Objeto de cluster removido

Microsoft.Windows.10.0.Cluster.Discovery.SpaceChanged.ObjectRemoved (Rule)

Esta regra força a execução da deteção do cluster se for removido um objeto de cluster existente. Por exemplo, se for removido um grupo de recursos existente, esta regra vai forçar uma nova deteção do cluster

Knowledge Base article:

Resumo

Esta regra procura Eventos de remoção de objetos WMI gerados pelo Serviço de Cluster do Windows Server.

Element properties:

TargetMicrosoft.Windows.10.0.Cluster.Monitoring.Service
CategoryDiscovery
EnabledFalse
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
WmiEventProvider DataSource Microsoft.Windows.WmiEventProvider Default
RunDiscoveryFullSrv64 WriteAction Microsoft.Windows.Cluster.10.0.Monitoring.Discovery.Action Default
RunWindowsServer64ResourceGroupDiscovery WriteAction Microsoft.Windows.10.0.Cluster.Monitoring.ResourceGroupDiscovery.Action Default

Source Code:

<Rule ID="Microsoft.Windows.10.0.Cluster.Discovery.SpaceChanged.ObjectRemoved" Enabled="false" Target="Microsoft.Windows.10.0.Cluster.Monitoring.Service" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Discovery</Category>
<DataSources>
<DataSource ID="WmiEventProvider" TypeID="Windows!Microsoft.Windows.WmiEventProvider">
<NameSpace>ROOT\MSCLUSTER</NameSpace>
<Query>SELECT TIME_CREATED, EventTypeMajor, EventTypeMinor, EventObjectName, EventObjectType, EventObjectPath FROM MSCluster_EventObjectRemove</Query>
<PollInterval>360</PollInterval>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="RunDiscoveryFullSrv64" TypeID="Microsoft.Windows.Cluster.10.0.Monitoring.Discovery.Action">
<TimeoutSeconds>300</TimeoutSeconds>
<OSVersion>10.</OSVersion>
<DiscoverySourceId>$MPElement[Name='Microsoft.Windows.10.0.Cluster.Monitoring.Discovery']$</DiscoverySourceId>
<DiscoverUnusedNetworks>false</DiscoverUnusedNetworks>
<NetworkContainsInterfaceGuid>$MPElement[Name='Microsoft.Windows.Cluster.Network.Contains.Microsoft.Windows.10.0.Cluster.NetworkInterface']$</NetworkContainsInterfaceGuid>
<NetworkInterfaceTypeGuid>$MPElement[Name='Microsoft.Windows.10.0.Cluster.NetworkInterface']$</NetworkInterfaceTypeGuid>
<NetworkInterfacePropClusterNameGuid>$MPElement[Name='Microsoft.Windows.10.0.Cluster.NetworkInterface']/ClusterName$</NetworkInterfacePropClusterNameGuid>
<NetworkInterfacePropNameGuid>$MPElement[Name='Microsoft.Windows.10.0.Cluster.NetworkInterface']/NetworkInterfaceName$</NetworkInterfacePropNameGuid>
<DiscoverCSVResources>false</DiscoverCSVResources>
<DiscoverNonCSVResources>false</DiscoverNonCSVResources>
<ResourceGroupDiscoveryLimit>300</ResourceGroupDiscoveryLimit>
<AppendClusterNameToResourceGroupName>true</AppendClusterNameToResourceGroupName>
<ComputerName>$Target/Host/Property[Type='Windows!Microsoft.Windows.Computer']/PrincipalName$</ComputerName>
<NetBiosName>$Target/Host/Property[Type='Windows!Microsoft.Windows.Computer']/NetbiosComputerName$</NetBiosName>
</WriteAction>
<WriteAction ID="RunWindowsServer64ResourceGroupDiscovery" TypeID="Microsoft.Windows.10.0.Cluster.Monitoring.ResourceGroupDiscovery.Action">
<DiscoverySourceId>$MPElement[Name='Microsoft.Windows.10.0.Cluster.ResourceGroups.Discovery']$</DiscoverySourceId>
<ClusterName>$Target/Property[Type='ClusLibrary!Microsoft.Windows.Cluster.Monitoring.Service']/ClusterName$</ClusterName>
<Timeout>300</Timeout>
</WriteAction>
</WriteActions>
</Rule>