All Rules in Microsoft.Windows.Client.Win10.Monitoring Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
Microsoft.Windows.Client.Win10.Computer.ApplicationIncompatibility.RuleApplication Incompatibility RuleMicrosoft.Windows.Client.Win10.Computer.ApplicationIncompatibility.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueApplication
Microsoft.Windows.Client.Win10.Computer.DiskCorruptionFailed.RuleDisk Corruption Failed RuleMicrosoft.Windows.Client.Win10.Computer.DiskCorruptionFailed.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.Computer.DiskCorruptionFileSkipped.RuleDisk Corruption File Skipped RuleMicrosoft.Windows.Client.Win10.Computer.DiskCorruptionFileSkipped.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueMicrosoft-Windows-CorruptedFileRecovery-Server/Operational
Microsoft.Windows.Client.Win10.Computer.DiskCorruptionRepairFailed.RuleDisk Corruption Repair Failed RuleMicrosoft.Windows.Client.Win10.Computer.DiskCorruptionRepairFailed.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.Computer.DiskCorruptionRepairSucceededNeedReboot.RuleDisk Corruption Repair Succeeded Need Reboot RuleMicrosoft.Windows.Client.Win10.Computer.DiskCorruptionRepairSucceededNeedReboot.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.Computer.DiskCorruptionRepairSucceededNoReboot.RuleDisk Corruption Repair Succeeded No Reboot RuleMicrosoft.Windows.Client.Win10.Computer.DiskCorruptionRepairSucceededNoReboot.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueMicrosoft-Windows-CorruptedFileRecovery-Server/Operational
Microsoft.Windows.Client.Win10.Computer.DiskFailure.RuleDisk Failure RuleMicrosoft.Windows.Client.Win10.Computer.DiskFailure.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.Computer.MemoryExhaustion.RuleMemory Exhaustion RuleMicrosoft.Windows.Client.Win10.Computer.MemoryExhaustion.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueMicrosoft-Windows-Resource-Exhaustion-Detector/Operational
Microsoft.Windows.Client.Win10.Computer.MemoryFailureFailureDetected.RuleMemory Failure Detected RuleMicrosoft.Windows.Client.Win10.Computer.MemoryFailureFailureDetected.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.Computer.MemoryFailureTestCancelled.RuleMemory Failure Test Cancelled RuleMicrosoft.Windows.Client.Win10.Computer.MemoryFailureTestCancelled.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.Computer.MemoryFailureTestFailed.RuleMemory Failure Test Failed RuleMicrosoft.Windows.Client.Win10.Computer.MemoryFailureTestFailed.RuleMicrosoft.Windows.Client.Win10.ComputerEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.LogicalDisk.AvgDiskQueueLength.CollectionLogical Disk Average Disk Queue LengthCollects the performance counter LogicalDisk\Avg Disk Queue LengthMicrosoft.Windows.Client.Win10.LogicalDisk.AvgDiskQueueLength.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk Queue Length9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.AvgDiskSecPerRead.CollectionLogical Disk Average Disk Second Per ReadCollects the performance counter LogicalDisk\Avg Disk Sec Per ReadMicrosoft.Windows.Client.Win10.LogicalDisk.AvgDiskSecPerRead.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk sec/Read9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.AvgDiskSecPerTransfer.CollectionLogical Disk Average Disk Second Per TransferCollects the performance counter LogicalDisk\Avg Disk Sec Per TransferMicrosoft.Windows.Client.Win10.LogicalDisk.AvgDiskSecPerTransfer.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk sec/Transfer9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.AvgDiskSecPerWrite.CollectionLogical Disk Average Disk Second Per WriteCollects the performance counter LogicalDisk\Avg Disk Sec Per WriteMicrosoft.Windows.Client.Win10.LogicalDisk.AvgDiskSecPerWrite.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk sec/Write9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.CurrentDiskQueueLength.CollectionLogical Disk Current Disk Queue LengthCollects the performance counter LogicalDisk\Current Disk Queue LengthMicrosoft.Windows.Client.Win10.LogicalDisk.CurrentDiskQueueLength.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskCurrent Disk Queue Length9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.DiskBytesPerSec.CollectionLogical Disk Bytes Per SecondCollects the performance counter LogicalDisk\Disk Bytes Per SecondMicrosoft.Windows.Client.Win10.LogicalDisk.DiskBytesPerSec.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Bytes/sec9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.DiskReadsPerSec.CollectionLogical Disk Reads SecondCollects the performance counter LogicalDisk\Disk Reads Per SecondMicrosoft.Windows.Client.Win10.LogicalDisk.DiskReadsPerSec.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Reads/sec9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.DiskWritesPerSec.CollectionLogical Disk Writes Per SecondCollects the performance counter LogicalDisk\Disk Writes Per SecondMicrosoft.Windows.Client.Win10.LogicalDisk.DiskWritesPerSec.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Writes/sec9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.FreeMB.CollectionLogical Disk Free MegabytesThe space in megabytes on the logical disk that is unallocatedMicrosoft.Windows.Client.Win10.LogicalDisk.FreeMB.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDiskFree Megabytes9000FalseTrue
