Microsoft AD RMS Library Repeated Event Monitor Type

Microsoft.ADRMS.Library.RepeatedEvent.MonitorType (UnitMonitorType)

Repeated event monitor type to allow overriding repeat count, repeat interval, and timer reset values.

Element properties:

RunAsDefault
AccessibilityPublic
Support Monitor RecalculateFalse

Member Modules:

ID Module Type TypeId RunAs 
RepeatedDataSource DataSource Microsoft.Windows.EventProvider Default
OnDemandReset ProbeAction System.PassThroughProbe Default
RepeatedDataCondition ConditionDetection System.ConsolidatorCondition Default
TimerCondition ConditionDetection System.TimerCondition Default

Overrideable Parameters:

IDParameterTypeSelectorDisplay NameDescription
IntervalSecondsint$Config/IntervalSeconds$Interval SecondsInterval for repeated event detection
EventCountint$Config/EventCount$Event CountNumber of events before alert trips.
TimerWaitInSecondsint$Config/TimerWaitInSeconds$Timer Wait In SecondsEvent timer reset value

Source Code:

<UnitMonitorType ID="Microsoft.ADRMS.Library.RepeatedEvent.MonitorType" Accessibility="Public">
<MonitorTypeStates>
<MonitorTypeState ID="RepeatedEventRaised" NoDetection="false"/>
<MonitorTypeState ID="TimerEventRaised" NoDetection="false"/>
</MonitorTypeStates>
<Configuration>
<IncludeSchemaTypes>
<SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>
</IncludeSchemaTypes>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="IntervalSeconds" type="xsd:integer"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="EventCount" type="xsd:integer"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="TimerWaitInSeconds" type="xsd:integer"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="EventID" type="xsd:integer"/>
<xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="EventSource" type="xsd:string"/>
</Configuration>
<OverrideableParameters>
<OverrideableParameter ID="IntervalSeconds" Selector="$Config/IntervalSeconds$" ParameterType="int"/>
<OverrideableParameter ID="EventCount" Selector="$Config/EventCount$" ParameterType="int"/>
<OverrideableParameter ID="TimerWaitInSeconds" Selector="$Config/TimerWaitInSeconds$" ParameterType="int"/>
</OverrideableParameters>
<MonitorImplementation>
<MemberModules>
<DataSource ID="RepeatedDataSource" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName/>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">$Config/EventID$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">$Config/EventSource$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
<ProbeAction ID="OnDemandReset" TypeID="System!System.PassThroughProbe"/>
<ConditionDetection ID="RepeatedDataCondition" TypeID="System!System.ConsolidatorCondition">
<Consolidator>
<ConsolidationProperties/>
<TimeControl>
<WithinTimeSchedule>
<Interval>$Config/IntervalSeconds$</Interval>
</WithinTimeSchedule>
</TimeControl>
<CountingCondition>
<Count>$Config/EventCount$</Count>
<CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>
</CountingCondition>
</Consolidator>
</ConditionDetection>
<ConditionDetection ID="TimerCondition" TypeID="System!System.TimerCondition">
<TimerWaitInSeconds>$Config/TimerWaitInSeconds$</TimerWaitInSeconds>
</ConditionDetection>
</MemberModules>
<RegularDetections>
<RegularDetection MonitorTypeStateID="RepeatedEventRaised">
<Node ID="RepeatedDataCondition">
<Node ID="RepeatedDataSource"/>
</Node>
</RegularDetection>
<RegularDetection MonitorTypeStateID="TimerEventRaised">
<Node ID="TimerCondition">
<Node ID="RepeatedDataCondition">
<Node ID="RepeatedDataSource"/>
</Node>
</Node>
</RegularDetection>
</RegularDetections>
</MonitorImplementation>
</UnitMonitorType>