此處理規則會根據排程啟動 ConfigMgr 2007 監控 SMS_Executive Crash Dumps 指令碼,以監控新的當機傾印目錄於 [ConfigurationManagerInstallationFolder]\Logs 路徑下的建立過程。當找到新的當機傾印目錄時,指令碼即會產生事件。若找到多個目錄,則只會報告最新的一個。
[ConfigurationManagerInstallationFolder]\Logs 路徑下的檔案中會描述當機的原因。
Target | Microsoft.SystemCenter.ConfigurationManager.2007.Microsoft_SMSv4_Component_Servers_based_on_SMS_Executive_Installation |
Category | EventCollection |
Enabled | True |
Alert Generate | False |
Remotable | True |
Comment | Mom2005ID='{C03F622D-E535-43F3-AFDD-182FFEF1CB5C}';MOM2005ComputerGroupID={F43F115C-0418-4B40-BE92-C6004AB2511B} |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
_798255FC_1BF1_42BF_818C_81A4D382D5B3_ | DataSource | System.Scheduler | Default |
ScriptResponse1 | WriteAction | SMSv4_Monitor_SMS_Executive_Crash_Dumps | Default |
<Rule ID="SMSv4_Crash_Dumps__Monitoring_SMS_Executive_24_Rule" Target="Microsoft.SystemCenter.ConfigurationManager.2007.Microsoft_SMSv4_Component_Servers_based_on_SMS_Executive_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{C03F622D-E535-43F3-AFDD-182FFEF1CB5C}';MOM2005ComputerGroupID={F43F115C-0418-4B40-BE92-C6004AB2511B}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_798255FC_1BF1_42BF_818C_81A4D382D5B3_" Comment="{798255FC-1BF1-42BF-818C-81A4D382D5B3}" TypeID="SystemLibrary!System.Scheduler">
<Scheduler>
<SimpleReccuringSchedule>
<Interval Unit="Seconds">3600</Interval>
<SyncTime>0:10</SyncTime>
</SimpleReccuringSchedule>
<ExcludeDates/>
</Scheduler>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="ScriptResponse1" TypeID="SMSv4_Monitor_SMS_Executive_Crash_Dumps">
<AlertGeneration>
<GenerateAlert>false</GenerateAlert>
<Owner/>
<Description>
$Data/EventDescription$
</Description>
<AlertLevel>50</AlertLevel>
<ResolutionState/>
<Source>
$Data/PublisherName$
</Source>
<Name>ConfigMgr 2007 Crash Dumps: Monitoring SMS Executive</Name>
</AlertGeneration>
<InvokerType>0</InvokerType>
</WriteAction>
</WriteActions>
</Rule>