ScanRealtimeProcessUsage

ScanRealtimeProcessUsage_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary

The percentage of elapsed time that the Realtime scanner used to process execution instructions.

 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.ForeFront.SharePoint.Forefront_Security_for_SharePoint_Installation
CategoryPerformanceCollection
EnabledTrue
Instance NameProcess
Counter Name\% Processor Time
Frequency300
Alert GenerateFalse
RemotableTrue
CommentMom2005ID='{128CFBA9-5E5D-4D81-841D-78EE1745A744}';MOM2005ComputerGroupID={5E34E22D-A892-4026-A670-EB628BE392D5}

Member Modules:

ID Module Type TypeId RunAs 
_D17A03FA_71F4_44E2_9FA0_85C48290C613_ DataSource System.Mom.BackwardCompatibility.Performance.FilteredDataProvider Default
CollectPerfData WriteAction Microsoft.SystemCenter.CollectPerformanceData Default
CollectPerfDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ScanRealtimeProcessUsage_1_Rule" Target="Microsoft.ForeFront.SharePoint.Forefront_Security_for_SharePoint_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{128CFBA9-5E5D-4D81-841D-78EE1745A744}';MOM2005ComputerGroupID={5E34E22D-A892-4026-A670-EB628BE392D5}">
<Category>PerformanceCollection</Category>
<DataSources>
<DataSource ID="_D17A03FA_71F4_44E2_9FA0_85C48290C613_" Comment="{D17A03FA-71F4-44E2-9FA0-85C48290C613}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.Performance.FilteredDataProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>% Processor Time</CounterName>
<ObjectName>Process</ObjectName>
<InstanceName>FSCRealtimeScanner</InstanceName>
<Frequency>300</Frequency>
<Expression/>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>false</GenerateAlert>
</AlertGeneration>
<InvokerType>1</InvokerType>
</WriteAction>
<WriteAction ID="CollectPerfData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectPerformanceData"/>
<WriteAction ID="CollectPerfDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>
</WriteActions>
</Rule>