| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Windows Server 2012 NTFS 檔案系統損毀規則 | Microsoft.Windows.Server.2012.OperatingSystem.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Server.6.2.LogicalDisk | EventCollection | True | True |
| 快取資料對應命中率百分比 | Microsoft.Windows.Server.6.2.CacheDataMapHitsPercent.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 保留 | Microsoft.Windows.Server.6.2.Computer.RunWMIAdap | Microsoft.Windows.Server.6.2.Computer | Maintenance | False | False |
| 平均邏輯磁碟讀取佇列長度 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskReadQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 平均磁碟寫入佇列長度 Windows Server 2012 (邏輯磁碟) | Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskWriteQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 平均磁碟佇列長度的集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每次磁碟讀取的平均秒數集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每次磁碟傳輸的平均秒數集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 每次磁碟寫入的平均秒數集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 目前磁碟佇列長度的集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 每秒磁碟位元組速率的集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒磁碟讀取位元組 Windows Server 2012 (邏輯磁碟) | Microsoft.Windows.Server.6.2.LogicalDisk.DiskReadBytesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒磁碟讀取速率的集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒邏輯磁碟寫入位元組 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskWriteBytesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 每秒磁碟寫入速率的集合規則 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 邏輯磁碟可用 MB Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.FreeMB.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 邏輯磁碟可用空間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.FreeSpace.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 邏輯磁碟閒置時間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.PercentIdle.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | True | False |
| 每秒邏輯磁碟分割 I/O Windows Server 2012 | Microsoft.Windows.Server.6.2.LogicalDisk.SplitIOPerSec.Collection | Microsoft.Windows.Server.6.2.LogicalDisk | PerformanceCollection | False | False |
| 可用系統分頁表項目 | Microsoft.Windows.Server.6.2.MemoryFreeSystemPageTableEntries.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 網路介面卡每秒接收的位元組 Windows Server 2012 | Microsoft.Windows.Server.6.2.NetworkAdapter.BytesReceivedPerSec.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 網路介面卡每秒傳送的位元組 Windows Server 2012 | Microsoft.Windows.Server.6.2.NetworkAdapter.BytesSentPerSec.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 網路介面卡每秒位元組總計 Windows Server 2012 | Microsoft.Windows.Server.6.2.NetworkAdapter.BytesTotalPerSec.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | True | False |
| 目前頻寬 | Microsoft.Windows.Server.6.2.NetworkAdapter.CurrentBandwidth.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | True | False |
| 輸出佇列長度 | Microsoft.Windows.Server.6.2.NetworkAdapter.OutputQueueLength.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 使用的讀取頻寬百分比 | Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedReads.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 使用的頻寬百分比總計 | Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedTotal.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | True | False |
| 使用的寫入頻寬百分比 | Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedWrites.Collection | Microsoft.Windows.Server.6.2.NetworkAdapter | PerformanceCollection | False | False |
| 啟動時檢查檔案系統 | Microsoft.Windows.Server.6.2.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| Windows 正常重新啟動事件的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.CleanShutdown.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| Windows 不正常關機事件的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.DirtyShutdown.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.DuplicateNameonNetwork.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 事件記錄檔已滿 | Microsoft.Windows.Server.6.2.OperatingSystem.EventLogFull.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 偵測到重複的 IP 位址 | Microsoft.Windows.Server.6.2.OperatingSystem.IPAddressConflict.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMAutoImportFailed.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 無法讀取磁碟 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMCantReadDisk.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMDiskGroupFailed.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 保留 | Microsoft.Windows.Server.6.2.OperatingSystem.LDMVolumeNotStarted.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 記憶體可用 MB Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryAvailableMBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 快取位元組 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCacheBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 認可限制 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCommitLimit.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 認可位元組 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCommittedBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 記憶體每秒分頁讀取數 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageReadsPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 每秒輸入頁數 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesInputPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 每秒輸出頁數 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesOutputPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 記憶體每秒分頁數 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 記憶體每秒分頁寫入數 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageWritesPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 使用中記憶體的認可位元組百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 記憶體集區未分頁位元組 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolNonPagedBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 記憶體集區分頁位元組 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 集區分頁常駐位元組 | Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedResidentBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 系統快取常駐位元組 | Microsoft.Windows.Server.6.2.OperatingSystem.MemorySystemCacheResidentBytes.