EntityResolver 활동 블록 크기

Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize.PerformanceHealth (UnitMonitor)

Microsoft ATA 1.7 게이트웨이 EntityResolver 활동 블록 크기에 대한 성능 모니터

Knowledge Base article:

요약

해결을 위해 대기 중인 NA(네트워크 활동)양입니다.

최대값-1(기본 최대값: 10000)보다 작아야 합니다.

Element properties:

TargetMicrosoft.AdvancedThreatAnalytics.1_7.Gateway
Parent MonitorSystem.Health.PerformanceState
CategoryPerformanceHealth
EnabledTrue
Instance NameMicrosoft ATA Gateway
Counter NameEntityResolver Activity Block Size
Frequency60
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeSystem.Performance.ConsecutiveSamplesThreshold
RemotableTrue
AccessibilityPublic
Alert Message
EntityResolver 활동 블록 크기 경고

인스턴스 {0}
개체 {1}
카운터 {2}
값 있음 {3}
시간 {4}
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize.PerformanceHealth" Accessibility="Public" Enabled="true" Target="Microsoft.AdvancedThreatAnalytics.1_7.Gateway" ParentMonitorID="Health!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="Perf!System.Performance.ConsecutiveSamplesThreshold" ConfirmDelivery="false">
<Category>PerformanceHealth</Category>
<AlertSettings AlertMessage="Microsoft.AdvancedThreatAnalytics.1_7.Gateway.EntityResolverActivityBlockSize.PerformanceHealth.Alert">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>Warning</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data[Default='']/Context/InstanceName$</AlertParameter1>
<AlertParameter2>$Data[Default='']/Context/ObjectName$</AlertParameter2>
<AlertParameter3>$Data[Default='']/Context/CounterName$</AlertParameter3>
<AlertParameter4>$Data[Default='']/Context/SampleValue$</AlertParameter4>
<AlertParameter5>$Data[Default='']/Context/TimeSampled$</AlertParameter5>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="ConditionFalse" MonitorTypeStateID="ConditionFalse" HealthState="Success"/>
<OperationalState ID="ConditionTrue" MonitorTypeStateID="ConditionTrue" HealthState="Warning"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>EntityResolver Activity Block Size</CounterName>
<ObjectName>Microsoft ATA Gateway</ObjectName>
<InstanceName>nt authority\system\microsoft.tri.gateway</InstanceName>
<AllInstances>false</AllInstances>
<Frequency>60</Frequency>
<Threshold>10000</Threshold>
<Direction>greater</Direction>
<NumSamples>1</NumSamples>
</Configuration>
</UnitMonitor>