Odnajdywanie grupy serwerów usługi Advanced Threat Analytics 1.7

Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup.Discovery (Discovery)

Umożliwia odnajdowanie serwerów usługi Microsoft ATA na potrzeby członkostwa w grupie.

Knowledge Base article:

Podsumowanie

Ta funkcja odnajdowania wykrywa wystąpienia klas usługi Microsoft ATA 1.7 i dodaje je do grupy serwerów usługi Microsoft ATA.

Element properties:

Target	Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup
Enabled	True
Remotable	False

Member Modules:

ID	Module Type	TypeId	RunAs
ServersGroupPopulationDataSource	DataSource	Microsoft.SystemCenter.GroupPopulator	Default

Source Code:

<Discovery ID="Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup.Discovery" Enabled="true" ConfirmDelivery="false" Priority="Normal" Remotable="true" Target="Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup">

  <Category>Discovery</Category>

  <DiscoveryTypes/>

  <DataSource ID="ServersGroupPopulationDataSource" TypeID="SC!Microsoft.SystemCenter.GroupPopulator">

    <RuleId>$MPElement$</RuleId>

    <GroupInstanceId>$MPElement[Name="Microsoft.AdvancedThreatAnalytics.1_7.ServersGroup"]$</GroupInstanceId>

    <MembershipRules>

      <MembershipRule>

        <MonitoringClass>$MPElement[Name="Windows!Microsoft.Windows.Computer"]$</MonitoringClass>

        <RelationshipClass>$MPElement[Name="SC!Microsoft.SystemCenter.ComputerGroupContainsComputer"]$</RelationshipClass>

        <Expression>

          <Or>

            <Expression>

              <Contains>

                <MonitoringClass>$MPElement[Name="Microsoft.AdvancedThreatAnalytics.1_7.Center"]$</MonitoringClass>

              </Contains>

            </Expression>

            <Expression>

              <Contains>

                <MonitoringClass>$MPElement[Name="Microsoft.AdvancedThreatAnalytics.1_7.Gateway"]$</MonitoringClass>

              </Contains>

            </Expression>

          </Or>

        </Expression>

      </MembershipRule>

    </MembershipRules>

  </DataSource>

</Discovery>