Ereignisüberwachung – "Korreliertes Ereignis" mit Ereignis

System.ApplicationLog.IISLog.CorrelatedEventSingleEvent2StateMonitorType (UnitMonitorType)

Überwachung mit zwei Zuständen, mit korreliertem und regelmäßigem Ereignis verknüpfen.

Element properties:

Member Modules:

Overrideable Parameters:

Source Code:

<UnitMonitorType ID="System.ApplicationLog.IISLog.CorrelatedEventSingleEvent2StateMonitorType" Accessibility="Public">

  <MonitorTypeStates>

    <MonitorTypeState ID="CorrelatedEventRaised"/>

    <MonitorTypeState ID="EventRaised"/>

  </MonitorTypeStates>

  <Configuration>

    <IncludeSchemaTypes>

      <SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>

    </IncludeSchemaTypes>

    <xsd:element name="LogFileDirectory" type="xsd:string"/>

    <xsd:element name="LogFilePattern" type="xsd:string"/>

    <xsd:element name="LogIsUTF8" type="xsd:string"/>

    <xsd:element name="LocalizedDates" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element name="Expression" type="ExpressionType"/>

    <xsd:element name="FirstCorrelatedLogFileDirectory" type="xsd:string"/>

    <xsd:element name="FirstCorrelatedLogFilePattern" type="xsd:string"/>

    <xsd:element name="FirstCorrelatedLogIsUTF8" type="xsd:string"/>

    <xsd:element name="FirstCorrelatedLocalizedDates" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element name="FirstCorrelatedExpression" type="ExpressionType"/>

    <xsd:element name="SecondCorrelatedLogFileDirectory" type="xsd:string"/>

    <xsd:element name="SecondCorrelatedLogFilePattern" type="xsd:string"/>

    <xsd:element name="SecondCorrelatedLogIsUTF8" type="xsd:string"/>

    <xsd:element name="SecondCorrelatedLocalizedDates" type="xsd:string" minOccurs="0" maxOccurs="1"/>

    <xsd:element name="SecondCorrelatedExpression" type="ExpressionType"/>

    <xsd:element name="Correlator" type="CorrelatorType"/>

  </Configuration>

  <OverrideableParameters>

    <OverrideableParameter ID="LocalizedDates" Selector="$Config/LocalizedDates$" ParameterType="string"/>

    <OverrideableParameter ID="FirstCorrelatedLocalizedDates" Selector="$Config/FirstCorrelatedLocalizedDates$" ParameterType="string"/>

    <OverrideableParameter ID="SecondCorrelatedLocalizedDates" Selector="$Config/SecondCorrelatedLocalizedDates$" ParameterType="string"/>

  </OverrideableParameters>

  <MonitorImplementation>

    <MemberModules>

      <DataSource TypeID="System.ApplicationLog.IISLogReader" ID="DataSource">

        <LogFileDirectory>$Config/LogFileDirectory$</LogFileDirectory>

        <LogFilePattern>$Config/LogFilePattern$</LogFilePattern>

        <LogIsUTF8>$Config/LogIsUTF8$</LogIsUTF8>

        <LocalizedDates>$Config/LocalizedDates$</LocalizedDates>

      </DataSource>

      <DataSource TypeID="System.ApplicationLog.IISLogReader" ID="FirstCorrelatedDataSource">

        <LogFileDirectory>$Config/FirstCorrelatedLogFileDirectory$</LogFileDirectory>

        <LogFilePattern>$Config/FirstCorrelatedLogFilePattern$</LogFilePattern>

        <LogIsUTF8>$Config/FirstCorrelatedLogIsUTF8$</LogIsUTF8>

        <LocalizedDates>$Config/FirstCorrelatedLocalizedDates$</LocalizedDates>

      </DataSource>

      <DataSource TypeID="System.ApplicationLog.IISLogReader" ID="SecondCorrelatedDataSource">

        <LogFileDirectory>$Config/SecondCorrelatedLogFileDirectory$</LogFileDirectory>

        <LogFilePattern>$Config/SecondCorrelatedLogFilePattern$</LogFilePattern>

        <LogIsUTF8>$Config/SecondCorrelatedLogIsUTF8$</LogIsUTF8>

        <LocalizedDates>$Config/SecondCorrelatedLocalizedDates$</LocalizedDates>

      </DataSource>

      <ConditionDetection TypeID="System!System.ExpressionFilter" ID="FilterCondition">

        <Expression>$Config/Expression$</Expression>

      </ConditionDetection>

      <ConditionDetection TypeID="System!System.ExpressionFilter" ID="FirstCorrelatedFilterCondition">

        <Expression>$Config/FirstCorrelatedExpression$</Expression>

      </ConditionDetection>

      <ConditionDetection TypeID="System!System.ExpressionFilter" ID="SecondCorrelatedFilterCondition">

        <Expression>$Config/SecondCorrelatedExpression$</Expression>

      </ConditionDetection>

      <ConditionDetection TypeID="System!System.CorrelatorAutoCondition" ID="CorrelatedDataCondition">

        <Correlator>$Config/Correlator$</Correlator>

      </ConditionDetection>

    </MemberModules>

    <RegularDetections>

      <RegularDetection MonitorTypeStateID="CorrelatedEventRaised">

        <Node ID="CorrelatedDataCondition">

          <Node ID="FirstCorrelatedFilterCondition">

            <Node ID="FirstCorrelatedDataSource"/>

          </Node>

          <Node ID="SecondCorrelatedFilterCondition">

            <Node ID="SecondCorrelatedDataSource"/>

          </Node>

        </Node>

      </RegularDetection>

      <RegularDetection MonitorTypeStateID="EventRaised">

        <Node ID="FilterCondition">

          <Node ID="DataSource"/>

        </Node>

      </RegularDetection>

    </RegularDetections>

  </MonitorImplementation>

</UnitMonitorType>