Notice the “Search” field below. Use this for filtering.

All Workflows
Index EntityName EntityId Path ClassName ClassId WorkflowName WorkflowDisplayName WorkflowType WorkflowId WorkflowMPName Enabled GeneratesAlert AlertSeverity AlertPriority Overridden Description Parameters Overrides
1 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpace.Collection % Logical Disk Free Space Windows Server 2016 and 1709+ Rule 791461af-bd41-0dc4-6401-566b1d474944 Microsoft.Windows.Server.2016.Monitoring true False False The percentage of total usable space on the logical disk that is unallocated
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Free Space
Frequency 600
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 6
ObjectName LogicalDisk
Tolerance 10
ToleranceType Absolute
2 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpace.Collection % Logical Disk Free Space Windows Server 2016 and 1709+ Rule 791461af-bd41-0dc4-6401-566b1d474944 Microsoft.Windows.Server.2016.Monitoring true False False The percentage of total usable space on the logical disk that is unallocated
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Free Space
Frequency 600
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 6
ObjectName LogicalDisk
Tolerance 10
ToleranceType Absolute
3 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.PercentIdle.Collection % Logical Disk Idle Time Windows Server 2016 and 1709+ Rule 4c9ee2ab-52ad-f204-1efe-22b03fb08480 Microsoft.Windows.Server.2016.Monitoring true False False The percentage of time during the sample interval that the disk was idle.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Idle Time
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 50
ToleranceType Absolute
4 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.PercentIdle.Collection % Logical Disk Idle Time Windows Server 2016 and 1709+ Rule 4c9ee2ab-52ad-f204-1efe-22b03fb08480 Microsoft.Windows.Server.2016.Monitoring true False False The percentage of time during the sample interval that the disk was idle.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Idle Time
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 50
ToleranceType Absolute
5 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpace [Deprecated] Logical Disk Free Space Monitor a3d74352-23f0-8cd1-19e8-d602fef591b2 Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitors the percentage free space and number of free MBytes remaining on a logical disk. Only when both the low percentage free space and low number of free MBytes thresholds are reached, the disk is flagged as having low disk free space.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 900
NonSystemDriveErrorMBytesThreshold 1000
NonSystemDriveErrorPercentThreshold 5
NonSystemDriveWarningMBytesThreshold 2000
NonSystemDriveWarningPercentThreshold 10
NumSamples 4
SystemDriveErrorMBytesThreshold 300
SystemDriveErrorPercentThreshold 5
SystemDriveWarningMBytesThreshold 500
SystemDriveWarningPercentThreshold 10
6 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpace [Deprecated] Logical Disk Free Space Monitor a3d74352-23f0-8cd1-19e8-d602fef591b2 Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitors the percentage free space and number of free MBytes remaining on a logical disk. Only when both the low percentage free space and low number of free MBytes thresholds are reached, the disk is flagged as having low disk free space.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 900
NonSystemDriveErrorMBytesThreshold 1000
NonSystemDriveErrorPercentThreshold 5
NonSystemDriveWarningMBytesThreshold 2000
NonSystemDriveWarningPercentThreshold 10
NumSamples 4
SystemDriveErrorMBytesThreshold 300
SystemDriveErrorPercentThreshold 5
SystemDriveWarningMBytesThreshold 500
SystemDriveWarningPercentThreshold 10
7 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceEnteredUnpredictableState.Alert A Service has Entered into an Unpredictable State Rule 2974b246-1e20-dbf4-7a53-1f35260c264e Microsoft.Windows.Server.2016.Monitoring true True Error Normal False A service has entered an unpredictable state.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
8 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceEnteredUnpredictableState.Alert A Service has Entered into an Unpredictable State Rule 2974b246-1e20-dbf4-7a53-1f35260c264e Microsoft.Windows.Server.2016.Monitoring true True Error Normal False A service has entered an unpredictable state.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
9 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceMisconfigured.Alert A Service is misconfigured Rule 6852aacf-8051-e030-60ce-0f118ce75fa4 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False A service has been detected as misconfigured.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
10 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceMisconfigured.Alert A Service is misconfigured Rule 6852aacf-8051-e030-60ce-0f118ce75fa4 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False A service has been detected as misconfigured.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
11 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Alert A Service or Driver Failed to Start Rule cb2e6b46-c45f-db8e-7081-2b17a712e1f1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False An event was detected indicating a service or driver failed to start.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
12 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Alert A Service or Driver Failed to Start Rule cb2e6b46-c45f-db8e-7081-2b17a712e1f1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False An event was detected indicating a service or driver failed to start.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
13 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Alert A Service Terminated Unexpectedly Rule 2090d712-a6cf-9911-130b-7c50cf40ebb1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False An event was collected indicating an unexpected service termination.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
14 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Alert A Service Terminated Unexpectedly Rule 2090d712-a6cf-9911-130b-7c50cf40ebb1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False An event was collected indicating an unexpected service termination.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
15 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Alert A Share Configuration is Invalid Rule 219cb79c-a57f-b310-524a-f9c9a04f0173 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False A share was detected as having invalid configuration.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
16 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Alert A Share Configuration is Invalid Rule 219cb79c-a57f-b310-524a-f9c9a04f0173 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False A share was detected as having invalid configuration.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
17 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Alert A Software Update Installation Failed Rule 527087aa-1a03-fdf8-4779-785f64593e4a Microsoft.Windows.Server.2016.Monitoring false True Error Normal False A failed software update installation was detected.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
18 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Alert A Software Update Installation Failed Rule 527087aa-1a03-fdf8-4779-785f64593e4a Microsoft.Windows.Server.2016.Monitoring false True Error Normal False A failed software update installation was detected.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
19 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Advisor.AgentHealth.ComputerOptInCompatibleMonitor Advisor Connector Compatibility Status Monitor Monitor 2de6ea62-2a5b-ae49-c35a-2c443f75e248 Microsoft.SystemCenter.Advisor.Internal false True Error Normal False
Name Value
EnableConnector false
ManagementGroupId $Target/ManagementGroup/Id$
20 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Advisor.AgentHealth.ComputerOptInMonitor Advisor Connector Enable Status Monitor Monitor 1b7e5614-cdfd-b63f-f06f-c2d43492692c Microsoft.SystemCenter.Advisor.Internal true True Error Normal False
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
21 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.Agent 118c0f18-7a70-5f57-3a9b-eeaf1705b3fc Microsoft.SystemCenter.Agent.Configuration.ArchitectureMismatchMonitor Agent and operating system architecture are the same Monitor 933a5a3a-6e07-3ebe-aca7-829cf21dd486 Microsoft.SystemCenter.2007 onStandardMonitoring True Warning Normal False This monitor detects if the 32-bit agent has been installed on a 64-bit operating system.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
IntervalSeconds 86400
22 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.Agent 118c0f18-7a70-5f57-3a9b-eeaf1705b3fc Microsoft.SystemCenter.Agent.MaintenanceMode Agent Initiated Maintenance Mode Rule Rule 464a2398-cbed-7b3c-7e04-c4d26b305103 Microsoft.SystemCenter.2007 true False False This rule is used to detect agent initiated Maintenance Mode Request.
Name Value
IntervalInSeconds 300
Parameters System.Xml.XmlElement
ScriptBody
param($ComputerName)
Function isValidReason
{
Param($Reason)

if($Reason -eq “PlannedOther” -or $Reason -eq “UnplannedOther” -or $Reason -eq “PlannedHardwareMaintenance” -or $Reason -eq “UnplannedHardwareMaintenance” -or $Reason -eq “PlannedHardwareInstallation” -or $Reason -eq “UnplannedHardwareInstallation” -or $Reason -eq “PlannedOperatingSystemReconfiguration” -or $Reason -eq “UnplannedOperatingSystemReconfiguration” -or $Reason -eq “PlannedApplicationMaintenance” -or $Reason -eq “UnplannedApplicationMaintenance” -or $Reason -eq “ApplicationInstallation” -or $Reason -eq “ApplicationUnresponsive” -or $Reason -eq “ApplicationUnstable” -or $Reason -eq “SecurityIssue” -or $Reason -eq “LossOfNetworkConnectivity”)
{return $True;}
Else
{return $False;}
}

$oAPI = new-object -comObject “MOM.ScriptAPI”;
$oBag = $oAPI.CreatePropertyBag();

try
{
$isValid = (Get-ItemProperty “hklm:\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\MaintenanceMode” -ErrorAction SilentlyContinue).IsValid;
$record = (Get-ItemProperty “hklm:\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\MaintenanceMode” -ErrorAction SilentlyContinue).Record;
if(![string]::IsNullOrEmpty($isValid) -And ![string]::IsNullOrEmpty($record) -And $isValid -eq “1”)
{
#’record’ should contain parameters separated by “|”. For Instance: “10|PlannedApplicationMaintenance|SMX\asttest:PCI|5/30/2016 8:04:26 AM”
[string]$separator = “|”;
$paramArray = $record.Split($separator);
if($paramArray.Length -eq 4)
{
[Double]$Duration = $paramArray[0];
$Reason = $paramArray[1];
$Comment = $paramArray[3] + “-” + $paramArray[2];
$isValidReasonVar = isValidReason $Reason;

if( $isValidReasonVar -eq $True -And ![string]::IsNullorEmpty($Comment) -And ![string]::IsNullorEmpty($Duration) -And 5.0 -le $Duration)
{
$MaintenanceModeRecord = $Duration.ToString()+$separator+$Reason+$separator+$Comment;
$oBag.AddValue(“Duration”,$Duration.ToString());
$oBag.AddValue(“Reason”, $Reason);
$oBag.AddValue(“Comment”, $Comment);
$oBag.AddValue(“ComputerName”,$ComputerName);
$oAPI.LogScriptEvent(“ReadMaintenanceModeRegEntry.ps1″, 2222, 0, $ComputerName+”:”+$MaintenanceModeRecord);
}
else
{
$oBag.AddValue(“Duration”,””);
$oBag.AddValue(“Reason”, “”);
$oBag.AddValue(“Comment”, “”);
$oBag.AddValue(“ComputerName”,””);
}
}
else
{
$oBag.AddValue(“Duration”,””);
$oBag.AddValue(“Reason”, “”);
$oBag.AddValue(“Comment”, “”);
$oBag.AddValue(“ComputerName”,””);
}
}
else
{
$oBag.AddValue(“Duration”,””);
$oBag.AddValue(“Reason”, “”);
$oBag.AddValue(“Comment”, “”);
$oBag.AddValue(“ComputerName”,””);
}
}
catch
{
$oBag.AddValue(“Duration”,””);
$oBag.AddValue(“Reason”, “”);
$oBag.AddValue(“Comment”, “”);
$oBag.AddValue(“ComputerName”,””);
}
if($isValid -eq “1”)
{
set-itemproperty -path “hklm:\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\MaintenanceMode” -name IsValid -value “0” -ErrorAction SilentlyContinue;
$CurTime=Get-Date;
$RecordValue = $paramArray[0] + $separator + $paramArray[1] + $separator + $paramArray[2] + $separator + $CurTime;
set-itemproperty -path “hklm:\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\MaintenanceMode” -name Record -value $RecordValue -ErrorAction SilentlyContinue;
}
$oBag;
ScriptName ReadMaintenanceModeRegEntry.ps1
SyncTime
TimeoutInSeconds 600
23 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.SCOMpercentageCPUTimeMonitor Agent processor utilization Monitor 169a28bd-4798-f918-8b59-e6a7b76147cb Microsoft.SystemCenter.2007 onStandardMonitoring True Error Normal False Monitor all agent processes to identify potential issues with the agent using too much processor time.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
ConsecutiveSampleCountCritical 6
ConsecutiveSampleCountHealthy 3
IntervalSeconds 321
SyncTime
Threshold 25
TimeoutSeconds 300
24 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.UnableToLoadModules Agent update that is required for IIS 7 monitoring is not installed Rule 4cfa4680-4071-57be-0540-01f5f0b69718 Microsoft.Windows.InternetInformationServices.2008 false True Error Normal False This rule generates an alert if the agent update that is required for IIS 7 monitoring is not installed
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
25 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.Agent 118c0f18-7a70-5f57-3a9b-eeaf1705b3fc Microsoft.SystemCenter.Agent.Configuration.MinRequiredVersionCheckMonitor Agent Version Monitor Monitor 559f7efa-9aee-d368-aff5-08798d1e2cd0 Microsoft.SystemCenter.2007 onStandardMonitoring True Warning Normal False This monitor checks for the agent version, and generates an alert if the version of an agent is less than the minimum version that is provided.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
IntervalSeconds 86400
RequiredVersion 6.1.7221.0
TimeoutSeconds 300
26 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Alert.Suspended Alert generation was temporarily suspended due to too many alerts. Rule 5bcd69c2-717f-0b82-5cc0-c2310d21809f Microsoft.SystemCenter.2007 true True Warning Normal False Alert generation was temporarily suspended for a rule because the number of alerts generated exceeded the threshold within the specified time interval. This is done to prevent excessive load against the management group.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
27 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Alert.InvalidOverrideValue Alert Invalid Override Value Rule c498870c-d0a2-bdb6-462f-790a87f8da35 Microsoft.SystemCenter.2007 true True Error Normal False Invalid value used when overriding alert priority or severity. Runtime adjusted the value to the closest allowed.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
28 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.BackCompatModule.AlertOnScriptError Alert on Backward Compatibility Script Errors. Rule 6996dfdd-78a7-e1ac-f8d9-0bddcdfc5922 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when Backward Compatibility script errors occur.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
29 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.BatchResponseModule.AlertOnDroppedResponses Alert on Dropped Batch Responses Rule 6b1cf827-10d7-731c-c719-5eaa33b47eda Microsoft.SystemCenter.2007 true True Warning Normal False The rule generates alerts when batch responses are dropped.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
30 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MultiInstancePerfModule.InvalidFrequency.Alert Alert on Dropped Multi instance Performance Module Rule 6e8cddc2-d229-434b-a4b9-bc45c411758b Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Multi instance Perf Module has an invalid frequency configuration
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
31 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PowerShellModule.AlertOnDroppedResponses Alert on Dropped Power Shell Scripts Rule 33d07fde-bc10-a20d-985a-7276ac7ead62 Microsoft.SystemCenter.2007 true True Warning Normal False Alerts on dropped Power Shell scripts.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
32 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PowerShellModule.AlertOnFailedResponses Alert on Failed Power Shell Scripts Rule c4108e23-e5b9-b0cd-9b75-be85d2039035 Microsoft.SystemCenter.2007 true True Warning Normal False Alerts on failed Power Shell scripts.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
33 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PowerShellModule.AlertOnFailedCreateRunspace Alert on Failure to Create PowerShell Run space for Power Shell Script Rule 704e67a0-7e2c-1653-4e04-bb2ec8286c66 Microsoft.SystemCenter.2007 true True Warning Normal False Alerts when a rule or monitor attempts to execute a Power Shell script and the Power Shell Run space cannot be started.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
34 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PowerShellModule.AlertOnFailedLoadSnapIn Alert on Failure to Load a Power Shell SnapIn Rule c127eda9-9f2d-749e-aad4-3cf656dc5e2b Microsoft.SystemCenter.2007 true True Warning Normal False Alerts when a rule or monitor attempts to execute a Power Shell script and a Power Shell snap-in cannot be loaded.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
35 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PowerShellModule.AlertOnPowerShellNotInstalled Alert on Power Shell Not Installed Rule 4cc0e18d-43ac-f318-63b1-ee63ce44c974 Microsoft.SystemCenter.2007 true True Warning Normal False Alerts when Power Shell scripts are being used where Power Shell is not installed.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
36 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.Infrastructure.Monitoring.ApmAgent.APMConfigurationConflict.Monitor APM .NET Server-Side Monitoring Configuration Monitor 8193171f-086e-daf9-6d20-9756cce0af1d Microsoft.SystemCenter.Apm.Infrastructure.Monitoring true True MatchMonitorHealth Normal False This monitor verifies that an APM Agent has been correctly processing APM .NET server-side monitoring configuration. The monitor turns to a warning state when an invalid configuration or a configuration conflict is detected.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
37 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Microsoft.SystemCenter.Apm.ApmAgentConfigurationState APM Agent Health Rollup Monitor c34872af-1299-0da7-93c6-7e94fbf691d9 Microsoft.SystemCenter.Apm.Infrastructure true False False This monitor rolls up the configuration health of APM Agent hosted by this computer.
