| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
![Microsoft.Windows.Server.10.0.CacheDataMapHitsPercent.Collection](/images/Rule.png) | Cache Data Map Hits Percent | Collects the performance counter Memory\Data Map Hits \% | Microsoft.Windows.Server.10.0.CacheDataMapHitsPercent.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Cache | Data Map Hits \% | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskReadQueueLength.Collection](/images/Rule.png) | Average Logical Disk Read Queue Length Windows Server 2016 and above | The average number of read requests that were queued for the selected disk during the sample interval. | Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskReadQueueLength.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Avg. Disk Read Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskWriteQueueLength.Collection](/images/Rule.png) | Average Disk Write Queue Length Windows Server 2016 and above (Logical Disk) | The average number of write requests that were queued for the selected disk during the sample interval. | Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskWriteQueueLength.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Avg. Disk Write Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskQueueLength.Collection](/images/Rule.png) | Collection Rule for the Average Disk Queue Length Windows Server 2016 and above | Collects the performance counter LogicalDisk\Avg Disk Queue Length | Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Avg. Disk Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerRead.Collection](/images/Rule.png) | Collection Rule for Average Disk Seconds Per Read Windows Server 2016 and above | Collects the performance counter LogicalDisk\Avg Disk Sec Per Read | Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Avg. Disk sec/Read | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerTransfer.Collection](/images/Rule.png) | Collection Rule for Average Disk Seconds Per Transfer Windows Server 2016 and above | Collects the performance counter LogicalDisk\Avg Disk Sec Per Transfer | Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | True | LogicalDisk | Avg. Disk sec/Transfer | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerWrite.Collection](/images/Rule.png) | Collection Rule for Average Disk Seconds Per Write Windows Server 2016 and above | Collects the performance counter LogicalDisk\Avg Disk Sec Per Write | Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Avg. Disk sec/Write | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.CurrentDiskQueueLength.Collection](/images/Rule.png) | Collection rule for Current Disk Queue Length Windows Server 2016 and above | Collects the performance counter LogicalDisk\Current Disk Queue Length | Microsoft.Windows.Server.10.0.LogicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | True | LogicalDisk | Current Disk Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.DiskBytesPerSec.Collection](/images/Rule.png) | Collection Rule for Disk Bytes Per Second Windows Server 2016 and above | Collects the performance counter LogicalDisk\Disk Bytes Per Second | Microsoft.Windows.Server.10.0.LogicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Bytes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadBytesPerSec.Collection](/images/Rule.png) | Disk Read Bytes Per Second Windows Server 2016 and above (Logical Disk) | The rate at which bytes are transferred from the disk during read operations. | Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadBytesPerSec.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Read Bytes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadsPerSec.Collection](/images/Rule.png) | Collection Rule for Disk Reads Per Second Windows Server 2016 and above | Collects the performance counter LogicalDisk\Disk Reads Per Second | Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Reads/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.DiskWriteBytesPerSec.Collection](/images/Rule.png) | Logical Disk Write Bytes Per Second Windows Server 2016 and above | The rate at which bytes are transferred from the disk during write operations. | Microsoft.Windows.Server.10.0.LogicalDisk.DiskWriteBytesPerSec.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Write Bytes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.DiskWritesPerSec.Collection](/images/Rule.png) | Collection Rule for Disk Writes Per Second Windows Server 2016 and above | Collects the performance counter LogicalDisk\Disk Writes Per Second | Microsoft.Windows.Server.10.0.LogicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Disk Writes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.FreeMB.Collection](/images/Rule.png) | Logical Disk Free Megabytes Windows Server 2016 and above | The space in megabytes on the logical disk that is unallocated | Microsoft.Windows.Server.10.0.LogicalDisk.FreeMB.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | True | LogicalDisk | Free Megabytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpace.Collection](/images/Rule.png) | \% Logical Disk Free Space Windows Server 2016 and above | The percentage of total usable space on the logical disk that is unallocated | Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpace.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | True | LogicalDisk | \% Free Space | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.NTFSFileSystemCorrupt.Alert](/images/Rule.png) | Windows Server 2016 and above NTFS File System Corrupt Rule | This rule generates alerts base on system events that indicates a NTFS File System Corruption. | Microsoft.Windows.Server.10.0.LogicalDisk.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Server.10.0.LogicalDisk | EventCollection | True | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.LogicalDisk.PercentIdle.Collection](/images/Rule.png) | \% Logical Disk Idle Time Windows Server 2016 and above | The percentage of time during the sample interval that the disk was idle. | Microsoft.Windows.Server.10.0.LogicalDisk.PercentIdle.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | True | LogicalDisk | \% Idle Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalDisk.SplitIOPerSec.Collection](/images/Rule.png) | Logical Disk Split I/O Per Second Windows Server 2016 and above | The rate at which I/Os to the disk were split into multiple I/Os. | Microsoft.Windows.Server.10.0.LogicalDisk.SplitIOPerSec.Collection | Microsoft.Windows.Server.10.0.LogicalDisk | PerformanceCollection | False | LogicalDisk | Split IO/Sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalProcessor.PercentDPCTime.Collection](/images/Rule.png) | Logical Processor \% DPC Time Windows Server 2016 and above | Collects the performance counter Processor\\% DPC Time | Microsoft.Windows.Server.10.0.LogicalProcessor.PercentDPCTime.Collection | Microsoft.Windows.Server.10.0.LogicalProcessor | PerformanceCollection | False | Processor | \% DPC Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalProcessor.PercentInterruptTime.Collection](/images/Rule.png) | Logical Processor Information \% Interrupt Time Windows Server 2016 and above | Collects the performance counter Processor Information\\% Interrupt Time | Microsoft.Windows.Server.10.0.LogicalProcessor.PercentInterruptTime.Collection | Microsoft.Windows.Server.10.0.LogicalProcessor | PerformanceCollection | False | Processor | \% Interrupt Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.LogicalProcessor.PercentProcessorTime.Collection](/images/Rule.png) | Logical Processor \% Processor Time Windows Server 2016 and above | Collects the performance counter Processor\\% Processor Time | Microsoft.Windows.Server.10.0.LogicalProcessor.PercentProcessorTime.Collection | Microsoft.Windows.Server.10.0.LogicalProcessor | PerformanceCollection | True | Processor | \% Processor Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.MemoryFreeSystemPageTableEntries.Collection](/images/Rule.png) | Free System Page Table Entries | Collects the performance counter Memory\Free System Page Table Entries | Microsoft.Windows.Server.10.0.MemoryFreeSystemPageTableEntries.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | Memory | Free System Page Table Entries | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.BytesReceivedPerSec.Collection](/images/Rule.png) | Network Adapter Bytes Received per Second Windows Server 2016 and above | Collects the performance counter Network Interface\Bytes Received/sec | Microsoft.Windows.Server.10.0.NetworkAdapter.BytesReceivedPerSec.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | False | Network Adapter | Bytes Received/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.BytesSentPerSec.Collection](/images/Rule.png) | Network Adapter Bytes Sent per Second Windows Server 2016 and above | Collects the performance counter Network Interface\Bytes Sent/sec | Microsoft.Windows.Server.10.0.NetworkAdapter.BytesSentPerSec.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | False | Network Adapter | Bytes Sent/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.BytesTotalPerSec.Collection](/images/Rule.png) | Network Adapter Bytes Total per Second Windows Server 2016 and above | Collects the performance counter Network Interface/Bytes Total/sec | Microsoft.Windows.Server.10.0.NetworkAdapter.BytesTotalPerSec.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | True | Network Adapter | Bytes Total/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.CurrentBandwidth.Collection](/images/Rule.png) | Current Bandwidth | Rule collects Network Interface\Current Bandwidth counter. | Microsoft.Windows.Server.10.0.NetworkAdapter.CurrentBandwidth.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | True | Network Adapter | Current Bandwidth | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.OutputQueueLength.Collection](/images/Rule.png) | Output Queue Length | Rule collects Network Interface\Output Queue Length counter. | Microsoft.Windows.Server.10.0.NetworkAdapter.OutputQueueLength.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | False | Network Adapter | Output Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedReads.Collection](/images/Rule.png) | Percent Bandwidth Used Read | Rule collects Bandwidth Used Read counter for network adapters. | Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedReads.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedTotal.Collection](/images/Rule.png) | Percent Bandwidth Used Total | Rule collects Bandwidth Used Total counter for network adapters. | Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedTotal.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | True | | | 0 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedWrites.Collection](/images/Rule.png) | Percent Bandwidth Used Write | Rule collects Bandwidth Used Write counter for network adapters. | Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedWrites.Collection | Microsoft.Windows.Server.10.0.NetworkAdapter | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection](/images/Rule.png) | Collection Rule for Checking the File System Occurred on Startup | This rule collects the events indicates that the system ran a chkdsk on startup | Microsoft.Windows.Server.10.0.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | Application |
![Microsoft.Windows.Server.10.0.OperatingSystem.CleanShutdown.Collection](/images/Rule.png) | Collection Rule for Windows Clean Restart Events | This rule collects the events indicating a clean Windows shutdown. | Microsoft.Windows.Server.10.0.OperatingSystem.CleanShutdown.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.DirtyShutdown.Collection](/images/Rule.png) | Collection Rule for Windows Dirty Shutdown Events | This rule collects events indicating a dirty Windows shutdown. | Microsoft.Windows.Server.10.0.OperatingSystem.DirtyShutdown.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.EventLogFull.Alert](/images/Rule.png) | Event Log File is Full | The event log file is full. | Microsoft.Windows.Server.10.0.OperatingSystem.EventLogFull.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.IPAddressConflict.Alert](/images/Rule.png) | Duplicate IP Address has been Detected | A duplicate IP address has been detected on the network | Microsoft.Windows.Server.10.0.OperatingSystem.IPAddressConflict.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Error | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.LDMCantReadDisk.Alert](/images/Rule.png) | Disk can not be read | Logical Disk Manager reports that the disk can not be read | Microsoft.Windows.Server.10.0.OperatingSystem.LDMCantReadDisk.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryAvailableMBytes.Collection](/images/Rule.png) | Memory Available Megabytes Windows Server 2016 and above | Collects the performance counter Memory\Available MBytes | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryAvailableMBytes.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | Memory | Available MBytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCacheBytes.Collection](/images/Rule.png) | Cache Bytes | Collects the performance counter Memory\Cache Bytes | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCacheBytes.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Cache Bytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommitLimit.Collection](/images/Rule.png) | Commit Limit | Collects the performance counter Memory\Commit limit | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommitLimit.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Commit Limit | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommittedBytes.Collection](/images/Rule.png) | Committed Bytes | Collects the performance counter Memory\Committed Bytes | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommittedBytes.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Committed Bytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageReadsPerSec.Collection](/images/Rule.png) | Memory Page Reads per Second Windows Server 2016 and above | Collects the performance counter Memory\Page Reads/Sec. | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageReadsPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Page Reads/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesInputPerSec.Collection](/images/Rule.png) | Pages Input Per Second | Collects the performance counter Memory\Pages Input/sec | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesInputPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Pages Input/sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesOutputPerSec.Collection](/images/Rule.png) | Pages Output Per Second | Collects the performance counter Memory\Pages Output/sec | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesOutputPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Pages Output/sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesPerSec.Collection](/images/Rule.png) | Memory Pages per Second Windows Server 2016 and above | Collects the performance counter Memory\Pages Reads/Sec. | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | Memory | Pages/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageWritesPerSec.Collection](/images/Rule.png) | Memory Page Writes per Second Windows Server 2016 and above | Collects the performance counter Memory\Page Writes/Sec. | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageWritesPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Page Writes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection](/images/Rule.png) | Memory \% Committed Bytes in Use Windows Server 2016 and above | Collects the performance counter Memory\\% Committed Bytes in Use | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | \% Committed Bytes In Use | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolNonPagedBytes.Collection](/images/Rule.png) | Memory Pool Non-paged Bytes Windows Server 2016 and above | Collects the performance counter Memory\Pool Nonpaged Bytes | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolNonPagedBytes.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | Memory | Pool Nonpaged Bytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedBytes.Collection](/images/Rule.png) | Memory Pool Paged Bytes Windows Server 2016 and above | Collects the performance counter Memory\Pool Paged Bytes | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedBytes.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | Memory | Pool Paged Bytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedResidentBytes.Collection](/images/Rule.png) | Pool Paged Resident Bytes | Collects the performance counter Memory\Pool Paged Resident Bytes | Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedResidentBytes.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | Pool Paged Resident Bytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.MemorySystemCacheResidentBytes.Collection](/images/Rule.png) | System Cache Resident Bytes | Collects the performance counter Memory\System Cache Resident Bytes | Microsoft.Windows.Server.10.0.OperatingSystem.MemorySystemCacheResidentBytes.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Memory | System Cache Resident Bytes | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.NetworkAdapterDisconnected.Collection](/images/Rule.png) | Collection rule for Network Adapter was Disconnected from the Network | Collection rule for events indicating the network adapter was disconnected from the network. | Microsoft.Windows.Server.10.0.OperatingSystem.NetworkAdapterDisconnected.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.NTFSDelayedWriteLost.Alert](/images/Rule.png) | NTFS - Delayed Write Lost | NT file system reports a delayed write was lost. | Microsoft.Windows.Server.10.0.OperatingSystem.NTFSDelayedWriteLost.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.NTFSFileSystemCorrupt.Alert](/images/Rule.png) | NTFS - File System Corrupt | NT file system indicates a corrupt file system. | Microsoft.Windows.Server.10.0.OperatingSystem.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection](/images/Rule.png) | Collection rule for NTFS Quota Threshold Limit Reached | An NTFS disk quota threshold limit was reached. | Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdReached.Collection](/images/Rule.png) | Collection rule for NTFS Quota Threshold Reached | An NTFS disk quota threshold was reached. | Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdReached.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.PageFilePercentUsage.Collection](/images/Rule.png) | Page File Percentage Use Windows Server 2016 and above | Collection rule for the performance counter Paging File\\% Usage | Microsoft.Windows.Server.10.0.OperatingSystem.PageFilePercentUsage.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Paging File | \% Usage | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.PercentMemoryUsed.Collection](/images/Rule.png) | Percent Memory Used | This rule collects data about used physical memory. | Microsoft.Windows.Server.10.0.OperatingSystem.PercentMemoryUsed.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | | | 0 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.PerfCounterDataRequestTimeOut.Alert](/images/Rule.png) | Too many requests for performance counter data have failed | Too many requests for performance counter data have timed out and failed. | Microsoft.Windows.Server.10.0.OperatingSystem.PerfCounterDataRequestTimeOut.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Error | Normal | True | Application |
![Microsoft.Windows.Server.10.0.OperatingSystem.PerformanceRegistryCorruption.Alert](/images/Rule.png) | Performance registry corruption | Corruption was detected in the registry related to performance counters. | Microsoft.Windows.Server.10.0.OperatingSystem.PerformanceRegistryCorruption.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Warning | Normal | True | Application |
