根連接器資料有效性檢查

Microsoft.SystemCenter.RootManagementServer.Security.RootDataItemPoolCheck (UnitMonitor)

監視從根 System Center 管理健全狀況服務傳送到資料存取服務和管理設定服務的資料項目有效性。

Knowledge Base article:

摘要

根連接器收到已經捨棄的錯誤封包。 由於使用者無法針對這個問題採取任何動作,因此這個監視預設為停用。

Element properties:

TargetMicrosoft.SystemCenter.AllManagementServersPool
Parent MonitorSystem.Health.AvailabilityState
CategorySecurityHealth
EnabledFalse
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityHigh
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.RepeatedEventLogTimer2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
資料完整性警告
System Center 管理健全狀況服務正在接收無效的資料項目。 這可能是表示管理組件異常或 System Center 管理健全狀況服務遭受攻擊。 檢查警示內容以取得更多詳細資料。
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter.RootManagementServer.Security.RootDataItemPoolCheck" Accessibility="Public" Enabled="false" Target="SCLibrary!Microsoft.SystemCenter.AllManagementServersPool" ParentMonitorID="Health!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.RepeatedEventLogTimer2StateMonitorType" ConfirmDelivery="true">
<Category>SecurityHealth</Category>
<AlertSettings AlertMessage="Microsoft.SystemCenter.HealthService.Security.DataIntegrityRollup_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>High</AlertPriority>
<AlertSeverity>Warning</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="RootDataItemCheckWarning" MonitorTypeStateID="RepeatedEventRaised" HealthState="Warning"/>
<OperationalState ID="RootDataItemCheckSuccess" MonitorTypeStateID="TimerEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<RepeatedComputerName>.</RepeatedComputerName>
<RepeatedLogName>Operations Manager</RepeatedLogName>
<RepeatedExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">20058</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">OpsMgr Connector</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</RepeatedExpression>
<Consolidator>
<ConsolidationProperties/>
<TimeControl>
<WithinTimeSchedule>
<Interval>900</Interval>
</WithinTimeSchedule>
</TimeControl>
<CountingCondition>
<Count>2</Count>
<CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>
</CountingCondition>
</Consolidator>
<TimerWaitInSeconds>3600</TimerWaitInSeconds>
</Configuration>
</UnitMonitor>