All Rules in Microsoft.Windows.Server.2012.Monitoring Management Pack

 DisplayNameDescriptionIDTargetCategoryEnabledInstance NameCounter NameFrequencyEvent_IDEvent SourceAlert GenerateAlert SeverityAlert PriorityRemotableEvent Log
Microsoft.Windows.Server.2012.OperatingSystem.NTFSFileSystemCorrupt.AlertWindows Server 2012 NTFS File System Corrupt RuleThis rule generates alerts base on system events that indicates a NTFS File System Corruption.Microsoft.Windows.Server.2012.OperatingSystem.NTFSFileSystemCorrupt.AlertMicrosoft.Windows.Server.6.2.LogicalDiskEventCollectionTrue00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.CacheDataMapHitsPercent.CollectionCache Data Map Hits PercentCollects the performance counter Memory\Data Map Hits \%Microsoft.Windows.Server.6.2.CacheDataMapHitsPercent.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseCacheData Map Hits \%3000FalseTrue
Microsoft.Windows.Server.6.2.Computer.RunWMIAdapReservedReservedMicrosoft.Windows.Server.6.2.Computer.RunWMIAdapMicrosoft.Windows.Server.6.2.ComputerMaintenanceFalse00FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskReadQueueLength.CollectionAverage Logical Disk Read Queue Length Windows Server 2012The average number of read requests that were queued for the selected disk during the sample interval.Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskReadQueueLength.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk Read Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskWriteQueueLength.CollectionAverage Disk Write Queue Length Windows Server 2012 (Logical Disk)The average number of write requests that were queued for the selected disk during the sample interval.Microsoft.Windows.Server.6.2.LogicalDisk.AverageDiskWriteQueueLength.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk Write Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskQueueLength.CollectionCollection Rule for the Average Disk Queue Length Windows Server 2012Collects the performance counter LogicalDisk\Avg Disk Queue LengthMicrosoft.Windows.Server.6.2.LogicalDisk.AvgDiskQueueLength.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerRead.CollectionCollection Rule for Average Disk Seconds Per Read Windows Server 2012Collects the performance counter LogicalDisk\Avg Disk Sec Per ReadMicrosoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerRead.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk sec/Read3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerTransfer.CollectionCollection Rule for Average Disk Seconds Per Transfer Windows Server 2012Collects the performance counter LogicalDisk\Avg Disk Sec Per TransferMicrosoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerTransfer.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionTrueLogicalDiskAvg. Disk sec/Transfer3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerWrite.CollectionCollection Rule for Average Disk Seconds Per Write Windows Server 2012Collects the performance counter LogicalDisk\Avg Disk Sec Per Write Microsoft.Windows.Server.6.2.LogicalDisk.AvgDiskSecPerWrite.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskAvg. Disk sec/Write3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.CurrentDiskQueueLength.CollectionCollection rule for Current Disk Queue Length Windows Server 2012Collects the performance counter LogicalDisk\Current Disk Queue LengthMicrosoft.Windows.Server.6.2.LogicalDisk.CurrentDiskQueueLength.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionTrueLogicalDiskCurrent Disk Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.DiskBytesPerSec.CollectionCollection Rule for Disk Bytes Per Second Windows Server 2012Collects the performance counter LogicalDisk\Disk Bytes Per SecondMicrosoft.Windows.Server.6.2.LogicalDisk.DiskBytesPerSec.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Bytes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.DiskReadBytesPerSec.CollectionDisk Read Bytes Per Second Windows Server 2012 (Logical Disk)The rate at which bytes are transferred from the disk during read operations.Microsoft.Windows.Server.6.2.LogicalDisk.DiskReadBytesPerSec.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Read Bytes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.DiskReadsPerSec.CollectionCollection Rule for Disk Reads Per Second Windows Server 2012Collects the performance counter LogicalDisk\Disk Reads Per SecondMicrosoft.Windows.Server.6.2.LogicalDisk.DiskReadsPerSec.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Reads/sec3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.DiskWriteBytesPerSec.CollectionLogical Disk Write Bytes Per Second Windows Server 2012The rate at which bytes are transferred from the disk during write operations.Microsoft.Windows.Server.6.2.LogicalDisk.DiskWriteBytesPerSec.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Write Bytes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.DiskWritesPerSec.CollectionCollection Rule for Disk Writes Per Second Windows Server 2012Collects the performance counter LogicalDisk\Disk Writes Per SecondMicrosoft.Windows.Server.6.2.LogicalDisk.DiskWritesPerSec.