This Rule generates alerts when The action to retrieve the ISA Server log directory failed
The ISA Server Report Generator failed to merge log summaries from the array members to a single log summary for this period. As a result, the report for this period cannot be generated (or will include no data).
This failure may occur for one of the following reasons:
The log summary configuration is invalid.
The log summaries can not be accessed
The merged log summary cannot be created.
Review other alerts to determine the cause of the problem.
Check the validity of the log summary configuration.
Check that there is enough disk space on the ISA Server computer generating the report.
| Target | Microsoft.ISAServer.2006.ServerRole |
| Category | EventCollection |
| Enabled | True |
| Alert Generate | False |
| Remotable | True |
| ID | Module Type | TypeId | RunAs |
|---|---|---|---|
| DS | DataSource | Microsoft.ISAServer.2006.Rule.AlertGenerate.DS | Default |
| WA | WriteAction | Microsoft.ISAServer.2006.Rule.AlertGenerate.WA | Default |
Home<Rule ID="Microsoft.ISAServer.2006.The_action_to_retrieve_the_ISA_Server_log_directory_failed.Rule" Enabled="onEssentialMonitoring" Target="Microsoft.ISAServer.2006.ServerRole" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.DS">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<EventsPattern>^(21001)$</EventsPattern>
<EventType>1</EventType>
<SourcePattern>Microsoft ISA Server Report Generator</SourcePattern>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.ISAServer.2006.Rule.AlertGenerate.WA">
<AlertMessageId>$MPElement[Name="Microsoft.ISAServer.2006.The_action_to_retrieve_the_ISA_Server_log_directory_failed.AlertMessage"]$</AlertMessageId>
<DomainName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainName>
<Priority>2</Priority>
<Severity>2</Severity>
</WriteAction>
</WriteActions>
</Rule>