You are here: Home › MOM Glossary › MOM Glossary

MOM Glossary


administrator account
Account used to log on to Windows 2000 by users to create service accounts, install Microsoft Operations Manager 2005 components, and have access to the MOM Administrator console. Administrators are members of the Administrators group and have full control over the domain or computer.
Administrator Console
Interface based on Microsoft Management Console (MMC) technology, used for monitoring and event management. Can include the Microsoft Operations Manager 2005 Information Center, Operations, Management Packs, and Administration snap-ins.
Service that runs on every computer you want to monitor. An agent captures information from the computer on which it is running. An agent applies predefined rules to the captured data and performs actions as defined by the rules.
An indication of a significant event. Alerts are defined by rules.
alert rule
Rule that specifies one response for a number of previously defined alerts.
alert severity
Property of an alert indicating its seriousness. Examples include Service Unavailable, Security Issue, Critical Error, Error, Warning, Information, and Success.
alert view
Window that displays specified alerts in the management group.
Computer characteristic, typically defined by a Registry key or value.
attribute view
Window that displays specified computer attributes in the management group.


Boolean regular expressions
Search criteria for text pattern matching that allow you to combine regular expressions using the Boolean operators and, or, and not.


command bar
In the Operator Console, a set of tool bar icons specific to the view selected (Alerts, State, etc.).
company knowledge
Information you add to alerts or rules about resolving the indicated condition.
Individual part of the product: agent, server, Data Access Server (DAS), or database.
computer group
Collection of computers with some attribute in common. Computer groups are defined by computer grouping rules for similar event management.
computer group filter
In the Operator Console, a drop-down list of filters that limit the number of computers shown.
computer group view
Window that displays specified computer groups in the management group.
computer grouping rule
Rule that combines computers with common attributes into a group to be similarly managed and monitored.
computer view
Window that displays specified computers in the management group.
computer rule formula
Regular expression or wildcards used to create a computer grouping rule. For example:
Windows_Version = 2000 AND (MSMQ_Installed)
conditional filter
Filter that allows Microsoft Operations Manager 2000 to evaluate further rules, but does not insert events into the database unless another rule match occurs.
console scope
In the Operator Console, defines a set of computer groups for individual MOM 2005 users. A console scope limits the user to seeing only those computers that are in the computer groups associated with the console scope.
consolidation rule
Rule for grouping multiple events from a computer into a single summary event.


Data Access Server (DAS)
Component that receives events from the MOM Servers and inserts them into the database. Requests for data from the database and requests to insert data into the database typically go through the DAS.
Central product component that stores information including events, alerts, rules, and scripts.
database filter
Filter that allows Microsoft Operations Manager 2000 to evaluate further rules, but does not insert matching events into the database.
Flow of events, alerts, and performance information from the agents to the MOM Server, from the MOM Server to the DAS, and from the DAS to the database.
Destination configuration group
Receives forwarded alerts in a multitiered MOM configuration. See also: Source configuration group
discovered group
Any computer group found by MOM.
duplicate alert suppression
Feature that combines multiple identical alerts within a specified period of time into one alert.


Any significant occurrence in the system or an application that requires a user to be notified or an entry to be added to a log. Microsoft Operations Manager 2000 monitors events logged in Windows 2000 event logs and other application logs, among others.
event consolidation
Combines multiple events into one event. The single event identifies the number of consolidated events and when the first and last consolidated events occurred.
event rule
Rule for generating an alert when specific events occur.
event view
Window that displays specified events in the management group.


See filtering rule.
filtering rule
Rule for excluding an event, alert, or performance data from some or all processing by Microsoft Operations Manager 2000. Types of filters include pre-filters, conditional filters, and database filters.
See alert forwarding.


No Glossary entries.


Periodic pulse from the agent that contains information related to its viability. The heartbeat also informs the MOM Server of the current rules evaluated by the agent, requesting updates if necessary.


Information Center
Interface that provides access to areas of MOM, including Microsoft Operations Manager Web, Downloads and Updates, and Documentation.


No Glossary entries.


Knowledge Base
See product knowledge


No Glossary entries.


Managed Computers list
List of computers matching the Managed Computer rule for an Agent Manager.
Managed Computer rule
Rule that specifies the computers on which an Agent Manager is responsible for installing and uninstalling agents.
Management Group
Group of computers containing the following Microsoft Operations Manager 2005 components: one database, one or more Data Access Servers, one or more MOM Server, and one or more agents.
Management Packs
Predefined solutions from Microsoft. Contain computer groups and rules, with filters, performance counters, and alerts defined for specific customer applications such as Microsoft Exchange.
measuring rule
Rule for collecting a numeric value from Windows NT performance counters. See performance measure.
missing event
An event that was supposed to occur within a specified time interval, but did not occur.
missing event rule
Rule for generating an alert when particular events do not occur during a specified time. See missing event.
MOM Service
Refers to the Microsoft Operations Manager 2005 application.


nested rule groups
Rule groups within rule groups.
nested computer groups
Computer groups within computer groups.
notification group
List of operators and scheduled availability for receiving page or e-mail responses.


