ScanRealtimeTotalDocumentRemove

ScanRealtimeTotalDocumentRemove_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary

This counter measures the total number of documents that have been blocked by Forefront during the Realtime Scan Job.

 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.ForeFront.SharePoint.Forefront_Security_for_SharePoint_Installation
CategoryPerformanceCollection
EnabledTrue
Instance NameMicrosoft Forefront Server Security Scan
Counter NameTotal Documents Removed
Frequency1800
Alert GenerateFalse
RemotableTrue
CommentMom2005ID='{198B8A92-43D6-4CF9-AD1E-2231EDCC6893}';MOM2005ComputerGroupID={5E34E22D-A892-4026-A670-EB628BE392D5}

Member Modules:

ID Module Type TypeId RunAs 
_F55FB64D_012D_462B_A573_7EB3CE0DF4D9_ DataSource System.Mom.BackwardCompatibility.Performance.FilteredDataProvider Default
CollectPerfData WriteAction Microsoft.SystemCenter.CollectPerformanceData Default
CollectPerfDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ScanRealtimeTotalDocumentRemove_1_Rule" Target="Microsoft.ForeFront.SharePoint.Forefront_Security_for_SharePoint_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{198B8A92-43D6-4CF9-AD1E-2231EDCC6893}';MOM2005ComputerGroupID={5E34E22D-A892-4026-A670-EB628BE392D5}">
<Category>PerformanceCollection</Category>
<DataSources>
<DataSource ID="_F55FB64D_012D_462B_A573_7EB3CE0DF4D9_" Comment="{F55FB64D-012D-462B-A573-7EB3CE0DF4D9}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.Performance.FilteredDataProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>Total Documents Removed</CounterName>
<ObjectName>Microsoft Forefront Server Security Scan</ObjectName>
<InstanceName>Sharepoint (Realtime Scan Job)</InstanceName>
<Frequency>1800</Frequency>
<Expression/>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>false</GenerateAlert>
</AlertGeneration>
<InvokerType>1</InvokerType>
</WriteAction>
<WriteAction ID="CollectPerfData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectPerformanceData"/>
<WriteAction ID="CollectPerfDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>
</WriteActions>
</Rule>