事件收集: 无法订阅或获得更新类别和分类

Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager.FailedToSubscribe_Events (Rule)

如果 WSUS Configuration Manager 无法在 WSUS 服务器上订阅或获得更新类别和分类,则此规则会生成警报。

Knowledge Base article:

摘要

WSUS_Configuration_Manager 使用 WSUS API 从 Configuration Manager 站点服务器远程配置并订阅 Windows Server Update Services (WSUS) 服务器上的类别和分类。

请查看 WCM.log 中的详细信息。

原因

发生此问题的原因可能是:

Element properties:

TargetMicrosoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager
CategoryEventCollection
EnabledFalse
Event_ID6603
Event SourceSMS Server
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
WSUS 订阅警报
WSUS Configuration Manager 无法订阅更新类别和分类
Event LogApplication
CommentSIV:SUM0013

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectEvent Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default

Source Code:

<Rule ID="Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager.FailedToSubscribe_Events" Comment="SIV:SUM0013" Enabled="false" Target="SCCM!Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">6603</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">SMS Server</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
<WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertName/>
<AlertDescription/>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.SystemCenter2012.ConfigurationManager.WsusConfigurationManager.FailedToSubscribe_AlertMessageResourceID"]$</AlertMessageId>
<AlertParameters/>
<Suppression>
<SuppressionValue/>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>