u/Hsbrown2

I thought I'd share some json I created that provides well-formatted messages that will be sent in Teams when Teams notification channels are used. The out of the box formatting wasn't helpful for us.

SCOMTeams/SCOM_Teams_Notification at main · hsbrown2/SCOMTeams

The annoying part for us was getting links to format correctly, while at the same time embedding notification variables in the links. Note that we use SquaredUp, but you could use this as a guide for web console link formatting:

<a href='https:&amp;#47;&amp;#47;<URL>&amp;#47;SquaredUp&amp;#47;drilldown&amp;#47;scomalert?id=$UrlEncodeData/Context/DataItem/AlertId$'&gt; View Alert </A> | <a href='https:&amp;#47;&amp;#47;<URL>&amp;#47;SquaredUp&amp;#47;drilldown&amp;#47;scomobject?id=$UrlEncodeData/Context/DataItem/ManagedEntity$'&gt; View Source </A><br><br>

Essentially it involves substituting &amp;47; wherever there is a forward slash that isn't part of a SCOM variable. For example "https:&amp;#47;&amp;#47;<URL>&amp;#47;SquaredUp&amp;#47;drilldown&amp;#47;scomobject?" would be translated to https://<URL>/SquaredUp/drilldown/scomobject?" then everything after that processes properly.

Hopefully someone finds this useful!

We're using the Microsoft 365 Management Pack combined with SquaredUp. The M365 Monitoring Dashboard (Monitoring --> Microsoft 365 --> M365 Monitoring Dashboard) has a great view of the status of Microsoft 365 services, and incidents, etc...

I'd like to replicate this in SquaredUp, but looking at the MP, it's all managed code that drives this dashboard. Is there a way to replicate this dashboard to some degree in SquaredUp?

I have what the About in the app calls the model “SmartThermostat with voice control”. It’s circa 2020, so an old-ish model.

I’ve set up Comfort Settings and schedules.

Home is set to the thermostat itself as the only participating sensor. This works fine. A sensor in my Master Bedroom is the only participating sensor for the Sleep comfort setting.

It seems as though there are issues with that if I try to deviate from these settings in the Sleep mode at all.

1. If I retire early, and manually change the Comfort Setting to Sleep mode, it doesn’t seem to do anything. I’ve waited and waited to see if things need to “sync up” or something, but the only thing that seems to actually work is to change the Home Comfort Setting Participating Sensors. If I drop the thermostat and add the master bedroom, the display starts to show the temperature in the Master Bedroom, and the system comes on.

2. If the schedule puts the thermostat in Sleep, this works fine - unless I try to adjust the temperature up or down (from either the app or the thermostat). The temperature doesn’t seem to change UNLESS I adjust the temperature to be cooler or warmer than the thermostat sensor. Then it will kick on.

Ideally I’d want it to adjust temperature and sensor accordingly - if I switch to Sleep, it switches to that program and that sensor. If I adjust the temperature in the app during Sleep, I’d want it to properly respect the participating sensor in my room associated with the Sleep Comfort Setting.

Batteries and connectivity is all rock solid. Ecobee documentation is awful, and they have a virtual assistant that makes it nigh impossible to find what you’re after.

Has anyone run into these sorts of quirks?

TIA

My home is wired throughout, and I also have 2 APs running on PoE.

The APs are ceiling mounted.

I have 10 wall outlets, and 3 devices in the location of the router connected to it directly, so 13 total and the PoE for the APs as well.

I need to replace both APs and the router. APs are out of support, and the router has a wicked security flaw that isn’t going to be patched by the vendor.

My devices are pretty basic, but I do have a number of gaming consoles and need to allow UPnP to have open NAT on all of them, and the current router does a pretty good job of managing that. I also have dynamic DNS set up to a single box for a personal web server.

What would folks recommend I replace these with? Budget is around 1k, but if that’s too low let me know that as well. I’d also like to add a good outdoor repeater.

Booked a stay next week in (Northern) Chelan County, Washington. The property is less than 3km from the Little Giant fire evacuation zone (less than 2mi). Chelan County has declared a Public Health Emergency, officially covering the entire county. The Federal Government has declared Chelan County a Federal Disaster Area (continuing) since August 3rd. I provided extensive proof of both these declarations which do affect the property.

