Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.CorruptOrUnreadableEvents

Monitor Details

Target:Microsoft.SystemCenter.HealthService
Parent Monitor:Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.Rollup
Type:UnitMonitor
UnitMonitor Type:Microsoft.Windows.RepeatedEventLogSingleEventLog2StateMonitorType
DisplayName:Many Corrupt or Unreadable Windows Events
Description:This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.
ManagementPack:Microsoft.SystemCenter.2007

Diagnostics and Recoveries

StateDiagnostic
StateRecovery

Element Definition

-<UnitMonitor ID="Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.CorruptOrUnreadableEvents"Accessibility="Public"Enabled="true"Target="SCLibrary!Microsoft.SystemCenter.HealthService"ParentMonitorID="Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.Rollup"Remotable="true"Priority="Normal"TypeID="Windows!Microsoft.Windows.RepeatedEventLogSingleEventLog2StateMonitorType"ConfirmDelivery="true">
 <Category>AvailabilityHealth</Category>
-<AlertSettings AlertMessage="Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.CorruptOrUnreadableEvents_AlertMessageResourceID">
 <AlertOnState>Warning</AlertOnState>
 <AutoResolve>true</AutoResolve>
 <AlertPriority>Low</AlertPriority>
 <AlertSeverity>Warning</AlertSeverity>
-<AlertParameters>
 <AlertParameter1>$Data/Context/Context/DataItem/EventDescription$</AlertParameter1>
 </AlertParameters>
 </AlertSettings>
-<OperationalStates>
 <OperationalState ID="SuccessfullyReadEvent"MonitorTypeStateID="EventRaised"HealthState="Success"/>
 <OperationalState ID="ManyCorruptEvents"MonitorTypeStateID="RepeatedEventRaised"HealthState="Warning"/>
 </OperationalStates>
-<Configuration>
 <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
 <LogName>Operations Manager</LogName>
-<Expression>
-<Or>
-<Expression>
-<And>
-<Expression>
-<Or>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="UnsignedInteger">26005</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="UnsignedInteger">25005</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
 </Or>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="String">PublisherName</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="String">Health Service Modules</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <Value Type="String">$Target/ManagementGroup/Name$</Value>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <XPathQuery Type="String">Params/Param[1]</XPathQuery>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
 </And>
 </Expression>
-<Expression>
-<And>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="String">PublisherName</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="String">Health Service ESE Store</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="UnsignedInteger">102</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
 </And>
 </Expression>
 </Or>
 </Expression>
 <RepeatedComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</RepeatedComputerName>
 <RepeatedLogName>Operations Manager</RepeatedLogName>
-<RepeatedExpression>
-<And>
-<Expression>
-<Or>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="UnsignedInteger">26008</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="UnsignedInteger">25008</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="UnsignedInteger">26009</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="UnsignedInteger">25009</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
 </Or>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <XPathQuery Type="String">PublisherName</XPathQuery>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <Value Type="String">Health Service Modules</Value>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
-<Expression>
-<SimpleExpression>
-<ValueExpression>
 <Value Type="String">$Target/ManagementGroup/Name$</Value>
 </ValueExpression>
 <Operator>Equal</Operator>
-<ValueExpression>
 <XPathQuery Type="String">Params/Param[1]</XPathQuery>
 </ValueExpression>
 </SimpleExpression>
 </Expression>
 </And>
 </RepeatedExpression>
-<Consolidator>
-<ConsolidationProperties>
 <PropertyXPathQuery>Params/Param[1]</PropertyXPathQuery>
 </ConsolidationProperties>
-<TimeControl>
-<WithinTimeSchedule>
 <Interval>300</Interval>
 </WithinTimeSchedule>
 </TimeControl>
-<CountingCondition>
 <Count>20</Count>
 <CountMode>OnNewItemTestOutputRestart_OnTimerSlideByOne</CountMode>
 </CountingCondition>
 </Consolidator>
 </Configuration>
 </UnitMonitor>

Social Bar

Comments