| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Collect Alert Change Subscription Data | This rule collects all alert change data in the system and pushes them to the cloud | Microsoft.SystemCenter.CollectAlertChangeDataToCloud | Microsoft.SystemCenter.Advisor.Settings | Alert | False | | | 0 | 0 | | False | | | True | |
| Collect Diagnostics Information To Cloud | | Microsoft.SystemCenter.CollectDiagnosticsInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Collect Etw Event Data | This rule collects Etw event data and pushes them to the cloud | Microsoft.SystemCenter.CollectEtwEventCollectionDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Collect Firewall Data | This rule collects firewall data and pushes them to the cloud | Microsoft.SystemCenter.CollectFirewallLogDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Collect Flow Data | This rule collects flow data and pushes them to the cloud | Microsoft.SystemCenter.CollectFlowDataToCloud | Microsoft.SystemCenter.HealthService | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
| Collect Generic Events | This rule collects all event data in the system and pushes them to the cloud | Microsoft.SystemCenter.CollectGenericEventDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Collect Generic Events | This rule collects all event data in the system and pushes them to the cloud | Microsoft.SystemCenter.CollectGenericEventDataToCloud_SDRS | Microsoft.SystemCenter.HealthService | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Collect High Volume Direct Channel Events | This rule collects high volume event data in the system and pushes them directly to the cloud | Microsoft.SystemCenter.CollectHighVolumeDirectChannelEventDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Collect High Volume Events | This rule collects high volume event data in the system and pushes them to the cloud | Microsoft.SystemCenter.CollectHighVolumeEventDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | True | | | 0 | 0 | | False | | | True | |
| Collect Performance Data | This rule collects all performance data in the system and pushes them to the cloud | Microsoft.SystemCenter.CollectPerformanceDataToCloud | Microsoft.SystemCenter.HealthService | PerformanceCollection | True | | | 0 | 0 | | False | | | True | |
| Collect Performance Data | This rule collects all performance data in the system and pushes them to the cloud | Microsoft.SystemCenter.CollectPerformanceDataToCloud_SDRS | Microsoft.SystemCenter.HealthService | PerformanceCollection | True | | | 0 | 0 | | False | | | True | |
| Collect Sysmon Events | This rule collects high volume Sysmon events and pushes them directly to the cloud | Microsoft.SystemCenter.CollectSysmonChannelEventDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectUpdatesSummaryToCloud | | Microsoft.SystemCenter.CollectUpdatesSummaryToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectUpdateRunProgressToCloud | | Microsoft.SystemCenter.CollectUpdateRunProgressToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectUpdatesCompletedToCloud | | Microsoft.SystemCenter.CollectUpdatesCompletedToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectFileUploadNotifyToCloud | | Microsoft.SystemCenter.CollectFileUploadNotifyToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectContainerImageInformationToCloud | | Microsoft.SystemCenter.CollectContainerImageInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectContainerInventoryInformationToCloud | | Microsoft.SystemCenter.CollectContainerInventoryInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectContainerEventInformationToCloud | | Microsoft.SystemCenter.CollectContainerEventInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectContainerLogInformationToCloud | | Microsoft.SystemCenter.CollectContainerLogInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectUpdateSnapshotInformationToCloud | | Microsoft.SystemCenter.CollectUpdateSnapshotInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectGenericAssessmentsToCloud | | Microsoft.SystemCenter.CollectGenericAssessmentsToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSCOMAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectSCOMAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectExchangeAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectExchangeAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSfBAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectSfBAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectADSecurityAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectADSecurityAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSCCMAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectSCCMAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectADAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectADAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectADReplicationDataToCloud | | Microsoft.SystemCenter.CollectADReplicationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSPAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectSPAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSQLAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectSQLAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectIISAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectIISAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectWindowsClientAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectWindowsClientAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectExchangeOnlineAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectExchangeOnlineAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | False | |
| Microsoft.SystemCenter.CollectSfBOnlineAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectSfBOnlineAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | False | |
| Microsoft.SystemCenter.CollectWindowsServerAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectWindowsServerAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSharePointOnlineAssessmentRecommendationDataToCloud | | Microsoft.SystemCenter.CollectSharePointOnlineAssessmentRecommendationDataToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | False | |
