# Microsoft SCOM Integration

By connecting [Microsoft System Center Operations Manager](https://learn.microsoft.com/en-us/system-center/scom/welcome?view=sc-om-2025) (SCOM) to ilert, you centralize alert ingestion from Windows servers and applications. These technical alerts are routed to on-call teams for structured escalation, helping reduce response time and ensure system reliability.

## In ilert: Create an Microsoft SCOM alert source

1. Go to **Alert sources** --> **Alert sources** and click on **Create new alert source**

   <figure><img src="/files/rmL9OoRxcWnDwcJZQm4Y" alt=""><figcaption></figcaption></figure>
2. Search for **Microsoft SCOM** in the search field, click on the Microsoft SCOM tile and click on **Next**.

   <figure><img src="/files/1WoRRYB5U40PbeMJ7Hit" alt=""><figcaption></figcaption></figure>
3. Give your alert source a name, optionally assign teams and click **Next**.
4. Select an **escalation policy** by creating a new one or assigning an existing one.

   <figure><img src="/files/y4Bakf2apGhBN56U8ZPR" alt=""><figcaption></figcaption></figure>
5. Select you [Alert grouping](/alerting/configure-alerting/alert-sources.md#alert-grouping) preference and click **Continue setup**. You may click **Do not group alerts** for now and change it later.

   <figure><img src="/files/nTlB0ZCIW1SP3dj6P9nO" alt=""><figcaption></figcaption></figure>
6. The next page show additional settings such as customer alert templates or notification prioritiy. Click on **Finish setup** for now.
7. On the final page, an API key and / or webhook URL will be generated that you will need later in this guide.

   <figure><img src="/files/iFF3BpyuIYMi49K1j7uk" alt=""><figcaption></figcaption></figure>

## In Microsoft SCOM: Add ilert Webhook as Channel

1. Download our script ilert.ps1.\
   Download links:\
   [ilert Microsoft SCOM](https://github.com/iLert/ilert-ms-scom)
2. Save this script into the following path:

   ```
   C:\scripts\ilert
   ```
3. In Microsoft SCOM Operations Console open the **Administration** view.

<figure><img src="/files/fKMHitdbdAGDmrroRG7t" alt=""><figcaption></figcaption></figure>

4. Navigate to **Notification**.

<figure><img src="/files/ItxWPcdnuxaEMCK0tgZi" alt=""><figcaption></figcaption></figure>

5. Create a new **Command** channel by right clicking on **Channels -> New channel -> Command...**

<figure><img src="/files/2uaG4cq9h36NLWqCu0uz" alt=""><figcaption></figcaption></figure>

6. Enter a channel name and click on **Next**

<figure><img src="/files/8s6nZowZYieVHQpcMX1z" alt=""><figcaption></figcaption></figure>

7. Enter following into the input fields:\\
8. Enter following into the input fields and click on **Finish**:\\

   Full path of the command file:

   ```
   C:\windows\system32\windowspowershell\v1.0\powershell.exe
   ```

   \
   Command line parameters:\
   \&#xNAN;*Replace the parameter string "Enter API Key" with your ilert API Key created in* [*this step*](#in-ilert-create-microsoft-scom-alert-source)\_\_

   ```powershell
   -F "C:\scripts\ilert\ilert.ps1" -AlertID "$Data[Default='NotPresent']/Context/DataItem/AlertId$" -AlertSourceKey "Enter API Key"
   ```

   \
   Startup folder for the command line:

   ```
   C:\windows\system32\windowspowershell\v1.0\
   ```

<figure><img src="/files/060HUspALxX2Mkp9T7jj" alt=""><figcaption></figcaption></figure>

9. Create a new Subscriber by right clicking on **Subscriber -> New subscriber...**![](/files/ESrzUk1zlbMyxoXysqGY)
10. Select a user as subscriber and click on **Next**

<figure><img src="/files/nrUVaPDJSCeooaZDzUN7" alt=""><figcaption></figcaption></figure>

12. Leave the schedule settings on default.

<figure><img src="/files/sg3Fjn08VFigN51KNefj" alt=""><figcaption></figcaption></figure>

13. On the next view click on **Add...** to add a new subscriber address

<figure><img src="/files/iJHz68he6AJOdpwTyK2e" alt=""><figcaption></figcaption></figure>

14. Enter an address name and click on **Next**

<figure><img src="/files/2pLOk8EtouwVWtNFqsNz" alt=""><figcaption></figcaption></figure>

15. Select **Command** as **Channel Type** and **ilert Webhook** as **Command Channel**

<figure><img src="/files/kTMIFQHFC2CRnYCBoiW5" alt=""><figcaption></figcaption></figure>

16. Leave the schedule notification settings on **Always send notifications** and click on **Finish**
17. Create a new Subscription by right clicking on **Subscription -> New subscription...**![](/files/F50AYn6uD8bTESOffkUF)
18. Set a name and proceed to the next step

<figure><img src="/files/PyVcHdbYwQLa8to8e5PC" alt=""><figcaption></figcaption></figure>

19. Specify a criteria for your subscription(Note: If selecting a condition, please remove the "Notify on all alerts" to prevent multiple identical alert submission). Leave this as "Notify on all alerts" to receive a notification on all alerts.

<figure><img src="/files/wfXKucTQ7Jps89kp8YIf" alt=""><figcaption></figcaption></figure>

20. Add the previously made **Subscriber** to the **Subscription**

<figure><img src="/files/a0yjyGZfyvUkJ21ixahc" alt=""><figcaption></figcaption></figure>

21. Add the previously made **Channel** to the **Subscription**

<figure><img src="/files/deECyfUh53p6QsWboshA" alt=""><figcaption></figcaption></figure>

22. Finish the setup

<figure><img src="/files/796vukttUx1uJqbcBV21" alt=""><figcaption></figcaption></figure>

## FAQ

**Will alerts in ilert be resolved automatically?**

Yes, as soon as an alert is being **closed** or marked as **resolved**, the alert in ilert will be resolved automatically.

**Will alerts in ilert be accepted automatically?**

Yes, as soon as an alert is being marked as **acknowledged**, the alert in ilert will be accepted automatically.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ilert.com/integrations/inbound-integrations/ms-scom.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
