저장소 검색 엔진 초기화 모니터

Microsoft.ForefrontProtection.FPSP.ScheduledScanJob.UnitMonitor.ScheduledScanEngineInitialize (UnitMonitor)

예약 및 요청 시 검색을 위해 선택한 맬웨어 방지 엔진이 초기화되었는지 확인합니다.

Knowledge Base article:

요약

이 모니터는 예약 및 요청 시 검색 작업으로 검색을 위해 선택한 맬웨어 방지 엔진이 초기화되었는지 확인합니다. 초기화되지 않은 경우 경고가 생성됩니다.

원인

엔진 하위 폴더가 삭제되어 이 오류 이벤트가 발생했을 수 있습니다.

해결 방법

• HTTP 프록시가 올바르게 구성되었는지 확인합니다.

• 네트워크 문제가 없는지 확인합니다.

• UNC 구성 설정이 적절한지 확인합니다.

Element properties:

TargetMicrosoft.ForefrontProtection.FPSP.ScheduledScanJob
Parent MonitorSystem.Health.AvailabilityState
CategoryCustom
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityHigh
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.2SingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
저장소 검색 엔진 초기화
예약 또는 요청 시 검색 작업을 위한 맬웨어 방지 검색 엔진이 초기화되지 않았습니다.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.ForefrontProtection.FPSP.ScheduledScanJob.UnitMonitor.ScheduledScanEngineInitialize" Accessibility="Public" Enabled="true" Target="Microsoft.ForefrontProtection.FPSP.ScheduledScanJob" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">
<Category>Custom</Category>
<AlertSettings AlertMessage="Microsoft.ForefrontProtection.FPSP.ScheduledScanJob.UnitMonitor.ScheduledScanEngineInitialize_AlertMessageResourceID">
<AlertOnState>Error</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>High</AlertPriority>
<AlertSeverity>Error</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="UIGeneratedOpStateId7f8845c2a1a440ccb18cd3b9d239d7aa" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>
<OperationalState ID="UIGeneratedOpStateIdaa9b8ee3de674e96ad142a4a03ac940c" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<FirstComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
<FirstLogName>Application</FirstLogName>
<FirstExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7061</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft Forefront Protection</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</FirstExpression>
<SecondComputerName>$Target/Host/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
<SecondLogName>Application</SecondLogName>
<SecondExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">7062</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft Forefront Protection</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</SecondExpression>
</Configuration>
</UnitMonitor>