Microsoft Azure Storage NT Event Log Grooming

Microsoft.SystemCenter.MicrosoftAzure.GenericStorageAccount.NtEventLog.Grooming (Rule)

Microsoft Azure Storage NT Event Log grooming

Knowledge Base article:

Summary

Microsoft Azure Storage NT Event Log grooming

Element properties:

TargetMicrosoft.SystemCenter.MicrosoftAzure.GenericStorageAccount
CategoryMaintenance
EnabledFalse
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.SystemCenter.MicrosoftAzure.SpreadScheduler Default
WA WriteAction Microsoft.SystemCenter.MicrosoftAzure.StorageGrooming.WA Default

Source Code:

<Rule ID="Microsoft.SystemCenter.MicrosoftAzure.GenericStorageAccount.NtEventLog.Grooming" Enabled="false" Target="Microsoft.SystemCenter.MicrosoftAzure.GenericStorageAccount" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Maintenance</Category>
<DataSources>
<DataSource ID="DS" TypeID="Microsoft.SystemCenter.MicrosoftAzure.SpreadScheduler">
<IntervalSeconds>86400</IntervalSeconds>
<UniquenessKey>$Target/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.AzureServiceGeneric"]/ServiceId$WADWindowsEventLogsTable</UniquenessKey>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WA" TypeID="Microsoft.SystemCenter.MicrosoftAzure.StorageGrooming.WA">
<ADUserName>$RunAs[Name="Microsoft.SystemCenter.MicrosoftAzure.RunAsProfile.ADCredentials"]/UserName$</ADUserName>
<ADPassword>$RunAs[Name="Microsoft.SystemCenter.MicrosoftAzure.RunAsProfile.ADCredentials"]/Password$</ADPassword>
<ADClientId>$Target/Host/Host/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.Subscription"]/ClientId$</ADClientId>
<SubscriptionId>$Target/Host/Host/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.Subscription"]/SubscriptionId$</SubscriptionId>
<Proxy>$Target/Host/Host/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.Subscription"]/ProxyServerAddress$</Proxy>
<AuthBaseAddress>$Target/Host/Host/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.Subscription"]/Authority$</AuthBaseAddress>
<ResourceBaseAddress>$Target/Host/Host/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.Subscription"]/ArmServiceUri$</ResourceBaseAddress>
<Audience>$Target/Host/Host/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.Subscription"]/ResourceUri$</Audience>
<TimeoutSeconds>600</TimeoutSeconds>
<StorageServiceDnsSuffix>$Target/Host/Host/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.Subscription"]/StorageServiceDnsSuffix$</StorageServiceDnsSuffix>
<StorageAccountId>$Target/Property[Type="Microsoft.SystemCenter.MicrosoftAzure.AzureServiceGeneric"]/ServiceId$</StorageAccountId>
<StorageTable>WADWindowsEventLogsTable</StorageTable>
<ListKeysApi>2014-04-01</ListKeysApi>
<GracePeriodHours>24</GracePeriodHours>
<MaximumDataItemsToProcess>0</MaximumDataItemsToProcess>
</WriteAction>
</WriteActions>
</Rule>