I was working lately on Migrating and moving all our Virtual Machines from Hyper-V 2008 R2 Hosts to the latest 2012 R2 Hyper-V Hosts. We installed the Hyper-V 2012 and 2012 R2 SCOM Management Packs to monitor our new servers while keeping the old 2008 Hyper-V Management Pack since there are still VMs hosted on 2008R2 (Transition Phase).
It was noticed that Event ID 26004 is repeated on daily basis on my Hyper-V 2012 R2 Host servers under the Operations Manager logs from Server Event Viewer.
The Image Management Service Admin Event log was only available back in Hyper-V 2008 R2 Hosts and it doesn’t exist in Hyper-V 2012 or 2012 R2
Problem
On my SCOM server i have three Hyper-V Management Packs for 2008R2, 2012 and 2012R2 Hyper-V hosts. Logically each Management Pack should identify and point all its monitors to its relevant servers. However it looks like the 2008R2 Management Pack which includes the Image Management Service admin Event log is pointing and trying to get this data from the 2012 and 2012 R2 servers
Upon checking this issue with several Microsoft Support engineers, they confirmed that when the 2008 R2 Management Pack was created the work flow was targeted very broadly and affected all Hyper-V hosts, Even if you have the correct Management pack as 2012 or 2012 R2, this won’t stop the 2008 MP to monitor and target the newer Hyper-V servers.
Solution
The Solution is to disable targeting this monitor from the 2008 MP to 2012 and 2012 R2 servers
In order to do this you need to do the following:
1. Go to the SCOM Console, Authoring – Management Pack Objects – Monitors – find – mounted drive
5. Right Click the SCOM Monitor (Hyper-V Virtual Hard Disk – Mounted drive Read-Only ), disable the monitor – For a group and pick the group created in Step 3. Enable & Enforce the Override as per attached.
This should fix the problem. Also if all VMs are migrated lately to 2012 R2 or 2012 Hosts and there is no more 2008R2 Hyper-V hosts in the environment, you can delete the 2008 Hyper-V Management Pack from SCOM to avoid this issue or similar ones.