38 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Microsoft.SystemCenter.Apm.ApmAgentPerformanceState APM Agent Health Rollup Monitor 284cdff9-ba03-cd4a-c9fd-bd6cecab72d5 Microsoft.SystemCenter.Apm.Infrastructure true False False This monitor rolls up the performance health of APM Agent hosted by this computer.
39 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Microsoft.SystemCenter.Apm.ApmAgentSecurityState APM Agent Health Rollup Monitor a5484d37-26a4-c54c-5556-9b14fb9208b6 Microsoft.SystemCenter.Apm.Infrastructure true False False This monitor rolls up the security health of APM Agent hosted by this computer.
40 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Microsoft.SystemCenter.Apm.ApmAgentAvailabilityState APM Agent Health Rollup Monitor 9caf2b9d-2322-2c66-a7bd-f0c33617b7d0 Microsoft.SystemCenter.Apm.Infrastructure true False False This monitor rolls up the availability health of APM Agent hosted by this computer.
41 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.Infrastructure.Monitoring.ApmAgent.CSMConfigurationConflict.Monitor APM Client-Side Monitoring Configuration Monitor 0be27e3e-6692-7e9f-e988-4889e3b88a66 Microsoft.SystemCenter.Apm.Infrastructure.Monitoring true True MatchMonitorHealth Normal False This monitor verifies that an APM Agent has been correctly processing APM Client-Side Monitoring configuration. The monitor turns to Warning state when an invalid configuration or a configuration conflict is detected.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
42 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.CollectApplicationDiagnosticsEvents APM event collection Rule Rule d84b1069-bff5-9c21-a10b-f481875c9947 Microsoft.SystemCenter.Apm.Infrastructure true False False This rule collects all APM Events into the Operations Manager Database.
43 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AppLogModule.FailedInitialization.Alert Application Log Module Initialization Failure Rule 74901725-2a71-9171-7e1a-73b1c5258937 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Application Log module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
44 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AppLogModule.FailedExecution.Alert Application Log Module Runtime Failure Rule 7426b3eb-81b8-8ae4-8e8c-11a8c04ba229 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Application Log module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
45 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.ApmAgentApplyConfigurationRule Apply APM Agent configuration Rule 3b599151-11c9-ff77-4c40-84a6bc2eb907 Microsoft.SystemCenter.Apm.Infrastructure true False False Rule used to send configuration to the APM Service
Name Value
IntervalSeconds 14400
SyncTime
46 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 Microsoft.SystemCenter.Apm.CsmAgent 0f28fc5a-13f2-2daa-a85f-d4660d85e494 Microsoft.SystemCenter.Apm.Library.CsmAgentApplyConfigurationRule Apply Client-Side Monitoring Agent configuration Rule d067a474-e2f2-717e-797c-5aa7dab7fa2d Microsoft.SystemCenter.Apm.Infrastructure true False False Rule used to send Client-Side Monitoring configuration to the APM Service
Name Value
IntervalSeconds 14400
SyncTime
47 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 2016b.CONTOSO.COM Microsoft.SystemCenter.Apm.CsmAgent 0f28fc5a-13f2-2daa-a85f-d4660d85e494 Microsoft.SystemCenter.Apm.Library.CsmAgentApplyConfigurationRule Apply Client-Side Monitoring Agent configuration Rule d067a474-e2f2-717e-797c-5aa7dab7fa2d Microsoft.SystemCenter.Apm.Infrastructure true False False Rule used to send Client-Side Monitoring configuration to the APM Service
Name Value
IntervalSeconds 14400
SyncTime
48 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AuditCollectionService.AvailabilityHealthRollup Audit Collection Availability Monitor cd55ad19-e143-cd69-9722-c538715a2e94 Microsoft.SystemCenter.ACS.Internal true False False Audit Collection Availability roll up monitor.
49 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.Agent 118c0f18-7a70-5f57-3a9b-eeaf1705b3fc Microsoft.SystemCenter.AuditCollectionService.Forwarder.ServiceMonitor Audit Collection Forwarder – Windows Service Monitor 10c27921-67cd-551b-767a-ef54faf42d5c Microsoft.SystemCenter.ACS.Internal true False False This monitor checks the state of the ACS forwarder windows service.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName AdtAgent
50 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
51 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
52 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
53 Fake-WEC-ServerSource1.contoso.com f48c044e-0030-8bad-a2ef-5ed415b1c165 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
54 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
55 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
56 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
57 Fake-WEC-ServerSource2.contoso.com 6bb7c7bd-5c87-f07c-8b9c-8eabb0cb4c4d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
58 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
59 Fake-WEC-ServerSource2.contoso.com cbe50619-b83c-e838-0f7b-d8175809b356 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
60 Fake-WEC-ServerSource1.contoso.com 723a3006-2614-f8eb-d44e-f34d646ad371 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
61 DCSecurity-Others babf47a4-2c1d-5325-68ae-c3b9eed985c6 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
62 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
63 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
64 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
65 DCSecurity-Logon 9a06a44d-93e3-c9c5-bfab-2076cf9ac489 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
66 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
67 DCSecurity-Logoff d20d0c29-ca1a-f17f-bb09-7baf6602ddce 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
68 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
69 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
70 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
71 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
72 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
73 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
74 Fake-WEC-ServerSource1.contoso.com a0e82d2f-873f-7350-c0e1-28d9635a449e 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
75 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
76 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
77 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
78 DCSecurity-Authentication b309ae13-922c-09af-3c23-57fcb2af0cad 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
79 Fake-WEC-ServerSource2.contoso.com fbfe1b9d-c476-8902-7bb5-43457edc2448 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.AvailabilityState Availability Monitor a6c69968-61aa-a6b9-db6e-83a0da6110ea System.Health.Library true False False Roll up monitor that aggregates entity availability health.
80 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryAvailableMBytes Available Megabytes of Memory Monitor e0a25788-fca3-3db1-5ce5-78f74f853359 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the available memory level.
Name Value
AllInstances false
CounterName Available MBytes
InstanceName
IntervalSeconds 900
MemoryThreshold 100
NumSamples 3
ObjectName Memory
TargetComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
TimeoutSeconds 300
81 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryAvailableMBytes Available Megabytes of Memory Monitor e0a25788-fca3-3db1-5ce5-78f74f853359 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the available memory level.
Name Value
AllInstances false
CounterName Available MBytes
InstanceName
IntervalSeconds 900
MemoryThreshold 100
NumSamples 3
ObjectName Memory
TargetComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
TimeoutSeconds 300
82 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerWrite Average Disk Seconds Per Write (Logical Disk) Monitor 129cf9fd-9660-6b70-6547-bf4699cbb735 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitor the performance counter LogicalDisk\Avg Disk Sec Per Write
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Write
Direction greater
Frequency 60
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 15
ObjectName LogicalDisk
Threshold 0.04
83 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerWrite Average Disk Seconds Per Write (Logical Disk) Monitor 129cf9fd-9660-6b70-6547-bf4699cbb735 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitor the performance counter LogicalDisk\Avg Disk Sec Per Write
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Write
Direction greater
Frequency 60
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 15
ObjectName LogicalDisk
Threshold 0.04
84 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskWriteQueueLength.Collection Average Disk Write Queue Length Windows Server 2016 and 1709+ (Logical Disk) Rule 606f0da4-e684-8a2f-3c28-886073a0f513 Microsoft.Windows.Server.2016.Monitoring false False False The average number of write requests that were queued for the selected disk during the sample interval.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk Write Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 15
ToleranceType Absolute
85 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskWriteQueueLength.Collection Average Disk Write Queue Length Windows Server 2016 and 1709+ (Logical Disk) Rule 606f0da4-e684-8a2f-3c28-886073a0f513 Microsoft.Windows.Server.2016.Monitoring false False False The average number of write requests that were queued for the selected disk during the sample interval.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk Write Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 15
ToleranceType Absolute
86 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskReadQueueLength.Collection Average Logical Disk Read Queue Length Windows Server 2016 and 1709+ Rule d815e025-bdc5-f3c4-6d9e-ccb3751cc349 Microsoft.Windows.Server.2016.Monitoring false False False The average number of read requests that were queued for the selected disk during the sample interval.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk Read Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 15
ToleranceType Absolute
87 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AverageDiskReadQueueLength.Collection Average Logical Disk Read Queue Length Windows Server 2016 and 1709+ Rule d815e025-bdc5-f3c4-6d9e-ccb3751cc349 Microsoft.Windows.Server.2016.Monitoring false False False The average number of read requests that were queued for the selected disk during the sample interval.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk Read Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 15
ToleranceType Absolute
88 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerRead Average Logical Disk Seconds Per Read Monitor 5f2ede8d-19cc-ebbd-2278-7a03ea530351 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitor the performance counter LogicalDisk\Avg Disk Sec Per Read
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Read
Direction greater
Frequency 60
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 15
ObjectName LogicalDisk
Threshold 0.04
89 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerRead Average Logical Disk Seconds Per Read Monitor 5f2ede8d-19cc-ebbd-2278-7a03ea530351 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitor the performance counter LogicalDisk\Avg Disk Sec Per Read
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Read
Direction greater
Frequency 60
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 15
ObjectName LogicalDisk
Threshold 0.04
90 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerTransfer Average Logical Disk Seconds Per Transfer Monitor 382715fb-dcaa-0179-598f-e56570c0e178 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter LogicalDisk\Avg Disk Sec Per Transfer
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Transfer
Direction greater
Frequency 60
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 15
ObjectName LogicalDisk
Threshold 0.04
91 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerTransfer Average Logical Disk Seconds Per Transfer Monitor 382715fb-dcaa-0179-598f-e56570c0e178 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter LogicalDisk\Avg Disk Sec Per Transfer
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Transfer
Direction greater
Frequency 60
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 15
ObjectName LogicalDisk
Threshold 0.04
92 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AverageThresholdModule.FailedInitialization.Alert Average Threshold Module Initialization Failure Rule 78200d6a-624b-4681-7d65-8bb64a0fdde2 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Average Threshold module experiences an initialization failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
93 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.AVIcodeAgentFoundMonitor AVIcode Enterprise Agent and APM Agent have been deployed to the same machine Monitor b7ead9c5-f041-4ca8-8ada-71e3058d3ec1 Microsoft.SystemCenter.Apm.Infrastructure.Monitoring true True Error Normal False This monitor verifies that an AVIcode .NET Enterprise Agent has not been installed on a computer where the System Center Operations Manager APM feature had already been installed.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
Frequency 14400
94 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Apm.AVIcodeInterceptServiceFoundMonitor AVIcode Intercept service found Monitor a837933b-1590-366a-185b-3d6aabce3e82 Microsoft.SystemCenter.Apm.Infrastructure false True Warning Normal False Monitor that watches for an installer error raised to indicate that an old AVIcode .NET Enterprise Agent is on the system. This monitor is disabled by default but you might want to enable it to verify which portion of your agents are still running the AVIcode Intercept service as opposed to the new APM feature in System Center Operations Manager.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
Frequency 14400
WindowsVersion 6.0
95 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOM2005ApplogReaderModule.FailedInitialization.Alert Backward Compatibility Application Log Module Initialization Failure Rule d3d4d01f-405a-7fc7-0996-daef75b5662a Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Backward Compatibility Application Log module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
96 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOM2005ApplogReaderModule.FailedExecution.Alert Backward Compatibility Application Log Module Runtime Failure Rule 786d7b3e-c48a-7989-2478-b5f4f88e7d29 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Backward Compatibility Application Log module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
97 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOM2005WMIEventMapperModule.FailedInitialization.Alert Backward Compatibility WMI Event Mapper Module Initialization Failure Rule 2bf6ee95-a83e-1bab-0345-12fb3024f24b Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Backward Compatibility WMI Event Mapper module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
98 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOM2005WMIEventMapperModule.FailedExecution.Alert Backward Compatibility WMI Event Mapper Module Runtime Failure Rule d7369ccf-2c86-df60-d45d-bbd03b50f728 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Backward Compatibility WMI Event Mapper module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
99 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.BaseliningModule.FailedInitialization.Alert Baselining Module Initialization Failure Rule b1faa87e-186a-546f-e9a3-76ec67b1eea7 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Baselining Module experiences an initialization failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
100 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.Computer e817d034-02e8-294c-3509-01ca25481689 UIGeneratedMonitorb543a11cf1394ecba99bad3915a92296 Basic Service Monitor Test for Chris Monitor 906a7fcc-d946-da1b-60d3-45aa07e3c813 Service.Monitor.Test.For.Chris false False False
Name Value
CheckStartupType true
ComputerName $Target/Property[Type=”MicrosoftWindowsLibrary7585010!Microsoft.Windows.Computer”]/NetworkName$
ServiceName spooler
101 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCacheBytes.Collection Cache Bytes Rule d4d29abc-6928-983c-1ae7-ac04b7decb41 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Cache Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Cache Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
102 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCacheBytes.Collection Cache Bytes Rule d4d29abc-6928-983c-1ae7-ac04b7decb41 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Cache Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Cache Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
103 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.CacheDataMapHitsPercent.Collection Cache Data Map Hits Percent Rule 2a1b93c2-77be-4940-9bd8-c014e3138e83 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Data Map Hits %
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Data Map Hits %
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Cache
Tolerance 10
ToleranceType Absolute
104 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.CacheDataMapHitsPercent.Collection Cache Data Map Hits Percent Rule 2a1b93c2-77be-4940-9bd8-c014e3138e83 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Data Map Hits %
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Data Map Hits %
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Cache
Tolerance 10
ToleranceType Absolute
105 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Utility.CheckPortsAD.Monitor CheckPorts AD Monitor Monitor cbd88d1b-b992-a8b6-dad9-82397814495e Utility false True Error Normal False
Name Value
IntervalSeconds 600
Portlist 53,88,135,139,389,445,464,636,3268,3269
SyncTime 12:00
TargetHost Localhost
TimeoutSeconds 120
WriteToEventLog 0
106 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Utility.CheckPortsExchange.Monitor CheckPorts Exchange Monitor Monitor 0c750d02-bb43-3af9-d5a2-45052baf5a0e Utility false True Error Normal False
Name Value
IntervalSeconds 600
Portlist 80,443,143,993,25,587,465,6001
SyncTime 12:00
TargetHost Localhost
TimeoutSeconds 120
WriteToEventLog 0
107 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.Infrastructure.Monitoring.CsmCollectorRemovalOnSharedIisRule Client-side monitoring collection endpoint alerting rule for IIS Shared Configuration Rule 89c007f0-7348-9b82-c3e0-b6fc718e438c Microsoft.SystemCenter.Apm.Infrastructure.Monitoring true True Warning Normal False This rule generates an alert when an event log contains a warning that suggests that a client-side monitoring collection endpoint might no longer be needed.