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskDisk Writes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.FreeMB.CollectionLogical Disk Free Megabytes Windows Server 2012The space in megabytes on the logical disk that is unallocatedMicrosoft.Windows.Server.6.2.LogicalDisk.FreeMB.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionTrueLogicalDiskFree Megabytes6000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.FreeSpace.Collection\% Logical Disk Free Space Windows Server 2012The percentage of total usable space on the logical disk that is unallocatedMicrosoft.Windows.Server.6.2.LogicalDisk.FreeSpace.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionTrueLogicalDisk\% Free Space6000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.PercentIdle.Collection\% Logical Disk Idle Time Windows Server 2012The percentage of time during the sample interval that the disk was idle.Microsoft.Windows.Server.6.2.LogicalDisk.PercentIdle.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionTrueLogicalDisk\% Idle Time3000FalseTrue
Microsoft.Windows.Server.6.2.LogicalDisk.SplitIOPerSec.CollectionLogical Disk Split I/O Per Second Windows Server 2012The rate at which I/Os to the disk were split into multiple I/Os.Microsoft.Windows.Server.6.2.LogicalDisk.SplitIOPerSec.CollectionMicrosoft.Windows.Server.6.2.LogicalDiskPerformanceCollectionFalseLogicalDiskSplit IO/Sec6000FalseTrue
Microsoft.Windows.Server.6.2.MemoryFreeSystemPageTableEntries.CollectionFree System Page Table EntriesCollects the performance counter Memory\Free System Page Table EntriesMicrosoft.Windows.Server.6.2.MemoryFreeSystemPageTableEntries.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrueMemoryFree System Page Table Entries6000FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.BytesReceivedPerSec.CollectionNetwork Adapter Bytes Received per Second Windows Server 2012Collects the performance counter Network Interface\Bytes Received/secMicrosoft.Windows.Server.6.2.NetworkAdapter.BytesReceivedPerSec.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionFalseNetwork AdapterBytes Received/sec3000FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.BytesSentPerSec.CollectionNetwork Adapter Bytes Sent per Second Windows Server 2012Collects the performance counter Network Interface\Bytes Sent/secMicrosoft.Windows.Server.6.2.NetworkAdapter.BytesSentPerSec.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionFalseNetwork AdapterBytes Sent/sec3000FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.BytesTotalPerSec.CollectionNetwork Adapter Bytes Total per Second Windows Server 2012Collects the performance counter Network Interface/Bytes Total/secMicrosoft.Windows.Server.6.2.NetworkAdapter.BytesTotalPerSec.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionTrueNetwork AdapterBytes Total/sec3000FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.CurrentBandwidth.CollectionCurrent BandwidthRule collects Network Interface\Current Bandwidth counter.Microsoft.Windows.Server.6.2.NetworkAdapter.CurrentBandwidth.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionTrueNetwork AdapterCurrent Bandwidth6000FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.OutputQueueLength.CollectionOutput Queue LengthRule collects Network Interface\Output Queue Length counter.Microsoft.Windows.Server.6.2.NetworkAdapter.OutputQueueLength.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionFalseNetwork AdapterOutput Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedReads.CollectionPercent Bandwidth Used ReadRule collects BandwidthUsedRead counter for network adapters.Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedReads.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionFalse00FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedTotal.CollectionPercent Bandwidth Used TotalRule collects BandwidthUsedTotal counter for network adapters.Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedTotal.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionTrue00FalseTrue
Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedWrites.CollectionPercent Bandwidth Used WriteRule collects BandwidthUsedWrite counter for network adapters.Microsoft.Windows.Server.6.2.NetworkAdapter.PercentBandwidthUsedWrites.CollectionMicrosoft.Windows.Server.6.2.NetworkAdapterPerformanceCollectionFalse00FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.CheckingFileSystemOccuredOnStartup.CollectionChecking File System Occurred on StartupThis event indicates that the system ran a chkdsk on startupMicrosoft.Windows.Server.6.2.OperatingSystem.CheckingFileSystemOccuredOnStartup.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueApplication
