Microsoft.SystemCenter.CollectDynamicDnsEvents (Rule)

Element properties:

Member Modules:

Source Code:

<Rule ID="Microsoft.SystemCenter.CollectDynamicDnsEvents" Target="Windows!Microsoft.Windows.Computer" Enabled="false" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Custom</Category>

  <DataSources>

    <DataSource ID="DS_DynamicDnsEvents" TypeID="Etw!Microsoft.EnterpriseManagement.Mom.Modules.EtwModules.EtwDataSource">

      <SessionName>DynamicDns_ETW</SessionName>

      <RuleName>$MPElement/Name$</RuleName>

      <NotificationMethod>Pull</NotificationMethod>

      <MaxDataItemSizeKB>100</MaxDataItemSizeKB>

      <MaxDataItemQueueSize>100</MaxDataItemQueueSize>

      <DataItemBatchSize>10</DataItemBatchSize>

      <DataItemPostIntervalSeconds>2</DataItemPostIntervalSeconds>

      <Providers>

        <Provider>

          <!--Microsoft-Windows-DNSServer-->

          <Name>EB79061A-A566-4698-9119-3ED2807060E7</Name>

          <Level>Verbose</Level>

          <!--DYN_UPDATE_RESPONSE-->

          <MatchAnyKeywords>256</MatchAnyKeywords>

        </Provider>

      </Providers>

      <Computer>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Computer>

      <EventPropertiesToKeepCSV>FQDN,RCODE,Destination,ResolvedIps,Computer,Timestamp</EventPropertiesToKeepCSV>

      <EventPropertyCustomHandlersCSV>DnsPacketDataHandler</EventPropertyCustomHandlersCSV>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="HttpWA" TypeID="Types!Microsoft.SystemCenter.CollectDynamicDnsEvents"/>

  </WriteActions>

</Rule>