HOWTO: Notify on cleared MOM alerts. (Alert Resolution states)

It’s a pity that the power of WMI is not know by many people.

Standard in MOM there isn’t. BUT however you can use the WMI classes for this: 

If you installed the MOM SDK then you will get a WMI namespace “rootMOM”.

This namespace contains a MSFT_alert class. Make a event filter with the following WQL:

SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA
‘MSFT_alert’ and TargetInstance.ResolutionState PreviousInstance.ResolutionState

Make a WMI consumer binding to the SMTP consumer.

This is all WMI related.(Install the WMI tools form Microsoft to do this.)

OR you can do it all from the MOM administrator console:

1) Create a new Event filter in a rule group that contains the MOM management computer group.

2) Choose the Provider tap. And create a new data provider of type WMI.

3) Fill in the following property’s.

Name : test resolution state

Namespace: rootMOM

Query:

SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA
‘MSFT_alert’ and TargetInstance.ResolutionState PreviousInstance.ResolutionState

4) on the alert tab enable the alert with a state you prefer. 

5) Create a new Alert rule with a notification response OR go to on the responses tab (from the above event rule) and add a notification group.

6) Commit the changes

7) and to test change a resolution state. You will get a mail.

I’ve tested this and it works.

Have fun.