Splunk Add-on for Microsoft System Center Operations Manager: New SCOMManagementGroupConnection Fail: Unable to find type [System.Net.WebUtility]

[jaxjohnny]

Greetings Splunk Ninjas!

I have installed the SCOM add-on, configured it using an account which has both administrative rights to the SCOM server, and SCOM console. Further, I have verified the GET-SCOM* commands work inside the server Powershell. However, when initializing the application, the message is repeated in the log: index=_internal source=*ta_scom.log

2016-06-02 07:03:39 -04:00 [ERROR] New SCOMManagementGroupConnection Fail: Unable to find type [System.Net.WebUtility]: make sure that the assembly containing this type is loaded.

[ehaddad_splunk · Accepted solution]

did you install the add-on on the SCOM console server? Are you using HW forwarder?

[jaxjohnny]

Thank you. I will do that and follow up here with the answer.

[ehaddad_splunk]

i would suggest to file a support ticket and attach diag for us to take a look. It might be easier that way.

[jaxjohnny]

Data has stopped all of a sudden. index=_internal source=*ta_scom.log shows no results.

[jaxjohnny]

I installed the Add-on using the Splunk Enterprise Server. It shows up as an app.

[ehaddad_splunk]

You need to have the add-on installed on a HFW or Light W. forwarder and on the console server for data collection.
http://docs.splunk.com/Documentation/AddOns/latest/MSSCOM/Install
from the doc:
Splunk recommends using a heavy forwarder for data collection because the add-on requires Python and the Splunk Add-on for Microsoft SCOM UI is recommended to configure inputs. The Splunk Add-on for Microsoft SCOM and the forwarder must be installed on the same machine as the SCOM Operations console.

[jaxjohnny]

Thank you. I am getting data now.