Name Value
AllowProxying false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
108 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.SCOMpercentageCPUTimeCollection Collect agent processor utilization Rule 4098ab92-498a-0cb9-59db-3f5e7eb9d904 Microsoft.SystemCenter.2007 true False False Collects the “agent processor utilization” performance counter
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
IntervalSeconds 321
SyncTime
TimeoutSeconds 300
109 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.AlertFlow.EventCollection Collect Alert Flow Events Rule 9232adcb-e37b-59ce-4cac-ca9de9ac8f11 Microsoft.SystemCenter.2007 false False False Collects events that verify alerts are flowing from the System Center Management Health Service to the Operational Database.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
110 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AlertSubscriptionModule.EventCollection Collect Alert Subscription Module Events Rule 760ff67e-7018-d832-a7eb-78f583d842c1 Microsoft.SystemCenter.2007 false False False Collects Alert Subscription module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
111 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectAlerts Collect Alerts Rule b2f4295b-aebd-e38e-d37b-e1c7a624cb0e Microsoft.SystemCenter.Internal true False False System rule that collects alert data from any object.
112 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.Infrastructure.Monitoring.CollectApmEvents Collect APM Agent Windows Events Rule 438bb397-76f1-a1db-1576-b93d50f6cea2 Microsoft.SystemCenter.Apm.Infrastructure.Monitoring false False False This rule collects all APM Agent events for troubleshooting purposes.
Name Value
AllowProxying false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
113 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AppLogModule.EventCollection Collect Application Log Module Events Rule f5502f65-39c7-8673-8757-cec46fa4b454 Microsoft.SystemCenter.2007 false False False Collects events generated by the Application Log module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
114 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOM2005ApplogReaderModule.EventCollection Collect Backward Compatibility Application Log Module Events Rule 3eb1ad66-70b2-2bc6-1432-0950870e568d Microsoft.SystemCenter.2007 false False False Collects events generated by the Backward Compatibility Application Log module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
115 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.BackCompatModule.EventCollection Collect Backward Compatibility Module Events Rule 2847c0d4-29d1-c946-38a1-828279a3078b Microsoft.SystemCenter.2007 false False False Collects Backward Compatibility module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
116 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOM2005WMIEventMapperModule.EventCollection Collect Backward Compatibility WMI Event Mapper Module Events Rule f7f4178b-fb4d-51b2-12b9-37b37eb4db06 Microsoft.SystemCenter.2007 false False False Collects events generated by the Backward Compatibility WMI Event Mapper module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
117 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.BaseliningModule.EventCollection Collect Baselining Modules Event Rule 16018b35-eb57-87dd-49d6-307866a54c64 Microsoft.SystemCenter.2007 false False False Collects the series of events for the numeric baselining module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
118 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.BatchResponseModule.EventCollection Collect Batch Response Module Events Rule 8b0b3925-260b-2590-d0be-c28276b91b6f Microsoft.SystemCenter.2007 false False False Collects Batch Response module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
119 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.ConfigurationParseError.EventCollection Collect Configuration Parse Error Events Rule d46371c0-fc2b-8ebc-cc5a-3ffb61bc5322 Microsoft.SystemCenter.2007 false False False Collects the events related to the failure of a System Center Management Health Service being able to parse its new configuration.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
120 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ConsolidatorModule.EventCollection Collect Consolidator Module Events Rule 4a66d8e0-0649-447f-df52-16d4047a90ec Microsoft.SystemCenter.2007 false False False Collects events generated by the Consolidator module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
121 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CorrelatorModule.EventCollection Collect Correlation Module Events Rule 2168aa57-9595-4135-4438-9ee42a492704 Microsoft.SystemCenter.2007 false False False Collects events generated by the Correlation module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
122 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DependentServiceCheckProbeModule.EventCollection Collect Dependent Service Check Probe Module Events Rule 40f09881-ee92-4ae7-bb1b-d1d5e76bcbef Microsoft.SystemCenter.2007 false False False Collects events generated by the Dependent Service Check Probe module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
123 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectDiscoveryData Collect Discovery Data Rule 48ba99ec-be02-d5e5-bdc2-f93059758481 Microsoft.SystemCenter.Internal true False False System rule that collects discovery data from any object.
124 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DiscoveryDataMapperModule.EventCollection Collect Discovery Data Mapper Module Events Rule b815d739-c633-a784-56c4-662b20eb63cd Microsoft.SystemCenter.2007 false False False Collects events generated by the Discovery Data Mapper module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
125 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.EntityStateChangeFlow.EventCollection Collect Entity State Change Flow Error Events Rule f05f49cd-f45c-9449-988a-7b9afc49643f Microsoft.SystemCenter.2007 false False False Collects the events related to the flow of State Change Data from System Center Management Health Services to the Operational Database.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
126 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM Microsoft.SystemCenter.NTService 6649a1b7-4cbe-25a0-863e-69a52aa4b0e7 Microsoft.SystemCenter.NTService.CollectSCMEvent Collect Event Log Events Rule aeecb18a-d537-d0e0-8e27-9291e95b5a2e Microsoft.SystemCenter.NTService.Library true False False Rule that collects service control events about the monitored service.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
127 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 Microsoft.SystemCenter.NTService 6649a1b7-4cbe-25a0-863e-69a52aa4b0e7 Microsoft.SystemCenter.NTService.CollectSCMEvent Collect Event Log Events Rule aeecb18a-d537-d0e0-8e27-9291e95b5a2e Microsoft.SystemCenter.NTService.Library true False False Rule that collects service control events about the monitored service.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
128 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectEventData Collect Events Rule af0c22e1-cb54-de0a-d43c-df2e6f720d27 Microsoft.SystemCenter.Internal true False False System rule that collects events from any object.
129 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ExpressionFilterModule.EventCollection Collect Expression Filter Module Events Rule 433511f0-7ce8-fe52-530f-17a92e6da445 Microsoft.SystemCenter.2007 false False False Collects events generated by the Expression Filter module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
130 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.GenericNTEventMapperModule.EventCollection Collect Generic Event Mapper Module Events Rule a7f04dbd-cd19-14b4-09bd-5b07bae7f59b Microsoft.SystemCenter.2007 false False False Collects events generated by the Generic Event Mapper module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
131 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.GenericNTPerfMapperModule.EventCollection Collect Generic Performance Mapper Module Events Rule 059a9e51-7a96-4018-eaaa-c3d2bd94b089 Microsoft.SystemCenter.2007 false False False Collects events generated by the Generic Performance Mapper module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
132 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.GroupCalculationModule.EventCollection Collect Group Calculation Module Events Rule 2ec2af8d-ceae-b2b9-be9d-5ec4ba95c1ae Microsoft.SystemCenter.2007 false False False Collects Group Calculation module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
133 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.HealthManager.EventCollection Collect Health Manager Events Rule dbc7b5d5-413b-1427-6435-d9716a4b8039 Microsoft.SystemCenter.2007 false False False Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
134 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.HealthManager.EventCollection.Param1.Id Collect Health Manager Events ID Parameter Rule 63888da1-ab2c-e9f2-c30f-21d0ba3356d0 Microsoft.SystemCenter.2007 false False False Collects the events related to the functionality of Health Manager which is running as part of System Center Management Health Service.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
135 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.HealthManager.EventCollection.Param1.Name Collect Health Manager Events Name Parameter Rule f52cbb8e-0f43-2278-9a9c-75a22a49a80f Microsoft.SystemCenter.2007 false False False Collects the events related to the functionality of Health Manager which is running as part of the System Center Management Health Service.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
136 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Configuration.EventCollection Collect Health Service Configuration Updated Events Rule 948ab118-a218-e394-05b5-dea73195bacb Microsoft.SystemCenter.2007 false False False Collects the series of events on the System Center Management Health Service that indicate requesting, receiving, and activating new configuration (e.g. rules, monitors, etc.). This rule is disabled by default as it can result in excessive event collections, which create overhead for the management group and consume space in the operational and data warehouse databases. If enabled, it is recommended that that the rule only be enabled for a limited period of time.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
137 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.CollectionRule.Performance.SendQueuePercentUsed Collect Health Service Management Group\Send Queue % Used Rule e42ca374-0443-aa6a-de0d-47f92b7a9481 Microsoft.SystemCenter.2007 true False False Collects Send Queue % Used performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Send Queue % Used
Frequency 300
InstanceName $Target/ManagementGroup/Name$
MaximumSampleSeparation 12
ObjectName Health Service Management Groups
Tolerance 25
ToleranceType Absolute
138 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.CollectionRule.Performance.SendQueueSize Collect Health Service Management Group\Send Queue Size Rule 362600a9-3d10-b55c-5af3-71af7fbc4c8c Microsoft.SystemCenter.2007 true False False Collects the Send Queue Size performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Send Queue Size
Frequency 300
InstanceName $Target/ManagementGroup/Name$
MaximumSampleSeparation 12
ObjectName Health Service Management Groups
Tolerance 26214400
ToleranceType Absolute
139 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.CollectionRule.Performance.ModuleCount Collect Health Service\Module Count Rule 1c7733ac-c99f-7c35-503e-f264e492ddbf Microsoft.SystemCenter.2007 true False False Collects Module Count performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Module Count
Frequency 900
InstanceName
MaximumSampleSeparation 10
ObjectName Health Service
Tolerance 5
ToleranceType Percentage
140 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.CollectionRule.Performance.WorkflowCount Collect Health Service\Workflow Count Rule 98096768-0335-43fd-6bdb-79e3f10ed82f Microsoft.SystemCenter.2007 true False False Collects Workflow Count performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Workflow Count
Frequency 900
InstanceName
MaximumSampleSeparation 10
ObjectName Health Service
Tolerance 5
ToleranceType Percentage
141 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISDiscoveryProbeModule.EventCollection Collect IIS Discovery Probe Module Events Rule a59d7a14-64ae-9860-59e6-c670c5855993 Microsoft.SystemCenter.2007 false False False Collects events generated by the IIS Discovery Probe module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
142 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISLogConditionModule.EventCollection Collect IIS Log Condition Module Events Rule d1083b24-e7f9-407e-b145-7ec4829f0b0d Microsoft.SystemCenter.2007 false False False Collects events generated by the IIS Log Condition module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
143 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISSiteStateDataSourceModule.EventCollection Collect IIS Site State Data Source Module Events Rule 1eff8e5a-c484-4426-6d87-32265e33a1c0 Microsoft.SystemCenter.2007 false False False Collects events generated by the IIS Site State Data Source module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
144 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISSiteStateProbeModule.EventCollection Collect IIS Site State Probe Module Events Rule 03b6db0b-2485-1526-cd12-eb5217d043ce Microsoft.SystemCenter.2007 false False False Collects events generated by the IIS Site State Probe module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
145 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.LDAPProbeModule.EventCollection Collect LDAP Probe Module Events Rule a766cfa9-1822-8725-85aa-b6a82e3063c9 Microsoft.SystemCenter.2007 false False False Collects events generated by the LDAP Probe module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
146 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MaintenanceMode.EventCollection Collect Maintenance Mode Events Rule 6186c754-ccb2-c055-189c-aca27bf889d6 Microsoft.SystemCenter.2007 false False False Collects the events that indicate an object entering into maintenance mode and exiting maintenance mode.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
147 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOMNTPerfMapperModule.EventCollection Collect MOM NT Performance Mapper Module Events Rule c219ba3d-a60a-39d6-e951-9f8c2ee35455 Microsoft.SystemCenter.2007 false False False Collects events generated by the MOM NT Performance Mapper module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
148 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectMonitorAlert Collect Monitor Generated Alerts Rule b1e12dbf-67a7-696e-49b4-7c6af1919ed6 Microsoft.SystemCenter.Internal true False False System rule that collects alerts generated from monitors.
