Integrate > Microsoft SCOM > Configure > Entity Mappings > Mappings Used in the Event Integration

Mappings Used in the Event Integration

OpsCx for Microsoft SCOM comes with preconfigured event mappings that you can customize. The event mappings are defined in the Operations Connector policy for Microsoft SCOM events. To reconfigure them, make sure the policy is imported into Operations Connector, and then edit it in the Operations Connector web interface.

For each of the listed Microsoft SCOM management packs (management packs), the policy forwards events from a default set of Microsoft SCOM monitors. The Microsoft SCOM object that the event relates to is mapped to an OMi configuration item (CI) of a specific type. The policy sets event type indicators (ETIs) that Operations Manager i can use to calculate the status of the CI that is related to the Microsoft SCOM object.

Note: Other events are forwarded as well, but do not have the ETI set. Nevertheless, a relation to the CI or node that caused the event is created in most cases.

The following sections list default mappings available in the event forwarding package of OpsCx for Microsoft SCOM for different Microsoft SCOM management packs:

Windows Core Library Management Pack

Events Forwarded From the Windows Core Library Management Pack
Rule Name Microsoft SCOM Monitor Name Mapped CI Type Mapped ETI
MS.SCOM.NodeUnreachable Computer Not Reachable Node PingAvailability
MS.WinServer.MemoryAvailable Available Megabytes of Memory Windows MemoryUsageLevel
MS.WinServer.
AvgDiskSecsPTransfer
Average Disk Seconds Per Transfer DiskDevice DiskServiceTime
MS.WinServer.
DNSClientService
DNS Client Service Health Windows DNSService
MS.WinServer.FSFreeSpace Logical Disk Free Space FileSystem DiskUsageLevel
MS.WinServer.PctMemInUse Percentage of Committed Memory in Use Windows MemoryUsageLevel
MS.WinServer.RPCService RPC Service Health Windows RPCService
MS.WinServer.
TotalCPUUtilization
Total CPU Utilization Percentage Windows CPULoad
MS.WinServer.EventLogService Windows Event Log Service Health Windows EventLoggingService
MS.HACluster.RGMonitor Resource Group Monitor Cluster Resource Group ClusterResource
GroupStatus
MS.HACluster.ClusterService Cluster service status Cluster Software ClusterSoftwareService
MS.HyperV.VMMService Monitors the state of Virtual Machine Management Service Hypervisor VirtualizationService

Windows Server Operating System Management Pack

The set of forwarded events and their mapping is the same as with the management pack for Windows Core Library. See Windows Core Library Management Pack.

Active Directory Domain Services Management Pack

Events Forwarded From the Active Directory Domain Services Management Pack
Rule Name Microsoft SCOM Monitor Name Mapped CI Type Mapped ETI
MS.AD.ADDBFreeSpace AD Database Free Space Monitor DomainController DITDiskSpace
Availability
MS.AD.GeneralResponse AD General Response Monitor DomainController DCLDAPQuery
ResponseTime
MS.AD.LogfileFreeSpace AD Logfile Free Space Monitor DomainController DITLogFilesDisk
SpaceAvailability
MS.AD.LSASSOverload AD Processor Overload (lsass) Monitor DomainController LSASS
ProcessorTime
MS.AD.DFSRService DFSR Service Health DomainController DFSRService
State
MS.AD.FRService File Replication Service Health DomainController FRSStatus
MS.AD.ISMService ISM Service Health DomainController ISMService
Status
MS.AD.KDCService KDC Service Health DomainController KDCService
Status
MS.AD.NetLogonService Net Logon Service Health DomainController NetLogon
ServiceState
MS.AD.08.NTDSService NTDS Service Health DomainController NTDS
ServiceState
MS.AD.NTFRSService NTFRS Service Health DomainController FRSStatus
MS.AD.SySVol SysVol Share Health DomainController Sysvol
Connectivity

