Reset Log File Monitoring for a Computer Write Action

Microsoft.Unix.ResetLogFileMonitoring.WriteAction (WriteActionModuleType)

Element properties:

TypeWriteActionModuleType
IsolationAny
AccessibilityPublic
RunAsDefault
InputTypeSystem.BaseData
OutputTypeSystem.BaseData

Member Modules:

ID Module Type TypeId RunAs 
InvokeAction WriteAction Microsoft.Unix.WSMan.Invoke.VarPriv.WriteAction Default
InvokePriv WriteAction Microsoft.Unix.WSMan.Invoke.VarPriv.WriteAction Default

Overrideable Parameters:

IDParameterTypeSelectorDisplay NameDescription
ResetOnReadbool$Config/ResetOnRead$Reset on next readIf set to false, any log file events between the last scan of the log file and the current time will not be processed for potential alerts.
If set to true, any log file events between the last scan of the log file and the next monitoring scan of the log file will not be processed for potential alerts.
If running this task immediately before ending Maintenance mode, set this value to False. If running this task at the start of maintenance mode, set the value to True.

Source Code:

<WriteActionModuleType ID="Microsoft.Unix.ResetLogFileMonitoring.WriteAction" Accessibility="Public">
<Configuration>
<xsd:element name="TargetSystem" type="xsd:string"/>
<xsd:element name="ResetOnRead" type="xsd:boolean" minOccurs="0" default="false"/>
</Configuration>
<OverrideableParameters>
<OverrideableParameter ID="ResetOnRead" ParameterType="bool" Selector="$Config/ResetOnRead$"/>
</OverrideableParameters>
<ModuleImplementation>
<Composite>
<MemberModules>
<WriteAction ID="InvokePriv" TypeID="Microsoft.Unix.WSMan.Invoke.VarPriv.WriteAction">
<TargetSystem>$Config/TargetSystem$</TargetSystem>
<UserName>$RunAs[Name="Microsoft.Unix.PrivilegedAccount"]/UserName$</UserName>
<Password>$RunAs[Name="Microsoft.Unix.PrivilegedAccount"]/Password$</Password>
<Uri>http://schemas.microsoft.com/wbem/wscim/1/cim-schema/2/SCX_OperatingSystem?__cimnamespace=root/scx</Uri>
<Selector/>
<InvokeAction>ExecuteCommand</InvokeAction>
<Input>&lt;p:ExecuteCommand_INPUT xmlns:p="http://schemas.microsoft.com/wbem/wscim/1/cim-schema/2/SCX_OperatingSystem"&gt;&lt;p:command&gt;/opt/microsoft/scx/bin/scxlogfilereader -g $Config/ResetOnRead$ &lt;/p:command&gt;&lt;p:timeout&gt;60&lt;/p:timeout&gt;&lt;/p:ExecuteCommand_INPUT&gt;</Input>
<TimeOutInMS>600000</TimeOutInMS>
</WriteAction>
<WriteAction ID="InvokeAction" TypeID="Microsoft.Unix.WSMan.Invoke.VarPriv.WriteAction">
<TargetSystem>$Config/TargetSystem$</TargetSystem>
<UserName>$RunAs[Name="Microsoft.Unix.ActionAccount"]/UserName$</UserName>
<Password>$RunAs[Name="Microsoft.Unix.ActionAccount"]/Password$</Password>
<Uri>http://schemas.microsoft.com/wbem/wscim/1/cim-schema/2/SCX_OperatingSystem?__cimnamespace=root/scx</Uri>
<Selector/>
<InvokeAction>ExecuteCommand</InvokeAction>
<Input>&lt;p:ExecuteCommand_INPUT xmlns:p="http://schemas.microsoft.com/wbem/wscim/1/cim-schema/2/SCX_OperatingSystem"&gt;&lt;p:command&gt;/opt/microsoft/scx/bin/scxlogfilereader -g $Config/ResetOnRead$ &lt;/p:command&gt;&lt;p:timeout&gt;60&lt;/p:timeout&gt;&lt;/p:ExecuteCommand_INPUT&gt;</Input>
<TimeOutInMS>600000</TimeOutInMS>
</WriteAction>
</MemberModules>
<Composition>
<Node ID="InvokePriv">
<Node ID="InvokeAction"/>
</Node>
</Composition>
</Composite>
</ModuleImplementation>
<OutputType>System!System.BaseData</OutputType>
<InputType>System!System.BaseData</InputType>
</WriteActionModuleType>