149 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.MonitorStateChangeFlow.EventCollection Collect Monitor State Change Flow Error Events Rule 1e118f55-1e62-38e4-faa3-d0d4f2f9e3a2 Microsoft.SystemCenter.2007 false False False Collects the events related to the flow of monitor state change data from System Center Management Health Services to the Operational database.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
150 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MonitoringHost.EventCollection Collect Monitoring Host Crash Events Rule 15cd2a03-c40a-0fab-bdb5-936bfbcb6fb4 Microsoft.SystemCenter.2007 false False False Collects the events that indicate when monitoring host crashes.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
151 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MultiInstancePerfModule.EventCollection Collect Multi instance Performance Module Events Rule f61a05ee-2c00-8b3a-f201-625b10c5becd Microsoft.SystemCenter.2007 false False False Collects Multi instance Performance Module Events
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
152 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectPublishedEntityState Collect Object State Rule 14935845-b230-eb6b-013a-2347d8d21f95 Microsoft.SystemCenter.Internal true False False System rule that collects state change events from any object.
153 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectPublishedEntityState.Resend Collect Object State – Resend Rule a067318f-0833-1267-1be9-d48539fbfa0f Microsoft.SystemCenter.Internal true False False Support rule for the Collect Object State to resend items not received by the database on the first try.
Name Value
ChannelId 4506DE47-806E-447f-90BB-20FAEBB7E87E
154 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectPerformanceData Collect Performance Data Rule 0a42b95f-a5b8-ed33-3672-3f69ff3b7d09 Microsoft.SystemCenter.Internal true False False System rule that collects performance data from any object.
155 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PerfDataSourceModule.EventCollection Collect Performance Data Source Module Events Rule 23ad7b6b-a744-c31c-a22a-69734d4db21f Microsoft.SystemCenter.2007 false False False Collects Performance Data module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
156 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectSignatureData Collect Performance Signatures Rule 9f1ecfec-42ba-3bb3-5ba1-5a77daf56a19 Microsoft.SystemCenter.Internal true False False System rule that collects performance signature data from any object.
157 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PowerShellModule.EventCollection Collect Power Shell Module Events Rule 40ccee42-c4e2-6897-2cd2-e90524fb07f7 Microsoft.SystemCenter.2007 false False False Collects Power Shell module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
158 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM Microsoft.SystemCenter.OwnProcessNTService 26db4e5b-5d2a-cdce-ed9e-9104ac5c7297 Microsoft.SystemCenter.NTService.CollectPercentProcessorTime Collect Process\% Processor Time Rule bf7377ec-95e5-01f2-9cfb-df50b99e025a Microsoft.SystemCenter.NTService.Library true False False This rule collects processor utilization for the windows service.
Name Value
CounterName Percent Processor Time
Frequency 600
InstanceProperty Name
ObjectName Process
ScaleBy $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/LogicalProcessors$
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
ValueProperty PercentProcessorTime
159 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 Microsoft.SystemCenter.OwnProcessNTService 26db4e5b-5d2a-cdce-ed9e-9104ac5c7297 Microsoft.SystemCenter.NTService.CollectPercentProcessorTime Collect Process\% Processor Time Rule bf7377ec-95e5-01f2-9cfb-df50b99e025a Microsoft.SystemCenter.NTService.Library true False False This rule collects processor utilization for the windows service.
Name Value
CounterName Percent Processor Time
Frequency 600
InstanceProperty Name
ObjectName Process
ScaleBy $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/LogicalProcessors$
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
ValueProperty PercentProcessorTime
160 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM Microsoft.SystemCenter.OwnProcessNTService 26db4e5b-5d2a-cdce-ed9e-9104ac5c7297 Microsoft.SystemCenter.NTService.CollectPrivateBytes Collect Process\Private Bytes Rule 9658b934-3374-6e1c-9d20-7a191f15fa8f Microsoft.SystemCenter.NTService.Library true False False This rule collects memory usage for the windows service.
Name Value
CounterName Private Bytes
Frequency 600
InstanceProperty Name
ObjectName Process
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
ValueProperty PrivateBytes
161 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 Microsoft.SystemCenter.OwnProcessNTService 26db4e5b-5d2a-cdce-ed9e-9104ac5c7297 Microsoft.SystemCenter.NTService.CollectPrivateBytes Collect Process\Private Bytes Rule 9658b934-3374-6e1c-9d20-7a191f15fa8f Microsoft.SystemCenter.NTService.Library true False False This rule collects memory usage for the windows service.
Name Value
CounterName Private Bytes
Frequency 600
InstanceProperty Name
ObjectName Process
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
ValueProperty PrivateBytes
162 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.RegistryProbeModule.EventCollection Collect Registry Probe Module Events Rule fe843814-dad5-4dd0-f84f-7e8bfa34631f Microsoft.SystemCenter.2007 false False False This rule collects Registry Probe module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
163 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentManagement.CollectRestartHealthServiceEvent Collect Restart System Center Management Health Service Events Rule 08914ae1-9fcd-3d4f-5f9b-4a725e1a27de Microsoft.SystemCenter.2007 false False False Collects the Restart System Center Management Health Service events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
ScriptName RestartHealthService.js
164 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceRunAs.Failure.EventCollection Collect Run As Account Failure Events Rule 05fddce5-7692-d6c2-e88d-6f5ac59ede56 Microsoft.SystemCenter.2007 false False False Collects the series of events that indicate a failure in executing a rule, monitor, or task using a specific Run As account.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
165 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SchedulerConModule.EventCollection Collect Scheduler Condition Module Events Rule 1f96bd20-99de-7b78-3506-a0c4ce4a6002 Microsoft.SystemCenter.2007 false False False Collects events generated by the Scheduler Condition module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
166 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SchedulerDSModule.EventCollection Collect Scheduler Data Source Module Events Rule ac8fa00f-baba-69ba-8340-51de79ef3bde Microsoft.SystemCenter.2007 false False False Collects events generated by the Scheduler Data Source module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
167 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ServiceCheckDataSourceModule.EventCollection Collect Service Check Data Source Module Events Rule ea7547f7-3a3e-31f4-cf6f-fe2bc6a1154f Microsoft.SystemCenter.2007 false False False Collects events generated by the Service Check Data Source module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
168 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ServiceCheckProbeModule.EventCollection Collect Service Check Probe Module Events Rule 2ed0e9ed-9eb0-f0a4-a6dc-deb7eb7dadc7 Microsoft.SystemCenter.2007 false False False Collects events generated by the Service Check Probe module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
169 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentRecovery.FailedToStart Collect Service Control Manager failed to start events for System Center Management Health Service Rule f191f99b-457b-7078-7450-ba3fd63bea21 Microsoft.SystemCenter.2007 false False False This rule collects the Service Control Manager events related to the “HealthService.exe” process failing to start.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
170 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentRecovery.Terminated Collect Service Control Manager process terminated events for System Center Management Health Service Rule 2fed42bf-625c-30b0-58da-2abcc47cdc44 Microsoft.SystemCenter.2007 false False False This rule collects the Service Control Manager events related to the “HealthService.exe” process terminating.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
171 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentRecovery.Running Collect Service Control Manager started or stopped events for System Center Management Health Service Rule 0a41faa0-ab0e-38df-8724-3b3fb810b2f4 Microsoft.SystemCenter.2007 false False False This rule collects the Service Control Manager events related to the “HealthService.exe” process starting and stopping.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
172 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CollectEntityState Collect state change events of all monitors in the system Rule 7c2efeb9-f1ee-ae8e-6038-56c815e77f5b Microsoft.SystemCenter.Internal true False False This rule collects all state change events in the system
173 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentManagement.CollectPerfCounter Collect System\System Uptime Rule 6e6a10df-a5b8-b57c-19ca-10ef7ee09331 Microsoft.SystemCenter.2007 true False False Collects the System\System Uptime performance counter object for testing performance collection.
Name Value
CounterName System Up Time
Frequency 21600
ObjectName System
174 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.TimerConModule.EventCollection Collect Timer Condition Module Events Rule 46deaa17-8c32-897d-3378-f9b866891984 Microsoft.SystemCenter.2007 false False False Collects events generated by the Timer Condition module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
175 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.WindowsWorkflow40Module.EventCollection Collect Windows Workflow 4.0 Module events Rule 04763de9-7f38-810e-1298-37edcdf76843 Microsoft.SystemCenter.2007 false False False Collects events generated by the Windows Workflow 4.0 module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
176 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.WmiEventModule.EventCollection Collect WMI Event Module Events Rule 950e3e90-7e29-6407-e459-317dbe0bb0af Microsoft.SystemCenter.2007 false False False Collects events generated by the WMI Event module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
177 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.WmiProbeModule.EventCollection Collect WMI Probe Module Events Rule 659b513b-bb94-c654-9e94-edfe40c2caa3 Microsoft.SystemCenter.2007 false False False Collects events generated by the WMI Probe module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
178 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.WmiRawPerfCounterModule.EventCollection Collect WMI Raw Performance Counter Module Events Rule bfd9042b-2de7-cc9e-2eae-db3a2634aa0b Microsoft.SystemCenter.2007 false False False Collects events generated by the WMI Raw Performance Counter module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
179 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.ConfigManager.WorkflowCannotBeInitializedOrLoaded.EventCollection Collect Workflow Unloaded Events Rule 5aa5e746-6b9d-65a4-2152-eb3277ada6bc Microsoft.SystemCenter.2007 false False False Collects events related to unloaded workflows.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
180 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerRead.Collection Collection Rule for Average Disk Seconds Per Read Windows Server 2016 and 1709+ Rule f1f76b6c-09a4-412e-de24-54fb7b50b4dc Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Avg Disk Sec Per Read
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Read
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 0.026
ToleranceType Absolute
181 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerRead.Collection Collection Rule for Average Disk Seconds Per Read Windows Server 2016 and 1709+ Rule f1f76b6c-09a4-412e-de24-54fb7b50b4dc Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Avg Disk Sec Per Read
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Read
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 0.026
ToleranceType Absolute
182 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerTransfer.Collection Collection Rule for Average Disk Seconds Per Transfer Windows Server 2016 and 1709+ Rule b6e7bad5-20d8-2196-1c6e-f330ba19727e Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter LogicalDisk\Avg Disk Sec Per Transfer
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Transfer
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 0.026
ToleranceType Absolute
183 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerTransfer.Collection Collection Rule for Average Disk Seconds Per Transfer Windows Server 2016 and 1709+ Rule b6e7bad5-20d8-2196-1c6e-f330ba19727e Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter LogicalDisk\Avg Disk Sec Per Transfer
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Transfer
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 0.026
ToleranceType Absolute
184 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerWrite.Collection Collection Rule for Average Disk Seconds Per Write Windows Server 2016 and 1709+ Rule afb02c77-5c27-9222-a498-e6929affa459 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Avg Disk Sec Per Write
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Write
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 0.026
ToleranceType Absolute
185 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskSecPerWrite.Collection Collection Rule for Average Disk Seconds Per Write Windows Server 2016 and 1709+ Rule afb02c77-5c27-9222-a498-e6929affa459 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Avg Disk Sec Per Write
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk sec/Write
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 0.026
ToleranceType Absolute
186 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection Collection Rule for Checking the File System Occurred on Startup Rule afa814bd-df54-012f-bd2a-ffc6b9504501 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects the events indicates that the system ran a chkdsk on startup
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Application
187 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection Collection Rule for Checking the File System Occurred on Startup Rule afa814bd-df54-012f-bd2a-ffc6b9504501 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects the events indicates that the system ran a chkdsk on startup
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Application
188 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.CurrentDiskQueueLength.Collection Collection rule for Current Disk Queue Length Windows Server 2016 and 1709+ Rule d2e235b9-8887-b941-a974-c73324c05c60 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter LogicalDisk\Current Disk Queue Length
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Current Disk Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 32
ToleranceType Absolute
189 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.CurrentDiskQueueLength.Collection Collection rule for Current Disk Queue Length Windows Server 2016 and 1709+ Rule d2e235b9-8887-b941-a974-c73324c05c60 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter LogicalDisk\Current Disk Queue Length
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Current Disk Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 32
ToleranceType Absolute
190 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskBytesPerSec.Collection Collection Rule for Disk Bytes Per Second Windows Server 2016 and 1709+ Rule e72a0de2-ceae-db93-bc0a-b1f26af244bf Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Disk Bytes Per Second
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Bytes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
191 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskBytesPerSec.Collection Collection Rule for Disk Bytes Per Second Windows Server 2016 and 1709+ Rule e72a0de2-ceae-db93-bc0a-b1f26af244bf Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Disk Bytes Per Second
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Bytes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
192 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadsPerSec.Collection Collection Rule for Disk Reads Per Second Windows Server 2016 and 1709+ Rule be249410-d95a-4be5-1a82-312db28ecce5 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Disk Reads Per Second
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Reads/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
193 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadsPerSec.Collection Collection Rule for Disk Reads Per Second Windows Server 2016 and 1709+ Rule be249410-d95a-4be5-1a82-312db28ecce5 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Disk Reads Per Second
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Reads/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
194 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskWritesPerSec.Collection Collection Rule for Disk Writes Per Second Windows Server 2016 and 1709+ Rule a3508a0e-09dc-9a23-94ad-51e0320af5f4 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Disk Writes Per Second
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Writes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
195 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskWritesPerSec.Collection Collection Rule for Disk Writes Per Second Windows Server 2016 and 1709+ Rule a3508a0e-09dc-9a23-94ad-51e0320af5f4 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Disk Writes Per Second
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Writes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
196 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Collection Collection rule for invalid Share Configuration Detected Rule 8e37ff7b-204b-25e8-b9c6-16b44a552403 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating that a share has invalid configuration.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
197 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ShareConfigurationInvalid.Collection Collection rule for invalid Share Configuration Detected Rule 8e37ff7b-204b-25e8-b9c6-16b44a552403 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating that a share has invalid configuration.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
198 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NetworkAdapterDisconnected.Collection Collection rule for Network Adapter was Disconnected from the Network Rule ce2a0fbd-0258-cee2-455b-1aa8e650637a Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating the network adapter was disconnected from the network.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
199 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NetworkAdapterDisconnected.Collection Collection rule for Network Adapter was Disconnected from the Network Rule ce2a0fbd-0258-cee2-455b-1aa8e650637a Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating the network adapter was disconnected from the network.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
200 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection Collection rule for NTFS Quota Threshold Limit Reached Rule 78d6f6bf-a3ac-deb4-340d-55a85f7a67be Microsoft.Windows.Server.2016.Monitoring false False False An NTFS disk quota threshold limit was reached.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
201 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection Collection rule for NTFS Quota Threshold Limit Reached Rule 78d6f6bf-a3ac-deb4-340d-55a85f7a67be Microsoft.Windows.Server.2016.Monitoring false False False An NTFS disk quota threshold limit was reached.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
202 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdReached.Collection Collection rule for NTFS Quota Threshold Reached Rule 2dd9095d-5339-1bc3-72b7-5079651219ab Microsoft.Windows.Server.2016.Monitoring false False False An NTFS disk quota threshold was reached.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