Exchange Server 2010 Management Pack

Events Forwarded From the Exchange Server 2010 Management Pack
Rule Name Microsoft SCOM Monitor Name Mapped CI Type Mapped ETI
MS.Exch10.
ActiveSync
Connectivity
KHI: ActiveSync connectivity (Internal) transaction failures. Exchange Client Access Server ActiveSync
Connectivity
MS.Exch10.
IMAP4Connectivity
Transaction
KHI: IMAP4 connectivity transaction failures. Exchange Client Access Server IMAP4
Connectivity
MS.Exch10.
MailboxReplication
ServiceStatus
KHI: The Microsoft Exchange Mailbox Replication service isn't running. Exchange Mail Server Replication
ServiceStatus
MS.Exch10.
OutlookWebApp
Connectivity
KHI: Outlook Web App connectivity (External) transaction failures. Exchange Client Access Server OWA
Connectivity
MS.Exch10.
POP3Connectivity
KHI: POP3 connectivity transaction failures. Exchange Client Access Server POP3
Connectivity
MS.Exch10.
MSExchange
FDSServiceStatus
KHI: The Microsoft Exchange File Distribution service (MSExchangeFDS) isn't running. ms_exchange_role FileDistribution
ServiceStatus
MS.Exch10.
MSExchange
IMAP4
ServiceStatus
KHI: The Microsoft Exchange IMAP4 service (MSExchangeIMAP4) isn't running. Exchange Client Access Server IMAP4Service
Status
MS.Exch10.
MSExchange
MailboxReplication
ServiceStatus
KHI: The Microsoft Exchange Mailbox Replication Service (MSExchangeMailbox Replication) isn't running. Exchange Mail Server Replication
ServiceStatus
MS.Exch10.
POP3
ServiceStatus
KHI: The Microsoft Exchange POP3 service (MSExchangePOP3) isn't running. Exchange Client Access Server POP3Service
Status
MS.Exch10.
MSExchange
ProtectedService
HostServiceStatus
KHI: The Microsoft Exchange Protected Service Host service (MSExchange-
ProtectedServiceHost) isn't running.
ms_exchange_role ExchangeService
HostStatus
MS.Exch10.
ADServerResponse
KHI: Every Active Directory server in the domain failed to respond. Microsoft Exchange Server ActiveDirectory
Access
MS.Exch10.
LDAPSearchTime
KHI: LDAP Search Time - sustained for 5 minutes - Red(>100msec). Microsoft Exchange Server GCSearchTime
MS.Exch10.
ISADConnectivity
KHI: The Exchange Information Store cannot contact Active Directory. Microsoft Exchange Server ActiveDirectory
Access
MS.Exch10.
LDAPSearch
Timeouts
KHI: LDAP Searches timed out per minute - sustained for 5 minutes - Red(>20). Microsoft Exchange Server GCSearchTime
MS.Exch10.
MSExchange
ADTopology
ServiceStatus
KHI: The Microsoft Exchange Active Directory Topology Service (MSExchange-ADTopology) isn't running. Microsoft Exchange Server ADTopology
ServiceStatus
MS.Exch10.
MSExchange
ServiceHost
ServiceStatus
KHI: The Microsoft Exchange Service Host service (MSExchangeServiceHost) isn't running. ms_exchange_role ExchangeService
HostStatus
MS.Exch10.
MSExchange
EdgeSyncService
Status
KHI: The Microsoft Exchange EdgeSync Service (MSExchangeEdgeSync) isn't running. Exchange Hub Server EdgeSyncService
Status
MS.Exch10.
MSExchange
TransportService
Status
KHI: The Microsoft Exchange Transport Service (MSExchangeTransport) isn't running. Exchange Transport Server TransportService
Status
MS.Exch10.
EdgeDelayedDSN
KHI: Delay DSNs - increase over 60 minutes - Red(>20) - Edge Transport. Exchange Transport Server DelayedDSN
Count
MS.Exch10.
ADAM_
MSExchange
KHI: The Microsoft Exchange ADAM service (ADAM_MSExchange) isn't running. Exchange Edge Server ADAM
ServiceStatus

