Event Monitor - Missing Correlated event with Event
System.ApplicationLog.IISLog.MissingCorrelatedEventSingleEvent2StateMonitorType (UnitMonitorType)
Two states monitor, associate to missing correlated and regular events.
Element properties:
Member Modules:
Overrideable Parameters:
Source Code:
<UnitMonitorType ID="System.ApplicationLog.IISLog.MissingCorrelatedEventSingleEvent2StateMonitorType" Accessibility="Public">
<MonitorTypeStates>
<MonitorTypeState ID="MissingCorrelatedEventRaised"/>
<MonitorTypeState ID="EventRaised"/>
</MonitorTypeStates>
<Configuration>
<IncludeSchemaTypes>
<SchemaType>System!System.ExpressionEvaluatorSchema</SchemaType>
</IncludeSchemaTypes>
<xsd:element name="LogFileDirectory" type="xsd:string"/>
<xsd:element name="LogFilePattern" type="xsd:string"/>
<xsd:element name="LogIsUTF8" type="xsd:string"/>
<xsd:element name="LocalizedDates" type="xsd:string" minOccurs="0" maxOccurs="1"/>
<xsd:element name="Expression" type="ExpressionType"/>
<xsd:element name="FirstMissingCorrelatedLogFileDirectory" type="xsd:string"/>
<xsd:element name="FirstMissingCorrelatedLogFilePattern" type="xsd:string"/>
<xsd:element name="FirstMissingCorrelatedLogIsUTF8" type="xsd:string"/>
<xsd:element name="FirstMissingCorrelatedLocalizedDates" type="xsd:string" minOccurs="0" maxOccurs="1"/>
<xsd:element name="FirstMissingCorrelatedExpression" type="ExpressionType"/>
<xsd:element name="SecondMissingCorrelatedLogFileDirectory" type="xsd:string"/>
<xsd:element name="SecondMissingCorrelatedLogFilePattern" type="xsd:string"/>
<xsd:element name="SecondMissingCorrelatedLogIsUTF8" type="xsd:string"/>
<xsd:element name="SecondMissingCorrelatedLocalizedDates" type="xsd:string" minOccurs="0" maxOccurs="1"/>
<xsd:element name="SecondMissingCorrelatedExpression" type="ExpressionType"/>
<xsd:element name="Correlator" type="CorrelatorType"/>
</Configuration>
<OverrideableParameters>
<OverrideableParameter ID="LocalizedDates" Selector="$Config/LocalizedDates$" ParameterType="string"/>
<OverrideableParameter ID="FirstMissingCorrelatedLocalizedDates" Selector="$Config/FirstMissingCorrelatedLocalizedDates$" ParameterType="string"/>
<OverrideableParameter ID="SecondMissingCorrelatedLocalizedDates" Selector="$Config/SecondMissingCorrelatedLocalizedDates$" ParameterType="string"/>
</OverrideableParameters>
<MonitorImplementation>
<MemberModules>
<DataSource TypeID="System.ApplicationLog.IISLogReader" ID="DataSource">
<LogFileDirectory>$Config/LogFileDirectory$</LogFileDirectory>
<LogFilePattern>$Config/LogFilePattern$</LogFilePattern>
<LogIsUTF8>$Config/LogIsUTF8$</LogIsUTF8>
<LocalizedDates>$Config/LocalizedDates$</LocalizedDates>
</DataSource>
<DataSource TypeID="System.ApplicationLog.IISLogReader" ID="FirstMissingCorrelatedDataSource">
<LogFileDirectory>$Config/FirstMissingCorrelatedLogFileDirectory$</LogFileDirectory>
<LogFilePattern>$Config/FirstMissingCorrelatedLogFilePattern$</LogFilePattern>
<LogIsUTF8>$Config/FirstMissingCorrelatedLogIsUTF8$</LogIsUTF8>
<LocalizedDates>$Config/FirstMissingCorrelatedLocalizedDates$</LocalizedDates>
</DataSource>
<DataSource TypeID="System.ApplicationLog.IISLogReader" ID="SecondMissingCorrelatedDataSource">
<LogFileDirectory>$Config/SecondMissingCorrelatedLogFileDirectory$</LogFileDirectory>
<LogFilePattern>$Config/SecondMissingCorrelatedLogFilePattern$</LogFilePattern>
<LogIsUTF8>$Config/SecondMissingCorrelatedLogIsUTF8$</LogIsUTF8>
<LocalizedDates>$Config/SecondMissingCorrelatedLocalizedDates$</LocalizedDates>
</DataSource>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="FilterCondition">
<Expression>$Config/Expression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="FirstMissingCorrelatedFilterCondition">
<Expression>$Config/FirstMissingCorrelatedExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="SecondMissingCorrelatedFilterCondition">
<Expression>$Config/SecondMissingCorrelatedExpression$</Expression>
</ConditionDetection>
<ConditionDetection TypeID="System!System.CorrelatorAutoMissingCondition" ID="MissingCorrelatedDataCondition">
<Correlator>$Config/Correlator$</Correlator>
</ConditionDetection>
</MemberModules>
<RegularDetections>
<RegularDetection MonitorTypeStateID="MissingCorrelatedEventRaised">
<Node ID="MissingCorrelatedDataCondition">
<Node ID="FirstMissingCorrelatedFilterCondition">
<Node ID="FirstMissingCorrelatedDataSource"/>
</Node>
<Node ID="SecondMissingCorrelatedFilterCondition">
<Node ID="SecondMissingCorrelatedDataSource"/>
</Node>
</Node>
</RegularDetection>
<RegularDetection MonitorTypeStateID="EventRaised">
<Node ID="FilterCondition">
<Node ID="DataSource"/>
</Node>
</RegularDetection>
</RegularDetections>
</MonitorImplementation>
</UnitMonitorType>