手動重設
Microsoft.Windows.CorrelatedEventLogManualReset2StateMonitorType (UnitMonitorType)
雙狀態監視,與關聯事件狀態及手動重設狀態有關聯。
Element properties:
Member Modules:
Source Code:
<UnitMonitorType ID="Microsoft.Windows.CorrelatedEventLogManualReset2StateMonitorType" Accessibility="Public">
<MonitorTypeStates>
<MonitorTypeState ID="CorrelatedEventRaised"/>
<MonitorTypeState ID="ManualResetEventRaised" NoDetection="true"/>
</MonitorTypeStates>
<Configuration>
<IncludeSchemaTypes>
<SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>
</IncludeSchemaTypes>
<xsd:element name="FirstCorrelatedComputerName" type="xsd:string"/>
<xsd:element name="FirstCorrelatedLogName" type="xsd:string"/>
<xsd:element name="FirstCorrelatedExpression" type="ExpressionType"/>
<xsd:element name="SecondCorrelatedComputerName" type="xsd:string"/>
<xsd:element name="SecondCorrelatedLogName" type="xsd:string"/>
<xsd:element name="SecondCorrelatedExpression" type="ExpressionType"/>
<xsd:element name="Correlator" type="CorrelatorType"/>
</Configuration>
<MonitorImplementation>
<MemberModules>
<DataSource TypeID="Microsoft.Windows.BaseEventProvider" ID="FirstCorrelatedDataSource">
<ComputerName>$Config/FirstCorrelatedComputerName$</ComputerName>
<LogName>$Config/FirstCorrelatedLogName$</LogName>
</DataSource>
<DataSource TypeID="Microsoft.Windows.BaseEventProvider" ID="SecondCorrelatedDataSource">
<ComputerName>$Config/SecondCorrelatedComputerName$</ComputerName>
<LogName>$Config/SecondCorrelatedLogName$</LogName>
</DataSource>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="FirstCorrelatedFilterCondition">
<Expression>$Config/FirstCorrelatedExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="SecondCorrelatedFilterCondition">
<Expression>$Config/SecondCorrelatedExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.CorrelatorAutoCondition" ID="CorrelatedDataCondition">
<Correlator>$Config/Correlator$</Correlator>
</ConditionDetection>
</MemberModules>
<RegularDetections>
<RegularDetection MonitorTypeStateID="CorrelatedEventRaised">
<Node ID="CorrelatedDataCondition">
<Node ID="FirstCorrelatedFilterCondition">
<Node ID="FirstCorrelatedDataSource"/>
</Node>
<Node ID="SecondCorrelatedFilterCondition">
<Node ID="SecondCorrelatedDataSource"/>
</Node>
</Node>
</RegularDetection>
</RegularDetections>
</MonitorImplementation>
</UnitMonitorType>