MS.Exch10.
MSExchange
EdgeCredential

KHI: The Microsoft Exchange Credential service (MSExchangeEdgeCredential) isn't running. Exchange Edge Server EdgeCredential
ServiceStatus
MS.Exch10.
HubDelayedDSN
KHI: Delay DSNs - increase over 60 minutes - Red(>20) - Hub Transport. Exchange Transport Server DelayedDSN
Count
MS.Exch10.
EdgeSyncEHF
Failures
KHI: EdgeSync EHF synchronization failures. Exchange Hub Server Edge
Syncronization
Status
MS.Exch10.
EdgeSync
EnterpriseFailures
KHI: EdgeSync Enterprise synchronization failures. Exchange Hub Server Edge
Syncronization
Status
MS.Exch10.
EdgeSync
MSERVFailures
KHI: EdgeSync MSERV synchronization failures. Exchange Hub Server Edge
Syncronization
Status
MS.Exch10.
EHFSyncFailures
KHI: Failed to sync entries to EHF. Exchange Hub Server Edge
Syncronization
Status
MS.Exch10.
HubTransport
AggregateDelivery
QueueLength
KHI: Aggregate Delivery Queue Length (All Queues) - sustained for 15 minutes - Red(>5000) - Hub Transport. Exchange Transport Server Aggregate
Delivery
QueueLength
MS.Exch10.
HubTransport
LargestDelivery
QueueLength
KHI: Largest Delivery Queue Length - sustained for 30 minutes - Red(>250) - Hub Transport. Exchange Transport Server LargestDelivery
QueueLength
MS.Exch10.
HubTransport
RetryMBDelivery
QueueLength
KHI: Retry Mailbox Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport. Exchange Transport Server ActiveMailbox
DeliveryQueue
Length
MS.Exch10.
HubTransport
RetryNonSMTP
Delivery
QueueLength
KHI: Retry Non-Smtp Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport. Exchange Transport Server RetryNonSmtp
DeliveryQueue
Length
MS.Exch10.
HubTransport
RetryRemote
Delivery
QueueLength
KHI: Retry Remote Delivery Queue Length - sustained for 30 minutes - Red(>1) - Hub Transport. Exchange Transport Server RemoteDelivery
QueueLength
MS.Exch10.
MDBVolSpace
CritLow
KHI: The database copy is low on database volume space. The volume has reached critical levels (8% free). Exchange Mailbox Database Available
Database
DiskSpace
MS.Exch10.
MDBVolSpace
ErrLow
KHI: The database copy is low on database volume space. The volume has reached error levels (16% free). Exchange Mailbox Database Available
Database
DiskSpace
MS.Exch10.
MDBVolSpace
WarnLow
KHI: The database copy is low on database volume space. The volume is 25% free. Exchange Mailbox Database Available
Database
DiskSpace
MS.Exch10.
MDBLogVolSpace
CritLow
KHI: The database copy is low on log volume space. The volume has reached critical levels (15% free). Exchange Mailbox Database Available
Transaction
LogDiskSpace
MS.Exch10.
MDBLogVolSpace
ErrLow
KHI: The database copy is low on log volume space. The volume has reached error levels (35% free). Exchange Mailbox Database Available
Transaction
LogDiskSpace
MS.Exch10.
MDBLogVolSpace
WarnLow
KHI: The database copy is low on log volume space. The volume has reached warning levels (50% free). Exchange Mailbox Database Available
Transaction
LogDiskSpace
MS.Exch10.
MailSubmission
MessagesQueued
KHI: Mail Submission Service is experiencing issues: Messages Queued For Submission - sustained for 15 minutes - Red (>25). Exchange Mail Server MailSubmission
Status
MS.Exch10.
MailSubmission
Service
KHI: The Microsoft Exchange Mail Submission service isn't running. Mail submission to the Hub Transport server won't occur until service is started. Exchange Mail Server MailSubmission
ServiceStatus
MS.Exch10.
PFDBVolSpace
CritLow
KHI: The database copy is low on database volume space. The volume has reached critical levels (8% free). Exchange Mail Server Available
Database
DiskSpace
MS.Exch10.
PFDBVolSpace
ErrLow
KHI: The database copy is low on database volume space. The volume has reached error levels (16% free). Exchange Mail Server Available
Database
DiskSpace
MS.Exch10.
PFDBLogVolSpace
CritLow
KHI: The database copy is low on log volume space. The volume has reached critical levels (15% free). Exchange Mail Server Available
Transaction
LogDiskSpace
MS.Exch10.
PFDB
LogVolSpace
ErrLow
KHI: The database copy is low on log volume space. The volume has reached error levels (35% free). Exchange Mail Server Available
Transaction
LogDiskSpace
MS.Exch10.
MSExchange
ISServiceStatus
KHI: The Microsoft Exchange Information Store service (MSExchangeIS) isn't running. Exchange Mail Server InformationStore
ServiceStatus
MS.Exch10.
MSExchange
MailSubmission
ServiceStatus
KHI: The Microsoft Exchange Mail Submission service (MSExchangeMailSubmission) isn't running. Exchange Mail Server MailSubmission
ServiceStatus
MS.Exch10.
MSExchange
SAServiceStatus
KHI: The Microsoft Exchange System Attendant service (MSExchangeSA) isn't running. Exchange Mail Server SystemAttendant
Status
MS.Exch10.
MSSpeechService
ServiceStatus
KHI: The Microsoft Exchange Speech Engine service (MSSpeechService) isn't running. Exchange Unified Messaging Server SpeechEngine
Status
MS.Exch10.
MSExchange
UMServiceStatus
KHI: The Microsoft Exchange Unified Messaging service (MSExchangeUM) isn't running. Exchange Unified Messaging Server Unified
Messaging
Status

