事件监视器 - 丢失关联事件和事件
Microsoft.Windows.WmiProvider.MissingCorrelatedEventSingleEvent2StateMonitorType (UnitMonitorType)
二态监视器,与丢失关联事件和常规事件相关联。
Element properties:
Member Modules:
Overrideable Parameters:
Source Code:
<UnitMonitorType ID="Microsoft.Windows.WmiProvider.MissingCorrelatedEventSingleEvent2StateMonitorType" Accessibility="Public">
<MonitorTypeStates>
<MonitorTypeState ID="MissingCorrelatedEventRaised"/>
<MonitorTypeState ID="EventRaised"/>
</MonitorTypeStates>
<Configuration>
<IncludeSchemaTypes>
<SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>
</IncludeSchemaTypes>
<xsd:element name="NameSpace" type="xsd:string"/>
<xsd:element name="Query" type="xsd:string"/>
<xsd:element name="Frequency" type="xsd:integer"/>
<xsd:element name="Expression" type="ExpressionType"/>
<xsd:element name="FirstMissingCorrelatedNameSpace" type="xsd:string"/>
<xsd:element name="FirstMissingCorrelatedQuery" type="xsd:string"/>
<xsd:element name="FirstMissingCorrelatedFrequency" type="xsd:integer"/>
<xsd:element name="FirstMissingCorrelatedExpression" type="ExpressionType"/>
<xsd:element name="SecondMissingCorrelatedNameSpace" type="xsd:string"/>
<xsd:element name="SecondMissingCorrelatedQuery" type="xsd:string"/>
<xsd:element name="SecondMissingCorrelatedFrequency" type="xsd:integer"/>
<xsd:element name="SecondMissingCorrelatedExpression" type="ExpressionType"/>
<xsd:element name="Correlator" type="CorrelatorType"/>
</Configuration>
<OverrideableParameters>
<OverrideableParameter ID="Frequency" Selector="$Config/Frequency$" ParameterType="int"/>
<OverrideableParameter ID="FirstMissingCorrelatedFrequency" Selector="$Config/FirstMissingCorrelatedFrequency$" ParameterType="int"/>
<OverrideableParameter ID="SecondMissingCorrelatedFrequency" Selector="$Config/SecondMissingCorrelatedFrequency$" ParameterType="int"/>
</OverrideableParameters>
<MonitorImplementation>
<MemberModules>
<DataSource TypeID="Microsoft.Windows.WmiProvider" ID="DataSource">
<NameSpace>$Config/NameSpace$</NameSpace>
<Query>$Config/Query$</Query>
<Frequency>$Config/Frequency$</Frequency>
</DataSource>
<DataSource TypeID="Microsoft.Windows.WmiProvider" ID="FirstMissingCorrelatedDataSource">
<NameSpace>$Config/FirstMissingCorrelatedNameSpace$</NameSpace>
<Query>$Config/FirstMissingCorrelatedQuery$</Query>
<Frequency>$Config/FirstMissingCorrelatedFrequency$</Frequency>
</DataSource>
<DataSource TypeID="Microsoft.Windows.WmiProvider" ID="SecondMissingCorrelatedDataSource">
<NameSpace>$Config/SecondMissingCorrelatedNameSpace$</NameSpace>
<Query>$Config/SecondMissingCorrelatedQuery$</Query>
<Frequency>$Config/SecondMissingCorrelatedFrequency$</Frequency>
</DataSource>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="FilterCondition">
<Expression>$Config/Expression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="FirstMissingCorrelatedFilterCondition">
<Expression>$Config/FirstMissingCorrelatedExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="SecondMissingCorrelatedFilterCondition">
<Expression>$Config/SecondMissingCorrelatedExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.CorrelatorAutoMissingCondition" ID="MissingCorrelatedDataCondition">
<Correlator>$Config/Correlator$</Correlator>
</ConditionDetection>
</MemberModules>
<RegularDetections>
<RegularDetection MonitorTypeStateID="MissingCorrelatedEventRaised">
<Node ID="MissingCorrelatedDataCondition">
<Node ID="FirstMissingCorrelatedFilterCondition">
<Node ID="FirstMissingCorrelatedDataSource"/>
</Node>
<Node ID="SecondMissingCorrelatedFilterCondition">
<Node ID="SecondMissingCorrelatedDataSource"/>
</Node>
</Node>
</RegularDetection>
<RegularDetection MonitorTypeStateID="EventRaised">
<Node ID="FilterCondition">
<Node ID="DataSource"/>
</Node>
</RegularDetection>
</RegularDetections>
</MonitorImplementation>
</UnitMonitorType>