Home
  •  

ServicesAntigenIMC StateMonitor

ServicesAntigenIMC_StateMonitor_1_Rule (Rule)

Knowledge Base article:

Management Pack
Summary
The AntigenIMC service has stopped.
 
© 2006 Microsoft Corporation, all rights reserved.

Element properties:

TargetMicrosoft.Antigen.v9.Antigen_For_SMTP_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
ServicesAntigenIMC StateMonitor

$Data/EventDescription$
CommentMom2005ID='{F82AFB35-D974-41F8-88EC-E2EAC7B64AC5}';MOM2005ComputerGroupID={A1AE2A6F-5844-439E-9063-79258853900A}

Member Modules:

ID Module Type TypeId RunAs 
_A82B9550_241C_11D3_B2CF_00A0C92A28B4_ DataSource System.Mom.BackwardCompatibility.FilteredEvent.DataProvider Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="ServicesAntigenIMC_StateMonitor_1_Rule" Target="Microsoft.Antigen.v9.Antigen_For_SMTP_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{F82AFB35-D974-41F8-88EC-E2EAC7B64AC5}';MOM2005ComputerGroupID={A1AE2A6F-5844-439E-9063-79258853900A}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_A82B9550_241C_11D3_B2CF_00A0C92A28B4_" Comment="{A82B9550-241C-11D3-B2CF-00A0C92A28B4}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.FilteredEvent.DataProvider">

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>21207</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Microsoft Operations Manager</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <RegExExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[5]</XPathQuery>

              </ValueExpression>

              <Operator>ContainsSubstring</Operator>

              <Pattern>antigenimc</Pattern>

            </RegExExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>50</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>ServicesAntigenIMC StateMonitor</Name>

        <ServerRole>Antigen Server</ServerRole>

        <ServerRoleInstance>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetbiosComputerName$</ServerRoleInstance>

        <Component>Services</Component>

        <ProblemState>1</ProblemState>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

  </WriteActions>

</Rule>