![Microsoft.Windows.Server.10.0.OperatingSystem.RebootFromBugCheck.Collection](/images/Rule.png) | Collection Rule for Windows Restart Events (restarted from bug check) | Collection rule for events indicating Windows restarted from bug check | Microsoft.Windows.Server.10.0.OperatingSystem.RebootFromBugCheck.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.RestartEvent.Collection](/images/Rule.png) | Collection Rule for Windows Restarted Events | This rule collects events indicating Windows has restarted | Microsoft.Windows.Server.10.0.OperatingSystem.RestartEvent.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ServerServiceConfiguration.Rule](/images/Rule.png) | Server Service Configuration Health Rule | Server Service Configuration Health Rule | Microsoft.Windows.Server.10.0.OperatingSystem.ServerServiceConfiguration.Rule | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ServiceEnteredUnpredictableState.Alert](/images/Rule.png) | A Service has Entered into an Unpredictable State | A service has entered an unpredictable state. | Microsoft.Windows.Server.10.0.OperatingSystem.ServiceEnteredUnpredictableState.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Error | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ServiceMisconfigured.Alert](/images/Rule.png) | A Service is misconfigured | A service has been detected as misconfigured. | Microsoft.Windows.Server.10.0.OperatingSystem.ServiceMisconfigured.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | True | | | 0 | 0 | | True | Error | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Alert](/images/Rule.png) | A Service or Driver Failed to Start | An event was detected indicating a service or driver failed to start. | Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Collection](/images/Rule.png) | Collection rule for Service or Driver Failed to Start events | Collection rule for events indicating a service or driver has failed to start. | Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Alert](/images/Rule.png) | A Service Terminated Unexpectedly | An event was collected indicating an unexpected service termination. | Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Collection](/images/Rule.png) | Collection rule for unexpected service terminations | Collection rule for events indicating unexpected service terminations. | Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Alert](/images/Rule.png) | A Share Configuration is Invalid | A share was detected as having invalid configuration. | Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Warning | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Collection](/images/Rule.png) | Collection rule for invalid Share Configuration Detected | Collection rule for events indicating that a share has invalid configuration. | Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Alert](/images/Rule.png) | A Software Update Installation Failed | A failed software update installation was detected. | Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Alert | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | True | Error | Normal | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Collection](/images/Rule.png) | Collection Rule for Software Update Installation Failed | Collection rule for events indicating a failed software update installation. | Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesInstalled.Collection](/images/Rule.png) | Collection Rule for Software Updates Installation Events | Collection rule for events indicating that new software updates were installed. | Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesInstalled.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection](/images/Rule.png) | Collection Rule for Software Updates Scheduled Installation Events | Collection rule for events indicating new software updates are scheduled. | Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | EventCollection | False | | | 0 | 0 | | False | | | True | System |
![Microsoft.Windows.Server.10.0.OperatingSystem.SystemContextSwitchesPerSec.Collection](/images/Rule.png) | System Context Switches per Second Windows Server 2016 and above | Collection rule for the performance counter System\Context Switches/sec | Microsoft.Windows.Server.10.0.OperatingSystem.SystemContextSwitchesPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | System | Context Switches/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.SystemProcessorQueueLength.Collection](/images/Rule.png) | System Processor Queue Length Windows Server 2016 and above | Collection rule for the performance counter System\Processor Queue Length. | Microsoft.Windows.Server.10.0.OperatingSystem.SystemProcessorQueueLength.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | System | Processor Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentDPCTime.Collection](/images/Rule.png) | Total Processor \% DPC Time Windows Server 2016 and above | Collects the performance counter Processor\\% DPC Time | Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentDPCTime.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Processor Information | \% DPC Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentInterruptTime.Collection](/images/Rule.png) | Total Processor Information \% Interrupt Time Windows Server 2016 and above | Collects the performance counter Processor Information\\% Interrupt Time | Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentInterruptTime.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | Processor Information | \% Interrupt Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentProcessorTime.Collection](/images/Rule.png) | Processor \% Processor Time Total Windows Server 2016 and above | Collects the performance counter Processor\\% Processor Time | Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentProcessorTime.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | True | Processor Information | \% Processor Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.AverageDiskReadQueueLength.Collection](/images/Rule.png) | Average Physical Disk Read Queue Length Windows Server 2016 and above | The average number of read requests that were queued for the selected disk during the sample interval. | Microsoft.Windows.Server.10.0.PhysicalDisk.AverageDiskReadQueueLength.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Avg. Disk Read Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.AverageDiskWriteQueueLength.Collection](/images/Rule.png) | Average Disk Write Queue Length Windows Server 2016 and above (Physical Disk) | The average number of write requests that were queued for the selected disk during the sample interval. | Microsoft.Windows.Server.10.0.PhysicalDisk.AverageDiskWriteQueueLength.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Avg. Disk Write Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskQueueLength.Collection](/images/Rule.png) | Physical Disk Average Disk Queue Length Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Avg. Disk Queue Length | Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Avg. Disk Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskSecPerRead.Collection](/images/Rule.png) | Physical Disk Average Disk Seconds per Read Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Avg. Disk sec/Read | Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Avg. Disk sec/Read | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskSecPerTransfer.Collection](/images/Rule.png) | Physical Disk Average Disk Seconds per Transfer Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Avg. Disk sec/Transfer. | Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | True | PhysicalDisk | Avg. Disk sec/Transfer | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskSecPerWrite.Collection](/images/Rule.png) | Physical Disk Average Disk Seconds per Write Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Avg. Disk sec/Write. | Microsoft.Windows.Server.10.0.PhysicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Avg. Disk sec/Write | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.CurrentDiskQueueLength.Collection](/images/Rule.png) | Physical Disk Current Disk Queue Length Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Current Disk Queue Length | Microsoft.Windows.Server.10.0.PhysicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | True | PhysicalDisk | Current Disk Queue Length | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.DiskBytesPerSec.Collection](/images/Rule.png) | Physical Disk Disk Bytes per Second Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Disk Bytes/sec. | Microsoft.Windows.Server.10.0.PhysicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Bytes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.DiskReadBytesPerSec.Collection](/images/Rule.png) | Disk Read Bytes Per Second Windows Server 2016 and above (Physical Disk) | The rate at which bytes are transferred from the disk during read operations. | Microsoft.Windows.Server.10.0.PhysicalDisk.DiskReadBytesPerSec.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Read Bytes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.DiskReadsPerSec.Collection](/images/Rule.png) | Physical Disk Reads per Second Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Disk Reads/sec | Microsoft.Windows.Server.10.0.PhysicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Reads/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.DiskWriteBytesPerSec.Collection](/images/Rule.png) | Physical Disk Write Bytes Per Second Windows Server 2016 and above | The rate at which bytes are transferred from the disk during write operations. | Microsoft.Windows.Server.10.0.PhysicalDisk.DiskWriteBytesPerSec.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Write Bytes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.DiskWritesPerSec.Collection](/images/Rule.png) | Physical Disk Writes per Second Windows Server 2016 and above | Collects the performance counter PhysicalDisk\Disk Writes/sec. | Microsoft.Windows.Server.10.0.PhysicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Disk Writes/sec | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.PercentIdle.Collection](/images/Rule.png) | \% Physical Disk Idle Time Windows Server 2016 and above | The percentage of time during the sample interval that the disk was idle. | Microsoft.Windows.Server.10.0.PhysicalDisk.PercentIdle.