Client Monitoring Entities discovery rule

Microsoft.SystemCenter.CM.AEM.Internal.MECollection (Discovery)

This rule enables collecting error groups and applications from the Client Monitoring file share.
Element properties:

Target	Microsoft.SystemCenter.CM.AEM.CrashListener
Enabled	True
Remotable	False
Object Discovery Details:

Discovered Classes and their attribuets:
Microsoft.SystemCenter.CM.AEM.Application Microsoft.SystemCenter.CM.AEM.SystemBucket Microsoft.SystemCenter.CM.AEM.User Microsoft.SystemCenter.CM.AEM.WatsonBucket Microsoft.Windows.Computer
Member Modules:

ID	Module Type	TypeId	RunAs
MECollectionDS1	DataSource	Microsoft.SystemCenter.CM.AEM.Internal.MECollectionDS	Default
Source Code:

<Discovery ID="Microsoft.SystemCenter.CM.AEM.Internal.MECollection" Target="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener" Enabled="true" ConfirmDelivery="true">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"/>

    <DiscoveryClass TypeID="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"/>

    <DiscoveryClass TypeID="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"/>

    <DiscoveryClass TypeID="AEMLib!Microsoft.SystemCenter.CM.AEM.User"/>

    <DiscoveryClass TypeID="Windows!Microsoft.Windows.Computer"/>

  </DiscoveryTypes>

  <DataSource ID="MECollectionDS1" TypeID="Microsoft.SystemCenter.CM.AEM.Internal.MECollectionDS">

    <Scheduler>

      <SimpleReccuringSchedule>

        <Interval Unit="Minutes">1</Interval>

      </SimpleReccuringSchedule>

      <ExcludeDates/>

    </Scheduler>

    <CrashListenerConfiguration>

      <Location>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/SharePath$</Location>

      <CabRetention>

        <DefaultWatsonCabsCount>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/MaxNumberCabsToCollect$</DefaultWatsonCabsCount>

      </CabRetention>

      <Filters>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/ErrorTransmissionFilters$</Filters>

      <FileShareConfig>

        <On>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/EnablePreVistaClients$</On>

        <ExceptionFolders>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/ExceptionFolders$</ExceptionFolders>

      </FileShareConfig>

      <HttpListenerConfig>

        <On>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/EnableVistaPostClients$</On>

        <Protocol>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/Protocol$</Protocol>

        <Port>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/Port$</Port>

        <UseWindowsAuth>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/UseWindowsAuth$</UseWindowsAuth>

        <MaxXmlSize>10240</MaxXmlSize>

        <MaxCabSize>8589934592</MaxCabSize>

      </HttpListenerConfig>

    </CrashListenerConfiguration>

    <ErrorManagerConfiguration>

      <ProcessBuckets>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/TransmissionEnabled$</ProcessBuckets>

      <SendCabs>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/DetailedTransmission$</SendCabs>

      <UseWebProxy>$Target/Host/Property[Type="SC!Microsoft.SystemCenter.ManagementServer"]/UseProxyServer$</UseWebProxy>

      <WebProxyAddr>$Target/Host/Property[Type="SC!Microsoft.SystemCenter.ManagementServer"]/ProxyAddress$:$Target/Host/Property[Type="SC!Microsoft.SystemCenter.ManagementServer"]/ProxyPort$</WebProxyAddr>

    </ErrorManagerConfiguration>

    <ResponseManagerConfiguration>

      <Allow>

        <SolutionResponses>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/PublishMSSolutionLinks$</SolutionResponses>

        <Surveys>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/PublishMSSurveyLinks$</Surveys>

        <CollectionRequests>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/PublishMSDataCollectionRequests$</CollectionRequests>

      </Allow>

      <Include>

        <Files>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/PublishMSFileCollectionRequests$</Files>

        <MemoryDump>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/PublishMSMemoryDumpRequests$</MemoryDump>

