Commvault Alert Rule (Critical)

GalaxyAlertCritical (Rule)

Commvault rule for generating alert from the CSV file

Element properties:

Member Modules:

Source Code:

<Rule ID="GalaxyAlertCritical" Enabled="true" Target="ServiceStateProbePage_0e09fb5fdccd40bbae6273f7c013e0b8" ConfirmDelivery="true" Remotable="true" Priority="High" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="LogDS" TypeID="AppLog!System.ApplicationLog.GenericCSVLog.FilteredEventProvider">

      <LogFileDirectory>C:\Program Files\Commvault\ContentStore\SCOM</LogFileDirectory>

      <LogFilePattern>GalaxySCOM.csv</LogFilePattern>

      <LogIsUTF8>false</LogIsUTF8>

      <Separator>"|"</Separator>

      <Expression>

        <RegExExpression>

          <ValueExpression>

            <XPathQuery Type="String">Params/Param[1]</XPathQuery>

          </ValueExpression>

          <Operator>MatchesWildcard</Operator>

          <Pattern>*Critical*</Pattern>

        </RegExExpression>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="SCHealth!System.Health.GenerateAlert">

      <Priority>2</Priority>

      <Severity>2</Severity>

      <AlertName/>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="MomUIGeneratedRulee2ed5631fa4349a3b2317ffde3537749Critical.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/Params/Param[9]$</AlertParameter1>

      </AlertParameters>

      <Suppression/>

      <Custom1>$Data/Params/Param[2]$</Custom1>

      <Custom2>$Data/Params/Param[3]$</Custom2>

      <Custom3>$Data/Params/Param[4]$</Custom3>

      <Custom4>$Data/Params/Param[5]$</Custom4>

      <Custom5>$Data/Params/Param[6]$</Custom5>

      <Custom6>$Data/Params/Param[7]$</Custom6>

      <Custom7>$Data/Params/Param[8]$</Custom7>

      <Custom8/>

      <Custom9/>

      <Custom10>CVSCOMCritical</Custom10>

    </WriteAction>

  </WriteActions>

</Rule>