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | \% Idle Time | 300 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.PhysicalDisk.SplitIOPerSec.Collection](/images/Rule.png) | Physical Disk Split I/O Per Second Windows Server 2016 and above | The rate at which I/Os to the disk were split into multiple I/Os. | Microsoft.Windows.Server.10.0.PhysicalDisk.SplitIOPerSec.Collection | Microsoft.Windows.Server.10.0.PhysicalDisk | PerformanceCollection | False | PhysicalDisk | Split IO/Sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.Processor.PercentDPCTime.Collection](/images/Rule.png) | Processor Information \% DPC Time Windows Server 2016 and above | Collects the performance counter Processor Information\\% DPC Time | Microsoft.Windows.Server.10.0.Processor.PercentDPCTime.Collection | Microsoft.Windows.Server.10.0.Processor | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.Processor.PercentInterruptTime.Collection](/images/Rule.png) | Processor Information \% Interrupt Time Windows Server 2016 and above | Collects the performance counter Processor Information\\% Interrupt Time | Microsoft.Windows.Server.10.0.Processor.PercentInterruptTime.Collection | Microsoft.Windows.Server.10.0.Processor | PerformanceCollection | False | | | 0 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.Processor.PercentProcessorTime.Collection](/images/Rule.png) | Processor \% Processor Time Windows Server 2016 and above | Collects the performance counter Processor\\% Processor Time | Microsoft.Windows.Server.10.0.Processor.PercentProcessorTime.Collection | Microsoft.Windows.Server.10.0.Processor | PerformanceCollection | True | | | 0 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv4.ConnectionFailures.Collection](/images/Rule.png) | TCPv4 Connection Failures | The rule collects TCPv4\Connection Failures performance counter. | Microsoft.Windows.Server.10.0.TCPv4.ConnectionFailures.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv4 | Connection Failures | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv4.ConnectionsEstablished.Collection](/images/Rule.png) | TCPv4 Connections Established | This rule collects TCPv4\Connections Established performance counter. | Microsoft.Windows.Server.10.0.TCPv4.ConnectionsEstablished.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv4 | Connections Established | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv4.ConnectionsReset.Collection](/images/Rule.png) | TCPv4 Connections Reset | The rule collects TCPv4\Connections Reset performance counter. | Microsoft.Windows.Server.10.0.TCPv4.ConnectionsReset.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv4 | Connections Reset | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec.Collection](/images/Rule.png) | TCPv4 Segments Received Per Second | The rule collects TCPv4\Segments Received/sec performance counter. | Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv4 | Segments Received/sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv4.SegmentsRetransmittedPerSec.Collection](/images/Rule.png) | TCPv4 Segments Retransmitted Per Second | The rule collects TCPv4\Segments Retransmitted/sec performance counter. | Microsoft.Windows.Server.10.0.TCPv4.SegmentsRetransmittedPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv4 | Segments Retransmitted/sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv4.SegmentsSentPerSec.Collection](/images/Rule.png) | TCPv4 Segments Sent Per Second | The rule collects TCPv4\Segments Sent/sec counter. | Microsoft.Windows.Server.10.0.TCPv4.SegmentsSentPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv4 | Segments Sent/sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv6.ConnectionFailures.Collection](/images/Rule.png) | TCPv6 Connection Failures | The rule collects TCPv6\Connection Failures performance counter. | Microsoft.Windows.Server.10.0.TCPv6.ConnectionFailures.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv6 | Connection Failures | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv6.ConnectionsEstablished.Collection](/images/Rule.png) | TCPv6 Connections Established | The rule collects TCPv6\Connections Established performance counter. | Microsoft.Windows.Server.10.0.TCPv6.ConnectionsEstablished.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv6 | Connections Established | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv6.ConnectionsReset.Collection](/images/Rule.png) | TCPv6 Connections Reset | The rule collects TCPv6\Connections Reset performance counter. | Microsoft.Windows.Server.10.0.TCPv6.ConnectionsReset.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv6 | Connections Reset | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv6.SegmentsReceivedPerSec.Collection](/images/Rule.png) | TCPv6 Segments Received Per Second | The rule collects TCPv6\Segments Received/sec performance counter. | Microsoft.Windows.Server.10.0.TCPv6.SegmentsReceivedPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv6 | Segments Received/sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv6.SegmentsRetransmittedPerSec.Collection](/images/Rule.png) | TCPv6 Segments Retransmitted Per Second | The rule collects TCPv6\Segments Retransmitted/sec performance counter. | Microsoft.Windows.Server.10.0.TCPv6.SegmentsRetransmittedPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv6 | Segments Retransmitted/sec | 600 | 0 | | False | | | True | |
![Microsoft.Windows.Server.10.0.TCPv6.SegmentsSentPerSec.Collection](/images/Rule.png) | TCPv6 Segments Sent Per Second | The rule collects TCPv6\Segments Sent/sec performance counter. | Microsoft.Windows.Server.10.0.TCPv6.SegmentsSentPerSec.Collection | Microsoft.Windows.Server.10.0.OperatingSystem | PerformanceCollection | False | TCPv6 | Segments Sent/sec | 600 | 0 | | False | | | True | |