Lenovo warning alert generation rule for CIM Events of ServeRAID-BR or Integrated RAID

IBM.LSI.IntegratedRAID.WarningAlert.Generation.Rule (Rule)

Collects WMI/CIM alert indications from the CIM Provider for ServeRAID-BR or Integrated RAID

Knowledge Base article:

Summary

This rule is used to collect LSI Integrated RAID warning events.

Element properties:

TargetIBM.SystemX.LSI.IntegratedRAIDDevice
CategoryAlert
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
WMIDS DataSource IBM.Windows.WmiEventProvider.EventProvider Default
Alert WriteAction IBM.ComponentHealth.WriteEventAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="IBM.LSI.IntegratedRAID.WarningAlert.Generation.Rule" Enabled="true" Target="IBM.SystemX.LSI.IntegratedRAIDDevice" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="WMIDS" TypeID="IBM.Windows.WmiEventProvider.EventProvider">
<NameSpace>$Target/Property[Type="IBM.SystemX.LSIRAIDDevice"]/ibmNameSpace$</NameSpace>
<Query>SELECT __Class, AlertingManagedElement, Description, EventID, PerceivedSeverity, SystemName FROM CIM_AlertIndication</Query>
<Expression>
<And>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">Property[@Name="PerceivedSeverity"]</XPathQuery>
</ValueExpression>
<Operator>MatchesRegularExpression</Operator>
<Pattern>(3|4)</Pattern>
</RegExExpression>
</Expression>
<Expression>
<RegExExpression>
<ValueExpression>
<XPathQuery>Property[@Name="SystemName"]</XPathQuery>
</ValueExpression>
<Operator>ContainsSubstring</Operator>
<Pattern>$Target/Property[Type="IBM.SystemX.HWComponent"]/InstanceID$</Pattern>
</RegExExpression>
</Expression>
</And>
</Expression>
<PollInterval>900</PollInterval>
<EventLevel>2</EventLevel>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
<WriteAction ID="Alert" TypeID="IBM.ComponentHealth.WriteEventAlert">
<AlertMessageId>$MPElement[Name="IBM.LSI.IntegratedRAID.WarningAlert.Generation.Rule.AlertMessageID"]$</AlertMessageId>
<!--0 Information, 1 Warning, 2 Error -->
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>