KHI: Windows 叢集服務無法卸載叢集資料庫。伺服器可能需要重新啟動。

_314a0e63_83f3_46f8_9209_d89ee66fdf8f_.RaiseAlert (Rule)

Knowledge Base article:

外部知識來源

如需詳細資訊,請參閱個別主題,位於 Microsoft Exchange Server TechCenter

Element properties:

TargetMicrosoft.SystemCenter.RootManagementServer
CategoryAlert
EnabledTrue
Alert GenerateFalse
RemotableTrue

Member Modules:

ID Module Type TypeId RunAs 
DataSource DataSource Microsoft.SystemCenter.SdkEventProvider Default
ConditionDetection ConditionDetection System.ExpressionFilter Default
WriteAction WriteAction Microsoft.Exchange.2010.GenerateAlertFromSdkEvent Default

Source Code:

<Rule ID="_314a0e63_83f3_46f8_9209_d89ee66fdf8f_.RaiseAlert" Enabled="true" Target="SC!Microsoft.SystemCenter.RootManagementServer" ConfirmDelivery="false">
<Category>Alert</Category>
<DataSources>
<DataSource TypeID="SC!Microsoft.SystemCenter.SdkEventProvider" ID="DataSource"/>
</DataSources>
<ConditionDetection TypeID="System!System.ExpressionFilter" ID="ConditionDetection">
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>500</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">_314a0e63_83f3_46f8_9209_d89ee66fdf8f_</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</ConditionDetection>
<WriteActions>
<WriteAction TypeID="Microsoft.Exchange.2010.GenerateAlertFromSdkEvent" ID="WriteAction">
<Priority>$Data/EventData/CorrelatedContext/RootCause/Priority$</Priority>
<Severity>$Data/EventData/CorrelatedContext/RootCause/Severity$</Severity>
<AlertName>$Data/EventData/CorrelatedContext/RootCause/AlertName$</AlertName>
<AlertDescription>$Data/EventData/CorrelatedContext/DescriptionText$</AlertDescription>
<AlertMessageId>$MPElement[Name="_314a0e63_83f3_46f8_9209_d89ee66fdf8f_.AlertName"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventData/CorrelatedContext/DescriptionText$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/EventNumber$</SuppressionValue>
<SuppressionValue>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</SuppressionValue>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
</Suppression>
<WorkflowId>$MPElement$</WorkflowId>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5>$Data/EventData/CorrelatedContext/RootCause/MonitorType$</Custom5>
<Custom6>$Data/EventData/CorrelatedContext/RootCause/EscalationTeam$</Custom6>
<Custom7>$Data/EventData/CorrelatedContext/RootCause/Actionable$</Custom7>
<Custom8>$Data/EventData/CorrelatedContext/RootCause/Urgent$</Custom8>
<Custom9/>
<Custom10>$Data/EventData/CorrelatedContext/RootCause/ProblemId$</Custom10>
</WriteAction>
</WriteActions>
</Rule>