203 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSQuotaThresholdReached.Collection Collection rule for NTFS Quota Threshold Reached Rule 2dd9095d-5339-1bc3-72b7-5079651219ab Microsoft.Windows.Server.2016.Monitoring false False False An NTFS disk quota threshold was reached.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
204 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Collection Collection rule for Service or Driver Failed to Start events Rule 853d3638-255b-9ff6-83af-da949e215a32 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating a service or driver has failed to start.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
205 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceOrDriverFailedToStart.Collection Collection rule for Service or Driver Failed to Start events Rule 853d3638-255b-9ff6-83af-da949e215a32 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating a service or driver has failed to start.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
206 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Collection Collection Rule for Software Update Installation Failed Rule d3e6b87d-833a-6ccf-1f92-4a6c8d301086 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating a failed software update installation.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
207 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdateInstallationFailed.Collection Collection Rule for Software Update Installation Failed Rule d3e6b87d-833a-6ccf-1f92-4a6c8d301086 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating a failed software update installation.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
208 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesInstalled.Collection Collection Rule for Software Updates Installation Events Rule 477e810b-396f-b89b-c863-53807f20c0b3 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating that new software updates were installed.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
209 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesInstalled.Collection Collection Rule for Software Updates Installation Events Rule 477e810b-396f-b89b-c863-53807f20c0b3 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating that new software updates were installed.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
210 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection Collection Rule for Software Updates Scheduled Installation Events Rule a4fdffde-58f5-2742-41fe-1801d4c595a9 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating new software updates are scheduled.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
211 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection Collection Rule for Software Updates Scheduled Installation Events Rule a4fdffde-58f5-2742-41fe-1801d4c595a9 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating new software updates are scheduled.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
212 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskQueueLength.Collection Collection Rule for the Average Disk Queue Length Windows Server 2016 and 1709+ Rule 2df05c80-330e-f04c-c9aa-c3d10d484e09 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Avg Disk Queue Length
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 15
ToleranceType Absolute
213 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvgDiskQueueLength.Collection Collection Rule for the Average Disk Queue Length Windows Server 2016 and 1709+ Rule 2df05c80-330e-f04c-c9aa-c3d10d484e09 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter LogicalDisk\Avg Disk Queue Length
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Avg. Disk Queue Length
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 15
ToleranceType Absolute
214 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Collection Collection rule for unexpected service terminations Rule bad12506-e660-c7d5-c066-9315209749bc Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating unexpected service terminations.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
215 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServiceTerminatedUnexpextedly.Collection Collection rule for unexpected service terminations Rule bad12506-e660-c7d5-c066-9315209749bc Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating unexpected service terminations.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
216 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.CleanShutdown.Collection Collection Rule for Windows Clean Restart Events Rule 96b89b91-28d3-5deb-2a0f-ecfedd1f3bdc Microsoft.Windows.Server.2016.Monitoring false False False This rule collects the events indicating a clean Windows shutdown.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
217 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.CleanShutdown.Collection Collection Rule for Windows Clean Restart Events Rule 96b89b91-28d3-5deb-2a0f-ecfedd1f3bdc Microsoft.Windows.Server.2016.Monitoring false False False This rule collects the events indicating a clean Windows shutdown.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
218 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.DirtyShutdown.Collection Collection Rule for Windows Dirty Shutdown Events Rule 87db0926-db8e-f99f-2a15-5a9c76702811 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects events indicating a dirty Windows shutdown.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
219 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.DirtyShutdown.Collection Collection Rule for Windows Dirty Shutdown Events Rule 87db0926-db8e-f99f-2a15-5a9c76702811 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects events indicating a dirty Windows shutdown.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
220 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.RebootFromBugCheck.Collection Collection Rule for Windows Restart Events (restarted from bug check) Rule f17f9860-2620-c938-2bd1-5396b1d175fc Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating Windows restarted from bug check
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
221 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.RebootFromBugCheck.Collection Collection Rule for Windows Restart Events (restarted from bug check) Rule f17f9860-2620-c938-2bd1-5396b1d175fc Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for events indicating Windows restarted from bug check
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
222 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.RestartEvent.Collection Collection Rule for Windows Restarted Events Rule 0d28aba4-e06e-1287-3775-7ffa2e86f818 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects events indicating Windows has restarted
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
223 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.RestartEvent.Collection Collection Rule for Windows Restarted Events Rule 0d28aba4-e06e-1287-3775-7ffa2e86f818 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects events indicating Windows has restarted
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
224 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommitLimit.Collection Commit Limit Rule f497bb58-e661-01fe-3bee-5fc5e6b05811 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Commit limit
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Commit Limit
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
225 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommitLimit.Collection Commit Limit Rule f497bb58-e661-01fe-3bee-5fc5e6b05811 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Commit limit
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Commit Limit
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
226 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommittedBytes.Collection Committed Bytes Rule a068c457-4931-d0db-27ea-0de416903a1b Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Committed Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Committed Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
227 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryCommittedBytes.Collection Committed Bytes Rule a068c457-4931-d0db-27ea-0de416903a1b Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Committed Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Committed Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
228 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ComputerbrowserServiceHealth Computer Browser Service Health Monitor e6f4f82b-11d3-c236-a8bd-4eda7746a3df Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the Computer Browser. Please note that this monitor is not running on Nano Server (the state of the monitor will be always “Healthy”).
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName Browser
229 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ComputerbrowserServiceHealth Computer Browser Service Health Monitor e6f4f82b-11d3-c236-a8bd-4eda7746a3df Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the Computer Browser. Please note that this monitor is not running on Nano Server (the state of the monitor will be always “Healthy”).
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName Browser
230 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ComputerVerification.Modules.EventCollection Computer Verification Module Events Collector Rule Rule f0d36ea1-91f2-01e4-d323-c8d8d75ea75e Microsoft.SystemCenter.2007 false False False This rule collects Computer Verification module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
231 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
232 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
233 Fake-WEC-ServerSource2.contoso.com 6bb7c7bd-5c87-f07c-8b9c-8eabb0cb4c4d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
234 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
235 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
236 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
237 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
238 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
239 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
240 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
241 Fake-WEC-ServerSource1.contoso.com f48c044e-0030-8bad-a2ef-5ed415b1c165 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
242 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
243 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
244 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
245 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
246 Fake-WEC-ServerSource2.contoso.com fbfe1b9d-c476-8902-7bb5-43457edc2448 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
247 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
248 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
249 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
250 Fake-WEC-ServerSource2.contoso.com cbe50619-b83c-e838-0f7b-d8175809b356 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
251 Fake-WEC-ServerSource1.contoso.com a0e82d2f-873f-7350-c0e1-28d9635a449e 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
252 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
253 Fake-WEC-ServerSource1.contoso.com 723a3006-2614-f8eb-d44e-f34d646ad371 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
254 DCSecurity-Others babf47a4-2c1d-5325-68ae-c3b9eed985c6 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
255 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
256 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
257 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
258 DCSecurity-Authentication b309ae13-922c-09af-3c23-57fcb2af0cad 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
259 DCSecurity-Logon 9a06a44d-93e3-c9c5-bfab-2076cf9ac489 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
260 DCSecurity-Logoff d20d0c29-ca1a-f17f-bb09-7baf6602ddce 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.ConfigurationState Configuration Monitor 4fea8a72-7ed1-7621-c3a3-103ef0e91574 System.Health.Library true False False Roll up monitor that aggregates entity configuration health.
261 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.ConfigurationStateWarningLevel Configuration 45 Minutes Out of Date (Warning Level) Monitor b8d47dec-160f-519a-14d8-f6002a7f6f28 Microsoft.SystemCenter.2007 false False False This monitor indicates that the System Center Management Health Service has had a stale configuration for some period of time.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Correlator System.Xml.XmlElement
Expression System.Xml.XmlElement
FirstMissingCorrelatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstMissingCorrelatedExpression System.Xml.XmlElement
FirstMissingCorrelatedLogName Operations Manager
LogName Operations Manager
SecondMissingCorrelatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondMissingCorrelatedExpression System.Xml.XmlElement
SecondMissingCorrelatedLogName Operations Manager
262 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.ConfigurationStateCriticalLevel Configuration 90 Minutes Out of Date (Critical Level) Monitor 9318c8a7-40fa-888d-2c57-5440e0f9e1fd Microsoft.SystemCenter.2007 false False False This monitor indicates that the System Center Management Health Service has had a stale configuration for a long period of time.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Correlator System.Xml.XmlElement
Expression System.Xml.XmlElement
FirstMissingCorrelatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstMissingCorrelatedExpression System.Xml.XmlElement
FirstMissingCorrelatedLogName Operations Manager
LogName Operations Manager
SecondMissingCorrelatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondMissingCorrelatedExpression System.Xml.XmlElement
SecondMissingCorrelatedLogName Operations Manager
263 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.ConfigurationProcessing Configuration Processing Monitor c7293542-51d2-60eb-6c33-f3452ff70680 Microsoft.SystemCenter.2007 false False False This monitor indicates whether the System Center Management Health Service could load the configuration successfully or not.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ManagementGroupName $Target/ManagementGroup/Name$
264 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ConsecutiveSamplesModule.FailedInitialization.Alert Consecutive Samples Module Initialization Failure Rule f6355ec0-c355-235d-b898-86bfb003bb82 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Consecutive Samples module experiences an initialization failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
265 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ConsolidatorModule.FailedInitialization.Alert Consolidator Module Initialization Failure Rule 5c3bd2fc-cf22-685c-2ad0-8b5861cb22de Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates an alert when the Consolidator module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
266 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ConsolidatorModule.FailedExecution.Alert Consolidator Module Runtime Failure Rule e914416e-ca94-3982-3eb0-4d5507dbb820 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Consolidator module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
267 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.CoreServicesRollup Core Windows Services Rollup Monitor 9bc98208-483e-39bb-73c3-c186f9d4dd87 Microsoft.Windows.Server.2016.Monitoring true False False The rollup monitor for all health related to critical Windows services.
268 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.CoreServicesRollup Core Windows Services Rollup Monitor 9bc98208-483e-39bb-73c3-c186f9d4dd87 Microsoft.Windows.Server.2016.Monitoring true False False The rollup monitor for all health related to critical Windows services.
269 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CorrelatorModule.FailedInitialization.Alert Correlation Module Initialization Failure Rule d61c0843-78be-1816-9da7-ac84651ee1bc Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Correlation module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
270 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.CorrelatorModule.FailedExecution.Alert Correlation Module Runtime Failure Rule 6a0d37eb-18fe-0184-dd39-c0b34bdf3d49 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Correlation module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
271 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Alert.ParamReplacementFailure.Critical Critical Parameter Replacement Failure During Alert Creation Rule 22874197-1d20-4ac6-1bfb-83862095df5e Microsoft.SystemCenter.2007 false True Error Normal False Parameter replacement failed during alert creation. This will cause the workflow to unload.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
272 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.CurrentBandwidth.Collection Current Bandwidth Rule 3bbddad7-d4cc-3e3e-4790-9290b6add184 Microsoft.Windows.Server.2016.Monitoring true False False Rule collects Network Interface\Current Bandwidth counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Current Bandwidth
Frequency 600
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
MaximumSampleSeparation 100
ObjectName Network Adapter
Tolerance 10
ToleranceType Absolute
273 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.CurrentDiskQueueLength Current Disk Queue Length (Logical Disk) Monitor c4926d4f-e0bb-f45f-c814-b9e31af46d86 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter LogicalDisk\Current Disk Queue Length
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Current Disk Queue Length
Direction greaterequal
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 12
ObjectName LogicalDisk
Threshold 32
274 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.CurrentDiskQueueLength Current Disk Queue Length (Logical Disk) Monitor c4926d4f-e0bb-f45f-c814-b9e31af46d86 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter LogicalDisk\Current Disk Queue Length
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Current Disk Queue Length
Direction greaterequal
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 12
ObjectName LogicalDisk
Threshold 32
275 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Security.DataIntegrityRollup Data Integrity Monitor ae4bd5e3-fcd0-1200-c45c-68069aefa46e Microsoft.SystemCenter.2007 true False False Monitors the integrity of data flowing into the System Center Management Health Service.
276 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Security.DataIntegrityCheck Data Validity Check Monitor a93267d2-374e-9d00-a155-d4b82af47409 Microsoft.SystemCenter.2007 false True Warning High False Monitors the validity of data arriving at this System Center Management Health Service.
Name Value
Consolidator System.Xml.XmlElement
RepeatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
RepeatedExpression System.Xml.XmlElement
RepeatedLogName Operations Manager
TimerWaitInSeconds 3600
277 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.Wildcard.Service.CPU.Usage.Monitor DBSmart Wildcard Service CPU Usage Monitor Monitor 53ae6b52-91b1-c27a-4a63-7da21ea31e2d DBSmart false True Warning Normal False Monitors the CPU Usage of the DBSmart service.
Name Value
CounterName Percent Processor Time
Frequency 300
InstanceProperty Name
NumSamples 2
ObjectName Process
ScaleBy $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/LogicalProcessors$
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
Threshold 40
ValueProperty PercentProcessorTime
278 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.Wildcard.Service.CPU.Usage.Monitor DBSmart Wildcard Service CPU Usage Monitor Monitor 53ae6b52-91b1-c27a-4a63-7da21ea31e2d DBSmart false True Warning Normal False Monitors the CPU Usage of the DBSmart service.
Name Value
CounterName Percent Processor Time
Frequency 300
InstanceProperty Name
NumSamples 2
ObjectName Process
ScaleBy $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/LogicalProcessors$
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
Threshold 40
ValueProperty PercentProcessorTime
279 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.Wildcard.Service.PrivateBytes.Usage.Monitor DBSmart Wildcard Service Memory PrivateBytes Usage Monitor Monitor c2b20867-a712-fa10-cca3-49ecc03c47e3 DBSmart false True Warning Normal False Monitors the Memory Usage of the DBSmart service.
