Collecter les événements d'erreur de flux de changement d'état de l'analyse

Microsoft.SystemCenter.HealthService.MonitorStateChangeFlow.EventCollection (Rule)

Collecte les événements liés au flux des données de changement d'état d'analyse entre les services de contrôle d'intégrité de l'administration System Center et la base de données opérationnelle.

Knowledge Base article:

Résumé

Cette règle collecte des données d'événements qui seront utilisées dans des rapports ou des affichages.

Element properties:

Target	Microsoft.SystemCenter.HealthService
Category	EventCollection
Enabled	True
Alert Generate	False
Remotable	True
Event Log	Operations Manager

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.EventProvider	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Microsoft.SystemCenter.HealthService.MonitorStateChangeFlow.EventCollection" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.HealthService" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Operations Manager</LogName>

      <Expression>

        <Or>

          <Expression>

            <And>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <Value Type="String">$Target/ManagementGroup/Name$</Value>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <XPathQuery Type="String">Params/Param[3]</XPathQuery>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">PublisherName</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">OpsMgr Connector</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <Or>

                  <Expression>

                    <SimpleExpression>

                      <ValueExpression>

                        <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                      </ValueExpression>

                      <Operator>Equal</Operator>

                      <ValueExpression>

                        <Value Type="UnsignedInteger">20036</Value>

                      </ValueExpression>

                    </SimpleExpression>

                  </Expression>

                  <Expression>

                    <SimpleExpression>

                      <ValueExpression>

                        <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                      </ValueExpression>

                      <Operator>Equal</Operator>

                      <ValueExpression>

                        <Value Type="UnsignedInteger">20037</Value>

                      </ValueExpression>

                    </SimpleExpression>

                  </Expression>

                </Or>

              </Expression>

            </And>

          </Expression>

          <Expression>

            <And>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <Value Type="String">$Target/ManagementGroup/Name$</Value>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <XPathQuery Type="String">Params/Param[2]</XPathQuery>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <SimpleExpression>

                  <ValueExpression>

                    <XPathQuery Type="String">PublisherName</XPathQuery>

                  </ValueExpression>

                  <Operator>Equal</Operator>

                  <ValueExpression>

                    <Value Type="String">HealthService</Value>

                  </ValueExpression>

                </SimpleExpression>

              </Expression>

              <Expression>

                <Or>

                  <Expression>

                    <SimpleExpression>

                      <ValueExpression>

                        <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                      </ValueExpression>

                      <Operator>Equal</Operator>

                      <ValueExpression>

                        <Value Type="UnsignedInteger">5302</Value>

                      </ValueExpression>

                    </SimpleExpression>

                  </Expression>

                  <Expression>

                    <SimpleExpression>

                      <ValueExpression>

                        <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

                      </ValueExpression>

                      <Operator>Equal</Operator>

                      <ValueExpression>

                        <Value Type="UnsignedInteger">5303</Value>

                      </ValueExpression>

                    </SimpleExpression>

                  </Expression>

                </Or>

              </Expression>

            </And>

          </Expression>

        </Or>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SCLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>