30 分鐘內無端對端事件 (警告等級)

Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorWarning (UnitMonitor)

此監視會偵測本機 System Center 管理健全狀況服務是否能於過去 30 分鐘內記錄事件為綜合交易,以檢查 System Center 管理健全狀況服務處理事件的能力。

Knowledge Base article:

摘要

若未偵測到定期記錄的事件,此監視會偵測出來。與此監視相關聯的規則是「記錄分散式工作流程測試事件」。如果您停用「記錄分散式工作流程測試事件」規則,或是設定過高的閾值,可能會導致此監視變更狀態或產生警示。

設定

預設設定是未在 30 分鐘內偵測到預期的事件時,即進入警告狀態。

原因

可能是由於無法將事件記錄到 Windows 事件記錄檔中,或無法從事件記錄檔讀取和收集此事件。

解決方式

查看 Operations Manager 事件記錄檔中是否有 LogEndToEndEvent.js 指令碼的錯誤。該指令碼會記錄此監視所偵測的事件。

若無指令碼錯誤,請檢查無法讀取 Operations Manager 事件記錄檔的 Windows 事件記錄模組是否有錯誤;這種情況可能是因為動作帳戶沒有權限可寫入或讀取事件記錄檔所造成。

Element properties:

TargetMicrosoft.SystemCenter.HealthService
Parent MonitorMicrosoft.SystemCenter.AgentManagement.EndToEndEventMonitorRollup
CategoryCustom
EnabledFalse
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.MissingEventLogSingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorWarning" Accessibility="Public" Enabled="false" Target="SCLibrary!Microsoft.SystemCenter.HealthService" ParentMonitorID="Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorRollup" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.MissingEventLogSingleEventLog2StateMonitorType" ConfirmDelivery="false">
<Category>Custom</Category>
<OperationalStates>
<OperationalState ID="MissingFor30Min" MonitorTypeStateID="MissingEventRaised" HealthState="Warning"/>
<OperationalState ID="EventFound" MonitorTypeStateID="EventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<ComputerName>.</ComputerName>
<LogName>Operations Manager</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">6022</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Health Service Script</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
<MissingComputerName>.</MissingComputerName>
<MissingLogName>Operations Manager</MissingLogName>
<MissingExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">6022</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Health Service Script</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</MissingExpression>
<Consolidator>
<ConsolidationProperties/>
<TimeControl>
<GenericSchedule>
<SimpleReccuringSchedule>
<Interval Unit="Minutes">30</Interval>
</SimpleReccuringSchedule>
<ExcludeDates/>
</GenericSchedule>
</TimeControl>
<CountingCondition>
<CountMode>OnNewItemNOP_OnTimerOutputRestart</CountMode>
</CountingCondition>
</Consolidator>
</Configuration>
</UnitMonitor>