Name Value
CounterName Private Bytes
Frequency 300
InstanceProperty Name
NumSamples 2
ObjectName Process
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
Threshold 15000000
ValueProperty PrivateBytes
280 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.Wildcard.Service.PrivateBytes.Usage.Monitor DBSmart Wildcard Service Memory PrivateBytes Usage Monitor Monitor c2b20867-a712-fa10-cca3-49ecc03c47e3 DBSmart false True Warning Normal False Monitors the Memory Usage of the DBSmart service.
Name Value
CounterName Private Bytes
Frequency 300
InstanceProperty Name
NumSamples 2
ObjectName Process
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
Threshold 15000000
ValueProperty PrivateBytes
281 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.WildCard.ServiceState.Monitor DBSmart WildCard ServiceState Monitor Monitor 245779c9-32c5-a8c3-31dd-ae81b5587dd0 DBSmart true True MatchMonitorHealth Normal False Description
Name Value
CheckStartupType true
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
IntervalSeconds 60
SamplesCritical 3
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
282 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.WildCard.ServiceState.Monitor DBSmart WildCard ServiceState Monitor Monitor 245779c9-32c5-a8c3-31dd-ae81b5587dd0 DBSmart true True MatchMonitorHealth Normal False Description
Name Value
CheckStartupType true
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
IntervalSeconds 60
SamplesCritical 3
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
283 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.WildCard.ServiceState.RecoveryOnly.Monitor DBSmart WildCard ServiceState RecoveryOnly Monitor Monitor 576e1124-8cd3-d072-2bd3-a3d7e78a129a DBSmart true False False This monitor will detect service failure/stop and no alert will result from this monitor. There is a service recovery task attached to this workflow that should attempt to start the service.
Name Value
CheckStartupType true
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
IntervalSeconds 60
SamplesWarning 0
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
284 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM DBSmartService.Class b021fc03-0a63-013b-98cf-f2b372b4416e DBSmart.WildCard.ServiceState.RecoveryOnly.Monitor DBSmart WildCard ServiceState RecoveryOnly Monitor Monitor 576e1124-8cd3-d072-2bd3-a3d7e78a129a DBSmart true False False This monitor will detect service failure/stop and no alert will result from this monitor. There is a service recovery task attached to this workflow that should attempt to start the service.
Name Value
CheckStartupType true
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
IntervalSeconds 60
SamplesWarning 0
ServiceName $Target/Property[Type=”MSNL!Microsoft.SystemCenter.NTService”]/ServiceName$
285 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SecureStorageConfiguration.ActionAccountTypeConfigurationError.Unit Default Action Account Type Monitor aaa9a760-a68a-998a-d200-2ea3584f098c Microsoft.SystemCenter.2007 true True Error Normal False This monitor detects when the account type used for the agent’s default Action Account is incorrect.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
286 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DeltaThresholdModule.FailedInitialization.Alert Delta Threshold Module Initialization Failure Rule 6f338910-fa36-d1c7-fa1f-b6a96c1259c9 Microsoft.SystemCenter.2007 true True Error Normal False This rule generates alerts when the Delta Threshold module experiences an initialization failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
287 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DependentServiceCheckProbeModule.FailedInitialization.Alert Dependent Service Check Probe Module Initialization Failure Rule 0166c0d6-2b85-02dc-ae51-43344fc25fda Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Dependent Service Check Probe module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
288 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DependentServiceCheckProbeModule.FailedExecution.Alert Dependent Service Check Probe Module Runtime Failure Rule c77f21e2-d249-c7d5-e2ad-c2f03a86a130 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Dependent Service Check Probe module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
289 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.DHCPClientServiceHealth DHCP Client Service Health Monitor a555d33b-67ec-4d6e-23af-10cafc3823ae Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the DHCP Client
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName DHCP
290 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.DHCPClientServiceHealth DHCP Client Service Health Monitor a555d33b-67ec-4d6e-23af-10cafc3823ae Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the DHCP Client
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName DHCP
291 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DiscoveryDataMapperModule.FailedInitialization.Alert Discovery Data Mapper Module Initialization Failure Rule 960200e9-57dd-05cf-f3c7-56a66cd4ff6e Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Discovery Data Mapper module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
292 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DiscoveryDataMapperModule.FailedExecution.Alert Discovery Data Mapper Module Runtime Failure Rule 25f0e597-810b-321f-34b7-5f09a96085ea Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Discovery Data Mapper module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
293 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.LDMCantReadDisk.Alert Disk can not be read Rule f7e29b60-1273-663a-2c7b-83655ae86868 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Logical Disk Manager reports that the disk can not be read
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
294 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.LDMCantReadDisk.Alert Disk can not be read Rule f7e29b60-1273-663a-2c7b-83655ae86868 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Logical Disk Manager reports that the disk can not be read
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
295 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadBytesPerSec.Collection Disk Read Bytes Per Second Windows Server 2016 and 1709+ (Logical Disk) Rule d129ca06-14ae-e26b-14ca-efe98210fab9 Microsoft.Windows.Server.2016.Monitoring false False False The rate at which bytes are transferred from the disk during read operations.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Read Bytes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
296 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskReadBytesPerSec.Collection Disk Read Bytes Per Second Windows Server 2016 and 1709+ (Logical Disk) Rule d129ca06-14ae-e26b-14ca-efe98210fab9 Microsoft.Windows.Server.2016.Monitoring false False False The rate at which bytes are transferred from the disk during read operations.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Read Bytes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
297 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.DNSClientServiceHealth DNS Client Service Health Monitor c99bb221-fd15-3410-dd5e-30d4f8f636a7 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the DNS Client
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName DNSCache
298 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.DNSClientServiceHealth DNS Client Service Health Monitor c99bb221-fd15-3410-dd5e-30d4f8f636a7 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the DNS Client
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName DNSCache
299 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.IPAddressConflict.Alert Duplicate IP Address has been Detected Rule c75e2cd0-467d-5295-858b-7dad0a60fe7e Microsoft.Windows.Server.2016.Monitoring true True Error Normal False A duplicate IP address has been detected on the network
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
300 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.IPAddressConflict.Alert Duplicate IP Address has been Detected Rule c75e2cd0-467d-5295-858b-7dad0a60fe7e Microsoft.Windows.Server.2016.Monitoring true True Error Normal False A duplicate IP address has been detected on the network
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
301 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
302 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
303 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
304 DCSecurity-Logoff d20d0c29-ca1a-f17f-bb09-7baf6602ddce 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
305 Fake-WEC-ServerSource2.contoso.com 6bb7c7bd-5c87-f07c-8b9c-8eabb0cb4c4d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
306 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
307 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
308 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
309 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
310 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
311 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
312 Fake-WEC-ServerSource2.contoso.com cbe50619-b83c-e838-0f7b-d8175809b356 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
313 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
314 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
315 Fake-WEC-ServerSource2.contoso.com fbfe1b9d-c476-8902-7bb5-43457edc2448 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
316 Fake-WEC-ServerSource1.contoso.com 723a3006-2614-f8eb-d44e-f34d646ad371 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
317 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
318 DCSecurity-Authentication b309ae13-922c-09af-3c23-57fcb2af0cad 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
319 Fake-WEC-ServerSource1.contoso.com a0e82d2f-873f-7350-c0e1-28d9635a449e 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
320 DCSecurity-Logon 9a06a44d-93e3-c9c5-bfab-2076cf9ac489 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
321 DCSecurity-Others babf47a4-2c1d-5325-68ae-c3b9eed985c6 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
322 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
323 Fake-WEC-ServerSource1.contoso.com f48c044e-0030-8bad-a2ef-5ed415b1c165 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
324 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
325 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
326 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
327 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
328 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
329 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
330 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.EntityState Entity Health Monitor e3ab86a1-34fa-35b5-b864-da4db993c0f5 System.Health.Library true False False Root roll up monitor.
331 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DataWarehouse.CollectEntityHealthStateChange Entity state change collector Rule 87ecdb1a-e971-e28e-5ad3-275d82738a1f Microsoft.SystemCenter.DataWarehouse.Library true False True This rule collects all published (on default channel) entity state change events for Data Warehouse collection (to default store)
Name Value
DropItems true
QueueDataOnStall false
QueueDataStallInterval PT2M
StalledDataQueueSizeMB 100
ParameterName DefaultValue EffectiveValue
DropItems true false
QueueDataOnStall false false
QueueDataStallInterval PT2M PT2M
StalledDataQueueSizeMB 100 100
332 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DataWarehouse.PublishEntityHealthStateChangeForCollection Entity state change publisher Rule 25b09da0-1f9f-d3c3-4623-bf68a8ece273 Microsoft.SystemCenter.DataWarehouse.Library true False False This rule collects entity state change information from all managed entities and publishes it for Data Warehouse collection on default channel
333 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DataWarehouse.CollectEventData Event data collector Rule 369d0dc8-2a95-2c8c-e598-d62ecdb5e5bd Microsoft.SystemCenter.DataWarehouse.Library true False True This rule collects all published (on default channel) event data for Data Warehouse collection (to default store)
Name Value
DropItems true
QueueDataOnStall false
QueueDataStallInterval PT2M
StalledDataQueueSizeMB 100
ParameterName DefaultValue EffectiveValue
BulkInsertBatchSize 1000 1000
DropItems true false
ExecutionAttemptTimeoutIntervalSeconds 0 0
MaxBatchesToProcessBeforeMaintenanceCount 50 50
MaxExecutionAttemptCount 0 0
QueueDataOnStall false false
QueueDataStallInterval PT2M PT2M
StalledDataQueueSizeMB 100 100
334 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.Rollup Event Log Data Source Module Monitor d16c9ed7-bbf1-7f11-74fc-d21589d403d3 Microsoft.SystemCenter.2007 true False False Event Log Data Source module roll-up monitor.
335 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.EventLogFull.Alert Event Log File is Full Rule 0fc25b19-01dd-a1f1-3946-6727f1c7ba42 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False The event log file is full.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
336 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.EventLogFull.Alert Event Log File is Full Rule 0fc25b19-01dd-a1f1-3946-6727f1c7ba42 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False The event log file is full.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
337 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.CommunicationCertificateExpirationCheck Expiration Check of Certificate Used for Authentication Monitor fca1dac3-edae-07cb-9640-33837ba7fc38 Microsoft.SystemCenter.2007 true True Error High False This monitor checks the status of the certificate used for authentication and sends an alert when the certificate is about to expire.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
338 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ExpressionFilterModule.FailedInitialization.Alert Expression Filter Module Initialization Failure Rule 7029a4fc-39fa-a3fb-fc37-cfb01fa16a57 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Expression Filter module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
339 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.FailedAccessingWindowsEventLog Failed Accessing Windows Event Log Monitor 3cd64f31-5f04-c96f-c781-4e34b30b4142 Microsoft.SystemCenter.2007 true True Warning Normal False This monitor checks access to Windows event logs.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
340 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToFindApplicationPoolWhileRetrievingState Failed to find Application Pool while attempting to retrieve state Rule aa31c585-257b-4036-9f64-0e71ee06c47e Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to find Application Pool while attempting to retrieve state
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
341 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToFindApplicationPoolWhileRetrievingState Failed to find Application Pool while attempting to retrieve state Rule f1873993-dad9-4429-632e-1c5d50e29886 Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
342 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToFindSiteWhileAttemptingToRetrieveState Failed to find site while attempting to retrieve state Rule 2f8b218a-e4c0-c06e-1059-0e07d53587bf Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
343 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToFindSiteWhileAttemptingToRetrieveState Failed to find site while attempting to retrieve state Rule 80e6c267-4def-823e-529b-f1511ede869d Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to find site while attempting to retrieve state
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
344 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToPerformApplicationPoolDiscovery Failed to perform Application Pool discovery Rule afc4423d-504b-ff5a-35e9-140c5cb7dc67 Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to perform Application Pool discovery
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
345 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToPerformApplicationPoolDiscovery Failed to perform Application Pool discovery Rule 460666ff-e9b5-ea88-c6a8-0d3cf27e3fc8 Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
346 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToPerformFTPServerDiscovery Failed to perform FTP server discovery Rule 711b90fe-2f0d-68a5-29b3-4b239cbe3d40 Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
347 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToPerformFTPServerDiscovery Failed to perform FTP server discovery Rule c1f7cb29-3213-8030-87f0-a92f8c183a5b Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to perform FTP server discovery
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
348 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToPerformFTPSiteDiscovery Failed to perform FTP site discovery Rule b03cd600-98a8-f0f1-429b-b26fbeb88b6f Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
349 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToPerformFTPSiteDiscovery Failed to perform FTP site discovery Rule d1d61b52-fc41-0173-6dd1-11f1f19b1387 Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to perform FTP site discovery
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
350 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.Failed.To.Perform.Initialization.Of.IIS.Discovery.Module Failed to perform initialization of IIS discovery module Rule 6f006b6b-83fe-5f50-7803-a155b787d394 Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
351 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToPerformInitializationOfIISStateMonitoringModule Failed to perform initialization of IIS state monitoring module Rule 9af701e5-d669-5f5f-2b11-6b6efde81375 Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to perform initialization of IIS state monitoring module
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
352 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToPerformInitializationOfIISStateMonitoringModule Failed to perform initialization of IIS state monitoring module Rule 31ca1796-93e5-26c8-50fe-2a01bd2479ff Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
353 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.Failed.To.Perform.Web.Application.Discovery Failed to perform Web Application discovery Rule c98a9104-30f6-371f-20fa-cee6b54a11ff Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
354 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.Failed.To.Perform.Web.Application.Discovery Failed to perform Web Application discovery Rule a46f7c65-9e2f-2e1b-5809-dbe41d155d5d Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
355 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.Failed.To.Perform.Web.Server.Properties.Discovery Failed to perform Web Server properties discovery Rule e2a0411a-5585-3c5d-0311-c960b9cd0844 Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to perform Web Server properties discovery
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
356 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.Failed.To.Perform.Web.Server.Properties.Discovery Failed to perform Web Server properties discovery Rule a95b0238-3a4c-e5f1-0ec4-f6cd4fb4780c Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
357 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.Failed.To.Perform.Web.Site.Discovery Failed to perform Web Site discovery Rule d302447d-dd89-3147-acdb-c9a38a27a2ce Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
358 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.Failed.To.Perform.Web.Site.Discovery Failed to perform Web Site discovery Rule ec50eef4-1ec0-50e4-c814-b6362df499e9 Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to perform Web Site discovery
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
359 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailledToRetrieveApplicationPoolState Failed to retrieve Application Pool state Rule 61f65706-8684-04c7-579f-ab9fc1ffd54f Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False Failed to retrieve Application Pool state
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
360 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailledToRetrieveApplicationPoolState Failed to retrieve Application Pool state Rule 9bab7979-b72b-2ddd-eb02-823a3005ebdc Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
361 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToRetrieveSiteState Failed to retrieve site state Rule 740d4a9a-54ad-6cfa-d655-8e6f89a6dbec Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
362 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToRetrieveSiteState Failed to retrieve site state Rule 1d53643a-0d1d-aa6e-61a1-b0a7122048e5 Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
363 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvailabilityHealth File system error or corruption Monitor e6f279c2-7fcc-5f2c-38e1-086da36d852d Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors whether the file system has reported an error with the file system or corruption on the logical disk.
