Moniteur d'endommagement du système de fichiers de l'agrégat

Microsoft.Windows.Client.Win7.PhysicalDisk.FileSystemCorruption.Monitor (UnitMonitor)

Le moniteur détecte l'endommagement du système de fichiers sur les volumes NTFS

Knowledge Base article:

Résumé

Ce moniteur d'intégrité détecte les erreurs de lecture et d'écriture sur disque sur les volumes NTFS.

Element properties:

Target	Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk
Parent Monitor	System.Health.AvailabilityState
Category	StateCollection
Enabled	True
Alert Generate	False
Alert Auto Resolve	True
Monitor Type	Microsoft.Windows.SingleEventLogManualReset2StateMonitorType
Remotable	True
Accessibility	Public
RunAs	System.PrivilegedMonitoringAccount

Source Code:

<UnitMonitor ID="Microsoft.Windows.Client.Win7.PhysicalDisk.FileSystemCorruption.Monitor" RunAs="System!System.PrivilegedMonitoringAccount" Accessibility="Public" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Target="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" Remotable="true" Enabled="true" Priority="Normal" ConfirmDelivery="false">

  <Category>StateCollection</Category>

  <OperationalStates>

    <OperationalState ID="FileSystemHealthy" HealthState="Success" MonitorTypeStateID="ManualResetEventRaised"/>

    <OperationalState ID="FileSystemCorrupted" HealthState="Warning" MonitorTypeStateID="EventRaised"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>

    <LogName>System</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Ntfs</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>55</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <Or>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume1$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume2$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume3$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

            <Expression>

              <SimpleExpression>

                <ValueExpression>

                  <XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>

                </ValueExpression>

                <Operator>Equal</Operator>

                <ValueExpression>

                  <Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume4$</Value>

                </ValueExpression>

              </SimpleExpression>

            </Expression>

          </Or>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>