| Microsoft.SystemCenter.CollectBaselineDataToCloud | | Microsoft.SystemCenter.CollectBaselineDataToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSqlThreatDetectionLoginEventToCloud | | Microsoft.SystemCenter.CollectSqlThreatDetectionLoginEventToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectBaselineSummaryDataToCloud | | Microsoft.SystemCenter.CollectBaselineSummaryDataToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSQLQueryPerformanceDataToCloud | | Microsoft.SystemCenter.CollectSQLQueryPerformanceDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectUpdatePendingActionToCloud | | Microsoft.SystemCenter.CollectUpdatePendingActionToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectAntiMalwareInformationToCloud | | Microsoft.SystemCenter.CollectAntiMalwareInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectWireDataInformationToCloud | | Microsoft.SystemCenter.CollectWireDataInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectApplicationDependencyMonitorInformationToCloud | | Microsoft.SystemCenter.CollectApplicationDependencyMonitorInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectNetworkMonitoringInformationToCloud | | Microsoft.SystemCenter.CollectNetworkMonitoringInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectDnsZonesRecordInformationToCloud | | Microsoft.SystemCenter.CollectDnsZonesRecordInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectOnStampTipInformationToCloud | | Microsoft.SystemCenter.CollectOnStampTipInformationToCloud | Microsoft.SystemCenter.ManagementServer | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectOperationData | | Microsoft.SystemCenter.CollectOperationData | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectComputerGroupsInformationToCloud | | Microsoft.SystemCenter.CollectComputerGroupsInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectGroupsInformationToCloud | | Microsoft.SystemCenter.CollectGroupsInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectChangeTrackingInformationToCloud | | Microsoft.SystemCenter.CollectChangeTrackingInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectChangeTrackingServicesInformationToCloud | | Microsoft.SystemCenter.CollectChangeTrackingServicesInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectChangeTrackingServiceInventoryInformationToCloud | | Microsoft.SystemCenter.CollectChangeTrackingServiceInventoryInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectUpdatesSetupEventLogInformationToCloud | | Microsoft.SystemCenter.CollectUpdatesSetupEventLogInformationToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectHighVolumeATAEventsDataToCloud | | Microsoft.SystemCenter.CollectHighVolumeATAEventsDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectATASyslogSuspiciousActivitiesDataToCloud | | Microsoft.SystemCenter.CollectATASyslogSuspiciousActivitiesDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectATASyslogMonitoringAlertsDataToCloud | | Microsoft.SystemCenter.CollectATASyslogMonitoringAlertsDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectWEFDataToCloud | | Microsoft.SystemCenter.CollectWEFDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectThreatDetectionEventDataToCloud | | Microsoft.SystemCenter.CollectThreatDetectionEventDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectAuditPolicyToCloud | | Microsoft.SystemCenter.CollectAuditPolicyToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectDirectChannelGenericEventDataToCloud | | Microsoft.SystemCenter.CollectDirectChannelGenericEventDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectContainerPerformanceDataToCloud_PerfIP | | Microsoft.SystemCenter.CollectContainerPerformanceDataToCloud_PerfIP | Microsoft.SystemCenter.HealthService | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectPerformanceDataToCloud_PerfIP | | Microsoft.SystemCenter.CollectPerformanceDataToCloud_PerfIP | Microsoft.SystemCenter.HealthService | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectPerformanceAggregatedDataToCloud_PerfIP | | Microsoft.SystemCenter.CollectPerformanceAggregatedDataToCloud_PerfIP | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectSurfaceHubEtwEventCollectionDataToCloud | | Microsoft.SystemCenter.CollectSurfaceHubEtwEventCollectionDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectDnsEtwEventCollectionDataToCloud | | Microsoft.SystemCenter.CollectDnsEtwEventCollectionDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectDnsAuditEventsCollectionDataToCloud | | Microsoft.SystemCenter.CollectDnsAuditEventsCollectionDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectDynamicDnsEventsCollectionDataToCloud | | Microsoft.SystemCenter.CollectDynamicDnsEventsCollectionDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectWindowsDefenderATPDataToCloud | | Microsoft.SystemCenter.CollectWindowsDefenderATPDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectHealthStateChangeDataToCloud | | Microsoft.SystemCenter.CollectHealthStateChangeDataToCloud | Microsoft.SystemCenter.Advisor.Settings | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectHealthAssessmentToCloudDirect | | Microsoft.SystemCenter.CollectHealthAssessmentToCloudDirect | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectHealthAssessmentToCloudViaSCOMServer | | Microsoft.SystemCenter.CollectHealthAssessmentToCloudViaSCOMServer | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.ProcessInvestigatorResultsToOds | | Microsoft.SystemCenter.ProcessInvestigatorResultsToOds | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectPublishedWLMDiscoveryDataToCloud | | Microsoft.SystemCenter.CollectPublishedWLMDiscoveryDataToCloud | Microsoft.SystemCenter.HealthService | System | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectPublishedWLMEntityHealthStateChangeDataToCloud | | Microsoft.SystemCenter.CollectPublishedWLMEntityHealthStateChangeDataToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | False | |
| Microsoft.SystemCenter.CollectPublishedWLMEventDataToCloud | | Microsoft.SystemCenter.CollectPublishedWLMEventDataToCloud | Microsoft.SystemCenter.HealthService | EventCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectPublishedWLMPerformanceDataToCloud | | Microsoft.SystemCenter.CollectPublishedWLMPerformanceDataToCloud | Microsoft.SystemCenter.HealthService | Custom | True | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectVMMetadataToCloud | | Microsoft.SystemCenter.CollectVMMetadataToCloud | Microsoft.SystemCenter.HealthService | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
| Microsoft.SystemCenter.CollectWlmAlertsToCloud | | Microsoft.SystemCenter.CollectWlmAlertsToCloud | Microsoft.SystemCenter.HealthService | Custom | False | | | 0 | 0 | | False | | | True | |