• Management Pack:  SCOM 2016
  • MP Version:  1.0
  • Released:  10/19/2018
  • Publisher:  Microsoft

Workflow Runtime: Failed to run a WMI query for WMI events Rule

  • ID:  Microsoft.SystemCenter.WmiEventModule.FailedExecution.Alert
  • Description:  This rule generates alerts when the WMI Event module experiences a runtime failure.
  • Target:  Health Service
  • Enabled:  Yes

Overridable Parameters

Parameter Name Default Value Description Override
Priority 1  
Severity 1  
Interval Seconds 3600 Time in seconds between each consolidation
Count 3 Times before restart consolidation count

Run As Profiles

Name
Default

Alert Details

Message Priority Severity
Operations Manager failed to run a WMI query for WMI events Medium Warning

Rule Knowledgebase

Summary

Operations Manager failed to run a WMI query or script related to WMI events.

Causes

The possible causes for this are:

Operations Manager failed to connect to the computer or namespace. This could be due to permissions issues or that an invalid WMI namespace is used.

Operations Manager failed to run the WMI query. This could be due to permissions or an invalid WMI query.

If the WMI failure is occurring on a computer running Windows Server 2008, it may be due to a known issue with WMI described in Knowledge Base article 958807(http://go.microsoft.com/fwlink/?LinkID=133791).

Resolutions

More details of what caused this issue can be found by examining the associated alert context.

The alert context will detail whether this was a connection, permission or query issue.

If it is a connections issue, ensure that DCOM is enabled

  • Run Dcomcnfg.exe

  • Click the Component Services node under Console Root

  • Open the Computers folder

  • For the local computer, right-click My Computer, and then click Properties

  • For a remote computer, right-click the Computers folder, point to New and then click Computer

    • Type the computer name

    • Right-click the computer name, and then click Properties

  • Click the Default Properties tab

  • Click to select (or click to clear) the “Enable Distributed COM on this Computer” check box

  • Set Default Authentication Level to Connect

  • Set Default Impersonation Level to Identify

If it’s a permissions issue, ensure that the Operations Manager RunAs account has the appropriate permissions to access WMI.

If it’s a query issue, examine the rule or monitor that contains the WMI script and take appropriate action by modifying it.

You should also review the details provided in Knowledge Base article 958807 (http://go.microsoft.com/fwlink/?LinkID=133791). If the update is applicable, apply it to this computer.

The following link will display all events indicating a possible problem with the WMI Event component:

View WMI Provider Events

External References

For more information on troubleshooting WMI problems, go to http://go.microsoft.com/fwlink/?LinkId=158224.

You can also download the WMI Diagnosis Utility at http://go.microsoft.com/fwlink/?LinkId=158226. The WMI Diagnosis Utility is a VBScript script designed to help you troubleshoot the current state of the WMI service on a computer.

See Also for SCOM 2016 Management Pack


Downloads for SCOM 2016 Management Pack

AZURE OPTIMIZATION ASSESSMENT GET STARTED
MIGRATION TO AZURE GET STARTED
SYSTEM CENTER MIGRATION TO AZURE GET STARTED
MIGRATION TO AZURE FOR SQL AND WINDOWS 2008 GET STARTED