| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Run WMIAdap | Rule that executes the WMIAdap executable daily to repair the WMI repository if it becomes corrupt | Microsoft.Windows.Client.XP.Computer.RunWMIAdap | Microsoft.Windows.Client.XP.Computer | Maintenance | True | | | 0 | 0 | | False | | | True | |
| Logical Disk Average Disk Queue Length | Collects the performance counter LogicalDisk\Avg Disk Queue Length | Microsoft.Windows.Client.XP.LogicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | True | LogicalDisk | Avg. Disk Queue Length | 900 | 0 | | False | | | True | |
| Logical Disk Average Disk Second Per Read | Collects the performance counter LogicalDisk\Avg Disk Sec Per Read | Microsoft.Windows.Client.XP.LogicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | False | LogicalDisk | Avg. Disk sec/Read | 900 | 0 | | False | | | True | |
| Logical Disk Average Disk Second Per Transfer | Collects the performance counter LogicalDisk\Avg Disk Sec Per Transfer | Microsoft.Windows.Client.XP.LogicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | True | LogicalDisk | Avg. Disk sec/Transfer | 900 | 0 | | False | | | True | |
| Logical Disk Average Disk Second Per Write | Collects the performance counter LogicalDisk\Avg Disk Sec Per Write | Microsoft.Windows.Client.XP.LogicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | False | LogicalDisk | Avg. Disk sec/Write | 900 | 0 | | False | | | True | |
| Logical Disk Current Disk Queue Length | Collects the performance counter LogicalDisk\Current Disk Queue Length | Microsoft.Windows.Client.XP.LogicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | False | LogicalDisk | Current Disk Queue Length | 900 | 0 | | False | | | True | |
| Logical Disk Disk Bytes Per Second | Collects the performance counter LogicalDisk\Disk Bytes Per Second | Microsoft.Windows.Client.XP.LogicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Bytes/sec | 900 | 0 | | False | | | True | |
| Logical Disk Disk Reads Second | Collects the performance counter LogicalDisk\Disk Reads Per Second | Microsoft.Windows.Client.XP.LogicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Reads/sec | 900 | 0 | | False | | | True | |
| Logical Disk Disk Writes Per Second | Collects the performance counter LogicalDisk\Disk Writes Per Second | Microsoft.Windows.Client.XP.LogicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Writes/sec | 900 | 0 | | False | | | True | |
| Logical Disk Free Megabytes | The space in megabytes on the logical disk that is unallocated | Microsoft.Windows.Client.XP.LogicalDisk.FreeMB.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | False | LogicalDisk | Free Megabytes | 900 | 0 | | False | | | True | |
| \% Logical Disk Free Space | The percentage of total usable space on the logical disk that is unallocated | Microsoft.Windows.Client.XP.LogicalDisk.FreeSpace.Collection | Microsoft.Windows.Client.XP.LogicalDisk | PerformanceCollection | True | LogicalDisk | \% Free Space | 900 | 0 | | False | | | True | |
| Network Adapter Disconnected | Network adapter is disconnected from the network | Microsoft.Windows.Client.XP.NetworkAdapter.NetworkAdapterDisconnected.Alert | Microsoft.Windows.Client.XP.NetworkAdapter | EventCollection | True | | | 0 | 4202 | TCPIP | False | | | True | System |
| Checking File System Occurred on Startup | This event indicates that the system ran a chkdsk on startup | Microsoft.Windows.Client.XP.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 1001 | Winlogon | False | | | True | Application |
| Collection Rule for Windows Clean Restart Events | This rule collects the events indicating a clean Windows shutdown. | Microsoft.Windows.Client.XP.OperatingSystem.CleanShutdown.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 6006 | Eventlog | False | | | True | System |
| Collection Rule for Windows Dirty Shutdown Events | This rule collects events indicating a dirty Windows shutdown. | Microsoft.Windows.Client.XP.OperatingSystem.DirtyShutdown.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 6008 | Eventlog | False | | | True | System |
| Duplicate computer name was detected | A duplicate computer name was detected on the network. | Microsoft.Windows.Client.XP.OperatingSystem.DuplicateNameonNetwork.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | TCPIP | False | | | True | System |
| The Event Log File is Full | The event log file is full. | Microsoft.Windows.Client.XP.OperatingSystem.EventLogFull.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 6000 | Eventlog | False | | | True | System |
| A Duplicate IP Address has been Detected on the Network | A duplicate IP address has been detected on the network | Microsoft.Windows.Client.XP.OperatingSystem.IPAddressConflict.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 4199 | TCPIP | False | | | True | System |
| Disk Group Auto Import Failed | Logical Disk Manager reports a failed disk group import | Microsoft.Windows.Client.XP.OperatingSystem.LDMAutoImportFailed.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 6 | dmboot | False | | | True | System |
| Disk can not be read | Logical Disk Manager reports that the disk can not be read | Microsoft.Windows.Client.XP.OperatingSystem.LDMCantReadDisk.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 31 | DISK | False | | | True | System |
