Monitor EventLog and run PRO Tip diagnostic script.

HewlettPackard.Servers.ProLiant.SNMPPRO.VMHostEventLogMonitoringRuleDiagnostic (Rule)

This rule monitors the event log of virtual machine hosts. If any of the specified events is created, this rule triggers the PROTip, executing a powershell diagnostic script at Root Management Server.

Element properties:

Member Modules:

Source Code:

<Rule ID="HewlettPackard.Servers.ProLiant.SNMPPRO.VMHostEventLogMonitoringRuleDiagnostic" Enabled="true" Target="HewlettPackard.Servers.ProLiant.SNMPPRO.ManagedHost" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="VMHostEventLogMonitoringRule_DS" RunAs="System!System.PrivilegedMonitoringAccount" TypeID="Windows!Microsoft.Windows.EventCollector">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <AllowProxying>false</AllowProxying>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">101</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">HP PRO MP</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="VMHostEventLogMonitoringRule_WriteToDB" RunAs="System!System.PrivilegedMonitoringAccount" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="VMHostEventLogMonitoringRule_WriteToDW" RunAs="System!System.PrivilegedMonitoringAccount" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

    <WriteAction ID="VMHostEventLogMonitoringRule_RunPowerShellPreview" TypeID="HewlettPackard.Servers.ProLiant.SNMPPRO.DiagnosticAction" Target="SC!Microsoft.SystemCenter.CollectionManagementServer">

      <EventDescription>$Data/EventDescription$</EventDescription>

    </WriteAction>

    <WriteAction ID="debug.action" TypeID="HewlettPackard.Servers.ProLiant.SNMPPRO.CreateEvent.Generic" Target="SC!Microsoft.SystemCenter.CollectionManagementServer">

      <EventParameter>Diagnostics triggered - $Data/EventDescription$</EventParameter>

      <EventID>201</EventID>

      <MoveMode/>

    </WriteAction>

  </WriteActions>

</Rule>