Tally mismatch for repeat alerts
The ObjectServer uses the Tally field
to keep track of the number of times that an alert occurs. This enables
it to deduplicate repeated alerts in the Netcool/OMNIbus active event
list but still track the number of times a particular alert has occurred.
The probe uses the RepeatCount field
in Microsoft SCOM
2016 as
the basis for the Tally field. It calculates the
value of the Tally field as RepeatCount +
1.
Due to a known limitation, the first time that an alert is
received by the ObjectServer its Tally value is set
to 1 regardless of the value of RepeatCount. This
is normally not a problem. However, in cases where the probe has shut
down for a period of time (or is otherwise unavailable), any new alerts
that it receives on startup will be assigned a Tally value
of 1 by the ObjectServer, regardless of the value of the RepeatCount field
in Microsoft SCOM
2016.
This results in a mismatch between the Tally field
in the ObjectServer and the RepeatCount field in Microsoft SCOM
2016,
but only for alerts that the probe has not previously processed.