HighdensityServer Alert Rule 238

ESight.HighdensityServer.HighdensityServerAlertRule238 (Rule)

HighdensityServer Alert Rule (The alarm level is "error" and the eventnumber has a mantissa of 3 or 8)

Element properties:

TargetESight.HighdensityServer
CategoryNone
EnabledTrue
Alert GenerateTrue
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
HighdensityServerDS238 DataSource Microsoft.SystemCenter.SdkEventProvider Default
HighdensityServerCD238 ConditionDetection System.ExpressionFilter Default
HighdensityServerWA238 WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="ESight.HighdensityServer.HighdensityServerAlertRule238" Target="ESight.HighdensityServer" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>None</Category>
<DataSources>
<DataSource ID="HighdensityServerDS238" TypeID="SC!Microsoft.SystemCenter.SdkEventProvider"/>
</DataSources>
<ConditionDetection ID="HighdensityServerCD238" TypeID="System!System.ExpressionFilter">
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>$Target/Property[Type="EVL!ESight.HuaweiServer"]/DN$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>238</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</ConditionDetection>
<WriteActions>
<WriteAction ID="HighdensityServerWA238" TypeID="Health!System.Health.GenerateAlert">
<Priority>$Data/Params/Param[2]$</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="EVL!ESight.HuaweiServer.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Target/Property[Type="EVL!ESight.HuaweiServer"]/DN$</AlertParameter1>
<AlertParameter2>$Data/EventData/CustomData/OptType$</AlertParameter2>
<AlertParameter3>$Data/EventData/CustomData/EventTime$</AlertParameter3>
<AlertParameter4>$Data/EventData/CustomData/NeType$</AlertParameter4>
<AlertParameter5>$Data/EventData/CustomData/ObjectInstance$</AlertParameter5>
<AlertParameter6>$Data/EventData/CustomData/ProposedRepairActions$</AlertParameter6>
<AlertParameter7>$Data/EventData/CustomData/AdditionalInformation$</AlertParameter7>
</AlertParameters>
<Suppression/>
<!--moDN-->
<Custom1>$Target/Property[Type="EVL!ESight.HuaweiServer"]/DN$</Custom1>
<!--additionalInformation-->
<Custom2>$Data/EventData/CustomData/AdditionalInformation$</Custom2>
<!--additionalText-->
<Custom3>$Data/Params/Param[3]$</Custom3>
<!--alarmId -->
<Custom4>$Data/Params/Param[4]$</Custom4>
<!--alarmName-->
<Custom5>$Data/Params/Param[5]$</Custom5>
<!--alarmSN -->
<Custom6>$Data/Params/Param[6]$</Custom6>
<!--arrivedTime -->
<Custom7>$Data/Params/Param[7]$</Custom7>
<!--devCsn -->
<Custom8>$Data/Params/Param[8]$</Custom8>
<!--eventType -->
<Custom9>$Data/Params/Param[9]$</Custom9>
<!--MoName -->
<Custom10>$Data/Params/Param[10]$</Custom10>
</WriteAction>
</WriteActions>
</Rule>