Home
  •  

Proxy - Live Communications Server received requests with unauthorized uri.

Proxy___Live_Communications_Server_received_requests_with_unauthorized_uri._2_5_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
Live Communications Server received requests with unauthorized uri.
 
Causes
This could be due to a incorrectly configured routing table rule in the peer server or due to an attacker.
 
Resolutions
None needed unless the reported number is large. Contact the administrator of the peer to resolve this issue.
 
© 2001-2005 Microsoft, all rights reserved.

Element properties:

TargetMicrosoft.Office.LiveCommunicationsServer.2005.Microsoft_Office_Live_Communications_Server_2005_Proxy_Installation
CategoryEventCollection
EnabledFalse
Event_ID16450
Event SourceLive Communications Server Proxy
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
Proxy - Live Communications Server received requests with unauthorized uri.

$Data/EventDescription$
Event LogApplication
CommentMom2005ID='{03E392EF-3F1C-4633-982D-863CCFD9AC1F}';MOM2005ComputerGroupID={82759468-E654-4948-BF49-1213CD3B8CD3}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="Proxy___Live_Communications_Server_received_requests_with_unauthorized_uri._2_5_Rule" Target="Microsoft.Office.LiveCommunicationsServer.2005.Microsoft_Office_Live_Communications_Server_2005_Proxy_Installation" Enabled="false" ConfirmDelivery="true" Comment="Mom2005ID='{03E392EF-3F1C-4633-982D-863CCFD9AC1F}';MOM2005ComputerGroupID={82759468-E654-4948-BF49-1213CD3B8CD3}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>16450</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Live Communications Server Proxy</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>40</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>Proxy - Live Communications Server received requests with unauthorized uri.</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>