Security Monitoring: Distributed App MemberServer Discovery

Security.Monitoring.DA.MSDiscovery (Discovery)

Populates Security Monitoring Distributed Application

Element properties:

Object Discovery Details:

Member Modules:

Source Code:

<Discovery ID="Security.Monitoring.DA.MSDiscovery" Target="Windows!Microsoft.Windows.Computer" Enabled="true" ConfirmDelivery="false" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Security.Monitoring.SecurityMonitoringDA">

      <Property TypeID="Security.Monitoring.SecurityMonitoringDA" PropertyID="DomainDnsName"/>

      <Property TypeID="System!System.Entity" PropertyID="DisplayName"/>

    </DiscoveryClass>

    <DiscoveryClass TypeID="Security.Monitoring.SecurityMonitoringDA.MemberServers">

      <Property TypeID="Security.Monitoring.SecurityMonitoringDA.MemberServers" PropertyID="DomainDnsName"/>

      <Property TypeID="System!System.Entity" PropertyID="DisplayName"/>

    </DiscoveryClass>

    <DiscoveryRelationship TypeID="Security.Monitoring.SecurityMonitoringDARelationshipsForMemberServers"/>

    <DiscoveryRelationship TypeID="Security.Monitoring.SecurityMonitoringDARelationshipsforMS"/>

  </DiscoveryTypes>

  <DataSource ID="DS" TypeID="Security.Monitoring.DistributedApplicationMS.DataSource">

    <IntervalSeconds>300</IntervalSeconds>

    <ComputerName>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>

    <DomainDnsName>$Target/Property[Type="Windows!Microsoft.Windows.Computer"]/DomainDnsName$</DomainDnsName>

  </DataSource>

</Discovery>