Microsoft.SystemCenter.CollectInstallationProgressFromRunbookTrace (Rule)

Element properties:

Member Modules:

Source Code:

<Rule ID="Microsoft.SystemCenter.CollectInstallationProgressFromRunbookTrace" Target="Windows!Microsoft.Windows.Computer" Enabled="false" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Custom</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Etw!Microsoft.EnterpriseManagement.Mom.Modules.EtwModules.EtwDataSource">

      <SessionName>OMS-UpdateRunProgress</SessionName>

      <RuleName>$MPElement/Name$</RuleName>

      <NotificationMethod>Pull</NotificationMethod>

      <MaxDataItemSizeKB>100</MaxDataItemSizeKB>

      <MaxDataItemQueueSize>10</MaxDataItemQueueSize>

      <DataItemBatchSize>10</DataItemBatchSize>

      <DataItemPostIntervalSeconds>2</DataItemPostIntervalSeconds>

      <Providers>

        <Provider>

          <Name>7ef76e64-0244-4557-bd16-f8f51dda8f11</Name>

          <Level>Informational</Level>

          <MatchAnyKeywords>0</MatchAnyKeywords>

          <DynamicParsing>0</DynamicParsing>

          <SpecifiedParser>Microsoft.EnterpriseManagement.Mom.Modules.EtwModules.Parsers.EventProviderTraceParser</SpecifiedParser>

        </Provider>

      </Providers>

      <Computer>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</Computer>

    </DataSource>

  </DataSources>

  <ConditionDetection ID="Etw2PropertyBag" TypeID="Etw!Microsoft.EnterpriseManagement.Mom.Modules.EtwModules.EtwToPropertyBagMapper">

    <PropertyMappings>

      <PropertyMapping>

        <PropertyName>TimeStamp</PropertyName>

        <EtwProperty>Timestamp</EtwProperty>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>KBID</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..KBID</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>UpdateId</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..UpdateId</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>Reattempted</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..Reattempted</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>HResult</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..HResult</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>ResultCode</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..ResultCode</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>UpdateRunName</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..UpdateRunName</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>Status</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..Status</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>Computer</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..Computer</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>UpdateTitle</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..UpdateTitle</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>CorrelationId</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..CorrelationId</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>ErrorMessage</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..ErrorMessage</ValueTransform>

      </PropertyMapping>

      <PropertyMapping>

        <PropertyName>Subtype</PropertyName>

        <EtwProperty>message</EtwProperty>

        <ValueTransform Type="Json">$..Subtype</ValueTransform>

      </PropertyMapping>

    </PropertyMappings>

  </ConditionDetection>

  <WriteActions>

    <WriteAction ID="HttpWA" TypeID="Types!Microsoft.SystemCenter.UpdateRunProgressWriteAction"/>

  </WriteActions>

</Rule>