        <RegistryInformation>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/PublishMSRegistryCollectionRequests$</RegistryInformation>

        <WmiQuery>$Target/Property[Type="AEMLib!Microsoft.SystemCenter.CM.AEM.CrashListener"]/PublishMSWMIQueryRequests$</WmiQuery>

      </Include>

    </ResponseManagerConfiguration>

    <ManagedEntity>

      <Detailed>

        <TimeGenerated UseCurrent="true"/>

        <DiscoveryType>AddUpdate</DiscoveryType>

        <DiscoverySourceType>Rule</DiscoverySourceType>

        <SourceObjectId>$MPElement$</SourceObjectId>

        <SourceManagedEntityId>$Target/Id$</SourceManagedEntityId>

        <Properties>

          <Evaluate If="//CrashInfo/BucketData">

            <Property ID="BucketTypeValue">//CrashInfo/BucketData/*/BucketData/BucketType</Property>

            <Property ID="MachineNameValue">//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabInfo/CabInfo/MachineName</Property>

            <Property ID="UserNameValue">//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabInfo/CabInfo/UserName</Property>

          </Evaluate>

          <Evaluate If="//CrashInfo/BucketData[BlueBucketData]">

            <Property ID="BlueRspUrlValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/BlueScreenResponse/ResponseUrl</Property>

            <Property ID="BlueSolutionIDValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/BlueScreenResponse/SolutionId</Property>

            <Property ID="BlueGenSolutionIDValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/BlueScreenResponse/GenericSolutionId</Property>

            <Property ID="BlueSolutionValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/BlueScreenResponse/SpecificBucketSolution</Property>

            <Property ID="BlueGenSolutionValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/BlueScreenResponse/GenericBucketSolution</Property>

            <Property ID="BlueRspTypeIDValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/BlueScreenResponse/ResponseTypeId</Property>

            <Property ID="CabNameValue">//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabFileName</Property>

            <Property ID="HitTimeValue">//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/HitTime</Property>

          </Evaluate>

          <Evaluate If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']">

            <Property ID="AppDisplayNameValue">concat(//CrashInfo/BucketData/*/BucketData/AppName, ".", //CrashInfo/BucketData/*/BucketData/AppVer , " Errors")</Property>

            <Property ID="AppNameValue">//CrashInfo/BucketData/*/BucketData/AppName</Property>

            <Property ID="AppVerValue">//CrashInfo/BucketData/*/BucketData/AppVer</Property>

            <Property ID="BucketDisplayNameValue">concat(//CrashInfo/BucketData/*/BucketData/BucketType, " Error Category")</Property>

            <Property ID="BucketIDValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/Bucket</Property>

            <Property ID="BucketTableValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/BucketTable</Property>

            <Property ID="CompanyNameValue">//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabInfo/CabInfo/CompanyName</Property>

            <Property ID="DisplayTypeValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/DisplayType</Property>

            <Property ID="FDocValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/FDoc</Property>

            <Property ID="FriendlyAppNameValue">//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabInfo/CabInfo/ProductName</Property>

            <Property ID="GetFileValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/GetFile</Property>

            <Property ID="GetFileVerValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/GetFileVersion</Property>

            <Property ID="MemDmpValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/MemoryDump</Property>

            <Property ID="RegKeyValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/RegKey</Property>

            <Property ID="RegTreeValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/RegTree</Property>

            <Property ID="ResponseUrlValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/ResponseUrl</Property>

            <Property ID="SelectedCollectionResponseTypeValue">//CrashInfo/BucketData/*/BucketData/SelectedCollectionResponseType</Property>

            <Property ID="SelectedSolutionResponseTypeValue">//CrashInfo/BucketData/*/BucketData/SelectedSolutionResponseType</Property>

            <Property ID="WatsonParamSet">//CrashInfo/BucketData/*/BucketData/Parameters/String</Property>

            <Property ID="WqlValue">//CrashInfo/BucketData/*/BucketData/MicrosoftResponse/WatsonResponse/Wql</Property>