Microsoft.Windows.Client.Win10.LogicalDisk.FreeSpace.Collection\% Logical Disk Free SpaceThe percentage of total usable space on the logical disk that is unallocatedMicrosoft.Windows.Client.Win10.LogicalDisk.FreeSpace.CollectionMicrosoft.Windows.Client.Win10.LogicalDiskPerformanceCollectionFalseLogicalDisk\% Free Space9000FalseTrue
Microsoft.Windows.Client.Win10.NetworkAdapter.BytesReceivedPerSec.Collection.MissionCriticalBytes Received Per Sec Collection Mission CriticalMicrosoft.Windows.Client.Win10.NetworkAdapter.BytesReceivedPerSec.Collection.MissionCriticalMicrosoft.Windows.Client.Win10.NetworkAdapterPerformanceCollectionFalseNetwork InterfaceBytes Received/sec9000FalseTrue
Microsoft.Windows.Client.Win10.NetworkAdapter.BytesSentPerSec.Collection.MissionCriticalBytes Sent Per Sec Collection Mission CriticalMicrosoft.Windows.Client.Win10.NetworkAdapter.BytesSentPerSec.Collection.MissionCriticalMicrosoft.Windows.Client.Win10.NetworkAdapterPerformanceCollectionFalseNetwork InterfaceBytes Sent/sec9000FalseTrue
Microsoft.Windows.Client.Win10.NetworkAdapter.BytesTotalPerSec.Collection.MissionCriticalBytes Total Per Sec Collection MissionCriticalMicrosoft.Windows.Client.Win10.NetworkAdapter.BytesTotalPerSec.Collection.MissionCriticalMicrosoft.Windows.Client.Win10.NetworkAdapterPerformanceCollectionFalseNetwork InterfaceBytes Total/sec9000FalseTrue
Microsoft.Windows.Client.Win10.NetworkAdapter.NetworkAdapterDisconnected.AlertNetwork Adapter DisconnectedNetwork adapter is disconnected from the networkMicrosoft.Windows.Client.Win10.NetworkAdapter.NetworkAdapterDisconnected.AlertMicrosoft.Windows.Client.Win10.NetworkAdapterEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.CheckingFileSystemOccuredOnStartup.CollectionChecking File System Occurred on StartupThis event indicates that the system ran a chkdsk on startupMicrosoft.Windows.Client.Win10.OperatingSystem.CheckingFileSystemOccuredOnStartup.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueApplication
Microsoft.Windows.Client.Win10.OperatingSystem.CleanShutdown.CollectionCollection Rule for Windows Clean Restart EventsThis rule collects the events indicating a clean Windows restart.Microsoft.Windows.Client.Win10.OperatingSystem.CleanShutdown.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.DirtyShutdown.CollectionCollection Rule for Windows Dirty Shutdown EventsThis rule collects events indicating a dirty Windows shutdown.Microsoft.Windows.Client.Win10.OperatingSystem.DirtyShutdown.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.EventLogFull.AlertThe Event Log File is FullThe event log file is full.Microsoft.Windows.Client.Win10.OperatingSystem.EventLogFull.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.EventLogFull.Alert.MissionCriticalEvent Log Full Alert Mission CriticalMicrosoft.Windows.Client.Win10.OperatingSystem.EventLogFull.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.IPAddressConflict.AlertA Duplicate IP Address has been Detected on the NetworkA duplicate IP address has been detected on the network.Microsoft.Windows.Client.Win10.OperatingSystem.IPAddressConflict.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.IPAddressConflict.Alert.MissionCriticalIP Address Conflict Alert Mission CriticalMicrosoft.Windows.Client.Win10.OperatingSystem.IPAddressConflict.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueErrorNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.LDMCantReadDisk.AlertLDM - Can't Read DiskLogical Disk Manager reports that the disk cannot be read.Microsoft.Windows.Client.Win10.OperatingSystem.LDMCantReadDisk.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.LDMCantReadDisk.Alert.MissionCriticalLDM Cannot Read Disk Alert Mission CriticalMicrosoft.Windows.Client.Win10.OperatingSystem.LDMCantReadDisk.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.MemoryAvailableMBytes.CollectionMemory Available MegabytesCollects the performance counter Memory\Available MBytesMicrosoft.Windows.Client.Win10.OperatingSystem.MemoryAvailableMBytes.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseMemoryAvailable MBytes9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPageReadsPerSec.CollectionMemory Page Reads per SecondCollects the performance counter Memory\Page Reads/Sec.Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPageReadsPerSec.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseMemoryPage Reads/sec9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPagesPerSec.CollectionMemory Pages per SecondCollects the performance counter Memory\Pages Reads/Sec.Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPagesPerSec.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseMemoryPages/sec9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPageWritesPerSec.CollectionMemory Page Writes per SecondCollects the performance counter Memory\Page Writes/Sec.Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPageWritesPerSec.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseMemoryPage Writes/sec9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPercentCommittedBytesInUse.CollectionMemory \% Committed Bytes in UseCollects the performance counter Memory\\% Committed Bytes in UseMicrosoft.Windows.Client.Win10.OperatingSystem.MemoryPercentCommittedBytesInUse.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseMemory\% Committed Bytes In Use9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPoolNonPagedBytes.CollectionMemory Pool Non-paged BytesCollects the performance counter Memory\Pool Nonpaged BytesMicrosoft.Windows.Client.Win10.OperatingSystem.MemoryPoolNonPagedBytes.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseMemoryPool Nonpaged Bytes9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.MemoryPoolPagedBytes.CollectionMemory Pool Paged BytesCollects the performance counter Memory\Pool Paged BytesMicrosoft.Windows.Client.Win10.OperatingSystem.MemoryPoolPagedBytes.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseMemoryPool Paged Bytes9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.NTFSDelayedWriteLost.AlertNTFS - Delayed Write LostNT file system reports a delayed write was lost.Microsoft.Windows.Client.Win10.OperatingSystem.NTFSDelayedWriteLost.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.NTFSDelayedWriteLost.Alert.MissionCriticalNTFS Delayed Write Lost Alert Mission CriticalMicrosoft.Windows.Client.Win10.OperatingSystem.NTFSDelayedWriteLost.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.NTFSFileSystemCorrupt.AlertNTFS - File System CorruptNT file system indicates a corrupt file system.Microsoft.Windows.Client.Win10.OperatingSystem.NTFSFileSystemCorrupt.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.NTFSFileSystemCorrupt.Alert.MissionCriticalNTFS File System Corrupt Alert Mission CriticalMicrosoft.Windows.Client.Win10.OperatingSystem.NTFSFileSystemCorrupt.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection.MissionCriticalNTFS Quota Threshold Limit Reached CollectionMicrosoft.Windows.Client.Win10.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.NTFSQuotaThresholdReached.Collection.MissionCriticalNTFS Quota Threshold Reached CollectionMicrosoft.Windows.Client.Win10.OperatingSystem.NTFSQuotaThresholdReached.Collection.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.PageFilePercentUsage.CollectionPage File Percentage UseCollection rule for the performance counter Paging File\\% UsageMicrosoft.Windows.Client.Win10.OperatingSystem.PageFilePercentUsage.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalsePaging File\% Usage9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.PerfCounterDataRequestTimeOut.Alert.MissionCriticalPerformance Counter Data Request TimeOut AlertMicrosoft.Windows.Client.Win10.OperatingSystem.PerfCounterDataRequestTimeOut.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueErrorNormalTrueApplication
Microsoft.Windows.Client.Win10.OperatingSystem.PerformanceRegistryCorruption.AlertPerformance registry corruptionCorruption was detected in the registry related to performance counters.Microsoft.Windows.Client.Win10.OperatingSystem.PerformanceRegistryCorruption.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueApplication
Microsoft.Windows.Client.Win10.OperatingSystem.PerformanceRegistryCorruption.Alert.MissionCriticalPerformance Registry Corruption AlertMicrosoft.Windows.Client.Win10.OperatingSystem.PerformanceRegistryCorruption.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueApplication
Microsoft.Windows.Client.Win10.OperatingSystem.RebootFromBugCheck.CollectionCollection Rule for Windows Restart Events (restarted from bugcheck)Collection rule for events indicating Windows restarted from bugcheckMicrosoft.Windows.Client.Win10.OperatingSystem.RebootFromBugCheck.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.RestartEvent.CollectionCollection Rule for Windows Restarted EventsThis rule collects events indicating Windows has restartedMicrosoft.Windows.Client.Win10.OperatingSystem.RestartEvent.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceEnteredUnpredictableState.AlertThe Service has Entered into an Unpredictable StateA service has entered an unpredictable state.Microsoft.Windows.Client.Win10.OperatingSystem.ServiceEnteredUnpredictableState.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceEnteredUnpredictableState.Alert.MissionCriticalService Entered Unpredictable State AlertMicrosoft.Windows.Client.Win10.OperatingSystem.ServiceEnteredUnpredictableState.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueErrorNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceMisconfigured.AlertThe Service is MisconfiguredA service has been detected as misconfigured.Microsoft.Windows.Client.Win10.OperatingSystem.ServiceMisconfigured.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceMisconfigured.Alert.MissionCriticalService Misconfigured AlertMicrosoft.Windows.Client.Win10.OperatingSystem.ServiceMisconfigured.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueErrorNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceOrDriverFailedToStart.AlertThe Service or Driver Failed to StartAn event was detected indicating a service or driver failed to start.Microsoft.Windows.Client.Win10.OperatingSystem.ServiceOrDriverFailedToStart.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceOrDriverFailedToStart.Alert.MissionCriticalService Or Driver Failed To Start AlertMicrosoft.Windows.Client.Win10.OperatingSystem.ServiceOrDriverFailedToStart.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceOrDriverFailedToStart.CollectionService Or Driver Failed To Start CollectionMicrosoft.Windows.Client.Win10.OperatingSystem.ServiceOrDriverFailedToStart.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceTerminatedUnexpextedly.AlertThe Service Terminated UnexpectedlyAn event was collected indicating an unexpected service termination.Microsoft.Windows.Client.Win10.OperatingSystem.ServiceTerminatedUnexpextedly.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceTerminatedUnexpextedly.Alert.MissionCriticalService Terminated Unexpectedly Alert Mission CriticalMicrosoft.Windows.Client.Win10.OperatingSystem.ServiceTerminatedUnexpextedly.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ServiceTerminatedUnexpextedly.CollectionService Terminated Unexpectedly CollectionMicrosoft.Windows.Client.Win10.OperatingSystem.ServiceTerminatedUnexpextedly.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ShareConfigurationInvalid.Alert.MissionCriticalShare Configuration Invalid Alert MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystem.ShareConfigurationInvalid.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.ShareConfigurationInvalid.CollectionShare Configuration Invalid CollectionMicrosoft.Windows.Client.Win10.OperatingSystem.ShareConfigurationInvalid.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdateInstallationFailed.AlertA Software Update Installation FailedA failed software update installation was detected.Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdateInstallationFailed.AlertMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdateInstallationFailed.Alert.MissionCriticalSoftware Update Installation Failed Alert MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdateInstallationFailed.Alert.MissionCriticalMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00TrueErrorNormalTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdateInstallationFailed.CollectionSoftware Update Installation Failed CollectionMicrosoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdateInstallationFailed.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdatesInstalled.CollectionCollection Rule for Software Updates Installation EventsCollection rule for events indicating that new software updates were installed.Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdatesInstalled.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdatesScheduledForInstallation.CollectionCollection Rule for Software Updates Scheduled Installation EventsCollection rule for events indicating new software updates are scheduled.Microsoft.Windows.Client.Win10.OperatingSystem.SoftwareUpdatesScheduledForInstallation.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemEventCollectionFalse00FalseTrueSystem