Name Value
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 3600
TargetComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
TimeoutSeconds 300
364 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.AvailabilityHealth File system error or corruption Monitor e6f279c2-7fcc-5f2c-38e1-086da36d852d Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors whether the file system has reported an error with the file system or corruption on the logical disk.
Name Value
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 3600
TargetComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
TimeoutSeconds 300
365 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.FileUpload.EmptyFile File Transfer Empty File Rule 0170f932-8b01-ef55-b053-708df7e2c6e5 Microsoft.SystemCenter.2007 false False False This rule collects all failed file transfers as the source file path could not be determined by the file upload module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
366 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.FileUpload.FileTransferFailure File Transfer Failure Rule 8a9d6fa5-f843-bbdf-a04f-7fdb41b783f0 Microsoft.SystemCenter.2007 false False False This rule collects all failed file transfers by the file upload module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
367 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.FileUpload.InvalidFilename File Transfer Invalid File name Rule ab652a61-5f83-e8b0-8a92-4c2629d4cbfa Microsoft.SystemCenter.2007 false False False This rule collects all failed file transfers as the source file path name was invalid and could not be processed by the file upload module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
368 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.FileUpload.FileProcessingFailure File Transfer Processing Failure Rule 0150b31b-041f-97b8-3bee-c3032f62b0b5 Microsoft.SystemCenter.2007 false False False This rule collects all failed file transfers as the source file could not be processed by the file upload module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
369 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.FileUpload.SuccessfulFileTransfer File Transfer Successful Rule b60777e8-764e-3985-81ee-d337f46486cd Microsoft.SystemCenter.2007 false False False This rule collects all successful file transfers by the file upload module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
370 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.FileUpload.FileUploadFailure File Transfer Upload failure Rule 761e53ad-dec8-895d-148c-65e14b138915 Microsoft.SystemCenter.2007 false False False This rule collects all failed file transfers as the source file failed to upload by the file upload module.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
371 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryFreeSystemPageTableEntries Free System Page Table Entries Monitor 132b50cc-b03a-b8bc-3a63-e4c4f1d08961 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter Memory\Free System Page Table Entries
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Free System Page Table Entries
Direction lessequal
Frequency 300
InstanceName
NumSamples 6
ObjectName Memory
Threshold 5000
372 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.MemoryFreeSystemPageTableEntries.Collection Free System Page Table Entries Rule 3fdd642a-4675-295a-0d6a-8b5b339648f1 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Free System Page Table Entries
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Free System Page Table Entries
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 800
ToleranceType Absolute
373 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.MemoryFreeSystemPageTableEntries.Collection Free System Page Table Entries Rule 3fdd642a-4675-295a-0d6a-8b5b339648f1 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Free System Page Table Entries
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Free System Page Table Entries
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 800
ToleranceType Absolute
374 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryFreeSystemPageTableEntries Free System Page Table Entries Monitor 132b50cc-b03a-b8bc-3a63-e4c4f1d08961 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter Memory\Free System Page Table Entries
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Free System Page Table Entries
Direction lessequal
Frequency 300
InstanceName
NumSamples 6
ObjectName Memory
Threshold 5000
375 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.GenericNTEventMapperModule.FailedInitialization.Alert Generic Event Mapper Module Initialization Failure Rule 2c12827c-230b-bcb2-679e-48c6816328c2 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Generic Event Mapper module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
376 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.GenericNTEventMapperModule.FailedExecution.Alert Generic Event Mapper Module Runtime Failure Rule ebcc38c1-e6f3-41cd-d8de-7167aeab281b Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Generic Event Mapper module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
377 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.GenericNTPerfMapperModule.FailedInitialization.Alert Generic Performance Mapper Module Initialization Failure Rule e4f8dfcf-108c-739d-4456-26db30631026 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Generic Performance Mapper module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
378 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.GenericNTPerfMapperModule.FailedExecution.Alert Generic Performance Mapper Module Runtime Failure Rule 929fe3d8-192f-6b17-2dee-843503b90f4a Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Generic Performance Mapper module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
379 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 Microsoft.SystemCenter.OwnProcessNTService 26db4e5b-5d2a-cdce-ed9e-9104ac5c7297 Microsoft.SystemCenter.NTService.CollectHandleCount Handle Count Rule 5c6b2e75-a096-af0b-d9b1-eb8522dc1bf5 Microsoft.SystemCenter.NTService.Library true False False Number of handles in the monitored service.
Name Value
CounterName Handle Count
InstanceProperty Name
ObjectName Process
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
ValueProperty HandleCount
380 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM Microsoft.SystemCenter.OwnProcessNTService 26db4e5b-5d2a-cdce-ed9e-9104ac5c7297 Microsoft.SystemCenter.NTService.CollectHandleCount Handle Count Rule 5c6b2e75-a096-af0b-d9b1-eb8522dc1bf5 Microsoft.SystemCenter.NTService.Library true False False Number of handles in the monitored service.
Name Value
CounterName Handle Count
InstanceProperty Name
ObjectName Process
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
ValueProperty HandleCount
381 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.Computer e817d034-02e8-294c-3509-01ca25481689 Microsoft.Windows.Server.Computer.HardwareAvailabilityAggregate Hardware Availability Aggregate monitor Monitor fbf905d2-c544-79b0-89dd-39fc11a8ffb7 Microsoft.Windows.Server.Library true False False This aggregate monitor rolls up the availability health of all hardware hosted on the Windows computer.
382 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.Computer e817d034-02e8-294c-3509-01ca25481689 Microsoft.Windows.Server.Computer.HardwareAvailabilityRollup Hardware Availability Rollup Monitor f824b653-fc46-041b-f8a2-3d701f15234c Microsoft.Windows.Server.Library true False False This monitor rolls up the availability health of all hardware hosted on the Windows computer.
383 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.Computer e817d034-02e8-294c-3509-01ca25481689 Microsoft.Windows.Server.Computer.HardwarePerformanceRollup Hardware Performance Rollup Monitor 29f76d4e-dbfe-b80d-d770-3679524a5ec6 Microsoft.Windows.Server.Library true False False This monitor rolls up the performance health of all hardware hosted on the Windows computer.
384 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Agent.HealthService.HandleCountThreshold Health Service Handle Count Threshold Monitor 813af6a6-8eb4-bbbb-a603-9e0dbe45240d Microsoft.SystemCenter.2007 true True Information True This monitor ensures that the “Process\Handle Count” counter for the “HealthService.exe” process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the “Health Service State” monitor. The “Health Service State” monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
CounterName Handle Count
Direction greater
Frequency 120
InstanceName HealthService
NumSamples 5
ObjectName Process
Threshold 6000
ParameterName DefaultValue EffectiveValue
Frequency 120 120
NumSamples 5 5
Threshold 6000 30000
385 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Agent.HealthService.PrivateBytesThreshold Health Service Private Bytes Threshold Monitor 590ba0fa-9964-2172-3320-d4e4f8b29933 Microsoft.SystemCenter.2007 true True Information True This monitor ensures that the “Process\Private Bytes” counter for the “HealthService.exe” process does not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the “Health Service State” monitor. The “Health Service State” monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
CounterName Private Bytes
Direction greater
Frequency 120
InstanceName HealthService
NumSamples 5
ObjectName Process
Threshold 314572800
ParameterName DefaultValue EffectiveValue
Frequency 120 120
NumSamples 5 5
Threshold 314572800 943718400
386 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.Infrastructure.Monitoring.ApmAgent.IISRecycle.Monitor IIS Application Pools Recycle Required Monitor 5e5861c5-3a51-ae49-e3b6-b14bb836b906 Microsoft.SystemCenter.Apm.Infrastructure.Monitoring true True Warning Normal False This monitor tracks the need to recycle IIS application pools due to a change in monitoring settings for applications running on the web server.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
387 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.InternetInformationServices.10.0.FailedToPerformIISComponentDiscoveryDueInsufficientPrivs IIS component discovery failed due to insufficient privileges Rule e1715a15-f546-ac25-afc0-1548ac47195e Microsoft.Windows.InternetInformationServices.2016 false True Warning Normal False IIS component discovery failed due to insufficient privileges
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
388 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.InternetInformationServices.2008.FailedToPerformIISComponentDiscoveryDueInsufficientPrivs IIS component discovery failed due to insufficient privileges Rule c1dc0d77-01c2-05c4-93a2-4a1cb64c03e2 Microsoft.Windows.InternetInformationServices.2008 false True Warning Normal False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
389 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISDiscoveryProbeModule.FailedInitialization.Alert IIS Discovery Probe Module Initialization Failure Rule c25f2eea-cdb0-261b-378a-0a730bd25369 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Discovery Probe module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
390 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISDiscoveryProbeModule.FailedExecution.Alert IIS Discovery Probe Module Runtime Failure Rule bcfaaf09-6401-ee4e-2b13-2f315893c2cc Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Discovery Probe module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
391 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISLogConditionModule.FailedInitialization.Alert IIS Log Condition Module Initialization Failure Rule a0229c53-89b4-cd3d-01de-d64b055ce4b2 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Log Condition module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
392 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISLogConditionModule.FailedExecution.Alert IIS Log Condition Module Runtime Failure Rule e307f005-1e92-eec3-b1be-62508e779af0 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Log Condition module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
393 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.Infrastructure.Monitoring.ApmAgent.IISRestart.Monitor IIS Restart is required Monitor 7f6b24a9-c8e7-a4e5-0e1c-a93e4dea1a62 Microsoft.SystemCenter.Apm.Infrastructure.Monitoring true True Warning Normal False This monitor tracks the need to restart IIS due to a change in monitoring settings for applications running on the web server.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
394 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISSiteStateDataSourceModule.FailedInitialization.Alert IIS Site State Data Source Module Initialization Failure Rule 83f03d02-5784-ef3b-57e2-48b585e80004 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Site State Data Source module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
395 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISSiteStateDataSourceModule.FailedExecution.Alert IIS Site State Data Source Module Runtime Failure Rule eaf08175-3f30-53bf-5f75-0753a41e1fa3 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Site State Data Source module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
396 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISSiteStateProbeModule.FailedInitialization.Alert IIS Site State Probe Module Initialization Failure Rule d619e2a8-ffea-4915-bffe-7bec1acef43d Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Site State Probe module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
397 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.IISSiteStateProbeModule.FailedExecution.Alert IIS Site State Probe Module Runtime Failure Rule 821497af-ef28-894e-9308-4d9b06bdaa30 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the IIS Site State Probe module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
398 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.LDAPProbeModule.FailedInitialization.Alert LDAP Probe Module Initialization Failure Rule 9d1ee4b1-e53f-2417-61d7-aa6c05256a88 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the LDAP Probe module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
399 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.LDAPProbeModule.FailedExecution.Alert LDAP Probe Module Runtime Failure Rule 02003a46-016d-ff93-532a-4d4121841abb Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the LDAP Probe module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
400 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.LearningModule.FailedInitialization.Alert Learning Module Initialization Failure Rule e2f1715d-bf52-1504-fa11-542a376d8564 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Learning Module experiences an initialization failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
401 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.LearningModule.FailedExecution.Alert Learning Module Runtime Failure Rule b7111b7d-1f4e-c19b-3fe6-8753acf18d04 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Learning Module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
402 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorRollup Local End to End Event Health Monitor 77a17673-38d1-a9e2-1b6c-ff854f022e1f Microsoft.SystemCenter.2007 false False False This roll-up monitor represents the health for a System Center Management Health Service’s functionality to process events.
403 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentManagement.LogEndToEndEvent Log Distributed Workflow Test Event Rule 6bd5b680-2487-98cf-10e0-8103cd31a9d8 Microsoft.SystemCenter.2007 true False False This rule logs an event at each System Center Management Health Service that will be collected to test event collection.
Name Value
IntervalSeconds 900
SyncTime 01:00
404 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpaceMonitorRollup Logical Disk – Free Space Rollup Monitor Monitor 753017ed-040b-8a2b-10e0-61fe0c6e4e39 Microsoft.Windows.Server.2016.Monitoring true False False This monitor aggregates the free space monitors for cluster disks.
405 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeSpaceMonitorRollup Logical Disk – Free Space Rollup Monitor Monitor 753017ed-040b-8a2b-10e0-61fe0c6e4e39 Microsoft.Windows.Server.2016.Monitoring true False False This monitor aggregates the free space monitors for cluster disks.
406 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DefragAnalysis Logical Disk Fragmentation Level Monitor f3d9efc7-f46d-d34d-d71a-0e53c30ad657 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False This monitor runs on a periodic basis (Every Saturday at 3 a.m. by default) to check the fragmentation levels of all logical drives. If fragmentation levels are found to be above threshold then by default the state of the monitor will change to “Warning” and an alert will be generated. There is a recovery named “Logical Disk Defragmentation” targeted to this monitor, which is disabled by default. If the recovery is enabled then the state change will automatically kick off a task to defragment the logical drive.