Exchange Server 2007 Management Pack

Events Forwarded From the Exchange Server 2007 Management Pack
Rule Name Microsoft SCOM Monitor Name Mapped CI Type Mapped ETI
MS.Exch07.
TestMAPIConnectivity
Exchange 2007 Test MAPI Connectivity Monitor Exchange Mail Server MapiConnectivity
MS.Exch07.
PFDBStatus
Exchange 2007 Public Folder Database Monitor Exchange Mail Server DatabaseInstance
Status
MS.Exch07.
PFReceiveQueueSize
Public Folder Receive Queue Size Monitor Exchange Mail Server PublicReceive
QueueLength
MS.Exch07.
TestReplicationHealth
Exchange 2007 Test Replication Health Monitor Exchange Mail Server Replication
ServiceStatus
MS.Exch07.
ADTopologyService
OnCAS
Exchange 2007 AD Topology Service Monitor on CAS MicrosoftExchange Server ADTopology
ServiceStatus
MS.Exch07.
FileDistServiceOnCAS
Exchange 2007 File Distribution Service Monitor ms_exchange_role FileDistribution
ServiceStatus
MS.Exch07.
IMAP4Service
Exchange 2007 IMAP4 Service Monitor Exchange Client Access Server IMAP4Service
Status
MS.Exch07.
POP3Service
Exchange 2007 POP3 Service Monitor Exchange Client Access Server POP3Service
Status
MS.Exch07.
ExchServiceHost
Exchange 2007 Service Host Service Monitor ms_exchange_role ExchangeService
HostStatus
MS.Exch07.
ADTopologyService
OnMailbox
AD Topology Service Monitor MicrosoftExchange Server ADTopology
ServiceStatus
MS.Exch07.
TestExchangeSearch
Exchange 2007 Test Exchange Search Monitor Exchange Mail Server SearchStatus
MS.Exch07.
ISService
Information Store Service Monitor Exchange Mail Server InformationStore
ServiceStatus
MS.Exch07.
MailSubmissionService
Mail Submission Service Monitor Exchange Mail Server MailSubmission
ServiceStatus
MS.Exch07.
MBAssistantsService
Mailbox Assistants Service Monitor Exchange Mail Server MailboxAssistant
ServiceStatus
MS.Exch07.
MBHubServersInRetry
Mailbox Hub Servers In Retry Monitor Exchange Mail Server HubServer
Reachability
MS.Exch07.
ServiceHost
Service Host Service Monitor ms_exchange_role ExchangeService
HostStatus
MS.Exch07.
SystemAttendantService
System Attendant Service Monitor Exchange Mail Server SystemAttendant
Status
MS.Exch07.
DeliveryQueueLength
(aggregated)
Aggregate Delivery Queue Length (All Queues) Monitor Exchange Transport Server AggregateDelivery
QueueLength
MS.Exch07.
DelayDSNs
Delay DSNs Monitor Exchange Transport Server DelayedDSNCount
MS.Exch07.
TotalDSNFailures
Failure DSNs Total Monitor Exchange Transport Server FailedDSNCount
MS.Exch07.
LargestDelivery
QueueLength
Largest Delivery Queue Length Monitor Exchange Transport Server LargestDelivery
QueueLength
MS.Exch07.
PoisonQueueLength
Poison Queue Length Monitor Exchange Transport Server PoisonQueue
Length
MS.Exch07.
RetryNonSmtp
DeliveryQueueLength
Retry Non-Smtp Delivery Queue Length Monitor Exchange Transport Server RetryNonSmtp
DeliveryQueue
Length
MS.Exch07.
RetryRemote
Delivery
QueueLength
Retry Remote Delivery Queue Length Monitor Exchange Transport Server RemoteDelivery
QueueLength
MS.Exch07.
Submission
QueueLength
Submission Queue Length Monitor Exchange Transport Server Submission
QueueLength
MS.Exch07.
TransportService
Transport Service Monitor Exchange Transport Server TransportService
Status
MS.Exch07.
Unreachable
QueueLength
Unreachable Queue Length Monitor Exchange Transport Server Unreachable
QueueLength
MS.Exch07.
ADAMService
ADAM MSExchange Service Monitor Exchange Edge Server ADAMService
Status
MS.Exch07.
EdgeCredendtial
Service
Edge Credential Service Monitor Exchange Edge Server EdgeCredential
ServiceStatus
MS.Exch07.
ActiveMailbox
DeleiveryQueueLength
Active Mailbox Delivery Queue Length Monitor Exchange Transport Server ActiveMailbox
DeliveryQueue
Length
MS.Exch07.
ADTopologyService
OnHub
AD Topology Service Monitor MicrosoftExchange Server ADTopology
ServiceStatus
MS.Exch07.
EdgeSyncService
EdgeSync Service Monitor Exchange Hub Server EdgeSync
ServiceStatus
MS.Exch07.
ADTopologyServiceOnUM
AD Topology Service Monitor MicrosoftExchange Server ADTopology
ServiceStatus
MS.Exch07.
TestUMConnectivity
LocalFax
Exchange 2007 Test UM Connectivity Local Fax Monitor Exchange Unified Messaging Server UnifiedMessaging
Connectivity
MS.Exch07.
TestUMConnectivity
LocalVoice
Exchange 2007 Test UM Connectivity Local Voice Monitor Exchange Unified Messaging Server UnifiedMessaging
Connectivity
MS.Exch07.
TestUMConnectivity
RemoteVoice
Exchange 2007 Test UM Connectivity Remote Voice Monitor Exchange Unified Messaging Server UnifiedMessaging
Connectivity
MS.Exch07.
FileDistServiceOnUM
File Distribution Service Monitor ms_exchange_role FileDistribution
ServiceStatus
MS.Exch07.
UMService
MSExchangeUM Service Monitor Exchange Unified Messaging Server UnifiedMessaging
Status
MS.Exch07.
SpeechService
Speech Service Monitor Exchange Unified Messaging Server SpeechEngine
Status
MS.Exch07.
TestActiveSync
Connectivity
Exchange 2007 Test Active Sync Connectivity Monitor Exchange Client Access Server ActiveSync
Connectivity
MS.Exch07.
TestIMAPConnectivity
Exchange 2007 Test IMAP Connectivity Monitor Exchange Client Access Server IMAP4Connectivity
MS.Exch07.
TestOWExternal
Connectivity
Exchange 2007 Test OWA Connectivity External Monitor Exchange Client Access Server OWAConnectivity
MS.Exch07.
TestInternal
Connectivity
Exchange 2007 Test OWA Connectivity Internal Monitor Exchange Client Access Server OWAConnectivity
MS.Exch07.
TestPOP3
Connectivity
Exchange 2007 Test POP3 Connectivity Monitor Exchange Client Access Server POP3Connectivity
MS.Exch07.
TestCrossOrgMailFlow
Exchange 2007 Test Cross Org Mail Flow Monitor Exchange Mail Server MailFlowStatus
MS.Exch07.
TestLocalMailFlow
Exchange 2007 Test Local Mail Flow Monitor Exchange Mail Server MailFlowStatus
MS.Exch07.
TestRemoteMailFlow
Exchange 2007 Test Remote Mail Flow Monitor Exchange Mail Server MailFlowStatus

