SQL 2016 Windows Service Restart Detection Provider

Microsoft.SQLServer.2016.WindowsServiceRestartDetectionProvider (DataSourceModuleType)

Element properties:

Show References:
- Rules (1)

Type	DataSourceModuleType
Isolation	Any
Accessibility	Internal
RunAs	Microsoft.SQLServer.MonitoringAccount
OutputType	System.CorrelatorData

Member Modules:

ID	Module Type	TypeId	RunAs
FirstCorrelatedDataSource	DataSource	Microsoft.Windows.BaseEventProvider	Default
SecondCorrelatedDataSource	DataSource	Microsoft.Windows.BaseEventProvider	Default
CorrelatedDataCondition	ConditionDetection	System.CorrelatorAutoCondition	Default
FirstCorrelatedFilterCondition	ConditionDetection	System.ExpressionFilter	Default
SecondCorrelatedFilterCondition	ConditionDetection	System.ExpressionFilter	Default

Overrideable Parameters:

ID	ParameterType	Selector	Display Name	Description
CorrelatorInterval	int	$Config/CorrelatorInterval$	Unavailable Time (seconds)	The workflow will try to catch a service start event during this time frame, after event service stops.

Source Code:

<DataSourceModuleType ID="Microsoft.SQLServer.2016.WindowsServiceRestartDetectionProvider" Accessibility="Internal" RunAs="GPMP!Microsoft.SQLServer.MonitoringAccount" Batching="false">

  <Configuration>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="ComputerName" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="ServiceName" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" minOccurs="1" name="CorrelatorInterval" type="xsd:integer"/>

  </Configuration>

  <OverrideableParameters>

    <OverrideableParameter ID="CorrelatorInterval" ParameterType="int" Selector="$Config/CorrelatorInterval$"/>

  </OverrideableParameters>

  <ModuleImplementation Isolation="Any">

    <Composite>

      <MemberModules>

        <DataSource ID="FirstCorrelatedDataSource" TypeID="Windows!Microsoft.Windows.BaseEventProvider">

          <ComputerName>$Config/ComputerName$</ComputerName>

          <LogName>System</LogName>

        </DataSource>

        <DataSource ID="SecondCorrelatedDataSource" TypeID="Windows!Microsoft.Windows.BaseEventProvider">

          <ComputerName>$Config/ComputerName$</ComputerName>

          <LogName>System</LogName>

        </DataSource>

        <ConditionDetection ID="FirstCorrelatedFilterCondition" TypeID="System!System.ExpressionFilter">

          <Expression>

            <And>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="UnsignedInteger">7036</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">PublisherName</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">Service Control Manager</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">Params/Param[1]</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">$Config/ServiceName$</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">Params/Param[2]</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">stopped</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

            </And>

          </Expression>

        </ConditionDetection>

        <ConditionDetection ID="SecondCorrelatedFilterCondition" TypeID="System!System.ExpressionFilter">

          <Expression>

            <And>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="UnsignedInteger">7036</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">PublisherName</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">Service Control Manager</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">Params/Param[1]</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">$Config/ServiceName$</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">Params/Param[2]</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">running</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

            </And>

          </Expression>

        </ConditionDetection>

        <ConditionDetection ID="CorrelatedDataCondition" TypeID="System!System.CorrelatorAutoCondition">

          <Correlator>

            <CorrelationExpression>

              <Expression/>

            </CorrelationExpression>

            <Count>1</Count>

            <Interval>$Config/CorrelatorInterval$</Interval>

            <Latency>5</Latency>

            <DrainWait>10</DrainWait>

            <CorrelationOrder>InSequence</CorrelationOrder>

            <CorrelationItemPolicy>Last</CorrelationItemPolicy>

          </Correlator>

        </ConditionDetection>

      </MemberModules>

      <Composition>

        <Node ID="CorrelatedDataCondition">

          <Node ID="FirstCorrelatedFilterCondition">

            <Node ID="FirstCorrelatedDataSource"/>

          </Node>

          <Node ID="SecondCorrelatedFilterCondition">

            <Node ID="SecondCorrelatedDataSource"/>

          </Node>

        </Node>

      </Composition>

    </Composite>

  </ModuleImplementation>

  <OutputType>System!System.CorrelatorData</OutputType>

</DataSourceModuleType>