| Disk Group Failed | Logical Disk Manager reports a group has failed | Microsoft.Windows.Client.XP.OperatingSystem.LDMDiskGroupFailed.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 5 | dmboot | False | | | True | System |
| Volume Not Started | Logical Disk Manager reports a volume has not started | Microsoft.Windows.Client.XP.OperatingSystem.LDMVolumeNotStarted.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | dmboot | False | | | True | System |
| Memory Available Megabytes | Collects the performance counter Memory\Available MBytes | Microsoft.Windows.Client.XP.OperatingSystem.MemoryAvailableMBytes.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | True | Memory | Available MBytes | 900 | 0 | | False | | | True | |
| Memory Page Reads per Second | Collects the performance counter Memory\Page Reads/Sec. | Microsoft.Windows.Client.XP.OperatingSystem.MemoryPageReadsPerSec.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Memory | Page Reads/sec | 900 | 0 | | False | | | True | |
| Memory Pages per Second | Collects the performance counter Memory\Pages Reads/Sec. | Microsoft.Windows.Client.XP.OperatingSystem.MemoryPagesPerSec.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Memory | Pages/sec | 900 | 0 | | False | | | True | |
| Memory Page Writes per Second | Collects the performance counter Memory\Page Writes/Sec. | Microsoft.Windows.Client.XP.OperatingSystem.MemoryPageWritesPerSec.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Memory | Page Writes/sec | 900 | 0 | | False | | | True | |
| Memory \% Committed Bytes in Use | Collects the performance counter Memory\\% Committed Bytes in Use | Microsoft.Windows.Client.XP.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Memory | \% Committed Bytes In Use | 900 | 0 | | False | | | True | |
| Memory Pool Non-paged Bytes | Collects the performance counter Memory\Pool Nonpaged Bytes | Microsoft.Windows.Client.XP.OperatingSystem.MemoryPoolNonPagedBytes.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Memory | Pool Nonpaged Bytes | 900 | 0 | | False | | | True | |
| Memory Pool Paged Bytes | Collects the performance counter Memory\Pool Paged Bytes | Microsoft.Windows.Client.XP.OperatingSystem.MemoryPoolPagedBytes.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Memory | Pool Paged Bytes | 900 | 0 | | False | | | True | |
| NTFS - Delayed Write Lost | NT file system reports a delayed write was lost. | Microsoft.Windows.Client.XP.OperatingSystem.NTFSDelayedWriteLost.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 50 | DISK | False | | | True | System |
| NTFS - File System Corrupt | NT file system indicates a corrupt file system. | Microsoft.Windows.Client.XP.OperatingSystem.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 41 | DISK | False | | | True | System |
| Page File Percentage Use | Collection rule for the performance counter Paging File\\% Usage | Microsoft.Windows.Client.XP.OperatingSystem.PageFilePercentUsage.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Paging File | \% Usage | 900 | 0 | | False | | | True | |
| Performance registry corruption | Corruption was detected in the registry related to performance counters. | Microsoft.Windows.Client.XP.OperatingSystem.PerformanceRegistryCorruption.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | | False | | | True | Application |
| Collection Rule for Windows Restart Events (restarted from bugcheck) | Collection rule for events indicating Windows restarted from bugcheck | Microsoft.Windows.Client.XP.OperatingSystem.RebootFromBugCheck.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | Save Dump | False | | | True | System |
| Collection Rule for Windows Restarted Events | This rule collects events indicating Windows has restarted | Microsoft.Windows.Client.XP.OperatingSystem.RestartEvent.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 6005 | Eventlog | False | | | True | System |
| The Service has Entered into an Unpredictable State | A service has entered an unpredictable state. | Microsoft.Windows.Client.XP.OperatingSystem.ServiceEnteredUnpredictableState.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | Service Control Manager | False | | | True | System |
| The Service is Misconfigured | A service has been detected as misconfigured. | Microsoft.Windows.Client.XP.OperatingSystem.ServiceMisconfigured.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| The Service or Driver Failed to Start | An event was detected indicating a service or driver failed to start. | Microsoft.Windows.Client.XP.OperatingSystem.ServiceOrDriverFailedToStart.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
| The Service Terminated Unexpectedly | An event was collected indicating an unexpected service termination. | Microsoft.Windows.Client.XP.OperatingSystem.ServiceTerminatedUnexpextedly.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
| A Software Update Installation Failed | A failed software update installation was detected. | Microsoft.Windows.Client.XP.OperatingSystem.SoftwareUpdateInstallationFailed.Alert | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 20 | Windows Update Agent | False | | | True | System |
| Collection Rule for Software Updates Installation Events | Collection rule for events indicating that new software updates were installed. | Microsoft.Windows.Client.XP.OperatingSystem.SoftwareUpdatesInstalled.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 19 | Automatic Updates | False | | | True | System |
