| | DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
|---|
 | Rule for event collection - DHCP database backup | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.BackupPathFail | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1061 | | False | | | True | System |
| Rule for event collection - Database clean up | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.CleanupComplete | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Rule for event collection - Database clean up started | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.CleanupStarted | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1037 | | False | | | True | System |
| Rule for event collection - Database conversion in progress | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.ConversionInProgress | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1023 | | False | | | True | System |
| Rule for event collection - Database conversion | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.ConversionRequired | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1022 | | False | | | True | System |
| Rule for event collection - Failure of database backup | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.DatabaseBackupFail | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1016 | | False | | | True | System |
| Rule for event collection - DHCP database cleanup | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.DBCleanup | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1010 | | False | | | True | System |
| Rule for event collection - Failure in loading of database | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.DBLoadFail | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1021 | | False | | | True | System |
| Rule for event collection - Database path failure | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.DBPathFail | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1062 | | False | | | True | System |
| Rule for event collection - Database initialization failure | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.InitFail | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1004 | | False | | | True | System |
| Rule for event collection - Jet database errors | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.JetErrors | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1014 | | False | | | True | System |
| Rule for event collection - Jet database warnings | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.JetWarnings | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1015 | | False | | | True | System |
| Rule for event collection - Database restoration completed | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.RestoreCompleted | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1057 | | False | | | True | System |
| Rule for event collection - Database restoration failure | | Microsoft.Windows.2008R2.DHCP.Server.Database.Collect.RestoreFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1018 | | False | | | True | System |
| Rule for event collection - DHCP audit Log append Failure | This rule reports when DHCP cannot append to the audit log | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.AuditLogAppendFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1027 | | False | | | True | System |
| Rule for event collection - DHCP audit log initialization failure | This rule reports when DHCP cannot initialize the audit log | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.AuditLogInitFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1028 | | False | | | True | System |
| Rule for event collection - DHCP audit log move failure | This rule reports when DHCP cannot move the audit log | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.AuditLogMoveFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1030 | | False | | | True | System |
| Rule for event collection - DHCP authorized and started | This rule reports when DHCP is authorized and started and is servicing clients | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.AuthorizedAndStarted | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1043 | | False | | | True | System |
| Rule for event collection - DHCP bad audit path | This rule reports when DHCP is unable to access the audit file path | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.BadAuditPath | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1060 | | False | | | True | System |
| Rule for event collection - DHCP BOOTP file table read failure | This rule reports when DHCP cannot read the DHCP BOOTP file table from the registry | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.BOOTPFileFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1025 | | False | | | True | System |
| Rule for event collection - DHCP Callout Load Exception | This rule reports the installed callout .dll file causes an exception | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.CalloutLoadException | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1032 | | False | | | True | System |
| Rule for event collection - DHCP Callout Load Failure | This rule reports when DHCP fails to load a callout .dll | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.CalloutLoadFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1034 | | False | | | True | System |
| Rule for event collection - success of callout dll | | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.CalloutLoadSuccess | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1033 | | False | | | True | System |
| Rule for event collection - Client Cleanup | This rule reports when an error occurs cleaning up pending client records | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.ClientCleanup | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1009 | | False | | | True | System |
| Rule for event collection - DHCP Registry Configuration Backup Error | This rule reports when an error occurs backing up the registry | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.ConfigBackup | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1017 | | False | | | True | System |
| Rule for event collection - DHCP Local Users Group Failure | This rule reports when DHCP cannot create or read the DHCP local users group | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DHCPLocalGroupFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1035 | | False | | | True | System |
| Rule for event collection - DHCP Domain Authorized | This rule reports when DHCP is authorized in the domain | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DomainAuthorized | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1067 | | False | | | True | System |
| Rule for event collection - DHCP Domain Authorized And Started | This rule reports when DHCP is authorized in the domain and is servicing clients | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DomainAuthorizedAndStarted | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1044 | | False | | | True | System |
