Servers Group Discovery

Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup.Discovery (Discovery)

Discovers Microsoft ATA Servers for group membership.

Knowledge Base article:

Summary

This discovery discovers instances of Microsoft ATA 1.8 classes and adds them to the Microsoft ATA Servers Group.

Element properties:

Target	Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup
Enabled	True
Remotable	False

Member Modules:

ID	Module Type	TypeId	RunAs
ServersGroupPopulationDataSource	DataSource	Microsoft.SystemCenter.GroupPopulator	Default

Source Code:

<Discovery ID="Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup.Discovery" Enabled="true" ConfirmDelivery="false" Priority="Normal" Remotable="true" Target="Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup">

  <Category>Discovery</Category>

  <DiscoveryTypes/>

  <DataSource ID="ServersGroupPopulationDataSource" TypeID="SC!Microsoft.SystemCenter.GroupPopulator">

    <RuleId>$MPElement$</RuleId>

    <GroupInstanceId>$MPElement[Name="Microsoft.AdvancedThreatAnalytics.1_8.ServersGroup"]$</GroupInstanceId>

    <MembershipRules>

      <MembershipRule>

        <MonitoringClass>$MPElement[Name="Windows!Microsoft.Windows.Computer"]$</MonitoringClass>

        <RelationshipClass>$MPElement[Name="SC!Microsoft.SystemCenter.ComputerGroupContainsComputer"]$</RelationshipClass>

        <Expression>

          <Or>

            <Expression>

              <Contains>

                <MonitoringClass>$MPElement[Name="Microsoft.AdvancedThreatAnalytics.1_8.Center"]$</MonitoringClass>

              </Contains>

            </Expression>

            <Expression>

              <Contains>

                <MonitoringClass>$MPElement[Name="Microsoft.AdvancedThreatAnalytics.1_8.Gateway"]$</MonitoringClass>

              </Contains>

            </Expression>

          </Or>

        </Expression>

      </MembershipRule>

    </MembershipRules>

  </DataSource>

</Discovery>