Override

An override is a Management Pack element that modify the default setting of another element, such as a monitor, rule or discovery. They are typically used when the original behavior of a Management Pack does not apply to an organization environment, and would require a customization.

Usage
An override is used to modify the original functioning of a Management Pack. It can only apply on a monitoring already existing, and cannot create a new one. It is usually created when the value or setting provided by a Management Pack element is not relevant with an organization environment and require some customization. Many different profiles can work with overrides depending of the situation such as author, operator or administrator.
 * The monitoring offered by some monitor and rules are not relevant for the organization, and are disabled to avoid creating too much alerts.
 * A monitor or rule provide relevant monitoring but the values are not representative of the organization environment. Creating an override would reduce the number of false-positive alerts.
 * The frequency determining how often a rule is executed should be changed to a value more relevant to the organization environment.

Overrides can be created on a day-to-day operation basis or during a phase called fine-tuning. The fine-tuning is usually done after the deployment of a SCOM platform and involves a period of time during which the alerts are reviewed to sort the relevant ones to the noise.

Storage
As any other Management Pack element, overrides are stored in the XML code of a Management Pack. However, depending in which context the override was created, it might be in different type of Management Pack.
 * Overrides created by operators in a production or testing environment would be created in an unsealed Override MP file.
 * Overrides created by authors at the development phase of a Management Pack might be provided in a sealed MP file.

Type
There are different kind of overrides reflecting the type of Management Pack element to modify. They can be organized into main categories.

The two major categories are Configuration and Property. Configuration overrides modify the inner working of an element, when Property overrides modify the values of the element in the Management Group.
 * Configuration
 * Rule Configuration Override
 * Monitor Configuration Override
 * Diagnostic Configuration Override
 * Recovery Configuration Override
 * Discovery Configuration Override
 * Property
 * Rule Property Override
 * Monitor Property Override
 * Diagnostic Property Override
 * Recovery Property Override
 * Discovery Property Override
 * Misc
 * Category Override
 * Monitoring Override
 * Secure Reference Override