Erfasst WMI/CIM-Alertmeldungen vom CIM-Provider für ServeRAID-BR oder Integrated RAID
This rule is used to collect LSI Integrated RAID critical events.
Target | IBM.SystemX.LSI.IntegratedRAIDDevice |
Category | Alert |
Enabled | True |
Alert Generate | False |
Remotable | True |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
WMIDS | DataSource | IBM.Windows.WmiEventProvider.EventProvider | Default |
Alert | WriteAction | IBM.ComponentHealth.WriteEventAlert | Default |
WriteToDB | WriteAction | Microsoft.SystemCenter.CollectEvent | Default |
WriteToDW | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishEventData | Default |
<Rule ID="IBM.LSI.IntegratedRAID.ErrorAlert.Generation.Rule" Enabled="true" Target="IBM.SystemX.LSI.IntegratedRAIDDevice" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="WMIDS" TypeID="IBM.Windows.WmiEventProvider.EventProvider">
<NameSpace>$Target/Property[Type="IBM.SystemX.LSIRAIDDevice"]/ibmNameSpace$</NameSpace>
<Query>SELECT __Class, AlertingManagedElement, Description, EventID, PerceivedSeverity, SystemName FROM CIM_AlertIndication</Query>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">Property[@Name="PerceivedSeverity"]</XPathQuery>
</ValueExpression>
<Operator>GreaterEqual</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">5</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery>Property[@Name="SystemName"]</XPathQuery>
</ValueExpression>
<Operator>ContainsSubstring</Operator>
<Pattern>$Target/Property[Type="IBM.SystemX.HWComponent"]/InstanceID$</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
<PollInterval>900</PollInterval>
<EventLevel>1</EventLevel>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
<WriteAction ID="Alert" TypeID="IBM.ComponentHealth.WriteEventAlert">
<AlertMessageId>$MPElement[Name="IBM.LSI.IntegratedRAID.ErrorAlert.Generation.Rule.AlertMessageID"]$</AlertMessageId>
<!--0 Information, 1 Warning, 2 Error -->
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>