          </Evaluate>

        </Properties>

        <PropertySets/>

        <ClassInstances>

          <ClassInstance If="//CrashInfo/BucketData[BlueBucketData]">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]$</TypeId>

            <Properties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/BucketType$</Name>

                <Value>BucketTypeValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

                <Value>System Error</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/HitTime$</Name>

                <Value>HitTimeValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MachineName$</Name>

                <Value>MachineNameValue[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/UserName$</Name>

                <Value>UserNameValue[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/CabFileName$</Name>

                <Value>CabNameValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MSResponseUrl$</Name>

                <Value>BlueRspUrlValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MSSolutionId$</Name>

                <Value>BlueSolutionIDValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MSGenericSolutionId$</Name>

                <Value>BlueGenSolutionIDValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MSSpecificSolution$</Name>

                <Value>BlueSolutionValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MSGenericSolution$</Name>

                <Value>BlueGenSolutionValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MSResponseTypeId$</Name>

                <Value>BlueRspTypeIDValue</Value>

              </Property>

            </Properties>

          </ClassInstance>

          <ClassInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName!='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]$</TypeId>

            <Properties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>AppNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value>AppVerValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/CompanyName$</Name>

                <Value>CompanyNameValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/FriendlyAppName$</Name>

                <Value>FriendlyAppNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

                <Value>AppDisplayNameValue</Value>

              </Property>

            </Properties>

          </ClassInstance>

          <ClassInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName!='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]$</TypeId>

            <Properties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>AppNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value>AppVerValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter1$</Name>

                <Value>WatsonParamSet[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter2$</Name>

                <Value>WatsonParamSet[1]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter3$</Name>

                <Value>WatsonParamSet[2]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter4$</Name>

                <Value>WatsonParamSet[3]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter5$</Name>

                <Value>WatsonParamSet[4]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter6$</Name>

                <Value>WatsonParamSet[5]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter7$</Name>

                <Value>WatsonParamSet[6]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter8$</Name>

                <Value>WatsonParamSet[7]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter9$</Name>

                <Value>WatsonParamSet[8]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter10$</Name>

                <Value>WatsonParamSet[9]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter11$</Name>

                <Value>WatsonParamSet[10]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

                <Value>BucketDisplayNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/BucketType$</Name>

                <Value>BucketTypeValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/AppName$</Name>

                <Value>AppNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/AppVer$</Name>

                <Value>AppVerValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/SelectedSolutionResponseType$</Name>

                <Value>SelectedSolutionResponseTypeValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSResponseUrl$</Name>

                <Value>ResponseUrlValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSBucket$</Name>

                <Value>BucketIDValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSBucketTable$</Name>

                <Value>BucketTableValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSDisplayType$</Name>

                <Value>DisplayTypeValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/SelectedCollectionResponseType$</Name>

                <Value>SelectedCollectionResponseTypeValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSGetCurrentOfficeDoc$</Name>

                <Value>FDocValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSGetFile$</Name>

                <Value>GetFileValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSGetFileVersion$</Name>

                <Value>GetFileVerValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSWQL$</Name>

                <Value>WqlValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSMemoryDump$</Name>

                <Value>MemDmpValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSRegKey$</Name>

                <Value>RegKeyValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSRegTree$</Name>

                <Value>RegTreeValue</Value>

              </Property>

            </Properties>

          </ClassInstance>

          <ClassInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]$</TypeId>

            <Properties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>Unknown Application</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value/>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/CompanyName$</Name>

                <Value>Unknown Company</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/FriendlyAppName$</Name>

                <Value>Unknown Application</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

                <Value>Unknown Application</Value>

              </Property>

            </Properties>

          </ClassInstance>

          <ClassInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]$</TypeId>

            <Properties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>Unknown Application</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value/>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter1$</Name>