| Collection Rule for Software Updates Scheduled Installation Events | Collection rule for events indicating new software updates are scheduled. | Microsoft.Windows.Client.XP.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 18 | Automatic Updates | False | | | True | System |
| System Context Switches per Second | Collection rule for the performance counter System\Context Switches/sec | Microsoft.Windows.Client.XP.OperatingSystem.SystemContextSwitchesPerSec.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | System | Context Switches/sec | 900 | 0 | | False | | | True | |
| System Processor Queue Length | Collection rule for the performance counter System\Processor Queue Length. | Microsoft.Windows.Client.XP.OperatingSystem.SystemProcessorQueueLength.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | True | System | Processor Queue Length | 900 | 0 | | False | | | True | |
| Total Processor \% DPC Time | Collects the performance counter Processor\\% DPC Time | Microsoft.Windows.Client.XP.OperatingSystem.TotalPercentDPCTime.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Processor | \% DPC Time | 900 | 0 | | False | | | True | |
| Total Processor \% Interrupt Time | Collects the performance counter Processor\\% Interrupt Time | Microsoft.Windows.Client.XP.OperatingSystem.TotalPercentInterruptTime.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | False | Processor | \% Interrupt Time | 900 | 0 | | False | | | True | |
| Processor \% Processor Time Total | Collects the performance counter Processor\\% Processor Time | Microsoft.Windows.Client.XP.OperatingSystem.TotalPercentProcessorTime.Collection | Microsoft.Windows.Client.XP.OperatingSystem | PerformanceCollection | True | Processor | \% Processor Time | 900 | 0 | | False | | | True | |
| Physical Disk Average Disk Queue Length | Collects the performance counter PhysicalDisk\Avg. Disk Queue Length | Microsoft.Windows.Client.XP.PhysicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | True | PhysicalDisk | Avg. Disk Queue Length | 900 | 0 | | False | | | True | |
| Physical Disk Average Disk Seconds per Read | Collects the performance counter PhysicalDisk\Avg. Disk sec/Read | Microsoft.Windows.Client.XP.PhysicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Avg. Disk sec/Read | 900 | 0 | | False | | | True | |
| Physical Disk Average Disk Seconds per Transfer | Collects the performance counter PhysicalDisk\Avg. Disk sec/Transfer. | Microsoft.Windows.Client.XP.PhysicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | True | PhysicalDisk | Avg. Disk sec/Transfer | 900 | 0 | | False | | | True | |
| Physical Disk Average Disk Seconds per Write | Collects the performance counter PhysicalDisk\Avg. Disk sec/Write. | Microsoft.Windows.Client.XP.PhysicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Avg. Disk sec/Write | 900 | 0 | | False | | | True | |
| Physical Disk Current Disk Queue Length | Collects the performance counter PhysicalDisk\Current Disk Queue Length | Microsoft.Windows.Client.XP.PhysicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Current Disk Queue Length | 900 | 0 | | False | | | True | |
| Physical Disk Disk Bytes per Second | Collects the performance counter PhysicalDisk\Disk Bytes/sec. | Microsoft.Windows.Client.XP.PhysicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Bytes/sec | 900 | 0 | | False | | | True | |
| Physical Disk Reads per Second | Collects the performance counter PhysicalDisk\Disk Reads/sec | Microsoft.Windows.Client.XP.PhysicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Reads/sec | 900 | 0 | | False | | | True | |
| Physical Disk Writes per Second | Collects the performance counter PhysicalDisk\Disk Writes/sec. | Microsoft.Windows.Client.XP.PhysicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Client.XP.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Writes/sec | 900 | 0 | | False | | | True | |
| Processor \% DPC Time | Collects the performance counter Processor\\% DPC Time | Microsoft.Windows.Client.XP.Processor.PercentDPCTime.Collection | Microsoft.Windows.Client.XP.Processor | PerformanceCollection | False | Processor | \% DPC Time | 900 | 0 | | False | | | True | |
| Processor \% Interrupt Time | Collects the performance counter Processor\\% Interrupt Time | Microsoft.Windows.Client.XP.Processor.PercentInterruptTime.Collection | Microsoft.Windows.Client.XP.Processor | PerformanceCollection | False | Processor | \% Interrupt Time | 900 | 0 | | False | | | True | |
| Processor \% Processor Time | Collects the performance counter Processor\\% Processor Time | Microsoft.Windows.Client.XP.Processor.PercentProcessorTime.Collection | Microsoft.Windows.Client.XP.Processor | PerformanceCollection | False | Processor | \% Processor Time | 900 | 0 | | False | | | True | |
| Microsoft.Windows.Client.XP.NetworkAdapter.BytesReceivedPerSec.Collection.MissionCritical | | Microsoft.Windows.Client.XP.NetworkAdapter.BytesReceivedPerSec.Collection.MissionCritical | Microsoft.Windows.Client.XP.NetworkAdapter | PerformanceCollection | False | Network Interface | Bytes Received/sec | 900 | 0 | | False | | | True | |
| Microsoft.Windows.Client.XP.NetworkAdapter.BytesSentPerSec.Collection.MissionCritical | | Microsoft.Windows.Client.XP.NetworkAdapter.BytesSentPerSec.Collection.MissionCritical | Microsoft.Windows.Client.XP.NetworkAdapter | PerformanceCollection | False | Network Interface | Bytes Sent/sec | 900 | 0 | | False | | | True | |
