Home
  •  

重复事件日志手动重置 2 状态监视器类型

Correlation.RepeatedEventsLogManualReset2StateMonitorType (UnitMonitorType)

Element properties:

RunAsDefault
AccessibilityPublic
Support Monitor RecalculateFalse

Member Modules:

ID Module Type TypeId RunAs 
RepeatedDataSource DataSource Microsoft.Windows.BaseEventProvider Default
RepeatedDataCondition ConditionDetection System.ConsolidatorCondition Default
RepeatedFilterCondition ConditionDetection System.ExpressionFilter Default

Overrideable Parameters:

IDParameterTypeSelectorDisplay NameDescription
TimeWindowInSecondsint$Config/TimeWindowInSeconds$时间段为使此监视器的状态变为其问题状态，在其中必须发生“重复阈值”次数事件的可调时间范围(秒)。
RepeatThresholdint$Config/RepeatThreshold$重复阈值为使此监视器的状态变为其问题状态，为此监视器定义的事件在“时间范围”内必须发生的次数。

Source Code:

<UnitMonitorType ID="Correlation.RepeatedEventsLogManualReset2StateMonitorType" Accessibility="Public">

  <MonitorTypeStates>

    <MonitorTypeState ID="EventRaised" NoDetection="false"/>

    <MonitorTypeState ID="ManualResetEventRaised" NoDetection="true"/>

  </MonitorTypeStates>

  <Configuration>

    <IncludeSchemaTypes>

      <SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>

    </IncludeSchemaTypes>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="MonitorType" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="VoteWeight" minOccurs="0" maxOccurs="1" type="xsd:int"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="ComputerName" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="LogName" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="TimeWindowInSeconds" minOccurs="1" maxOccurs="1" type="xsd:int"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="RepeatThreshold" minOccurs="1" maxOccurs="1" type="xsd:int"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Expression" type="ExpressionType"/>

  </Configuration>

  <OverrideableParameters>

    <OverrideableParameter ID="TimeWindowInSeconds" ParameterType="int" Selector="$Config/TimeWindowInSeconds$"/>

    <OverrideableParameter ID="RepeatThreshold" ParameterType="int" Selector="$Config/RepeatThreshold$"/>

  </OverrideableParameters>

  <MonitorImplementation>

    <MemberModules>

      <DataSource ID="RepeatedDataSource" TypeID="Windows!Microsoft.Windows.BaseEventProvider">

        <ComputerName>$Config/ComputerName$</ComputerName>

        <LogName>$Config/LogName$</LogName>

      </DataSource>

      <ConditionDetection ID="RepeatedFilterCondition" TypeID="System!System.ExpressionFilter">

        <Expression>$Config/Expression$</Expression>

      </ConditionDetection>

      <ConditionDetection ID="RepeatedDataCondition" TypeID="System!System.ConsolidatorCondition">

        <Consolidator>

          <ConsolidationProperties/>

          <TimeControl>

            <WithinTimeSchedule>

              <Interval>$Config/TimeWindowInSeconds$</Interval>

            </WithinTimeSchedule>

          </TimeControl>

          <CountingCondition>

            <Count>$Config/RepeatThreshold$</Count>

            <CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>

          </CountingCondition>

        </Consolidator>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="EventRaised">

        <Node ID="RepeatedDataCondition">

          <Node ID="RepeatedFilterCondition">

            <Node ID="RepeatedDataSource"/>

          </Node>

        </Node>

      </RegularDetection>

    </RegularDetections>

  </MonitorImplementation>

</UnitMonitorType>