Rule for Modular Server System Event Policy Id 3405

Intel.Hardware.ModularServer.AlertRule_Policy3405 (Rule)

This rule generate alerts for the Event Policy 3405 configured in Chassis Management Module of Modular Server System.

Knowledge Base article:

Summary

Synchronizing Emergency Boot Firmware password with Web admin password..

Causes

Someone has changed the password in the Emergency Boot Firmware, this change has force an update of the Web GUI admin password..

Element properties:

Target

Intel.Hardware.ModularServer.Chassis

Category

AvailabilityHealth

Enabled

True

Alert Generate

True

Alert Severity

Information

Alert Priority

Normal

Remotable

True

Alert Message

Synchronizing Emergency Boot Firmware password with Web admin password

Event # {5}. Component : {2}.
{6}.

Event Log

IntelServerTraps

Member Modules:

ID	Module Type	TypeId	RunAs
EventDS	DataSource	Microsoft.Windows.EventProvider	Default
GenerateAlert	WriteAction	System.Health.GenerateAlert	Default

Source Code:

<Rule ID="Intel.Hardware.ModularServer.AlertRule_Policy3405" Enabled="true" Target="Intel.Hardware.ModularServer.Chassis" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>AvailabilityHealth</Category>

  <DataSources>

    <DataSource ID="EventDS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>.</ComputerName>

      <LogName>IntelServerTraps</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">MultiFlexTrapReceiver</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery>Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>$Target/Property[Type='Intel.Hardware.ModularServer.Chassis']/IPAddress$</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">Params/Param[11]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="Integer">3405</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>0</Severity>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Intel.Hardware.ModularServer.AlertMessage_Policy3405"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/Params/Param[1]$</AlertParameter1>

        <AlertParameter2>$Data/Params/Param[2]$</AlertParameter2>

        <AlertParameter3>$Data/Params/Param[5]$</AlertParameter3>

        <AlertParameter4>$Data/Params/Param[7]$</AlertParameter4>

        <AlertParameter5>$Data/Params/Param[8]$</AlertParameter5>

        <AlertParameter6>$Data/Params/Param[9]$</AlertParameter6>

        <AlertParameter7>$Data/Params/Param[10]$</AlertParameter7>

        <AlertParameter8>$Data/Params/Param[11]$</AlertParameter8>

      </AlertParameters>

      <Suppression/>

    </WriteAction>

  </WriteActions>

</Rule>