AlertOnEventInstance

Connmove.cmWatcher.AlertOnEventInstance (Rule)

Element properties:

TargetConnmove.cmWatcher.Instance
CategoryAlert
EnabledTrue
Alert GenerateTrue
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
TargetEntitySdkEventProvider DataSource Microsoft.SystemCenter.TargetEntitySdkEventProvider Default
Severity_Filter ConditionDetection System.ExpressionFilter Default
genrateAlert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Connmove.cmWatcher.AlertOnEventInstance" Enabled="true" Target="Connmove.cmWatcher.Instance" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="TargetEntitySdkEventProvider" TypeID="SC!Microsoft.SystemCenter.TargetEntitySdkEventProvider"/>
</DataSources>
<ConditionDetection ID="Severity_Filter" TypeID="System!System.ExpressionFilter">
<Expression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventData/DataItem/ALERTSEVERITY</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>2</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventData/DataItem/ALERTSEVERITY</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventData/DataItem/ALERTSEVERITY</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>0</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</Expression>
</ConditionDetection>
<WriteActions>
<WriteAction ID="genrateAlert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>$Data/EventData/DataItem/ALERTSEVERITY$</Severity>
<AlertName>$Data/EventData/DataItem/AlertName$</AlertName>
<AlertDescription>$Data/EventDescription$</AlertDescription>
<Custom1>$Data/EventData/DataItem/Custom/Custom1$</Custom1>
<Custom2>$Data/EventData/DataItem/Custom/Custom2$</Custom2>
<Custom3>$Data/EventData/DataItem/Custom/Custom3$</Custom3>
<Custom4>$Data/EventData/DataItem/Custom/Custom4$</Custom4>
<Custom5>$Data/EventData/DataItem/Custom/Custom5$</Custom5>
<Custom6>$Data/EventData/DataItem/Custom/Custom6$</Custom6>
<Custom7>$Data/EventData/DataItem/Custom/Custom7$</Custom7>
<Custom8>$Data/EventData/DataItem/Custom/Custom8$</Custom8>
<Custom9>$Data/EventData/DataItem/Custom/Custom9$</Custom9>
<Custom10>$Data/EventData/DataItem/Custom/Custom10$</Custom10>
</WriteAction>
</WriteActions>
</Rule>