Home
  •  

All log records from the log queue were successfully formatted and moved to the appropriate formatted store

Microsoft.Forefront.TMG.All_log_records_from_the_log_queue_were_successfully_formatted_and_moved_to_the_appropriate_formatted_store.Rule (Rule)

This Rule generates alerts when All log records from the log queue were successfully formatted and moved to the appropriate formatted store.

Knowledge Base article:

Summary

This is complementary to the event that notifies that the log generation rate exceeds the log formatting rate. It indicates that Forefront TMG is no longer in warning state.

Causes

After the log queue was used to compensate for a log generation rate that exceeds the log formatting rate, all the log records from the log queue were successfully formatted and moved to the appropriate formatted store.

Resolutions

-

Element properties:

TargetMicrosoft.Forefront.TMG.Logging.TextFile
CategoryEventCollection
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Forefront.TMG.Rule.AlertGenerate.DS Default
WA WriteAction Microsoft.Forefront.TMG.Rule.AlertGenerate.WA Default

Source Code:

<Rule ID="Microsoft.Forefront.TMG.All_log_records_from_the_log_queue_were_successfully_formatted_and_moved_to_the_appropriate_formatted_store.Rule" Enabled="true" Target="Microsoft.Forefront.TMG.Logging.TextFile" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Microsoft.Forefront.TMG.Rule.AlertGenerate.DS">

      <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <EventsPattern>^(23415)$</EventsPattern>

      <EventType>1</EventType>

      <SourcePattern>Microsoft Forefront TMG Control</SourcePattern>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WA" TypeID="Microsoft.Forefront.TMG.Rule.AlertGenerate.WA">

      <AlertMessageId>$MPElement[Name="Microsoft.Forefront.TMG.All_log_records_from_the_log_queue_were_successfully_formatted_and_moved_to_the_appropriate_formatted_store.AlertMessage"]$</AlertMessageId>

      <DomainName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>

      <Priority>0</Priority>

      <Severity>0</Severity>

    </WriteAction>

  </WriteActions>

</Rule>