Home
  •  

Monitor for memory exhaustion failure operational conditions

Microsoft.Windows.Client.Win8.Computer.MemoryExhaustion.Monitor (UnitMonitor)

This monitors checks if event id 1003 is being raised by Microsoft-Windows-Resource-Exhaustion-Detector provider in Windows 8 to shows that a memory exhaustion failure occurs in the OS.

Knowledge Base article:

Summary

This monitor checks for memory exhaustion failure operational conditions.

Configuration

These are the overridable parameters:

Element properties:

TargetMicrosoft.Windows.Client.Win8.Computer
Parent MonitorSystem.Health.ConfigurationState
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.SingleEventLogManualReset2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Memory Exhaustion Disconnected
Memory Exhaustion
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.Client.Win8.Computer.MemoryExhaustion.Monitor" Accessibility="Public" ParentMonitorID="SystemHealth!System.Health.ConfigurationState" Target="Win8!Microsoft.Windows.Client.Win8.Computer" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" Remotable="true" Enabled="true" Priority="Normal" ConfirmDelivery="false">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Client.Win8.Computer.MemoryExhaustion.Monitor.AlertMessage">

    <AlertOnState>Warning</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="MemoryUtilizationHealthy" HealthState="Success" MonitorTypeStateID="ManualResetEventRaised"/>

    <OperationalState ID="MemoryUtilizationUnHealthyExhaustion" HealthState="Warning" MonitorTypeStateID="EventRaised"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>Microsoft-Windows-Resource-Exhaustion-Detector/Operational</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventSourceName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Microsoft-Windows-Resource-Exhaustion-Detector</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>1003</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>