Monitoring Dell Hardware on Hyper-V

[vertices]

Greetings,

We are running Veeam One 9.5 Version 9.5.4.4587

Monitoring Dell hardware on VMware with Veeam One is easy. We are trying to get at least rudimentary alarms about hardware errors on Dell hardware on Hyper-V. We have a 2016 Hyper-V host on Dell PowerEdge R620 with OMSA installed. We have failed some drives to create events.

Event log from failed drive:

Event 2048, Server Administrator
Device failed: Physical Disk 0:1:3 Controller 0, Connector 0


I was trying to create a Veeam One Alarm for this. Realistically all we need is an alarm for any event with source "Server Administrator" and Level: Error.

I've tried lots of things trying to get an alarm for this event.

Veeam One Alarms I've tried:

Code: Select all

Rule Type: Event Trigger after 0, ignore after 20
Event Name: System Administrator
Event Text: *

Rule Type: Event Trigger after 0, ignore after 20
Event Name: 2048 System Administrator
Event Text: *

Rule Type: Event Trigger after 0, ignore after 20
Event Name: *System Administrator*
Event Text: *

Rule Type: Event Trigger after 0, ignore after 20
Event Name: 2048
Event Text: *

Rule Type: Event Trigger after 0, ignore after 20
Event Name: *2048*
Event Text: *

Rule Type: Event Trigger after 0, ignore after 20
Event Name: 2048 Server-Administrator
Event Text: *

Nothing seems to work. Anyone have ideas for why this doesn't work or how to get some basic Dell hardware monitoring?

Thanks.

[Shestakov]

Hello Rob,
Were you able to find this event under Tasks&Events in Veeam ONE Monitor console?
If yes, you can right-click on it and create an alarm based on the event.

[vertices]

Tasks & Events for this host is blank. It's set to all, last week. Nothing here.

[vertices]

Is it not possible to monitor the host for any Windows Event Log entry that you wish? I was under the impression you could define an alarm for any event you desired. Veeam One doesn't apparently monitor any of the hardware events for Dell servers on Hyper-V by default, so I was trying to make my own alarm.

[vertices]

Can anyone confirm if what I am trying to do is possible? Does Veeam One only observe certain Windows Event Log IDs and ignore everything else? I assumed I could add in a Windows Event Log ID to be monitored. As it stands, Veeam One doesn't monitor Hyper-V hardware at all, at least not Dell PowerEdge servers. I am trying to achieve this. I need to know if it's possible or not possible. Thanks.

[Shestakov]

As far as I remember we collected only particular Windows Events as there were too many of them and they crowded database.
Let me double-check with R&D.
Thanks

[Shestakov]

Developers have just confirmed that I was right in the previous post. We have a white list of events to collect and we dismiss all other events to avoid overflow.
From your first post I've understood that you need all events with source "Server Administrator" and Level: Error.
You can also contact support team to find out if it's possible to change the filter in your installation and start collecting the events in current product version.

[vertices]

Thank you Nikita.

I did receive a script from support. I'm not sure if I am allowed to post it here. It appears however that the script from support will need to be run once for each Event ID I want to whitelist. It requires the following input for each event:

Source:
Log Name:
Event ID:

Part of the problem is that this Dell OMSA app, is not noisy, and I don't know all of the Event IDs I want to allow. I was hoping to be able to have this script modified to allow something like:

Source: Server Administrator
Log Name: System
Level: Error or Warning

Is that at all possible? As a service provider, that would help me sell a lot more Veeam One.

[vertices]

My Case ID is 03763865 for reference.

[Shestakov]

Hello Rob,
Thanks for the update and the case number.
You better ask support if the provided script is modifiable

[vertices]

Hi. Support actually recommended I continue in this thread. It seems no one wants to help me with this.

[vertices]

Code: Select all

DECLARE @provider_name AS VARCHAR(100) = 'Server Administrator' --Source:
DECLARE @path_name AS VARCHAR(100) = 'System' --Log Name:
DECLARE @event_id AS INT = 2082 --Event ID:

DECLARE @provider_id AS INT = NULL
DECLARE @path_id AS INT = NULL

-- Provider / Source
SET @provider_name = REPLACE(@provider_name, 'Hyper-V', 'Microsoft-Windows-Hyper-V') -- Change 'Hyper-V' to 'Microsoft-Windows-Hyper-V'
EXEC [monitor].[sp_add_event_include_source] @provider_name
SET @provider_id = (SELECT TOP 1 [id] FROM [monitor].[EventSource] WHERE [name] = @provider_name)
--SELECT * FROM [monitor].[EventSource]

-- Path
SET @path_name = REPLACE(@path_name, '/Admin', '-Admin') -- Change '/Admin' to '-Admin'
EXEC [monitor].[sp_add_event_include_path] @path_name
SET @path_id = (SELECT TOP 1 [id] FROM [monitor].[EventPath] WHERE [name] = @path_name)
--SELECT * FROM [monitor].[EventPath]

-- Event
EXEC [monitor].[sp_add_event_include] @provider_id, @path_id, @event_id;
--SELECT * FROM [monitor].[EventInclude]
GO

That is the script I have to allow a single Event ID. 2082. Perhaps someone has an idea how this could be modified?

[vertices]

Also, is there a published list somewhere of exactly what events are allowed through? With this hidden whitelist for Hyper-V, it would be nice to be able to actually see what is, and is not allowed through your filter.

[Shestakov]

Hi Rob,
I'll discuss the script with support and developers.
Thanks

[Shestakov]

For now we cannot really help with the scripts or events.
However, the request is taken into account for the next product releases.
Thanks