Person scheduled to receive e-mail or page responses from Microsoft Operations Manager 2005.
Operator Console
Interface that you use to perform monitoring functions.
override criteria
Selected target + value pairs that specify when a rule does not apply to value pair. See target, value.


a parameter defines what actions are taken within a script, based on parameter values. See script.
performance data
Sampled numeric data collected from Windows NT performance counters.
performance data view
Window that displays specified performance information.
performance measure
Sampled numeric data collected for capacity planning.
performance rule
Rule that defines how MOM processes performance counter data and WMI numeric data.
performance threshold
Sampled numeric data compared to a threshold value. Microsoft Operations Manager 2005 generates an alert if the threshold is crossed in either direction.
Filter that excludes an event from further processing by Microsoft Operations Manager 2005. The event is not inserted in the database.
private view
A view that is accessible only by the user who created it, and is saved in the My Views folder.
product knowledge
A collection of rule comments that embodies knowledge about the meaning and importance of events. Product Knowledge contains predefined information from Microsoft. Company Knowledge contains information entered by the Microsoft Operations Manager 2005 user.
Source of information collected by Microsoft Operations Manager 2005. Providers include system event logs and performance counters, among others.
public view
A view that is accessible by anyone, and is saved in the All Public Views folder.


No Glossary entries.


regular expressions
Search criteria for text pattern matching that provide more flexibility than simple wildcard characters.
Reporting Console
Interface to the database that allows you to generate reports, including specific security auditing and general system monitoring reports, and graphs useful for capacity planning or performance analysis.
resolution history
Microsoft Operations Manager 2005 automatically tracks changes to alert fields. You can also enter your own information about an alert.
resolution state
Status in the cycle of resolving alerts. Default resolution states include New, Acknowledged, and Resolved, among others.
Action that Microsoft Operations Manager 2005 initiates when a rule match occurs. Notifications, command or batch files, scripts, and SNMP traps are examples of possible responses. Responses that occur on the MOM Server computer are central responses. Responses that occur on the agent computer are local responses.
Method of grouping computers or identifying data to collect. Rules an define a collection of computers for similar event management. Rules can also define the events, alerts, and performance data to collect, what to do with the information once it is collected, and how to respond to the indicated condition.
rule group
Set of rules grouped together with a single name. Grouping rules together allows you to associate more than one rule with a computer group.
rule match
Occurs when Microsoft Operations Manager 2005 receives information that matches a rule. When a rule match occurs, the product performs the actions and response defined in that rule.


Simple program that can be added to a rule as a response, or used as an extension to the event criteria definition.
service level agreement time
The amount of time an alert can remain in an alert resolution state before it becomes a service level exception.
service level exception
An alert that has remained longer than specified in a resolution state. For example, the default service expectation time for an alert to remain in the New resolution state is 10 minutes. If an alert's resolution state is New for longer than 10 minutes, it is considered a service level exception.
Source configuration group
Forwards alerts in a multitiered MOM configuration. See also: Destination configuration group
state indicator
In the Operator Console, a command bar that shows the state of computers in a specified computer group.


Computer or computer group to which override criteria is applied. See override criteria.
Action that diagnoses or repairs a problem. A task can also automate a management process.
threshold rule
Rule for creating an alert when a Windows NT performance counter value crosses a defined threshold. See performance threshold.


uninstall delay
The amount of time Microsoft Operations Manager 2005 waits before removing an unnecessary agent from a managed computer. The default uninstall delay is 48 hours.


Number taken from rules applied to a computer or computer group. See override criteria, target.
In the Operator Console, a view of the data from the database with pre-defined criteria.


Web Console
Interface that allows you to access database information remotely from any Windows platform that can run Microsoft Internet Explorer.
Web Console server
Component installed on a Microsoft Internet Information Services computer that hosts the Web Console.
Web farm
Potentially hundreds of Windows 2000 servers linked in a network environment to support a company's web site. Many thousands of users can access a company's web farm servers in a day. Microsoft Operations Manager 2005 helps network administrators ensure smooth web farm operation.


No Glossary entries.


No Glossary entries.


No Glossary entries.