                <Value>WatsonParamSet[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter2$</Name>

                <Value>WatsonParamSet[1]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter3$</Name>

                <Value>WatsonParamSet[2]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter4$</Name>

                <Value>WatsonParamSet[3]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter5$</Name>

                <Value>WatsonParamSet[4]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter6$</Name>

                <Value>WatsonParamSet[5]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter7$</Name>

                <Value>WatsonParamSet[6]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter8$</Name>

                <Value>WatsonParamSet[7]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter9$</Name>

                <Value>WatsonParamSet[8]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter10$</Name>

                <Value>WatsonParamSet[9]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter11$</Name>

                <Value>WatsonParamSet[10]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="System!System.Entity"]/DisplayName$</Name>

                <Value>BucketDisplayNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/BucketType$</Name>

                <Value>BucketTypeValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/AppName$</Name>

                <Value>Unknown Application</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/AppVer$</Name>

                <Value/>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/SelectedSolutionResponseType$</Name>

                <Value>SelectedSolutionResponseTypeValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSResponseUrl$</Name>

                <Value>ResponseUrlValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSBucket$</Name>

                <Value>BucketIDValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSBucketTable$</Name>

                <Value>BucketTableValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSDisplayType$</Name>

                <Value>DisplayTypeValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/SelectedCollectionResponseType$</Name>

                <Value>SelectedCollectionResponseTypeValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSGetCurrentOfficeDoc$</Name>

                <Value>FDocValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSGetFile$</Name>

                <Value>GetFileValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSGetFileVersion$</Name>

                <Value>GetFileVerValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSWQL$</Name>

                <Value>WqlValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSMemoryDump$</Name>

                <Value>MemDmpValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSRegKey$</Name>

                <Value>RegKeyValue</Value>

              </Property>

              <Property Optional="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/MSRegTree$</Name>

                <Value>RegTreeValue</Value>

              </Property>

            </Properties>

          </ClassInstance>

          <ClassInstance If="//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabInfo/CabInfo/UserName[string-length(//UserName)&gt;0]">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.User"]$</TypeId>

            <Properties>

              <Property GenNewInstance="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.User"]/UserName$</Name>

                <Value>UserNameValue</Value>

              </Property>

            </Properties>

          </ClassInstance>

          <ClassInstance If="//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabInfo/CabInfo/MachineName[string-length(//MachineName)&gt;0]">

            <TypeId>$MPElement[Name="Windows!Microsoft.Windows.Computer"]$</TypeId>

            <Properties>

              <Property GenNewInstance="true">

                <Name>$MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Name>

                <Value>MachineNameValue</Value>

              </Property>

            </Properties>

          </ClassInstance>

        </ClassInstances>

        <RelationshipInstances>

          <RelationshipInstance If="//CrashInfo/BucketData[BlueBucketData]">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroupHasClientMonitoringEntities"]$</TypeId>

            <SourceTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroup"]$</SourceTypeId>

            <TargetTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]$</TargetTypeId>

            <SourceProperties/>

            <TargetProperties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/BucketType$</Name>

                <Value>BucketTypeValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/HitTime$</Name>

                <Value>HitTimeValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/MachineName$</Name>

                <Value>MachineNameValue[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/UserName$</Name>

                <Value>UserNameValue[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.SystemBucket"]/CabFileName$</Name>

                <Value>CabNameValue</Value>

              </Property>

            </TargetProperties>

            <Properties/>

          </RelationshipInstance>

          <RelationshipInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName!='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroupHasClientMonitoringEntities"]$</TypeId>

            <SourceTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroup"]$</SourceTypeId>

            <TargetTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]$</TargetTypeId>

            <SourceProperties/>

            <TargetProperties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>AppNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value>AppVerValue</Value>

              </Property>

            </TargetProperties>

            <Properties/>

          </RelationshipInstance>

          <RelationshipInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName!='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroupHasClientMonitoringEntities"]$</TypeId>