Microsoft.Windows.Server.6.2.OperatingSystem.CleanShutdown.CollectionCollection Rule for Windows Clean Restart EventsThis rule collects the events indicating a clean Windows shutdown.Microsoft.Windows.Server.6.2.OperatingSystem.CleanShutdown.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.DirtyShutdown.CollectionCollection Rule for Windows Dirty Shutdown EventsThis rule collects events indicating a dirty Windows shutdown.Microsoft.Windows.Server.6.2.OperatingSystem.DirtyShutdown.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.DuplicateNameonNetwork.AlertReservedReservedMicrosoft.Windows.Server.6.2.OperatingSystem.DuplicateNameonNetwork.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.EventLogFull.AlertEvent Log File is FullThe event log file is full.Microsoft.Windows.Server.6.2.OperatingSystem.EventLogFull.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.IPAddressConflict.AlertDuplicate IP Address has been DetectedA duplicate IP address has been detected on the networkMicrosoft.Windows.Server.6.2.OperatingSystem.IPAddressConflict.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueErrorNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.LDMAutoImportFailed.AlertReservedReservedMicrosoft.Windows.Server.6.2.OperatingSystem.LDMAutoImportFailed.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueApplication
Microsoft.Windows.Server.6.2.OperatingSystem.LDMCantReadDisk.AlertDisk can not be readLogical Disk Manager reports that the disk can not be readMicrosoft.Windows.Server.6.2.OperatingSystem.LDMCantReadDisk.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.LDMDiskGroupFailed.AlertReservedReservedMicrosoft.Windows.Server.6.2.OperatingSystem.LDMDiskGroupFailed.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueApplication
Microsoft.Windows.Server.6.2.OperatingSystem.LDMVolumeNotStarted.AlertReservedReservedMicrosoft.Windows.Server.6.2.OperatingSystem.LDMVolumeNotStarted.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueApplication
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryAvailableMBytes.CollectionMemory Available Megabytes Windows Server 2012Collects the performance counter Memory\Available MBytesMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryAvailableMBytes.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrueMemoryAvailable MBytes6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCacheBytes.CollectionCache BytesCollects the performance counter Memory\Cache BytesMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryCacheBytes.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryCache Bytes6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCommitLimit.CollectionCommit LimitCollects the performance counter Memory\Commit limitMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryCommitLimit.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryCommit Limit6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryCommittedBytes.CollectionCommitted BytesCollects the performance counter Memory\Committed BytesMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryCommittedBytes.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryCommitted Bytes6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageReadsPerSec.CollectionMemory Page Reads per Second Windows Server 2012Collects the performance counter Memory\Page Reads/Sec.Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageReadsPerSec.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryPage Reads/sec3000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesInputPerSec.CollectionPages Input Per SecondCollects the performance counter Memory\Pages Input/secMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryPagesInputPerSec.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryPages Input/sec6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesOutputPerSec.CollectionPages Output Per SecondCollects the performance counter Memory\Pages Output/secMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryPagesOutputPerSec.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryPages Output/sec6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesPerSec.CollectionMemory Pages per Second Windows Server 2012Collects the performance counter Memory\Pages Reads/Sec.Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPagesPerSec.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrueMemoryPages/sec3000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageWritesPerSec.CollectionMemory Page Writes per Second Windows Server 2012Collects the performance counter Memory\Page Writes/Sec.Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPageWritesPerSec.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryPage Writes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPercentCommittedBytesInUse.CollectionMemory \% Committed Bytes in Use Windows Server 2012Collects the performance counter Memory\\% Committed Bytes in UseMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryPercentCommittedBytesInUse.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemory\% Committed Bytes In Use6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolNonPagedBytes.CollectionMemory Pool Non-paged Bytes Windows Server 2012Collects the performance counter Memory\Pool Nonpaged BytesMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryPoolNonPagedBytes.