手動重設
Microsoft.Windows.MissingEventLogManualReset2StateMonitorType (UnitMonitorType)
雙狀態監視,遺失的事件狀態及手動重設狀態。
Element properties:
Member Modules:
Source Code:
<UnitMonitorType ID="Microsoft.Windows.MissingEventLogManualReset2StateMonitorType" Accessibility="Public">
<MonitorTypeStates>
<MonitorTypeState ID="MissingEventRaised"/>
<MonitorTypeState ID="ManualResetEventRaised" NoDetection="true"/>
</MonitorTypeStates>
<Configuration>
<IncludeSchemaTypes>
<SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>
</IncludeSchemaTypes>
<xsd:element name="MissingComputerName" type="xsd:string"/>
<xsd:element name="MissingLogName" type="xsd:string"/>
<xsd:element name="MissingExpression" type="ExpressionType"/>
<xsd:element name="Consolidator" type="ConsolidatorType"/>
</Configuration>
<MonitorImplementation>
<MemberModules>
<DataSource TypeID="Microsoft.Windows.BaseEventProvider" ID="MissingDataSource">
<ComputerName>$Config/MissingComputerName$</ComputerName>
<LogName>$Config/MissingLogName$</LogName>
</DataSource>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="MissingFilterCondition">
<Expression>$Config/MissingExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.MissingConsolidatorCondition" ID="MissingDataCondition">
<Consolidator>$Config/Consolidator$</Consolidator>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">Count</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">0</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</ConditionDetection>
</MemberModules>
<RegularDetections>
<RegularDetection MonitorTypeStateID="MissingEventRaised">
<Node ID="MissingDataCondition">
<Node ID="MissingFilterCondition">
<Node ID="MissingDataSource"/>
</Node>
</Node>
</RegularDetection>
</RegularDetections>
</MonitorImplementation>
</UnitMonitorType>