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 網路介面卡已與網路中斷連線的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.NetworkAdapterDisconnected.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| NTFS - 延遲寫入遺失 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSDelayedWriteLost.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| NTFS - 檔案系統損毀 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 已達到 NTFS 配額閾值限制的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 已達到 NTFS 配額閾值的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdReached.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 分頁檔案使用量百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.PageFilePercentUsage.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 使用的記憶體百分比 | Microsoft.Windows.Server.6.2.OperatingSystem.PercentMemoryUsed.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 太多的效能計數器資料要求失敗 | Microsoft.Windows.Server.6.2.OperatingSystem.PerfCounterDataRequestTimeOut.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 效能登錄損毀 | Microsoft.Windows.Server.6.2.OperatingSystem.PerformanceRegistryCorruption.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| Windows 重新啟動事件的集合規則 (錯誤檢查後重新啟動) | Microsoft.Windows.Server.6.2.OperatingSystem.RebootFromBugCheck.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| Windows 重新啟動事件的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.RestartEvent.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 服務進入無法預測的狀態 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceEnteredUnpredictableState.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 服務設定錯誤 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceMisconfigured.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | True |
| 服務或驅動程式無法啟動 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 服務或驅動程式無法啟動的事件集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 服務意外終止 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 非預期的服務終止的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 共用設定無效 | Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 偵測到共用設定無效的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 軟體更新安裝失敗 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.Alert | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | False | True |
| 軟體更新安裝失敗的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 軟體更新安裝事件的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesInstalled.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 軟體更新排定安裝事件的集合規則 | Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | EventCollection | True | False |
| 系統內容每秒切換速率 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.SystemContextSwitchesPerSec.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 系統處理器佇列長度 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.SystemProcessorQueueLength.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 處理器總 DPC 時間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentDPCTime.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 處理器資訊總插斷時間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentInterruptTime.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | False | False |
| 處理器處理時間總數百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentProcessorTime.Collection | Microsoft.Windows.Server.6.2.OperatingSystem | PerformanceCollection | True | False |
| 平均實體磁碟讀取佇列長度 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskReadQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 平均磁碟寫入佇列長度 Windows Server 2012 (實體磁碟) | Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskWriteQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 實體磁碟平均磁碟佇列長度 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 實體磁碟每次進行磁碟讀取的平均秒數 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 實體磁碟每次進行磁碟傳輸的平均秒數 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | True | False |
| 實體磁碟每次進行磁碟寫入的平均秒數 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 實體磁碟目前磁碟佇列長度 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | True | False |
| 實體磁碟每秒磁碟位元組速率 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 每秒磁碟讀取位元組 Windows Server 2012 (實體磁碟) | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskReadBytesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 實體磁碟每秒讀取速率 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 每秒實體磁碟寫入位元組 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWriteBytesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 實體磁碟每秒寫入速率 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 實體磁碟閒置時間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.PercentIdle.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 每秒實體磁碟分割 I/O Windows Server 2012 | Microsoft.Windows.Server.6.2.PhysicalDisk.SplitIOPerSec.Collection | Microsoft.Windows.Server.6.2.PhysicalDisk | PerformanceCollection | False | False |
| 處理器資訊 DPC 時間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.Processor.PercentDPCTime.Collection | Microsoft.Windows.Server.6.2.Processor | PerformanceCollection | False | False |
| 處理器資訊插斷時間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.Processor.PercentInterruptTime.Collection | Microsoft.Windows.Server.6.2.Processor | PerformanceCollection | False | False |
| 處理器處理時間百分比 Windows Server 2012 | Microsoft.Windows.Server.6.2.Processor.PercentProcessorTime.Collection | Microsoft.Windows.Server.6.2.Processor | PerformanceCollection | True | False |