HP MSA2000 Collect Event

MSA.Rule.Event.System.Collect (Rule)

This rule collects all events from HP MSA2000 System.

Knowledge Base article:

Summary

This rule collects all events from HP MSA2000 System.

Element properties:

Target	MSA.System
Category	EventCollection
Enabled	True
Alert Generate	False
Remotable	False

Member Modules:

ID	Module Type	TypeId	RunAs
Event	DataSource	MSA.DataSource.Event.System	Default
Mapper	ConditionDetection	System.Event.GenericDataMapper	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="MSA.Rule.Event.System.Collect" Enabled="true" Target="MSA.System" ConfirmDelivery="true" Remotable="false" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="Event" TypeID="MSA.DataSource.Event.System"/>

  </DataSources>

  <ConditionDetection ID="Mapper" TypeID="System!System.Event.GenericDataMapper">

    <EventOriginId>$Target/Id$</EventOriginId>

    <PublisherId>$MPElement$</PublisherId>

    <PublisherName>Controller $Data/Property[@Name='controller']$</PublisherName>

    <Channel>$Data/Property[@Name='event-code']$</Channel>

    <LoggingComputer>$Target/Property[Type="System!System.Entity"]/DisplayName$</LoggingComputer>

    <EventNumber>$Data/Property[@Name='event-id']$</EventNumber>

    <EventCategory>$Data/Property[@Name='event-code']$</EventCategory>

    <EventLevel>$Data/Property[@Name='severity-numeric']$</EventLevel>

    <UserName>N/A</UserName>

    <Description>

Time Stamp: $Data/Property[@Name='time-stamp']$

Event Id: $Data/Property[@Name='controller']$$Data/Property[@Name='event-id']$

Event Code: $Data/Property[@Name='event-code']$

Event: $Data/Property[@Name='message']$

  </Description>

    <Params/>

  </ConditionDetection>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="DWLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>