Avvio servizio

Symantec_Backup_Exec_for_Windows_MPscom2007_IT.Server.ServiceStart (Rule)

Il servizio RPC di Backup Exec è stato avviato.

Knowledge Base article:

Riepilogo

Il servizio RPC di Backup Exec è stato avviato.

Cause

Il sistema ha avviato il servizio di sistema beserver.exe.

Soluzioni

Si tratta di un avviso solo informativo. Non sono richieste altre azioni.

Fonti Knowledge Base esterne

Supporto tecnico di Symantec Backup Exec http://entsupport.symantec.com

Element properties:

Target

Symantec_Backup_Exec_for_Windows_MPscom2007_IT.Server

Category

EventCollection

Enabled

True

Event_ID

57796

Event Source

Backup Exec

Alert Generate

True

Alert Severity

Information

Alert Priority

Low

Remotable

True

Alert Message

Avvio servizio

Il servizio RPC di Backup Exec è stato avviato.

Event Log

Application

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	Microsoft.Windows.EventProvider	Default
Alert	WriteAction	System.Health.GenerateAlert	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default

Source Code:

<Rule ID="Symantec_Backup_Exec_for_Windows_MPscom2007_IT.Server.ServiceStart" Enabled="true" Target="Symantec_Backup_Exec_for_Windows_MPscom2007_IT.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="UnsignedInteger">57796</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value Type="String">Backup Exec</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

    <WriteAction ID="Alert" TypeID="SystemHealth!System.Health.GenerateAlert">

      <Priority>0</Priority>

      <Severity>0</Severity>

      <AlertName>Service Start</AlertName>

      <AlertDescription/>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Symantec_Backup_Exec_for_Windows_MPscom2007_IT.Server.ServiceStart.AlertMessage"]$</AlertMessageId>

      <AlertParameters/>

      <Suppression>

        <SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>

        <SuppressionValue>$Data/Channel$</SuppressionValue>

        <SuppressionValue>$Data/PublisherName$</SuppressionValue>

        <SuppressionValue>$Data/LoggingComputer$</SuppressionValue>

        <SuppressionValue>$Data/EventCategory$</SuppressionValue>

        <SuppressionValue>$Data/EventLevel$</SuppressionValue>

        <SuppressionValue>$Data/UserName$</SuppressionValue>

        <SuppressionValue>$Data/EventNumber$</SuppressionValue>

        <SuppressionValue>$Data/EventDescription$</SuppressionValue>

      </Suppression>

      <Custom1/>

      <Custom2/>

      <Custom3/>

      <Custom4/>

      <Custom5/>

      <Custom6/>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

  </WriteActions>

</Rule>