Can someone help me understand a particular monitor in SCOM '07r2...
MP: Microsoft Windows DNS 2008/R2 Server
Name: DNS 2008/R2 Correct Server IP Addresses And Interfaces Monitor
This is one of those 2 state event monitors where the first event puts it into a critical state, and the second event makes it healthy.
The "first event" is DNS server event ID 408, which according to technet is DNS_EVENT_OPEN_SOCKET_FOR_ADDRESS. That's fine, no problem there, but the second event which is supposed to indicate healthy is DNS server event ID 7600, which is DNS_EVENT_GLOBAL_QUERY_BLACKLIST. That doesn't seem to have anything to do with the first event.
I'm in a situation where the first event triggered an alert for me, and now I can't figure out how to make it healthy again.
Links to the event descriptions...
Event ID 408: http://technet.microsoft.com/en-us/library/cc735852(WS.10).aspx
Event ID 7600: http://technet.microsoft.com/en-us/library/cc735775(WS.10).aspx
