Collect Generic Events

Microsoft.SystemCenter.CollectGenericEventDataToCloud_SDRS (Rule)

This rule collects all event data in the system and pushes them to the cloud

Element properties:

Member Modules:

Source Code:

<Rule ID="Microsoft.SystemCenter.CollectGenericEventDataToCloud_SDRS" Comment="this rule collects all event data from a healthservice and pushes it to the cloud" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.HealthService" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Microsoft.SystemCenter.PublishedCloudGenericEventProvider_SDRS">

      <DropItems>false</DropItems>

      <MaximumBatchSize>100</MaximumBatchSize>

      <QueueDataOnStall>false</QueueDataOnStall>

      <QueueDataStallInterval>PT150S</QueueDataStallInterval>

      <StalledDataQueueSizeMB>100</StalledDataQueueSizeMB>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="HttpWA" TypeID="System.PublishDataToEndPoint" Target="SCLibrary!Microsoft.SystemCenter.CollectionManagementServer">

      <AuthenticationCertificatePfx>$RunAs[Name="Advisor!Microsoft.SystemCenter.Advisor.RunAsProfile.Certificate"]/Data$</AuthenticationCertificatePfx>

      <AuthenticationMode>Certificate</AuthenticationMode>

      <Attributes>

        <Attribute>

          <Name>IPName</Name>

          <Value>CPS</Value>

        </Attribute>

        <Attribute>

          <Name>ManagementGroupName</Name>

          <Value>$Target/ManagementGroup/Name$</Value>

        </Attribute>

        <Attribute>

          <Name>ManagementGroupId</Name>

          <Value>$Target/ManagementGroup/Id$</Value>

        </Attribute>

        <Attribute>

          <Name>HealthServiceSourceId</Name>

          <Value>$Target/Id$</Value>

        </Attribute>

      </Attributes>

      <CompressionType>Deflate</CompressionType>

      <DeletionPriority>110</DeletionPriority>

      <EndpointUrl>https://$Target/Property[Type="SCLibrary!Microsoft.SystemCenter.HealthService"]/ThirdPartyAuthenticationUri$.ods.opinsights.azure.com/GenericEventDataService.svc/PostDataItems</EndpointUrl>

      <HttpMethod>POST</HttpMethod>

      <Priority>Normal</Priority>

      <SkipQueue>false</SkipQueue>

      <TimeToLive>PT2H</TimeToLive>

      <NationalCloudType>0</NationalCloudType>

    </WriteAction>

  </WriteActions>

</Rule>