ArgumentsComponent: Errors

NiCE.LogFile.Linux.Example.ArgumentsComponent.Critical (Rule)

This rule filters the Log file for critical events specified in the global negativ and positiv logfile content pattern lists.

Element properties:

Member Modules:

Source Code:

<Rule ID="NiCE.LogFile.Linux.Example.ArgumentsComponent.Critical" Target="LogFile!NiCE.LogFile.Linux.Library.Computer" Enabled="true" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="LogFile!NiCE.LogFile.Linux.Library.LogFile.Provider.Arguments.Filter.Component.Severity.DS">

      <TargetSystem>$Target/Host/Host/Property[Type='Unix!Microsoft.Unix.Computer']/PrincipalName$</TargetSystem>

      <IntervalSeconds>86400</IntervalSeconds>

      <SyncTime>09:00</SyncTime>

      <PositionFile>logmp_onceaday.dat</PositionFile>

      <Arguments/>

      <ComponentName>ArgumentsComponent</ComponentName>

      <Severity>Error</Severity>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertMessageId>$MPElement[Name='NiCE.LogFile.Linux.Example.ArgumentsComponent.Critical.AlertMessage']$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/Params/Param[3]$</AlertParameter1>

        <AlertParameter2>$Data/Params/Param[4]$</AlertParameter2>

        <AlertParameter3>$Data/Params/Param[1]$</AlertParameter3>

        <AlertParameter4>$Data/Params/Param[2]$</AlertParameter4>

        <AlertParameter5>$Data/Params/Param[6]$</AlertParameter5>

      </AlertParameters>

      <Suppression>

        <SuppressionValue>

                $Data/Params/Param[3]$

                $Data/Params/Param[4]$

                $Data/Params/Param[1]$

                $Data/Params/Param[2]$

              </SuppressionValue>

      </Suppression>

    </WriteAction>

  </WriteActions>

</Rule>