ServicesAntigenIMCStop

ServicesAntigenIMCStop_2_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
The AntigenIMC service stopped successfully.
 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.Antigen.v9.Antigen_For_Exchange_Installation
CategoryEventCollection
EnabledTrue
Event_ID1003
Event SourceAntigenIMC
Alert GenerateFalse
RemotableTrue
Event LogApplication
CommentMom2005ID='{B505C0E3-B3E4-4922-96BC-E3388F880071}';MOM2005ComputerGroupID={A892AF5F-2434-4D1E-A72B-9E3CBE68B64C}

Member Modules:

ID Module Type TypeId RunAs 
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ServicesAntigenIMCStop_2_Rule" Target="Microsoft.Antigen.v9.Antigen_For_Exchange_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{B505C0E3-B3E4-4922-96BC-E3388F880071}';MOM2005ComputerGroupID={A892AF5F-2434-4D1E-A72B-9E3CBE68B64C}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>Application</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>1003</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>AntigenIMC</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">
<AlertGeneration>
<GenerateAlert>false</GenerateAlert>
</AlertGeneration>
<InvokerType>1</InvokerType>
</WriteAction>
<WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>
<WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>
</WriteActions>
</Rule>