Populate Silect Sentinel Computers To Monitor Group

Silect.Security.Conformance.Computers.To.Monitor.Group.DiscoveryRule (Discovery)

This discovery rule populates the group 'Silect Sentinel Computers To Monitor Group'

Knowledge Base article:

Summary

This discovery is used to populate a group of computers which are to be assessed by Silect Sentinel for security conformance.

Configuration

The group will automatically be populated with Windows computers where the Notes property contains the string "SilectSentinel". This can be used for automatic population, if desired.

Administrators can also use the Operations Console to manually add individual Windows computers to the group, as desired.

Element properties:

Target	Silect.Security.Conformance.Computers.To.Monitor.Group
Enabled	True
Remotable	False

Object Discovery Details:

Discovered relationships and their attribuets:
Microsoft.SystemCenter.InstanceGroupContainsEntities

Member Modules:

ID	Module Type	TypeId	RunAs
GroupPopulationDataSource	DataSource	Microsoft.SystemCenter.GroupPopulator	Default

Source Code:

<Discovery ID="Silect.Security.Conformance.Computers.To.Monitor.Group.DiscoveryRule" Enabled="true" Target="Silect.Security.Conformance.Computers.To.Monitor.Group" ConfirmDelivery="false" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryRelationship TypeID="SCIGL!Microsoft.SystemCenter.InstanceGroupContainsEntities"/>

  </DiscoveryTypes>

  <DataSource ID="GroupPopulationDataSource" TypeID="SC!Microsoft.SystemCenter.GroupPopulator">

    <RuleId>$MPElement$</RuleId>

    <GroupInstanceId>$MPElement[Name="Silect.Security.Conformance.Computers.To.Monitor.Group"]$</GroupInstanceId>

    <MembershipRules>

      <MembershipRule>

        <MonitoringClass>$MPElement[Name="Windows!Microsoft.Windows.Computer"]$</MonitoringClass>

        <RelationshipClass>$MPElement[Name="SCIGL!Microsoft.SystemCenter.InstanceGroupContainsEntities"]$</RelationshipClass>

        <Expression>

          <RegExExpression>

            <ValueExpression>

              <Property>$MPElement[Name="System!System.ConfigItem"]/Notes$</Property>

            </ValueExpression>

            <Operator>ContainsSubstring</Operator>

            <Pattern>SilectSentinel</Pattern>

          </RegExExpression>

        </Expression>

      </MembershipRule>

    </MembershipRules>

  </DataSource>

</Discovery>