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrueMemoryPool Nonpaged Bytes6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedBytes.CollectionMemory Pool Paged Bytes Windows Server 2012Collects the performance counter Memory\Pool Paged BytesMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedBytes.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrueMemoryPool Paged Bytes6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedResidentBytes.CollectionPool Paged Resident BytesCollects the performance counter Memory\Pool Paged Resident BytesMicrosoft.Windows.Server.6.2.OperatingSystem.MemoryPoolPagedResidentBytes.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemoryPool Paged Resident Bytes6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.MemorySystemCacheResidentBytes.CollectionSystem Cache Resident BytesCollects the performance counter Memory\System Cache Resident BytesMicrosoft.Windows.Server.6.2.OperatingSystem.MemorySystemCacheResidentBytes.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseMemorySystem Cache Resident Bytes6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.NetworkAdapterDisconnected.CollectionCollection rule for Network Adapter was Disconnected from the NetworkCollection rule for events indicating the network adapter was disconnected from the network.Microsoft.Windows.Server.6.2.OperatingSystem.NetworkAdapterDisconnected.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.NTFSDelayedWriteLost.AlertNTFS - Delayed Write LostNT file system reports a delayed write was lost.Microsoft.Windows.Server.6.2.OperatingSystem.NTFSDelayedWriteLost.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.NTFSFileSystemCorrupt.AlertNTFS - File System CorruptNT file system indicates a corrupt file system.Microsoft.Windows.Server.6.2.OperatingSystem.NTFSFileSystemCorrupt.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdLimitReached.CollectionCollection rule for NTFS Quota Threshold Limit ReachedAn NTFS disk quota threshold limit was reached.Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdLimitReached.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdReached.CollectionCollection rule for NTFS Quota Threshold ReachedAn NTFS disk quota threshold was reached.Microsoft.Windows.Server.6.2.OperatingSystem.NTFSQuotaThresholdReached.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.PageFilePercentUsage.CollectionPage File Percentage Use Windows Server 2012Collection rule for the performance counter Paging File\\% UsageMicrosoft.Windows.Server.6.2.OperatingSystem.PageFilePercentUsage.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalsePaging File\% Usage6000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.PercentMemoryUsed.CollectionPercent Memory UsedThis rule collects data about used physical memory.Microsoft.Windows.Server.6.2.OperatingSystem.PercentMemoryUsed.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrue00FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.PerfCounterDataRequestTimeOut.AlertToo many requests for performance counter data have failedToo many requests for performance counter data have timed out and failed.Microsoft.Windows.Server.6.2.OperatingSystem.PerfCounterDataRequestTimeOut.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueErrorNormalTrueApplication
Microsoft.Windows.Server.6.2.OperatingSystem.PerformanceRegistryCorruption.AlertPerformance registry corruptionCorruption was detected in the registry related to performance counters.Microsoft.Windows.Server.6.2.OperatingSystem.PerformanceRegistryCorruption.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueWarningNormalTrueApplication
Microsoft.Windows.Server.6.2.OperatingSystem.RebootFromBugCheck.CollectionCollection Rule for Windows Restart Events (restarted from bugcheck)Collection rule for events indicating Windows restarted from bugcheckMicrosoft.Windows.Server.6.2.OperatingSystem.RebootFromBugCheck.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.RestartEvent.CollectionCollection Rule for Windows Restarted EventsThis rule collects events indicating Windows has restartedMicrosoft.Windows.Server.6.2.OperatingSystem.RestartEvent.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ServiceEnteredUnpredictableState.AlertA Service has Entered into an Unpredictable StateA service has entered an unpredictable state.Microsoft.Windows.Server.6.2.OperatingSystem.ServiceEnteredUnpredictableState.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueErrorNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ServiceMisconfigured.AlertA Service is MisconfiguredA service has been detected as misconfigured.Microsoft.Windows.Server.6.2.OperatingSystem.ServiceMisconfigured.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00TrueErrorNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.AlertA Service or Driver Failed to StartAn event was detected indicating a service or driver failed to start.Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.CollectionCollection rule for Service or Driver Failed to Start eventsCollection rule for events indicating a service or driver has failed to start.Microsoft.Windows.Server.6.2.OperatingSystem.ServiceOrDriverFailedToStart.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.AlertA Service Terminated UnexpectedlyAn event was collected indicating an unexpected service termination.Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.CollectionCollection rule for unexpected service terminationsCollection rule for events indicating unexpected service terminations.Microsoft.Windows.Server.6.2.OperatingSystem.ServiceTerminatedUnexpextedly.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.AlertA Share Configuration is InvalidA share was detected as having invalid configuration.Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueWarningNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.CollectionCollection rule for invalid Share Configuration DetectedCollection rule for events indicating that a share has invalid configuration.Microsoft.Windows.Server.6.2.OperatingSystem.ShareConfigurationInvalid.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.AlertA Software Update Installation FailedA failed software update installation was detected.Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.AlertMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionFalse00TrueErrorNormalTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.CollectionCollection Rule for Software Update Installation FailedCollection rule for events indicating a failed software update installation.Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdateInstallationFailed.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesInstalled.CollectionCollection Rule for Software Updates Installation EventsCollection rule for events indicating that new software updates were installed.Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesInstalled.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesScheduledForInstallation.CollectionCollection Rule for Software Updates Scheduled Installation EventsCollection rule for events indicating new software updates are scheduled.Microsoft.Windows.Server.6.2.OperatingSystem.SoftwareUpdatesScheduledForInstallation.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemEventCollectionTrue00FalseTrueSystem
Microsoft.Windows.Server.6.2.OperatingSystem.SystemContextSwitchesPerSec.CollectionSystem Context Switches per Second Windows Server 2012Collection rule for the performance counter System\Context Switches/secMicrosoft.Windows.Server.6.2.OperatingSystem.SystemContextSwitchesPerSec.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseSystemContext Switches/sec3000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.SystemProcessorQueueLength.CollectionSystem Processor Queue Length Windows Server 2012Collection rule for the performance counter System\Processor Queue Length.Microsoft.Windows.Server.6.2.OperatingSystem.SystemProcessorQueueLength.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrueSystemProcessor Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentDPCTime.CollectionTotal Processor \% DPC Time Windows Server 2012Collects the performance counter Processor\\% DPC TimeMicrosoft.Windows.Server.6.2.OperatingSystem.TotalPercentDPCTime.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseProcessor Information\% DPC Time3000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentInterruptTime.CollectionTotal Processor Information \% Interrupt Time Windows Server 2012Collects the performance counter Processor Information\\% Interrupt TimeMicrosoft.Windows.Server.6.2.OperatingSystem.TotalPercentInterruptTime.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionFalseProcessor Information\% Interrupt Time3000FalseTrue
Microsoft.Windows.Server.6.2.OperatingSystem.TotalPercentProcessorTime.CollectionProcessor \% Processor Time Total Windows Server 2012Collects the performance counter Processor\\% Processor TimeMicrosoft.Windows.Server.6.2.OperatingSystem.TotalPercentProcessorTime.CollectionMicrosoft.Windows.Server.6.2.OperatingSystemPerformanceCollectionTrueProcessor Information\% Processor Time3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskReadQueueLength.CollectionAverage Physical Disk Read Queue Length Windows Server 2012The average number of read requests that were queued for the selected disk during the sample interval.Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskReadQueueLength.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk Read Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskWriteQueueLength.CollectionAverage Disk Write Queue Length Windows Server 2012 (Physical Disk)The average number of write requests that were queued for the selected disk during the sample interval.Microsoft.Windows.Server.6.2.PhysicalDisk.AverageDiskWriteQueueLength.