Correlation.StatefulWindowsEventMonitorType (UnitMonitorType)

Element properties:

RunAsDefault
AccessibilityInternal
Support Monitor RecalculateFalse

Member Modules:

ID Module Type TypeId RunAs 
FirstDataSource DataSource Microsoft.Windows.BaseEventProvider Default
SecondDataSource DataSource Microsoft.Windows.BaseEventProvider Default
FirstFilterCondition ConditionDetection System.ExpressionFilter Default
SecondFilterCondition ConditionDetection System.ExpressionFilter Default

Source Code:

<UnitMonitorType ID="Correlation.StatefulWindowsEventMonitorType" Accessibility="Internal">
<MonitorTypeStates>
<MonitorTypeState ID="FirstEventRaised" NoDetection="false"/>
<MonitorTypeState ID="SecondEventRaised" NoDetection="false"/>
</MonitorTypeStates>
<Configuration>
<IncludeSchemaTypes>
<SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>
</IncludeSchemaTypes>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="MonitorType" type="xsd:string"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="VoteWeight" minOccurs="0" maxOccurs="1" type="xsd:int"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="FirstComputerName" type="xsd:string"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="FirstLogName" type="xsd:string"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="FirstExpression" type="ExpressionType"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="SecondComputerName" type="xsd:string"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="SecondLogName" type="xsd:string"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="SecondExpression" type="ExpressionType"/>
</Configuration>
<MonitorImplementation>
<MemberModules>
<DataSource ID="FirstDataSource" TypeID="Windows!Microsoft.Windows.BaseEventProvider">
<ComputerName>$Config/FirstComputerName$</ComputerName>
<LogName>$Config/FirstLogName$</LogName>
</DataSource>
<DataSource ID="SecondDataSource" TypeID="Windows!Microsoft.Windows.BaseEventProvider">
<ComputerName>$Config/SecondComputerName$</ComputerName>
<LogName>$Config/SecondLogName$</LogName>
</DataSource>
<ConditionDetection ID="FirstFilterCondition" TypeID="System!System.ExpressionFilter">
<Expression>$Config/FirstExpression$</Expression>
</ConditionDetection>
<ConditionDetection ID="SecondFilterCondition" TypeID="System!System.ExpressionFilter">
<Expression>$Config/SecondExpression$</Expression>
</ConditionDetection>
</MemberModules>
<RegularDetections>
<RegularDetection MonitorTypeStateID="FirstEventRaised">
<Node ID="FirstFilterCondition">
<Node ID="FirstDataSource"/>
</Node>
</RegularDetection>
<RegularDetection MonitorTypeStateID="SecondEventRaised">
<Node ID="SecondFilterCondition">
<Node ID="SecondDataSource"/>
</Node>
</RegularDetection>
</RegularDetections>
</MonitorImplementation>
</UnitMonitorType>