| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Regola di avviso autenticazione SSH tramite password root | Microsoft.Linux.Universal.LogFile.Syslog.Root.SSHAuth.Password.Alert | Microsoft.Linux.Universal.Computer | EventCollection | False | True |
| Regola di avviso errore di autenticazione SSH | Microsoft.Linux.Universal.LogFile.Syslog.SSHAuth.PAM.Root.Failure.Alert | Microsoft.Linux.Universal.Computer | EventCollection | False | True |
| Regola di avviso comando SU non riuscito | Microsoft.Linux.Universal.LogFile.Syslog.SU.Command.Root.Failure.Alert | Microsoft.Linux.Universal.Computer | EventCollection | False | True |
| Regola di avviso comando SU riuscito | Microsoft.Linux.Universal.LogFile.Syslog.SU.Command.Root.Success.Alert | Microsoft.Linux.Universal.Computer | EventCollection | False | True |
| Byte disco logico/sec (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.DiskBytesPerSecond.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| Byte letti da disco/sec (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.DiskReadBytesPerSecond.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| Letture da disco/sec (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.DiskReadsPerSecond.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| Trasferimenti disco/sec (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.DiskTransfersPerSecond.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| Byte scritti su disco/sec (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.DiskWriteBytesPerSecond.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| Scritture su disco/sec (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.DiskWritesPerSecond.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| MB liberi (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.FreeMegabytes.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| \% inode disponibili (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.PercentFreeInodes.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | False | False |
| \% di spazio disponibile (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.PercentFreeSpace.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | False | False |
| \% inode utilizzati (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.PercentUsedInodes.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| \% spazio utilizzato (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.PercentUsedSpace.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| MB utilizzati (Universal Linux) | Microsoft.Linux.Universal.LogicalDisk.UsedMegabyte.Collection | Microsoft.Linux.Universal.LogicalDisk | PerformanceCollection | True | False |
| Byte ricevuti/sec (Universal Linux) | Microsoft.Linux.Universal.NetworkAdapter.BytesReceivedPerSec.Collection | Microsoft.Linux.Universal.NetworkAdapter | PerformanceCollection | True | False |
| Byte inviati/sec (Universal Linux) | Microsoft.Linux.Universal.NetworkAdapter.BytesSentPerSec.Collection | Microsoft.Linux.Universal.NetworkAdapter | PerformanceCollection | True | False |
| Byte totali/sec (Universal Linux) | Microsoft.Linux.Universal.NetworkAdapter.BytesTotalSec.Collection | Microsoft.Linux.Universal.NetworkAdapter | PerformanceCollection | True | False |
| Memoria disponibile in MB (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.AvailableMBytes.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| Spazio di swapping disponibile in MB (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.AvailableMBytesSwap.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| Letture pagina/sec (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.PageReadsPerSecond.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| Pagine/sec (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.PagesPerSecond.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| Scritture pagina/sec (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.PageWritesPerSecond.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% memoria disponibile (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.PercentAvailableMemory.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% spazio di swapping disponibile (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.PercentAvailableSwap.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% memoria utilizzata (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.PercentUsedMemory.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% spazio di swapping utilizzato (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.PercentUsedSwapSpace.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo DPC totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentDPCTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo di inattività totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentIdleTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo di Interrupt totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentInterruptTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo di attesa I/O totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentIOWaitTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo nice totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentNiceTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo privilegiato totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentPrivilegedTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentProcessorTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| \% tempo utente totale processore (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.TotalPercentUserTime.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| Spazio di swapping utilizzato in MB (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.UsedMBytesSwap.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| Memoria utilizzata in MB (Universal Linux) | Microsoft.Linux.Universal.OperatingSystem.UsedMemoryMBytes.Collection | Microsoft.Linux.Universal.OperatingSystem | PerformanceCollection | True | False |
| Avg. Media sec/lettura disco (Universal Linux) | Microsoft.Linux.Universal.PhysicalDisk.AverageDiskReadTime.Collection | Microsoft.Linux.Universal.PhysicalDisk | PerformanceCollection | True | False |
| Avg. Media sec/trasferimento disco (Universal Linux) | Microsoft.Linux.Universal.PhysicalDisk.AverageDiskTransferTime.Collection | Microsoft.Linux.Universal.PhysicalDisk | PerformanceCollection | True | False |
| Avg. Media sec/scrittura disco (Universal Linux) | Microsoft.Linux.Universal.PhysicalDisk.AverageDiskWriteTime.Collection | Microsoft.Linux.Universal.PhysicalDisk | PerformanceCollection | True | False |
| Byte disco fisico/sec (Universal Linux) | Microsoft.Linux.Universal.PhysicalDisk.DiskBytesPerSecond.Collection | Microsoft.Linux.Universal.PhysicalDisk | PerformanceCollection | True | False |
| \% tempo di inattività processore (Universal Linux) | Microsoft.Linux.Universal.Processor.PercentIdleTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |
| \% tempo nice processore (Universal Linux) | Microsoft.Linux.Universal.Processor.PercentNiceTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |
| \% tempo privilegiato processore (Universal Linux) | Microsoft.Linux.Universal.Processor.PercentPrivilegedTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |
| \% tempo processore (Universal Linux) | Microsoft.Linux.Universal.Processor.PercentProcessorTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |
| \% tempo utente processore (Universal Linux) | Microsoft.Linux.Universal.Processor.PercentUserTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |
| \% tempo DPC processore (Universal Linux) | Microsoft.Linux.Universal.Processor.TotalPercentDPCTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |
| \% tempo di Interrupt processore (Universal Linux) | Microsoft.Linux.Universal.Processor.TotalPercentInterruptTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |
| \% tempo I/O processore (Universal Linux) | Microsoft.Linux.Universal.Processor.TotalPercentIOWaitTime.Collection | Microsoft.Linux.Universal.Processor | PerformanceCollection | True | False |