| Microsoft.Windows.Client.XP.NetworkAdapter.BytesTotalPerSec.Collection.MissionCritical | | Microsoft.Windows.Client.XP.NetworkAdapter.BytesTotalPerSec.Collection.MissionCritical | Microsoft.Windows.Client.XP.NetworkAdapter | PerformanceCollection | False | Network Interface | Bytes Total/sec | 900 | 0 | | False | | | True | |
| Microsoft.Windows.Client.XP.OperatingSystem.DuplicateNameonNetwork.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.DuplicateNameonNetwork.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | TCPIP | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.EventLogFull.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.EventLogFull.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 6000 | Eventlog | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.IPAddressConflict.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.IPAddressConflict.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 4199 | TCPIP | True | Error | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.LDMAutoImportFailed.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.LDMAutoImportFailed.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 6 | dmboot | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.LDMCantReadDisk.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.LDMCantReadDisk.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 31 | DISK | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.LDMDiskGroupFailed.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.LDMDiskGroupFailed.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 5 | dmboot | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.LDMVolumeNotStarted.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.LDMVolumeNotStarted.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | dmboot | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.NTFSDelayedWriteLost.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.NTFSDelayedWriteLost.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 50 | DISK | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.NTFSFileSystemCorrupt.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.NTFSFileSystemCorrupt.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 41 | DISK | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 40 | DISK | False | | | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.NTFSQuotaThresholdReached.Collection.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.NTFSQuotaThresholdReached.Collection.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 36 | DISK | False | | | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.PerfCounterDataRequestTimeOut.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.PerfCounterDataRequestTimeOut.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 1015 | Perflib | True | Error | Normal | True | Application |
| Microsoft.Windows.Client.XP.OperatingSystem.PerformanceRegistryCorruption.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.PerformanceRegistryCorruption.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Warning | Normal | True | Application |
| Microsoft.Windows.Client.XP.OperatingSystem.ServiceEnteredUnpredictableState.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.ServiceEnteredUnpredictableState.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | Service Control Manager | True | Error | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.ServiceMisconfigured.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.ServiceMisconfigured.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Error | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.ServiceOrDriverFailedToStart.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.ServiceOrDriverFailedToStart.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.ServiceOrDriverFailedToStart.Collection | | Microsoft.Windows.Client.XP.OperatingSystem.ServiceOrDriverFailedToStart.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.ServiceTerminatedUnexpextedly.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.ServiceTerminatedUnexpextedly.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.ServiceTerminatedUnexpextedly.Collection | | Microsoft.Windows.Client.XP.OperatingSystem.ServiceTerminatedUnexpextedly.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 0 | | False | | | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.ShareConfigurationInvalid.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.ShareConfigurationInvalid.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 0 | Server | True | Warning | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.SoftwareUpdateInstallationFailed.Alert.MissionCritical | | Microsoft.Windows.Client.XP.OperatingSystem.SoftwareUpdateInstallationFailed.Alert.MissionCritical | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | False | | | 0 | 20 | Windows Update Agent | True | Error | Normal | True | System |
| Microsoft.Windows.Client.XP.OperatingSystem.SoftwareUpdateInstallationFailed.Collection | | Microsoft.Windows.Client.XP.OperatingSystem.SoftwareUpdateInstallationFailed.Collection | Microsoft.Windows.Client.XP.OperatingSystem | EventCollection | True | | | 0 | 20 | Windows Update Agent | False | | | True | System |