IM Scanning Processes Running State Monitor

Microsoft.ForefrontServer10.FSOCS.RealtimeScanJobs.UnitMonitor.RealtimeScanEnabled (UnitMonitor)

Monitors the health of the IM scanning processes to ensure that the IM scanning processes are running

Knowledge Base article:

Summary

The IM Scanning Processes have stopped.

Causes

•The IM scan job is not enabled.

Resolutions

•Enable the IM scan job from the Forefront Server Security Administrator.

•Restart FSOCS services.

•If the problem continues, contact Microsoft Customer Support Services (CSS).

Element properties:

Target

Microsoft.ForefrontServer10.FSOCS.RealtimeScanJobs

Parent Monitor

System.Health.AvailabilityState

Category

Custom

Enabled

True

Alert Generate

True

Alert Severity

MatchMonitorHealth

Alert Priority

Normal

Alert Auto Resolve

True

Monitor Type

Microsoft.Windows.2SingleEventLog2StateMonitorType

Remotable

True

Accessibility

Public

Alert Message

IM Scanning Processes State

IM Scanning Processes are not running

RunAs

Default

Source Code:

<UnitMonitor ID="Microsoft.ForefrontServer10.FSOCS.RealtimeScanJobs.UnitMonitor.RealtimeScanEnabled" Accessibility="Public" Enabled="true" Target="Microsoft.ForefrontServer10.FSOCS.RealtimeScanJobs" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">

  <Category>Custom</Category>

  <AlertSettings AlertMessage="Microsoft.ForefrontServer10.FSOCS.RealtimeScanJobs.UnitMonitor.RealtimeScanEnabled_AlertMessageResourceID">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="UIGeneratedOpStateId45c7c1ea4dad4cee86bbd0961c5af4b1" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="UIGeneratedOpStateIdb4cb82665bae4479bfea7446d1445188" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>.</FirstComputerName>

    <FirstLogName>Application</FirstLogName>

    <FirstExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">2010</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">FSOCScanner</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </FirstExpression>

    <SecondComputerName>.</SecondComputerName>

    <SecondLogName>Application</SecondLogName>

    <SecondExpression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">2009</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="String">PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="String">FSOCScanner</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </SecondExpression>

  </Configuration>

</UnitMonitor>