Home
  •  

ScanInternetProcessError

ScanInternetProcessError_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary

This event is triggered if the "ScanInternetProcessPollE" event triggers an error.

 
Causes

This indicates that an "FSCTransportScanner.exe" process has crashed on the agent system.

 
Resolutions

FSCTransportScanner.exe” will be automatically restarted by FSCController. No Action required.

 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.ForeFront.Exchange.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
ScanInternetProcessError

$Data/EventDescription$
CommentMom2005ID='{F1A21804-3751-4848-A6FB-64EF4DA67303}';MOM2005ComputerGroupID={349CABD5-7700-4732-962C-63CF8C1B3795}

Member Modules:

ID Module Type TypeId RunAs 
_F320DA51_13BF_11D3_B2CD_00A0C92A28B4_ DataSource System.Mom.BackwardCompatibility.FilteredEvent.DataProvider Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ScanInternetProcessError_1_Rule" Target="Microsoft.ForeFront.Exchange.Forefront_Security_for_Exchange_Server___Edge_Transport_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{F1A21804-3751-4848-A6FB-64EF4DA67303}';MOM2005ComputerGroupID={349CABD5-7700-4732-962C-63CF8C1B3795}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F320DA51_13BF_11D3_B2CD_00A0C92A28B4_" Comment="{F320DA51-13BF-11D3-B2CD-00A0C92A28B4}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.FilteredEvent.DataProvider">

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>9520</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Forefront Process Checker</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>50</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>ScanInternetProcessError</Name>

        <CustomFields>

          <CustomField>Microsoft Forefront Server Security</CustomField>

          <CustomField>Forefront Security For Exchange Server</CustomField>

          <CustomField>ScanJobFailure</CustomField>

          <CustomField/>

          <CustomField/>

        </CustomFields>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

  </WriteActions>

</Rule>