Microsoft Dynamics NAV 2015 Server Instance Event Collection Rule

Microsoft.Dynamics.Nav.2015.ServerInstanceEventCollectionRule (Rule)

Collects event log entries the have the server instance name as the source and in the message.

Knowledge Base article:

Summary

An event log entry was generated during execution.

Causes

The failure may have occurred for a variety of reasons.

Resolutions

Investigate the event log entries that were generated by the Microsoft Dynamics NAV Server instance.

Element properties:

Target	Microsoft.Dynamics.Nav.2015.ServerInstance
Category	EventCollection
Enabled	True
Alert Generate	False
Remotable	True
Event Log	Application

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.EventProvider	Microsoft.Dynamics.Nav.2015.DefaultAccount
CollectToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
CollectToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Microsoft.Dynamics.Nav.2015.ServerInstanceEventCollectionRule" Target="Microsoft.Dynamics.Nav.2015.ServerInstance" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider" RunAs="Microsoft.Dynamics.Nav.2015.DefaultAccount">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <Or>

              <!-- Eventlog errors -->

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="Integer">EventLevel</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="Integer">1</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <!-- Eventlog warnings -->

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="Integer">EventLevel</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="Integer">2</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <!-- Eventlog informations -->

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="Integer">EventLevel</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="Integer">4</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

            </Or>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">EventSourceName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">$Target/Property[Type="Service!Microsoft.SystemCenter.NTService"]/ServiceName$</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery>EventDescription</XPathQuery>

              </ValueExpression>

              <Operator>ContainsSubstring</Operator>

              <Pattern>Server instance: $Target/Property[Type="Microsoft.Dynamics.Nav.2015.ServerInstance"]/ServerInstance$</Pattern>

            </RegExExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery>EventDescription</XPathQuery>

              </ValueExpression>

              <Operator>DoesNotContainSubstring</Operator>

              <Pattern>Tenant ID: </Pattern>

            </RegExExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="CollectToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>