Microsoft.Windows.Client.Win10.OperatingSystem.SystemContextSwitchesPerSec.CollectionSystem Context Switches per SecondCollection rule for the performance counter System\Context Switches/secMicrosoft.Windows.Client.Win10.OperatingSystem.SystemContextSwitchesPerSec.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseSystemContext Switches/sec9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.SystemProcessorQueueLength.CollectionSystem Processor Queue LengthCollection rule for the performance counter System\Processor Queue Length.Microsoft.Windows.Client.Win10.OperatingSystem.SystemProcessorQueueLength.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseSystemProcessor Queue Length9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.TotalPercentDPCTime.CollectionTotal Processor \% DPC TimeCollects the performance counter Processor\\% DPC TimeMicrosoft.Windows.Client.Win10.OperatingSystem.TotalPercentDPCTime.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseProcessor\% DPC Time9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.TotalPercentInterruptTime.CollectionTotal Processor \% Interrupt TimeCollects the performance counter Processor\\% Interrupt TimeMicrosoft.Windows.Client.Win10.OperatingSystem.TotalPercentInterruptTime.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseProcessor\% Interrupt Time9000FalseTrue
Microsoft.Windows.Client.Win10.OperatingSystem.TotalPercentProcessorTime.CollectionProcessor \% Processor Time TotalCollects the performance counter Processor\\% Processor TimeMicrosoft.Windows.Client.Win10.OperatingSystem.TotalPercentProcessorTime.CollectionMicrosoft.Windows.Client.Win10.OperatingSystemPerformanceCollectionFalseProcessor\% Processor Time9000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.AvgDiskQueueLength.CollectionPhysical Disk Average Disk Queue LengthCollects the performance counter PhysicalDisk\Avg. Disk Queue LengthMicrosoft.Windows.Client.Win10.PhysicalDisk.AvgDiskQueueLength.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk Queue Length90000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.AvgDiskSecPerRead.CollectionPhysical Disk Average Disk Seconds per ReadCollects the performance counter PhysicalDisk\Avg. Disk sec/ReadMicrosoft.Windows.Client.Win10.PhysicalDisk.AvgDiskSecPerRead.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk sec/Read9000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.AvgDiskSecPerTransfer.CollectionPhysical Disk Average Disk Seconds per TransferCollects the performance counter PhysicalDisk\Avg. Disk sec/Transfer.Microsoft.Windows.Client.Win10.PhysicalDisk.AvgDiskSecPerTransfer.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk sec/Transfer9000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.AvgDiskSecPerWrite.CollectionPhysical Disk Average Disk Seconds per WriteCollects the performance counter PhysicalDisk\Avg. Disk sec/Write.Microsoft.Windows.Client.Win10.PhysicalDisk.AvgDiskSecPerWrite.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk sec/Write9000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.CurrentDiskQueueLength.CollectionPhysical Disk Current Disk Queue LengthCollects the performance counter PhysicalDisk\Current Disk Queue LengthMicrosoft.Windows.Client.Win10.PhysicalDisk.CurrentDiskQueueLength.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskCurrent Disk Queue Length9000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.DiskBytesPerSec.CollectionPhysical Disk Bytes per SecondCollects the performance counter PhysicalDisk\Disk Bytes/sec.Microsoft.Windows.Client.Win10.PhysicalDisk.DiskBytesPerSec.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Bytes/sec9000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.DiskReadsPerSec.CollectionPhysical Disk Reads per SecondCollects the performance counter PhysicalDisk\Disk Reads/secMicrosoft.Windows.Client.Win10.PhysicalDisk.DiskReadsPerSec.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Reads/sec9000FalseTrue
Microsoft.Windows.Client.Win10.PhysicalDisk.DiskWritesPerSec.CollectionPhysical Disk Writes per SecondCollects the performance counter PhysicalDisk\Disk Writes/sec.Microsoft.Windows.Client.Win10.PhysicalDisk.DiskWritesPerSec.CollectionMicrosoft.Windows.Client.Win10.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Writes/sec9000FalseTrue
Microsoft.Windows.Client.Win10.Processor.PercentDPCTime.CollectionProcessor \% DPC TimeCollects the performance counter Processor\\% DPC TimeMicrosoft.Windows.Client.Win10.Processor.PercentDPCTime.CollectionMicrosoft.Windows.Client.Win10.ProcessorPerformanceCollectionFalseProcessor\% DPC Time9000FalseTrue
Microsoft.Windows.Client.Win10.Processor.PercentInterruptTime.CollectionProcessor \% Interrupt TimeCollects the performance counter Processor\\% Interrupt TimeMicrosoft.Windows.Client.Win10.Processor.PercentInterruptTime.CollectionMicrosoft.Windows.Client.Win10.ProcessorPerformanceCollectionFalseProcessor\% Interrupt Time9000FalseTrue
Microsoft.Windows.Client.Win10.Processor.PercentProcessorTime.CollectionProcessor \% Processor TimeCollects the performance counter Processor\\% Processor TimeMicrosoft.Windows.Client.Win10.Processor.PercentProcessorTime.CollectionMicrosoft.Windows.Client.Win10.ProcessorPerformanceCollectionFalseProcessor\% Processor Time9000FalseTrue