Need DNS Scavenging alerts, to see what’s cleaned up, or that scavenging failed? Download the DNS Addendum pack from my GitHub repo https://github.com/theKevinJustin/DNSAddendumAgnostic
Latest revision first includes a EventID 2502 monitor for scavenging failed. Second, the monitor has count logic (setup to alert with 2 events in 30 minutes). Third, EventID 2501 rule details scavenging totals. Lastly, built a weekly report to summarize the scavenging alerts (cliff notes!).
Some quick ‘how-to’ setup DNS scavenging
Example of RegKey showing that Scavenging is setup – note Scavenging Interval key
Example of AD integrated DNS setup with 21 day scavenging interval, and prompts to configure (click OK twice)
Import management pack, and run DNS scavenging.
Verify scavenging alerts
SCOM Monitoring Tab > Active Alerts > ‘Look for:’ scavenging
Example output
Additional SCOM PowerShell commands
Run PowerShell commands from the SCOM management server (MS)
$DNSAlerts = get-scomalert -name "*Scavenging*" $DNSAlerts $DNSAlerts | format-table PrincipalName,TimeRaised,Description -auto -wrap
Example Output
PS C:\Users\scomadmin> $DNSAlerts = get-scomalert -name “*Scavenging*”
PS C:\Users\scomadmin> $DNSAlerts
Severity Priority Name TimeRaised
——– ——– —- ———-
Warning Normal Windows DNS Event 2502 Scavenging Failed monitor addendum alert 8/19/2024 2:02:3…
Warning Normal Windows DNS Event 2502 Scavenging Failed monitor addendum alert 8/19/2024 1:07:0…
Information Normal Proactive DailyTasks DNSAlerts Scavenging Summary Report Alert 8/19/2024 10:11:…
DNS alerts formatted
PS C:\Users\scomadmin> $DNSAlerts | format-table PrincipalName,TimeRaised,Description -auto -wrap
PrincipalName TimeRaised Description
————- ———- ———–
DC02.testlab.net 8/19/2024 2:02:32 PM Windows DNS Event 2502 Scavenging Failed monitor alert 1 alert in 15 minutes
Event Description:
The DNS server has completed a scavenging cycle but no nodes were visited.
Possible causes of this condition include:
…
The next scavenging cycle is scheduled to run in 168 hours.
Learn articles for more details https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/dns-scavenging-setup