System Center Cross Platform ACS Module Missing

Microsoft.ACS.Unix.DLL.Missing (Rule)

This rule detects if the System Center Cross Platform ACS Module is missing or corrupt.

Knowledge Base article:

Summary

The management server was unable to load the System Center Cross Platform Audit Collection Services (ACS) module because it could not be found.

Causes

Each Management Server Monitoring Unix/Linux Servers and collecting Unix/Linux Audit Events must have System Center Cross Platform Audit Collections Services installed.

Resolutions

If Cross Platform ACS is not currently installed, please install the software on each Management Server that monitors Unix/Linux Servers and needs to collect Audit events from the Unix/Linux Servers. If Cross Platform ACS is currently installed, re-run the setup to initiate Maintenance mode and choose the Repair option.

Element properties:

TargetMicrosoft.SystemCenter.ManagementServer
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
System Center Cross Platform ACS Module Missing
Event Description: {0}
Event LogOperations Manager

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.ACS.Unix.DLL.Missing" Enabled="true" Target="SC!Microsoft.SystemCenter.ManagementServer" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>AvailabilityHealth</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">4508</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">HealthService</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Params/Param[5]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft.SystemCenter.CrossPlatform.ACS</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.ACS.Unix.DLL.Missing.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/Params/Param[5]$</SuppressionValue>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>