            <SourceTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroup"]$</SourceTypeId>

            <TargetTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]$</TargetTypeId>

            <SourceProperties/>

            <TargetProperties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>AppNameValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value>AppVerValue</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter1$</Name>

                <Value>WatsonParamSet[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter2$</Name>

                <Value>WatsonParamSet[1]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter3$</Name>

                <Value>WatsonParamSet[2]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter4$</Name>

                <Value>WatsonParamSet[3]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter5$</Name>

                <Value>WatsonParamSet[4]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter6$</Name>

                <Value>WatsonParamSet[5]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter7$</Name>

                <Value>WatsonParamSet[6]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter8$</Name>

                <Value>WatsonParamSet[7]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter9$</Name>

                <Value>WatsonParamSet[8]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter10$</Name>

                <Value>WatsonParamSet[9]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter11$</Name>

                <Value>WatsonParamSet[10]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/BucketType$</Name>

                <Value>BucketTypeValue</Value>

              </Property>

            </TargetProperties>

            <Properties/>

          </RelationshipInstance>

          <RelationshipInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroupHasClientMonitoringEntities"]$</TypeId>

            <SourceTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroup"]$</SourceTypeId>

            <TargetTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]$</TargetTypeId>

            <SourceProperties/>

            <TargetProperties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>Unknown Application</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value/>

              </Property>

            </TargetProperties>

            <Properties/>

          </RelationshipInstance>

          <RelationshipInstance If="//CrashInfo/BucketData[@Type!='Microsoft.EnterpriseManagement.Mom.Modules.ClientMonitoring.BlueBucketData']/*/BucketData[//BucketData/AppName='Unknown Application']/AppName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroupHasClientMonitoringEntities"]$</TypeId>

            <SourceTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroup"]$</SourceTypeId>

            <TargetTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]$</TargetTypeId>

            <SourceProperties/>

            <TargetProperties>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationName$</Name>

                <Value>Unknown Application</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.Application"]/ApplicationVersion$</Name>

                <Value/>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter1$</Name>

                <Value>WatsonParamSet[0]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter2$</Name>

                <Value>WatsonParamSet[1]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter3$</Name>

                <Value>WatsonParamSet[2]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter4$</Name>

                <Value>WatsonParamSet[3]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter5$</Name>

                <Value>WatsonParamSet[4]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter6$</Name>

                <Value>WatsonParamSet[5]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter7$</Name>

                <Value>WatsonParamSet[6]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter8$</Name>

                <Value>WatsonParamSet[7]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter9$</Name>

                <Value>WatsonParamSet[8]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter10$</Name>

                <Value>WatsonParamSet[9]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/Parameter11$</Name>

                <Value>WatsonParamSet[10]</Value>

              </Property>

              <Property>

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.WatsonBucket"]/BucketType$</Name>

                <Value>BucketTypeValue</Value>

              </Property>

            </TargetProperties>

            <Properties/>

          </RelationshipInstance>

          <RelationshipInstance If="//CrashInfo/BucketData/*/BucketData/Reports/ReportData/ReportData/CabInfo/CabInfo/UserName">

            <TypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroupHasClientMonitoringEntities"]$</TypeId>

            <SourceTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.ClientMonitoringGroup"]$</SourceTypeId>

            <TargetTypeId>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.User"]$</TargetTypeId>

            <SourceProperties/>

            <TargetProperties>

              <Property GenNewInstance="true">

                <Name>$MPElement[Name="AEMLib!Microsoft.SystemCenter.CM.AEM.User"]/UserName$</Name>

                <Value>UserNameValue</Value>

              </Property>

            </TargetProperties>

            <Properties/>

          </RelationshipInstance>

        </RelationshipInstances>

      </Detailed>

    </ManagedEntity>

  </DataSource>

</Discovery>