Alert Rule (Expression filter before correlation)

NiCE.LogFile.Library.Alert.Rule.Correlated.Simple.Before.Filtered.Template (Template)

Source Code:

<Template ID="NiCE.LogFile.Library.Alert.Rule.Correlated.Simple.Before.Filtered.Template" Purpose="RuleCreation">

  <Configuration>

    <IncludeSchemaTypes>

      <SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>

      <SchemaType>Health!System.Health.AlertSchema</SchemaType>

      <SchemaType>SCRT!Microsoft.SystemCenter.RuleTemplates.ManagementPackCategoryType</SchemaType>

      <SchemaType>SCRT!Microsoft.SystemCenter.RuleTemplates.ManagementPackIdentifiers</SchemaType>

      <SchemaType>NiCE.LogFile.Library.NiCEProvidersSchema</SchemaType>

    </IncludeSchemaTypes>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="ID" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Name" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Enabled" type="xsd:boolean"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Description" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Target" type="xsd:string"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Category" type="ManagementPackCategoryType"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="LocaleId" type="ManagementPackLanguageIdentifier"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="LogFileProviderConfig" type="SimpleLogFileProviderConfigType"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="ExpressionA" type="ExpressionType"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="ExpressionB" type="ExpressionType"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Correlator" type="CorrelatorType"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Priority">

      <xsd:simpleType>

        <xsd:restriction base="xsd:integer">

          <xsd:minInclusive value="0"/>

          <xsd:maxInclusive value="2"/>

        </xsd:restriction>

      </xsd:simpleType>

    </xsd:element>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Severity">

      <xsd:simpleType>

        <xsd:restriction base="xsd:integer">

          <xsd:minInclusive value="0"/>

          <xsd:maxInclusive value="2"/>

        </xsd:restriction>

      </xsd:simpleType>

    </xsd:element>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="AlertName" type="xsd:string" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="AlertDescription" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="AlertOwner" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="AlertParameters" type="System.Health.AlertParameters" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Suppression" type="System.Health.Suppression" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom1" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom2" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom3" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom4" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom5" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom6" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom7" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom8" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom9" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element xmlns:xsd="http://www.w3.org/2001/XMLSchema" name="Custom10" type="xsd:string" minOccurs="0" maxOccurs="1"/>

  </Configuration>

  <References>

    <Reference ID="System"/>

    <Reference ID="Windows"/>

    <Reference ID="SC"/>

    <Reference ID="Health"/>

    <Reference ID="Self"/>

  </References>

  <Implementation>

    <Monitoring>

      <Rules>

        <Rule ID="$TemplateConfig/ID$" Target="$TemplateConfig/Target$" Enabled="$TemplateConfig/Enabled$" ConfirmDelivery="true" Remotable="false">

          <Category>$TemplateConfig/Category$</Category>

          <DataSources>

            <DataSource ID="DS1" TypeID="$Reference/Self$NiCE.LogFile.Library.Correlated.Simple.Before.Filtered.LogFileProvider.DS">

              <LogFileProviderConfig>$TemplateConfig/LogFileProviderConfig$</LogFileProviderConfig>

              <ExpressionA>$TemplateConfig/ExpressionA$</ExpressionA>

              <ExpressionB>$TemplateConfig/ExpressionB$</ExpressionB>

              <Correlator>$TemplateConfig/Correlator$</Correlator>

            </DataSource>

          </DataSources>

          <WriteActions>

            <WriteAction ID="Alert" TypeID="$Reference/Health$System.Health.GenerateAlert">

              <Priority>$TemplateConfig/Priority$</Priority>

              <Severity>$TemplateConfig/Severity$</Severity>

              <AlertName/>

              <AlertDescription/>

              <AlertOwner>$TemplateConfig/AlertOwner$</AlertOwner>

              <AlertMessageId>$MPElement[Name="$TemplateConfig/ID$.AlertMessage"]$</AlertMessageId>

              <AlertParameters>$TemplateConfig/AlertParameters$</AlertParameters>

              <Suppression>$TemplateConfig/Suppression$</Suppression>

              <Custom1>$TemplateConfig/Custom1$</Custom1>

              <Custom2>$TemplateConfig/Custom2$</Custom2>

              <Custom3>$TemplateConfig/Custom3$</Custom3>

              <Custom4>$TemplateConfig/Custom4$</Custom4>

              <Custom5>$TemplateConfig/Custom5$</Custom5>

              <Custom6>$TemplateConfig/Custom6$</Custom6>

              <Custom7>$TemplateConfig/Custom7$</Custom7>

              <Custom8>$TemplateConfig/Custom8$</Custom8>

              <Custom9>$TemplateConfig/Custom9$</Custom9>

              <Custom10>$TemplateConfig/Custom10$</Custom10>

            </WriteAction>

          </WriteActions>

        </Rule>

      </Rules>

    </Monitoring>

    <Presentation>

      <StringResources>

        <StringResource ID="$TemplateConfig/ID$.AlertMessage"/>

      </StringResources>

    </Presentation>

    <LanguagePacks>

      <LanguagePack ID="$TemplateConfig/LocaleId$">

        <DisplayStrings>

          <DisplayString ElementID="$TemplateConfig/ID$">

            <Name>$TemplateConfig/Name$</Name>

            <Description>$TemplateConfig/Description$</Description>

          </DisplayString>

          <DisplayString ElementID="$TemplateConfig/ID$.AlertMessage">

            <Name>$TemplateConfig/AlertName$</Name>

            <Description>$TemplateConfig/AlertDescription$</Description>

          </DisplayString>

        </DisplayStrings>

      </LanguagePack>

    </LanguagePacks>

  </Implementation>

</Template>