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk Write Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskQueueLength.CollectionPhysical Disk Average Disk Queue Length Windows Server 2012Collects the performance counter PhysicalDisk\Avg. Disk Queue LengthMicrosoft.Windows.Server.6.2.PhysicalDisk.AvgDiskQueueLength.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerRead.CollectionPhysical Disk Average Disk Seconds per Read Windows Server 2012Collects the performance counter PhysicalDisk\Avg. Disk sec/ReadMicrosoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerRead.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk sec/Read3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerTransfer.CollectionPhysical Disk Average Disk Seconds per Transfer Windows Server 2012Collects the performance counter PhysicalDisk\Avg. Disk sec/Transfer.Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerTransfer.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionTruePhysicalDiskAvg. Disk sec/Transfer3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerWrite.CollectionPhysical Disk Average Disk Seconds per Write Windows Server 2012Collects the performance counter PhysicalDisk\Avg. Disk sec/Write.Microsoft.Windows.Server.6.2.PhysicalDisk.AvgDiskSecPerWrite.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskAvg. Disk sec/Write3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.CurrentDiskQueueLength.CollectionPhysical Disk Current Disk Queue Length Windows Server 2012Collects the performance counter PhysicalDisk\Current Disk Queue LengthMicrosoft.Windows.Server.6.2.PhysicalDisk.CurrentDiskQueueLength.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionTruePhysicalDiskCurrent Disk Queue Length3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.DiskBytesPerSec.CollectionPhysical Disk Disk Bytes per Second Windows Server 2012Collects the performance counter PhysicalDisk\Disk Bytes/sec.Microsoft.Windows.Server.6.2.PhysicalDisk.DiskBytesPerSec.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Bytes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.DiskReadBytesPerSec.CollectionDisk Read Bytes Per Second Windows Server 2012 (Physical Disk)The rate at which bytes are transferred from the disk during read operations.Microsoft.Windows.Server.6.2.PhysicalDisk.DiskReadBytesPerSec.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Read Bytes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.DiskReadsPerSec.CollectionPhysical Disk Reads per Second Windows Server 2012Collects the performance counter PhysicalDisk\Disk Reads/secMicrosoft.Windows.Server.6.2.PhysicalDisk.DiskReadsPerSec.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Reads/sec3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWriteBytesPerSec.CollectionPhysical Disk Write Bytes Per Second Windows Server 2012The rate at which bytes are transferred from the disk during write operations.Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWriteBytesPerSec.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Write Bytes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWritesPerSec.CollectionPhysical Disk Writes per Second Windows Server 2012Collects the performance counter PhysicalDisk\Disk Writes/sec.Microsoft.Windows.Server.6.2.PhysicalDisk.DiskWritesPerSec.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskDisk Writes/sec3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.PercentIdle.Collection\% Physical Disk Idle Time Windows Server 2012The percentage of time during the sample interval that the disk was idle.Microsoft.Windows.Server.6.2.PhysicalDisk.PercentIdle.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDisk\% Idle Time3000FalseTrue
Microsoft.Windows.Server.6.2.PhysicalDisk.SplitIOPerSec.CollectionPhysical Disk Split I/O Per Second Windows Server 2012The rate at which I/Os to the disk were split into multiple I/Os.Microsoft.Windows.Server.6.2.PhysicalDisk.SplitIOPerSec.CollectionMicrosoft.Windows.Server.6.2.PhysicalDiskPerformanceCollectionFalsePhysicalDiskSplit IO/Sec6000FalseTrue
Microsoft.Windows.Server.6.2.Processor.PercentDPCTime.CollectionProcessor Information \% DPC Time Windows Server 2012Collects the performance counter Processor Information\\% DPC TimeMicrosoft.Windows.Server.6.2.Processor.PercentDPCTime.CollectionMicrosoft.Windows.Server.6.2.ProcessorPerformanceCollectionFalseProcessor Information\% DPC Time3000FalseTrue
Microsoft.Windows.Server.6.2.Processor.PercentInterruptTime.CollectionProcessor Information \% Interrupt Time Windows Server 2012Collects the performance counter Processor Information\\% Interrupt TimeMicrosoft.Windows.Server.6.2.Processor.PercentInterruptTime.CollectionMicrosoft.Windows.Server.6.2.ProcessorPerformanceCollectionFalseProcessor Information\% Interrupt Time3000FalseTrue
Microsoft.Windows.Server.6.2.Processor.PercentProcessorTime.CollectionProcessor \% Processor Time Windows Server 2012Collects the performance counter Processor\\% Processor TimeMicrosoft.Windows.Server.6.2.Processor.PercentProcessorTime.CollectionMicrosoft.Windows.Server.6.2.ProcessorPerformanceCollectionTrueProcessor Information\% Processor Time3000FalseTrue