| Rule for event collection - DHCP Cannot Locate Domain | This rule reports when DHCP cannot locate the domain | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DomainError | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1049 | | False | | | True | System |
| Rule for event collection - DHCP Domain Not Authorized | This rule reports when DHCP is not authorized in the domain | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DomainNotAuthorized | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1046 | | False | | | True | System |
| Rule for event collection - DHCP Domain Unauthorized | This rule reports when DHCP is not authorized in the domain | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DomainUnauthorized | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1066 | | False | | | True | System |
| Rule for event collection - DHCP Domain Authorization Unchecked | This rule reports when DHCP has not determined domain authorization | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DomainUnchecked | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1068 | | False | | | True | System |
| Rule for event collection - DHCP Domain Recently Upgraded | This rules reports when DHCP was recently upgraded and domain authorized to start | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DomainUpgraded | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1048 | | False | | | True | System |
| Rule for event collection - DHCP Failed To Locate a DC | This rule reports when DHCP could not contact a domain controller | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DSFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1059 | | False | | | True | System |
| Rule for event collection - DHCP Dynamic Address Detected | This rule reports when DHCP detects a dynamic IP address | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.DynamicAddress | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1144 | | False | | | True | System |
| Rule for event collection - DHCP BOOTP Global Filename Read Failure | This rule reports when DHCP failed to read the global BOOTP filename from the registry | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.GlobalBOOTPFileNameFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1026 | | False | | | True | System |
| Rule for event collection - DHCP Configuration Initialization Failure | This rule reports when DHCP fails to initialize its configuration parameters | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.InitFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1058 | | False | | | True | System |
| Rule for event collection - DHCP Interface Notification Failed | This rule reports when DHCP detects an interface notification problem | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.InterfaceNotificationFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 20035 | | False | | | True | System |
| Rule for event collection - network failure | | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.NetworkFailure | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1050 | | False | | | True | System |
| Rule for event collection - DHCP Other Server Detected | This rule reports when this DHCP workgroup server detects a domain server | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.OtherServer | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1052 | | False | | | True | System |
| Rule for event collection - DHCP Ping Failure | This rule reports when DHCP was unable to ping for a new address | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.PingFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1029 | | False | | | True | System |
| Rule for event collection - DHCP Registry Restore Failure | This rule reports when an error occurs restoring the DHCP registry configuration | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.RegistryRestoreFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1019 | | False | | | True | System |
| Rule for event collection - Rogue DHCP Server Detected | This rule reports when DHCP detects an unauthorized DHCP server on the same network | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.RogueServerDetected | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1042 | | False | | | True | System |
| Rule for event collection - DHCP Recently Upgraded | This rule reports when DHCP was recently upgraded and authorized to start | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.Upgraded | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1047 | | False | | | True | System |
| Rule for event collection - Winsock Failed | This rule reports when winsock initialization fails | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.Collect.WinsockFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1005 | | False | | | True | System |
| Rule for event collection - DHCP Callout Failure | This rule reports when an exception occurs calling out to the installed callout .dll file | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.CollectCalloutFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1031 | | False | | | True | System |
| Rule for event collection - DHCP Not Authorized | This rule reports when the server is not authorized to start | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.CollectNotAuthorized | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1045 | | False | | | True | System |
| Rule for event collection - DHCP Unauthorized | This rule reports when DHCP is unauthorized | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.CollectUnauthorized | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1051 | | False | | | True | System |
| Rule for event collection - Incorrect DNS Credentials | This rule reports when DHCP cannot use the credentials provided for DNS registrations | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.CollectWrongDNSCreds | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1055 | | False | | | True | System |
| Rule for event collection - No DNS Credentials on DC | This rule reports when DHCP is running on a domain controller but does not have specific credentials for registering DNS information | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.NoCredsOnDC | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1056 | | False | | | True | System |
| Rule for event collection - SBS DHCP Detected Other DHCP Server | This rule reports when an SBS DHCP server detects another DHCP server | Microsoft.Windows.2008R2.DHCP.Server.IPv4Runtime.SBSOtherServer | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1053 | | False | | | True | System |
