complete SCOM integration and Alert Central alert source configuration.

Alert Central is now configured to automatically process and route SCOM email alerts.

  • Alert Central is part of Solarwind's
    policy of giving back to the IT
    comunity that has helped make us
    one of the fastest growing software
    companies in the world.