SQL Server Management Packs

Events Forwarded From the Management Packs for Different SQL Server Versions
Rule Name Microsoft SCOM Monitor Name Mapped CI Type Mapped ETI
MS.SQLServer.DBStatus Database Status SQL Server DatabaseStatus
MS.SQLServer.DBFileSpace DB File Space (rollup) SQL Server DatabaseFileGroup
SpaceUsageLevel
MS.SQLServer.DBLogFileSpace DB Log File Space (rollup) SQL Server TransactionLog
UsageLevel
MS.SQLServer.DBTotalSpace DB Total Space SQL Server DatabaseSpace
UsageLevel
MS.SQLServer.DestLogShipping Destination Log Shipping SQL Server ReplicationStatus
MS.SQLServer.SrcLogShipping Source Log Shipping SQL Server ReplicationStatus
MS.SQLServer.Service SQL Server Windows Service SQL Server SQLServer
ServiceStatus

Internet Information Services Management Packs

Events Forwarded From the Management Packs for Different Internet Information Services (IIS) Versions
Rule Name Microsoft SCOM Monitor Name Mapped CI Type Mapped ETI
WebServer.NTService.
CheckServiceState.Monitor
World Wide Web Publishing service availability Windows WebServerService
ServerRole.NTService.
CheckServiceState.Monitor
IIS Admin Service availability Windows WebServerService
FTPServer.NTService.
CheckServiceState.Monitor
FTP service availability Windows FTPService

Related topics

Modifying Operations Connector Policies