| Rule for event collection - IPv6 | | Microsoft.Windows.2008R2.DHCP.Server.IPv6Runtime.CollectEvents | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Rule for event collection - IPv6 Scope | | Microsoft.Windows.2008R2.DHCP.Server.IPv6Scope.CollectEvents | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Rule for event collection - NAP IAS Helper Connect Failure | | Microsoft.Windows.2008R2.DHCP.Server.NAP.Collect.IASHelperConnectFailure | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Rule for event collection - DDNS Update request events | This rule reports when an DDNS update is requested | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.DDNSUpdateRequest | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1136 | | False | | | True | System |
| Rule for event collection - DDNS Update Successful | This rule reports when a DDNS update successfully completes | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.DDNSUpdateSuccess | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1138 | | False | | | True | System |
| Rule for event collection - DHCP Initialized and Ready | This rule reports when DHCP is ready to service clients | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.DHCPInitialized | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1024 | | False | | | True | System |
| Rule for event collection - DHCP not bound to static IP address | The DHCP service is not servicing any clients because none of the active network interfaces have statically configured IP addresses, or there are no active interfaces. | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.DHCPNotBoundToStaticIPAddress | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Rule for event collection - Init Data Failed Events | This rule reports when DHCP is unable to initialize its global parameters | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.InitDataFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1002 | | False | | | True | System |
| Rule for event collection - Init Registry Failed | This rule reports when the DHCP server failed to initialize its registry parameters | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.InitRegistryFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1003 | | False | | | True | System |
| Rule for event collection - Registration Failure | This rule reports when the DHCP service could not register with the Service Controller | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.RegistrationFailure | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1001 | | False | | | True | System |
| Rule for event collection - Init RPC Failed | This rule reports when the DHCP server failed to start as a RPC server | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.RPCFail | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1006 | | False | | | True | System |
| Rule for event collection - Script Trace | | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.ScriptTraceEvents | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | Health Service Script | False | | | True | Operations Manager |
| Rule for event collection - Winsock Failed | This rule reports when the DHCP server failed to initialize its Winsock data | Microsoft.Windows.2008R2.DHCP.Server.Role.Collect.WinsockFailed | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1007 | | False | | | True | System |
| Rule for performance collection - DHCP Acks Per Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.AcksPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Acks/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Active Queue Length | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.ActiveQueueLength | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Active Queue Length | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Conflict Check Queue Length | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.ConflictCheckQueueLength | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Conflict Check Queue Length | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Declines / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.DeclinesPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Declines/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Denied due to match | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.Deniedduetomatch | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Denied due to match. | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Denied Due To Non Match | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.DeniedDueToNonMatch | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Denied due to nonmatch. | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Discovers / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.DiscoversPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Discovers/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Duplicates Dropped / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.DuplicatesDroppedPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Duplicates Dropped/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Informs / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.InformsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Informs/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Average Milliseconds / Packet | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.MillisecondsPerPacketAvg | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Milliseconds per packet (Avg). | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Nacks / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.NacksPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Nacks/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Offer Queue Length | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.OfferQueueLength | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Offer Queue Length | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Offers / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.OffersPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Offers/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Packets Expired / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.PacketsExpiredPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Packets Expired/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Packets Received / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.PacketsReceivedPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Packets Received/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Releases / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.ReleasesPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Releases/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCP Requests / Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.RequestsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server | Requests/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 Acks Per Second | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.AcksPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Acks/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 ActiveQueueLength | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.ActiveQueueLength | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Active Queue Length | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 AdvertisesPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.AdvertisesPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Advertises/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 ConfirmsPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.ConfirmsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Confirms/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 DeclinesPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.DeclinesPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Declines/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 DuplicatesDroppedSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.DuplicatesDroppedSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Duplicates Dropped/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 InformsPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.InformsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Informs/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 MillisecondsPerPacketAvg | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.MillisecondsPerPacketAvg | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Milliseconds per packet(Avg). | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 PacketsExpiredPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.PacketsExpiredPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Packets Expired/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 PacketsReceivedPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.PacketsReceivedPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Packets Received/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 RebindsPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.RebindsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Rebinds/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 ReleasesPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.ReleasesPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Releases/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 RenewsPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.RenewsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Renews/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 RequestsPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.RequestsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Requests/sec | 300 | 0 | | False | | | True | |
| Rule for performance collection - DHCPv6 SolicitsPerSecond | | Microsoft.Windows.2008R2.DHCP.Server.Role.PerformanceCollection.V6.SolicitsPerSecond | Microsoft.Windows.2008R2.DHCP.Server.Role | PerformanceCollection | True | DHCP Server v6 | Solicits/sec | 300 | 0 | | False | | | True | |
| Rule for event collection - Service Initialization | | Microsoft.Windows.2008R2.DHCP.Server.Role.ServiceInitialized | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 10019 | | False | | | True | System |
| Rule for event collection - DHCP server configuration changes | DHCP activity logging, allows DHCP Administrators to monitor the configuration changes of the DHCP Servers. DHCP Administrators would use this feature for network security / IT compliance auditing purposes. | Microsoft.Windows.2008R2.DHCP.Server.Rule.ActivityLogging | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | Microsoft-Windows-Dhcp-Server/Operational |
| Rule for event collection - Scope with delay configuration | This rule is to collect all the events pertaining to delayed offer configuration on scope. | Microsoft.Windows.2008R2.DHCP.Server.Rule.DelayOffer | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Rule for event collection - Link Layer based filtering | Rule to collect all the event pertaining to Link Layer based filtering. | Microsoft.Windows.2008R2.DHCP.Server.Rule.LinkLayerFiltering | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | Microsoft-Windows-Dhcp-Server/FilterNotifications |
| Rule for event collection - Name Protection feature | This rule is to collect event specific to Name Protection feature. | Microsoft.Windows.2008R2.DHCP.Server.Rule.NameProtection | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Rule for event collection - .Lease Declined | | Microsoft.Windows.2008R2.DHCP.Server.Scope.Collect.LeaseDeclined | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1012 | | False | | | True | System |
| Rule for event collection - IPv4 Low Address Warning | This rule reports all IPv4 scopes that are running low on available leases | Microsoft.Windows.2008R2.DHCP.Server.Scope.Collect.LowAddressWarning | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1014 | | False | | | True | System |
| Rule for event collection - IPv4 NACK Issued | This rule reports all IPv4 NACKS issued by the DHCP server | Microsoft.Windows.2008R2.DHCP.Server.Scope.Collect.NACKIssued | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1011 | | False | | | True | System |
| Rule for event collection - IPv4 Scope Full | This rule reports on all IPv4 scopes that are out of available leases | Microsoft.Windows.2008R2.DHCP.Server.Scope.Collect.ScopeFull | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1063 | | False | | | True | System |
| Rule for event collection - Unknown IPv4 Option Events | This rule reports all IPv4 DHCP client requests that contained a request for an unknown DHCP option | Microsoft.Windows.2008R2.DHCP.Server.Scope.Collect.UnknownOption | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1000 | | False | | | True | System |
| Rule for event collection - IPv4 Boot Full | This rule reports all IPv4 BOOTP requests that could not be filled due to lack of available addresses | Microsoft.Windows.2008R2.DHCP.Server.Scope.CollectBOOTPFull | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1064 | | False | | | True | System |
| Rule for event collection - IPv4 Released Leases | This rule reports all released IPv4 leases | Microsoft.Windows.2008R2.DHCP.Server.Scope.CollectLeaseRelease | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1013 | | False | | | True | System |
| Rule for event collection - Orphaned Entries Deleted | This rule reports when there are orphaned entries deleted in the configuration due to the deletion of a class or option definition | Microsoft.Windows.2008R2.DHCP.Server.Scope.CollectOrphanedEntriesDeleted | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 1065 | | False | | | True | System |
| Rule for event collection - DHCP Server service | | Microsoft.Windows.2008R2.DHCP.Server.System | Microsoft.Windows.2008R2.DHCP.Server.Role | EventCollection | True | | | 0 | 0 | | False | | | True | System |
Home