Automating Incident & Problem management – Part II: Configuring the SCOM–SCSM connector

The first part covered how to setup a SCOM monitor and trigger a fake alert. This post will focus on configuring the connector between SCOM and SCSM. The goal is to have incidents that are auto-generated from SCOM events.

 

Configure the incident template.

In SCSM, under “Library – Templates”, create a new template. Give it an explanatory name, like “Fake SCOM Alerts Template”, and choose the class “Incident”. Put this in a new MP.

201311-IncidentAutomation-PII_3

Complete the form with all required info, but leave out the “Title”, “Urgency” and “Priority” – these will be inherited from the SCOM alert, or from the SCOM connector rule. For this scenario, also fill the Primary Owner field with a mail-enabled user / group.

SCSM Incident Template

Create the Operation Manager Alert Connector

In SCSM, under “Administration – Connectors” category, you can create an “Operation Manager Alert connector” (don’t confuse it with “Operation Manager CI connector”, which is right under it).

Give a self-explanatory name for this connector, and make sure it is enabled.

SCSM SCOM Connector

Configure the “Run As Account” (recommendations on the accounts required for creating Operations Manager Alert Connectors can be found here, v.2007 is similar to v.2012). The best practice states: “Domain account specifically created for this purpose that is only in the Users local security group and in an Administrator user role in Operations Manager and in an Advanced Operator user role in Service Manager.”

SCSM SCOM Connector 2

On the “Alerts Routing Rules”, add the Incident template defined above.

201311-IncidentAutomation-PII_6

SCSM Alert Rule

Leave the default poll alerts interval unchanged (30 seconds). Make sure to enable the “Close alerts in Operation Manager when Incidents are resolved or closed” and the “Resolve Incidents automatically when the alerts in Operations Manager are closed” checks.

SCSM SCOM Connector

Finish.

Configure the SCOM Internal Connector Subscription.

Go to SCOM, under “Administrator – Product Connectors – Internal Connectors”, find the connector we just defined in SCSM (it has the same name), open it, and add a subscription.

SCSM SCOM Internal Connector

Give the new subscription an explanatory name.

SCSM SCOM Internal Connector

You can leave all the groups checked or go into detail and fine tune this option. I just left it as default.

SCSM SCOM Internal Connector

Again leave the default or go in depth with the target selection.

SCSM SCOM Internal Connector

For “Criteria”, leave the default.

SCSM SCOM Internal Connector

Checking the functionality

Trigger a fake incident following the indication from the previous post. As a result, in SCSM a new Incident would appear, with the status “Active”.

SCSM Incident Active

If you open it, you will notice that part of the fields are already filled with data from the Incident template and from the SCOM alert – this means the connector between SCOM and SCSM is working as expected.

SCSM Incident Active

Next post will cover the Orchestrator runbook that is triggered when incidents are created.

Advertisements

4 thoughts on “Automating Incident & Problem management – Part II: Configuring the SCOM–SCSM connector

  1. Pingback: Automating Incident & Problem management – Part I: Creating a SCOM monitor and generating fake alerts | System Center Automation Blog

  2. Pingback: Automating Incident & Problem management – Part III: Using Orchestrator to remediate the issue (Counter edition) | System Center Automation Blog

  3. Pingback: Automating Incident & Problem management – Part IV: Replacing Counters with Database tables | System Center Automation Blog

  4. Pingback: (New Updated) Keep Up With New Microsoft 70-246 182q Exam Questions For 100 Percent Passing Exam (81-100) | Best MCITP Preparation Materials With New Updated Questions

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s