Process Monitoring: Network Port State Collection

Microsoft.Windows.Server.10.0.Process.Ports.Collection (Rule)

This rule collects information about Network Port State.

Knowledge Base article:

Summary

This rule collects information about Network Port State of the ports.

Element properties:

Target	Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed
Category	Custom
Enabled	False
Alert Generate	False
Remotable	False

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.Server.10.0.Port.PerfMetrics.Collection.DataSource	Microsoft.Windows.Server.10.0.RunAs.CollectionRules
WA	WriteAction	Microsoft.Windows.Server.10.0.Process.PortsPublish.WriteAction	Default

Source Code:

<Rule ID="Microsoft.Windows.Server.10.0.Process.Ports.Collection" Target="Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed" Enabled="false" Remotable="false" ConfirmDelivery="true">

  <Category>Custom</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Microsoft.Windows.Server.10.0.Port.PerfMetrics.Collection.DataSource" RunAs="Microsoft.Windows.Server.10.0.RunAs.CollectionRules">

      <MonitoringConfiguration>$Target/Property[Type="WindowsServer!Microsoft.Windows.Server.ProcessSeed"]/ThresholdsByProcess$</MonitoringConfiguration>

      <LogLevel>4</LogLevel>

      <ManagementGroupId>$Target/ManagementGroup/Id$</ManagementGroupId>

      <ManagedEntityId>$Target/Host/Id$</ManagedEntityId>

      <IntervalSeconds>60</IntervalSeconds>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WA" TypeID="Microsoft.Windows.Server.10.0.Process.PortsPublish.WriteAction"/>

  </WriteActions>

</Rule>