Home
  •  

Volver a escribir las entradas de registro de sucesos de aplicación de Citrix

Citrix.PresentationServer.CitrixApplicationLogEvents.EventCollectionRule (Rule)

Recopila los eventos del registro de sucesos de aplicaciones generados por el servidor Citrix administrado

Knowledge Base article:

Citrix ® Módulo de administración

Resumen

Esta regla genera una copia del evento original que se muestra en la vista de Eventos. La vista de Eventos muestra todos los eventos emitidos por los componentes de Citrix Presentation Server instalados en los servidores administrados.
 
© 2002-2008 Citrix Systems, Inc. Reservados todos los derechos.

Element properties:

TargetCitrix.PresentationServer.ManagedServer
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue
Event LogApplication

Member Modules:

ID Module Type TypeId RunAs 
EventCollectionDS DataSource Microsoft.Windows.EventProvider Citrix.PresentationServer.CitrixAdministratorAccount
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Citrix.PresentationServer.CitrixAdministratorAccount
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Citrix.PresentationServer.CitrixAdministratorAccount

Source Code:

<Rule ID="Citrix.PresentationServer.CitrixApplicationLogEvents.EventCollectionRule" Enabled="true" Target="Citrix.PresentationServer.ManagedServer" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="EventCollectionDS" RunAs="CtxLibrary!Citrix.PresentationServer.CitrixAdministratorAccount" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type='Windows!Microsoft.Windows.Computer']/PrincipalName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <Or>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Citrix SSL Relay</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Citrix WMI Service</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>CLTMGR</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>ctxsecgwy</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>InstallationManager</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>MetaframeEvents</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>MFSNMPAgent</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>TWPOPUP.DLL</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>wsxica</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>CitrixHealthMon</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Citrix Configuration Logging</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </Or>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" RunAs="CtxLibrary!Citrix.PresentationServer.CitrixAdministratorAccount" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" RunAs="CtxLibrary!Citrix.PresentationServer.CitrixAdministratorAccount" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>