| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Windows Server 2012 NTFS 文件系统损坏规则 | Microsoft.Windows.Server.2012.OperatingSystem.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Server.6.2.LogicalDisk | EventCollection | True | True |
| 缓存数据映射命中百分比 | Microsoft.Windows.Server.6.2.CacheDataMapHitsPercent.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 保留 | Microsoft.Windows.Server.6.2.Computer.RunWMIAdap | Microsoft.Windows.Server.6.2.Computer | Maintenance | False | False |
| 平均逻辑磁盘读取队列长度 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskReadQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 平均磁盘写入队列长度 Windows Server 2012 (逻辑磁盘) | Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskWriteQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 平均磁盘队列长度 Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每次读取磁盘的平均时间(秒) Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每次传输磁盘的平均时间 Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 每次写入磁盘的平均时间(秒) Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 当前磁盘队列长度 Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 每秒磁盘字节数 Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒磁盘读取字节 Windows Server 2012 (逻辑磁盘) | Microsoft.Windows.Server.6.2.LogicalDisk.DiskReadBytesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒磁盘读取数 Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒逻辑磁盘写入字节 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskWriteBytesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒磁盘写入数 Windows Server 2012 的收集规则 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘可用兆字节 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.FreeMB.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 逻辑磁盘可用空间百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.FreeSpace.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 逻辑磁盘空闲时间百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.PercentIdle.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 每秒逻辑磁盘分解 I/O Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.SplitIOPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 可用系统页表项 | Microsoft.Windows.Server.6.2.MemoryFreeSystemPageTableEntries.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 每秒接收的网络适配器字节数 Windows Server 2012 | Microsoft.Windows.Server.6.2.NetworkAdapter.BytesReceivedPerSec.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 每秒发送的网络适配器字节数 Windows Server 2012 | Microsoft.Windows.Server.6.2.NetworkAdapter.BytesSentPerSec.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 每秒的总网络适配器字节数 Windows Server 2012 | Microsoft.Windows.Server.6.2.NetworkAdapter.BytesTotalPerSec.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | True | False |
| 当前带宽 | Microsoft.Windows.Server.6.2.NetworkAdapter.CurrentBandwidth.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | True | False |
| 输出队列长度 | Microsoft.Windows.Server.6.2.NetworkAdapter.OutputQueueLength.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 所用读取带宽百分比 | Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedReads.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 所用总带宽百分比 | Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedTotal.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | True | False |
| 所用写带宽百分比 | Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedWrites.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 启动时检查文件系统 | Microsoft.Windows.Server.6.2.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| Windows 正常重新启动事件的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.CleanShutdown.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| Windows 不正常关闭事件的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.DirtyShutdown.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.DuplicateNameonNetwork.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 事件日志文件已满 | Microsoft.Windows.Server.6.2.OperatingSystem.EventLogFull.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 检测到重复的 IP 地址 | Microsoft.Windows.Server.6.2.OperatingSystem.IPAddressConflict.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMAutoImportFailed.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 不能读取磁盘 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMCantReadDisk.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMDiskGroupFailed.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMVolumeNotStarted.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 内存可用兆字节 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryAvailableMBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 缓冲字节数 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCacheBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 提交限制 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCommitLimit.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 提交的字节数 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCommittedBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 每秒读取内存页的次数 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageReadsPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 每秒页面输入 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesInputPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 每秒页面输出 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesOutputPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 每秒的内存页数 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 每秒写入内存页的次数 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageWritesPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 内存正在使用的提交的字节数百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 内存池非分页字节数 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolNonPagedBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 内存池分页字节数 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 池分页驻留字节数 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedResidentBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 系统缓存驻留字节数 | Microsoft.Windows.Server.6.2.OperatingSystem.MemorySystemCacheResidentBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 网络适配器已与网络断开连接的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.NetworkAdapterDisconnected.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| NTFS - 延缓写入丢失 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSDelayedWriteLost.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| NTFS - 文件系统损坏 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 已经达到 NTFS 配额阈值限制的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 已经达到 NTFS 配额阈值的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdReached.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 页面文件使用百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.PageFilePercentUsage.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 所用内存百分比 | Microsoft.Windows.Server.6.2.OperatingSystem.PercentMemoryUsed.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 性能计数器数据的太多请求已失败 | Microsoft.Windows.Server.6.2.OperatingSystem.PerfCounterDataRequestTimeOut.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 性能注册表损坏 | Microsoft.Windows.Server.6.2.OperatingSystem.PerformanceRegistryCorruption.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| Windows 重新启动事件(从检测错误中重新启动)的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.RebootFromBugCheck.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| Windows 已重新启动事件的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.RestartEvent.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 服务已进入不可预测的状态 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceEnteredUnpredictableState.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 服务配置错误 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceMisconfigured.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 服务或驱动程序启动失败 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 服务或驱动程序启动失败事件的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 服务意外终止 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 意外服务终止的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 共享配置无效 | Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 检测到无效共享配置的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 软件更新安装失败 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 软件更新安装失败的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 软件更新安装事件的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesInstalled.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 软件更新计划安装事件的收集规则 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 每秒系统上下文切换次数 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.SystemContextSwitchesPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 系统处理器队列长度 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.SystemProcessorQueueLength.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 处理器 DPC 时间百分比总计 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentDPCTime.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 处理器信息中断时间百分比总计 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentInterruptTime.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 处理器的处理器时间百分比总计 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentProcessorTime.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 平均物理磁盘读取队列长度 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskReadQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 平均磁盘写入队列长度 Windows Server 2012 (物理磁盘) | Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskWriteQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘平均磁盘队列长度 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每次读取磁盘的平均时间(秒) Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每次传输磁盘的平均时间 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | True | False |
| 物理磁盘每次写入磁盘的平均时间(秒) Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘当前磁盘队列长度 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | True | False |
| 物理磁盘每秒的磁盘字节数 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 每秒磁盘读取字节 Windows Server 2012 (物理磁盘) | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskReadBytesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每秒磁盘读取次数 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 每秒物理磁盘写入字节 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWriteBytesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每秒磁盘写入次数 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘空闲时间百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.PercentIdle.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 每秒物理磁盘分解 I/O Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.SplitIOPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 处理器信息 DPC 时间百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.Processor.PercentDPCTime.Collection | Microsoft.Windows.Server.6.2.Processor | PerformanceCollection | False | False |
| 处理器信息中断时间百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.Processor.PercentInterruptTime.Collection | Microsoft.Windows.Server.6.2.Processor | PerformanceCollection | False | False |
| 处理器的处理器时间百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.Processor.PercentProcessorTime.Collection | Microsoft.Windows.Server.6.2.Processor | PerformanceCollection | True | False |