Microsoft.Exchange.2010.RaiseErrorAlert (Rule)

Element properties:

Target	Microsoft.SystemCenter.RootManagementServer
Category	Alert
Enabled	True
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
DataSource	DataSource	Microsoft.SystemCenter.SdkEventProvider	Default
ConditionDetection	ConditionDetection	System.ExpressionFilter	Default
WriteAction	WriteAction	Microsoft.Exchange.2010.GenerateAlertFromSdkEvent	Default

Source Code:

<Rule ID="Microsoft.Exchange.2010.RaiseErrorAlert" Enabled="true" Target="SC!Microsoft.SystemCenter.RootManagementServer" ConfirmDelivery="false">

  <Category>Alert</Category>

  <DataSources>

    <DataSource TypeID="SC!Microsoft.SystemCenter.SdkEventProvider" ID="DataSource"/>

  </DataSources>

  <ConditionDetection TypeID="System!System.ExpressionFilter" ID="ConditionDetection">

    <Expression>

      <SimpleExpression>

        <ValueExpression>

          <XPathQuery>EventNumber</XPathQuery>

        </ValueExpression>

        <Operator>Equal</Operator>

        <ValueExpression>

          <Value>501</Value>

        </ValueExpression>

      </SimpleExpression>

    </Expression>

  </ConditionDetection>

  <WriteActions>

    <WriteAction TypeID="Microsoft.Exchange.2010.GenerateAlertFromSdkEvent" ID="WriteAction">

      <!-- Error -->

      <Priority>2</Priority>

      <Severity>2</Severity>

      <AlertName>$Data/EventData/CorrelatedContext/RootCause/AlertName$</AlertName>

      <AlertDescription>$Data/EventData/CorrelatedContext/DescriptionText$</AlertDescription>

      <AlertParameters/>

      <Suppression>

        <SuppressionValue>$Data/EventNumber$</SuppressionValue>

        <SuppressionValue>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

      </Suppression>

      <WorkflowId>$MPElement$</WorkflowId>

      <Custom1/>

      <Custom2/>

      <Custom3/>

      <Custom4/>

      <Custom5>$Data/EventData/CorrelatedContext/RootCause/MonitorType$</Custom5>

      <Custom6>$Data/EventData/CorrelatedContext/RootCause/EscalationTeam$</Custom6>

      <Custom7>$Data/EventData/CorrelatedContext/RootCause/Actionable$</Custom7>

      <Custom8>$Data/EventData/CorrelatedContext/RootCause/Urgent$</Custom8>

      <Custom9/>

      <Custom10>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</Custom10>

    </WriteAction>

  </WriteActions>

</Rule>