Windows 事件重設
Microsoft.Windows.2SingleEventLog2StateMonitorType (UnitMonitorType)
雙狀態監視,每項都與一個事件有關聯。
Element properties:
Member Modules:
Source Code:
<UnitMonitorType ID="Microsoft.Windows.2SingleEventLog2StateMonitorType" Accessibility="Public">
<MonitorTypeStates>
<MonitorTypeState ID="FirstEventRaised"/>
<MonitorTypeState ID="SecondEventRaised"/>
</MonitorTypeStates>
<Configuration>
<IncludeSchemaTypes>
<SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>
</IncludeSchemaTypes>
<xsd:element name="FirstComputerName" type="xsd:string"/>
<xsd:element name="FirstLogName" type="xsd:string"/>
<xsd:element name="FirstExpression" type="ExpressionType"/>
<xsd:element name="SecondComputerName" type="xsd:string"/>
<xsd:element name="SecondLogName" type="xsd:string"/>
<xsd:element name="SecondExpression" type="ExpressionType"/>
</Configuration>
<MonitorImplementation>
<MemberModules>
<DataSource TypeID="Microsoft.Windows.BaseEventProvider" ID="FirstDataSource">
<ComputerName>$Config/FirstComputerName$</ComputerName>
<LogName>$Config/FirstLogName$</LogName>
</DataSource>
<DataSource TypeID="Microsoft.Windows.BaseEventProvider" ID="SecondDataSource">
<ComputerName>$Config/SecondComputerName$</ComputerName>
<LogName>$Config/SecondLogName$</LogName>
</DataSource>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="FirstFilterCondition">
<Expression>$Config/FirstExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="SecondFilterCondition">
<Expression>$Config/SecondExpression$</Expression>
</ConditionDetection>
</MemberModules>
<RegularDetections>
<RegularDetection MonitorTypeStateID="FirstEventRaised">
<Node ID="FirstFilterCondition">
<Node ID="FirstDataSource"/>
</Node>
</RegularDetection>
<RegularDetection MonitorTypeStateID="SecondEventRaised">
<Node ID="SecondFilterCondition">
<Node ID="SecondDataSource"/>
</Node>
</RegularDetection>
</RegularDetections>
</MonitorImplementation>
</UnitMonitorType>