Windows イベントのリセット

Microsoft.Windows.MissingEventLogSingleEventLog2StateMonitorType (UnitMonitorType)

2 つの状態の監視。見つからないイベントと通常のイベントに関連付けられています。

Element properties:

Member Modules:

Source Code:

<UnitMonitorType ID="Microsoft.Windows.MissingEventLogSingleEventLog2StateMonitorType" Accessibility="Public">

  <MonitorTypeStates>

    <MonitorTypeState ID="MissingEventRaised"/>

    <MonitorTypeState ID="EventRaised"/>

  </MonitorTypeStates>

  <Configuration>

    <IncludeSchemaTypes>

      <SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>

    </IncludeSchemaTypes>

    <xsd:element name="ComputerName" type="xsd:string"/>

    <xsd:element name="LogName" type="xsd:string"/>

    <xsd:element name="Expression" type="ExpressionType"/>

    <xsd:element name="MissingComputerName" type="xsd:string"/>

    <xsd:element name="MissingLogName" type="xsd:string"/>

    <xsd:element name="MissingExpression" type="ExpressionType"/>

    <xsd:element name="Consolidator" type="ConsolidatorType"/>

  </Configuration>

  <MonitorImplementation>

    <MemberModules>

      <DataSource TypeID="Microsoft.Windows.BaseEventProvider" ID="DataSource">

        <ComputerName>$Config/ComputerName$</ComputerName>

        <LogName>$Config/LogName$</LogName>

      </DataSource>

      <DataSource TypeID="Microsoft.Windows.BaseEventProvider" ID="MissingDataSource">

        <ComputerName>$Config/MissingComputerName$</ComputerName>

        <LogName>$Config/MissingLogName$</LogName>

      </DataSource>

      <ConditionDetection TypeID="System!System.ExpressionFilter" ID="FilterCondition">

        <Expression>$Config/Expression$</Expression>

      </ConditionDetection>

      <ConditionDetection TypeID="System!System.ExpressionFilter" ID="MissingFilterCondition">

        <Expression>$Config/MissingExpression$</Expression>

      </ConditionDetection>

      <ConditionDetection TypeID="System!System.MissingConsolidatorCondition" ID="MissingDataCondition">

        <Consolidator>$Config/Consolidator$</Consolidator>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery Type="UnsignedInteger">Count</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value Type="UnsignedInteger">0</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="MissingEventRaised">

        <Node ID="MissingDataCondition">

          <Node ID="MissingFilterCondition">

            <Node ID="MissingDataSource"/>

          </Node>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="EventRaised">

        <Node ID="FilterCondition">

          <Node ID="DataSource"/>

        </Node>

      </RegularDetection>

    </RegularDetections>

  </MonitorImplementation>

</UnitMonitorType>