SCOM 2012 – Get Rule / Monitor Details For Corresponding Workflow Name

Sometimes you receive alerts from SCOM which contain a lot of content in the description. For example in certain cases you receive alert like this…


In this description you see the workflow name Microsoft.Windows.Server.2008.NetworkAdapter.PercentBandwidthUsedTotal.Collection. In some cases it is more difficult to figure out a bit more about a workflow and using the GUI search is not always the best solution. One easy way to find the corresponding rule or monitor is of course PowerShell.

Just run either the Get-SCOMRule or Get-SCOMMonitor cmdlet e.g.

Get-SCOMRule | Where-Object {$_.Name –like “*Microsoft.Windows.Server.2008.NetworkAdapter.PercentBandwidthUsedTotal*”} | Select-Object *| Format-List


Get-SCOMMonitor | Where-Object {$_.Name –like “*Microsoft.Windows.Server.2008.NetworkAdapter.PercentBandwidthUsedTotal*”} | Select-Object * | Format-List


Now you get the display name and other properties which help you to dive a bit deeper. Be aware that the rule is named Microsoft.Windows.Server.2008.NetworkAdapter.PercentBandwidthUsedTotal.Collection and the monitor is named only Microsoft.Windows.Server.2008.NetworkAdapter.PercentBandwidthUsedTotal. Therefore our workflow in the alert description is a collection rule.

If you want to find out more about the Instance ID use the Get-SCOMMonitoringObject cmdlet e.g.

Get-SCOMMonitoringObject -Id 5DCB0E4A-8A4D-8E8D-93FD-12A25CC003CD | Select-Object * | Format-List


Here you also find additional information which helps you analyzing the problem.

This is basic stuff, I know, but not all blog readers are advanced SCOM admins 😉 .


  1. Pingback: How To Fix Error Code 80004005 Scom Agent Install Failed Errors - Windows Vista, Windows 7 & 8

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s