The AQI forecast for the days of travel at the specific location of the property ranges from "Unhealthy" to "Hazardous".

Here's the response I got from airbnb support:

"..the location of the property is only posted that it may be potentially affected by the wildfire. For cancelling the reservation, you cancel the anytime however, when it comes to refund. It's your host's discretion."

Is this some internal scale that airbnb uses to decide when it's decisions can conflict with official government declarations? Does the property need to literally burn to the ground before they will take action?

Thoughts? The airbnb representative has gone dark. I've asked for escalation and received no response.

I thought I'd check here before raising an issue in the github project, since others reported it.

It seems this MP doesn't un-discover certificates even after they've been deleted from the store. Even more odd is that certificates for which a certificate in the chain had expired, and the certificate (not the one in the chain, but the one that contained it) was deleted, continues to generate alerts regarding lifespan that if you reset the monitor, would return - for a certificate that does not exist on the target system.

Is this user error? Am I missing something? The discovery of certificates in a store is a pretty simple registry discovery. I don't know that certificates linger in the registry after they've been deleted.

Any insight would be greatly appreciated.

I thought this got fixed a long time ago. We're on SCOM 2025 UR1 with the hotfix installed. If a Linux agent install fails, we get this nondescript error again and need to dig into the Tasks to find the actual error. Linux agent version is 10.25.1016.0. Everything should be latest/greatest.

Is there a regression, by chance? We've deployed ~80 Linux agents without a hitch, and we've got one that is being a difficult one.

I'm trying to create a rule that triggers on 5 failed logins in under 60 seconds.

I have no issues If I add suppression based on the host PrincipalName, but if I add the name used to try and log in, the suppression fails:

<ConditionDetection ID="CD" TypeID="System!System.ConsolidatorCondition">

<Consolidator>

<ConsolidationProperties>

<PropertyXPathQuery>LoggingComputer</PropertyXPathQuery>

<PropertyXPathQuery>Params/Param[6]</PropertyXPathQuery>

</ConsolidationProperties>

<TimeControl>

<WithinTimeSchedule>

<Interval>60</Interval>

</WithinTimeSchedule>

</TimeControl>

<CountingCondition>

<Count>5</Count>

<CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>

</CountingCondition>

</Consolidator>

</ConditionDetection>

<WriteActions>

<WriteAction ID="System.Health.GenerateAlert" TypeID="Health!System.Health.GenerateAlert">

<Priority>1</Priority>

<Severity>1</Severity>

<AlertMessageId>$MPElement[Name="MyCompany.Core.Monitoring.Login.Failed.5.RepeatedEvent.Rule.Alert.Message"]$</AlertMessageId>

<AlertParameters>

<AlertParameter1>$Data/Count$</AlertParameter1>

<AlertParameter2>$Data/Context/DataItem/EventDescription$</AlertParameter2>

</AlertParameters>

<Suppression>

<SuppressionValue>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</SuppressionValue>

<SuppressionValue>$Data/Params/Param[6]$</SuppressionValue>

</Suppression>

</WriteAction>

</WriteActions>

</Rule>

Basically, I want to trigger on 5 failed logon attempts in 60 seconds on the same computer, consolidate on same computer/same account. and suppress on same computer/same account.

The logic being 5 failed logins on the same computer with the same account will only trigger the alert (so multiple people in the time frame don't contribute to the initial alert), and generate repeat count only if it's the same user at the same computer.

Are these redundant? Does the consolidator take care of that anyway, so all that is necessary is the computer? Or maybe just consolidate by user and suppress by computer? My head hurts 😄

I found a great article here: https://www.popupparts.com/index.php?main\_page=page&id=7

But some of it is a little unclear. For example, to get oil in the spring guide tubes, should I undo them? Should I just squirt oil down where the lifts on the corners are? Other means?

We almost need a Goshen tips and tricks mega thread here. I found a lot of Goshen related posts searching the sub, but nothing really specific to maintenance. My local shops seem to look at you as though you’ve suddenly grown another head asking anything related to popup maintenance.

FYI- 2018 Forest River Flagstaff HW27KS. I love it, but I really wanted the 296. They’re SO hard to find used but not thrashed.