Event Monitor - Correlated event with Manual Reset

Microsoft.Windows.WmiEventProvider.CorrelatedEventManualReset2StateMonitorType (UnitMonitorType)

Two states monitor, associate to correlated event and manual reset states.

Element properties:

Member Modules:

Source Code:

<UnitMonitorType ID="Microsoft.Windows.WmiEventProvider.CorrelatedEventManualReset2StateMonitorType" Accessibility="Public">

  <MonitorTypeStates>

    <MonitorTypeState ID="CorrelatedEventRaised"/>

    <MonitorTypeState ID="ManualResetEventRaised" NoDetection="true"/>

  </MonitorTypeStates>

  <Configuration>

    <IncludeSchemaTypes>

      <SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>

    </IncludeSchemaTypes>

    <xsd:element name="FirstCorrelatedNameSpace" type="xsd:string"/>

    <xsd:element name="FirstCorrelatedQuery" type="xsd:string"/>

    <xsd:element name="FirstCorrelatedPollInterval" type="xsd:integer"/>

    <xsd:element name="FirstCorrelatedExpression" type="ExpressionType"/>

    <xsd:element name="SecondCorrelatedNameSpace" type="xsd:string"/>

    <xsd:element name="SecondCorrelatedQuery" type="xsd:string"/>

    <xsd:element name="SecondCorrelatedPollInterval" type="xsd:integer"/>

    <xsd:element name="SecondCorrelatedExpression" type="ExpressionType"/>

    <xsd:element name="Correlator" type="CorrelatorType"/>

  </Configuration>

  <MonitorImplementation>

    <MemberModules>

      <DataSource TypeID="Microsoft.Windows.WmiEventProvider" ID="FirstCorrelatedDataSource">

        <NameSpace>$Config/FirstCorrelatedNameSpace$</NameSpace>

        <Query>$Config/FirstCorrelatedQuery$</Query>

        <PollInterval>$Config/FirstCorrelatedPollInterval$</PollInterval>

      </DataSource>

      <DataSource TypeID="Microsoft.Windows.WmiEventProvider" ID="SecondCorrelatedDataSource">

        <NameSpace>$Config/SecondCorrelatedNameSpace$</NameSpace>

        <Query>$Config/SecondCorrelatedQuery$</Query>

        <PollInterval>$Config/SecondCorrelatedPollInterval$</PollInterval>

      </DataSource>

      <ConditionDetection TypeID="System!System.ExpressionFilter" ID="FirstCorrelatedFilterCondition">

        <Expression>$Config/FirstCorrelatedExpression$</Expression>

      </ConditionDetection>

      <ConditionDetection TypeID="System!System.ExpressionFilter" ID="SecondCorrelatedFilterCondition">

        <Expression>$Config/SecondCorrelatedExpression$</Expression>

      </ConditionDetection>

      <ConditionDetection TypeID="System!System.CorrelatorAutoCondition" ID="CorrelatedDataCondition">

        <Correlator>$Config/Correlator$</Correlator>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="CorrelatedEventRaised">

        <Node ID="CorrelatedDataCondition">

          <Node ID="FirstCorrelatedFilterCondition">

            <Node ID="FirstCorrelatedDataSource"/>

          </Node>

          <Node ID="SecondCorrelatedFilterCondition">

            <Node ID="SecondCorrelatedDataSource"/>

          </Node>

        </Node>

      </RegularDetection>

    </RegularDetections>

  </MonitorImplementation>

</UnitMonitorType>