Name Value
FilePercentFragmentationThreshold 10
SchedulerDaysOfWeekMask 64
SchedulerStart 03:00
UseOSRecommendation true
407 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DefragAnalysis Logical Disk Fragmentation Level Monitor f3d9efc7-f46d-d34d-d71a-0e53c30ad657 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False This monitor runs on a periodic basis (Every Saturday at 3 a.m. by default) to check the fragmentation levels of all logical drives. If fragmentation levels are found to be above threshold then by default the state of the monitor will change to “Warning” and an alert will be generated. There is a recovery named “Logical Disk Defragmentation” targeted to this monitor, which is disabled by default. If the recovery is enabled then the state change will automatically kick off a task to defragment the logical drive.
Name Value
FilePercentFragmentationThreshold 10
SchedulerDaysOfWeekMask 64
SchedulerStart 03:00
UseOSRecommendation true
408 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeMB.Collection Logical Disk Free Megabytes Windows Server 2016 and 1709+ Rule 10639f06-7913-fb2a-1610-86e169d8f93c Microsoft.Windows.Server.2016.Monitoring true False False The space in megabytes on the logical disk that is unallocated
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Free Megabytes
Frequency 600
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 6
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
409 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.FreeMB.Collection Logical Disk Free Megabytes Windows Server 2016 and 1709+ Rule 10639f06-7913-fb2a-1610-86e169d8f93c Microsoft.Windows.Server.2016.Monitoring true False False The space in megabytes on the logical disk that is unallocated
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Free Megabytes
Frequency 600
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 6
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
410 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.PercentageFreeSpace Logical Disk Free Space (%) Low Monitor 8ef55228-0a5c-0b73-bf99-32bbbd5558ca Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitor the percentage of free space remaining on a logical disk.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName PercentFree
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 900
NonSystemDriveErrorThreshold 5
NonSystemDriveWarningThreshold 10
NumSamples 4
SystemDriveErrorThreshold 5
SystemDriveWarningThreshold 10
411 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.PercentageFreeSpace Logical Disk Free Space (%) Low Monitor 8ef55228-0a5c-0b73-bf99-32bbbd5558ca Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitor the percentage of free space remaining on a logical disk.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName PercentFree
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 900
NonSystemDriveErrorThreshold 5
NonSystemDriveWarningThreshold 10
NumSamples 4
SystemDriveErrorThreshold 5
SystemDriveWarningThreshold 10
412 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.MBFreeSpace Logical Disk Free Space (MB) Low Monitor dfe91731-caa1-8db1-2db9-1f5427d374cd Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitor the number of free MBytes remaining on a logical disk.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName MbFree
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 900
NonSystemDriveErrorThreshold 1000
NonSystemDriveWarningThreshold 2000
NumSamples 4
SystemDriveErrorThreshold 300
SystemDriveWarningThreshold 500
413 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.MBFreeSpace Logical Disk Free Space (MB) Low Monitor dfe91731-caa1-8db1-2db9-1f5427d374cd Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitor the number of free MBytes remaining on a logical disk.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName MbFree
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 900
NonSystemDriveErrorThreshold 1000
NonSystemDriveWarningThreshold 2000
NumSamples 4
SystemDriveErrorThreshold 300
SystemDriveWarningThreshold 500
414 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.Legacy.LogicalDisk.FreeSpace.Monitor Logical Disk Free Space Monitor Monitor de93c95a-ae81-e96e-fb61-6039fb2456df Microsoft.Windows.Server.2016.Monitoring true True MatchMonitorHealth Normal False Monitors the percentage free space and number of free MBytes remaining on a logical disk. Only when both the low percentage free space and low number of free MBytes thresholds are reached, the disk is flagged as having low disk free space.
Name Value
DebugFlag false
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 3600
NonSystemDriveErrorMBytesThreshold 1000
NonSystemDriveErrorPercentThreshold 5
NonSystemDriveWarningMBytesThreshold 2000
NonSystemDriveWarningPercentThreshold 10
SystemDriveErrorMBytesThreshold 300
SystemDriveErrorPercentThreshold 5
SystemDriveWarningMBytesThreshold 500
SystemDriveWarningPercentThreshold 10
TargetComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
TimeoutSeconds 360
415 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.Legacy.LogicalDisk.FreeSpace.Monitor Logical Disk Free Space Monitor Monitor de93c95a-ae81-e96e-fb61-6039fb2456df Microsoft.Windows.Server.2016.Monitoring true True MatchMonitorHealth Normal False Monitors the percentage free space and number of free MBytes remaining on a logical disk. Only when both the low percentage free space and low number of free MBytes thresholds are reached, the disk is flagged as having low disk free space.
Name Value
DebugFlag false
DiskLabel $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
IntervalSeconds 3600
NonSystemDriveErrorMBytesThreshold 1000
NonSystemDriveErrorPercentThreshold 5
NonSystemDriveWarningMBytesThreshold 2000
NonSystemDriveWarningPercentThreshold 10
SystemDriveErrorMBytesThreshold 300
SystemDriveErrorPercentThreshold 5
SystemDriveWarningMBytesThreshold 500
SystemDriveWarningPercentThreshold 10
TargetComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
TimeoutSeconds 360
416 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.PercentIdleTime Logical Disk Percent Idle Time Monitor 8267df28-36f3-216c-17e7-0a9113a3b7e1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitor the performance counter LogicalDisk\% Idle Time
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Idle Time
Direction lessequal
Frequency 900
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 24
ObjectName LogicalDisk
Threshold 20
417 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.PercentIdleTime Logical Disk Percent Idle Time Monitor 8267df28-36f3-216c-17e7-0a9113a3b7e1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitor the performance counter LogicalDisk\% Idle Time
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Idle Time
Direction lessequal
Frequency 900
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
NumSamples 24
ObjectName LogicalDisk
Threshold 20
418 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.SplitIOPerSec.Collection Logical Disk Split I/O Per Second Windows Server 2016 and 1709+ Rule 3b73b531-be3b-45c6-63dd-a3884f0463cd Microsoft.Windows.Server.2016.Monitoring false False False The rate at which I/Os to the disk were split into multiple I/Os.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Split IO/Sec
Frequency 600
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 6
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
419 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.SplitIOPerSec.Collection Logical Disk Split I/O Per Second Windows Server 2016 and 1709+ Rule 3b73b531-be3b-45c6-63dd-a3884f0463cd Microsoft.Windows.Server.2016.Monitoring false False False The rate at which I/Os to the disk were split into multiple I/Os.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Split IO/Sec
Frequency 600
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 6
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
420 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskWriteBytesPerSec.Collection Logical Disk Write Bytes Per Second Windows Server 2016 and 1709+ Rule bdaa480a-772d-0a75-58cd-76ed72b8c288 Microsoft.Windows.Server.2016.Monitoring false False False The rate at which bytes are transferred from the disk during write operations.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Write Bytes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
421 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e Microsoft.Windows.Server.10.0.LogicalDisk a06d196b-64ad-dd51-2db2-92816d9b8390 Microsoft.Windows.Server.10.0.LogicalDisk.DiskWriteBytesPerSec.Collection Logical Disk Write Bytes Per Second Windows Server 2016 and 1709+ Rule bdaa480a-772d-0a75-58cd-76ed72b8c288 Microsoft.Windows.Server.2016.Monitoring false False False The rate at which bytes are transferred from the disk during write operations.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Disk Write Bytes/sec
Frequency 300
InstanceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MaximumSampleSeparation 12
ObjectName LogicalDisk
Tolerance 10
ToleranceType Percentage
422 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.CorruptOrUnreadableEvents Many Corrupt or Unreadable Windows Events Monitor e5aad154-6650-6499-ad47-7e32a81423b4 Microsoft.SystemCenter.2007 true True Warning Low False This monitor will check if the Windows Event Log module reads many corrupt events from any event log. If it encounters too many corrupt or unreadable events over a period of time, it will set the state of this monitor to unhealthy.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Consolidator System.Xml.XmlElement
Expression System.Xml.XmlElement
LogName Operations Manager
RepeatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
RepeatedExpression System.Xml.XmlElement
RepeatedLogName Operations Manager
423 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.MaxConcurrentAPI.Monitor Max Concurrent API Monitor Monitor 7cdeda35-ceb1-4ed9-cc50-98f7a66c46c9 Microsoft.Windows.Server.2016.Monitoring true True MatchMonitorHealth Normal False This monitor alerts when Max Concurrent API condition is reached.
Name Value
DiagnosticMode 0
IntervalSeconds 900
SyncTime
ThresholdTimeouts 2000
ThresholdWaiters 50
TimeoutSeconds 300
424 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.MaxConcurrentAPI.Monitor Max Concurrent API Monitor Monitor 7cdeda35-ceb1-4ed9-cc50-98f7a66c46c9 Microsoft.Windows.Server.2016.Monitoring true True MatchMonitorHealth Normal False This monitor alerts when Max Concurrent API condition is reached.
Name Value
DiagnosticMode 0
IntervalSeconds 900
SyncTime
ThresholdTimeouts 2000
ThresholdWaiters 50
TimeoutSeconds 300
425 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection Memory % Committed Bytes in Use Windows Server 2016 and 1709+ Rule 2a6d222f-1f77-9e80-1756-ca3b010f8dff Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\% Committed Bytes in Use
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Committed Bytes In Use
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
426 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection Memory % Committed Bytes in Use Windows Server 2016 and 1709+ Rule 2a6d222f-1f77-9e80-1756-ca3b010f8dff Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\% Committed Bytes in Use
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Committed Bytes In Use
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
427 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryAvailableMBytes.Collection Memory Available Megabytes Windows Server 2016 and 1709+ Rule 64305076-6333-f5ca-b581-caccf8e55584 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Available MBytes
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Available MBytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
428 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryAvailableMBytes.Collection Memory Available Megabytes Windows Server 2016 and 1709+ Rule 64305076-6333-f5ca-b581-caccf8e55584 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Available MBytes
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Available MBytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
429 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageReadsPerSec.Collection Memory Page Reads per Second Windows Server 2016 and 1709+ Rule 4e93bf04-596f-530c-fb5a-da9fde794c96 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Page Reads/Sec.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Page Reads/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Memory
Tolerance 250
ToleranceType Absolute
430 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageReadsPerSec.Collection Memory Page Reads per Second Windows Server 2016 and 1709+ Rule 4e93bf04-596f-530c-fb5a-da9fde794c96 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Page Reads/Sec.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Page Reads/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Memory
Tolerance 250
ToleranceType Absolute
431 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageWritesPerSec.Collection Memory Page Writes per Second Windows Server 2016 and 1709+ Rule df9b12f2-82db-9aa0-5a2e-809d4ef172ca Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Page Writes/Sec.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Page Writes/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Memory
Tolerance 250
ToleranceType Absolute
432 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPageWritesPerSec.Collection Memory Page Writes per Second Windows Server 2016 and 1709+ Rule df9b12f2-82db-9aa0-5a2e-809d4ef172ca Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Page Writes/Sec.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Page Writes/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Memory
Tolerance 250
ToleranceType Absolute
433 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesPerSecond Memory Pages Per Second Monitor 60831ccf-ae0c-b847-ae68-93e85fa8b162 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter Memory\MemoryPagesPerSecond
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages/Sec
Direction greaterequal
Frequency 300
InstanceName
NumSamples 12
ObjectName Memory
Threshold 5000
434 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesPerSecond Memory Pages Per Second Monitor 60831ccf-ae0c-b847-ae68-93e85fa8b162 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Monitor the performance counter Memory\MemoryPagesPerSecond
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages/Sec
Direction greaterequal
Frequency 300
InstanceName
NumSamples 12
ObjectName Memory
Threshold 5000
435 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesPerSec.Collection Memory Pages per Second Windows Server 2016 and 1709+ Rule a05f701c-535e-4686-514f-f5986fc67ae1 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Pages Reads/Sec.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Memory
Tolerance 250
ToleranceType Absolute
436 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesPerSec.Collection Memory Pages per Second Windows Server 2016 and 1709+ Rule a05f701c-535e-4686-514f-f5986fc67ae1 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Pages Reads/Sec.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName Memory
Tolerance 250
ToleranceType Absolute
437 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolNonPagedBytes.Collection Memory Pool Non-paged Bytes Windows Server 2016 and 1709+ Rule 89421dd4-9002-483f-387a-ec46d64234bd Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Pool Nonpaged Bytes
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pool Nonpaged Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 2000000
ToleranceType Absolute
438 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolNonPagedBytes.Collection Memory Pool Non-paged Bytes Windows Server 2016 and 1709+ Rule 89421dd4-9002-483f-387a-ec46d64234bd Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Pool Nonpaged Bytes
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pool Nonpaged Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 2000000
ToleranceType Absolute
439 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedBytes.Collection Memory Pool Paged Bytes Windows Server 2016 and 1709+ Rule a412a0e6-8fb3-c465-7400-cfed8a33c29d Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Pool Paged Bytes
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pool Paged Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 2000000
ToleranceType Absolute
440 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedBytes.Collection Memory Pool Paged Bytes Windows Server 2016 and 1709+ Rule a412a0e6-8fb3-c465-7400-cfed8a33c29d Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Memory\Pool Paged Bytes
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pool Paged Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 2000000
ToleranceType Absolute
441 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Advisor.Monitoring.ServerOptInOutRule Microsoft System Center Advisor Monitoring Server Opt-In/Out Rule Rule 5d51f6af-fc79-f466-66c1-9007da628423 Microsoft.SystemCenter.Advisor.Internal true False False
Name Value
EnableConnector false
ManagementGroupId $Target/ManagementGroup/Id$
442 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Microsoft.Windows.Computer.DependOnACS.Collector.AvailabilityRollup Microsoft Windows Computer Depends on Audit Collection Service Monitor 908fddfb-2423-f219-f424-46351cb25e90 Microsoft.SystemCenter.ACS.Internal true False False This monitor rolls up healths from Audit Collection Service contained in the Windows Computer.
443 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOMNTPerfMapperModule.FailedInitialization.Alert MOM NT Performance Mapper Module Initialization Failure Rule dc2338e6-c727-49c4-fb1d-74ea8c0ccfcd Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the MOM NT Performance Mapper module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
444 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.MOMNTPerfMapperModule.FailedExecution.Alert MOM NT Performance Mapper Module Runtime Failure Rule 41ec4f6b-439f-8119-458f-938dfc4173c3 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the MOM NT Performance Mapper module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
445 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.Agent 118c0f18-7a70-5f57-3a9b-eeaf1705b3fc Microsoft.SystemCenter.Agent.MonitoringHost.HandleCountThreshold Monitoring Host Handle Count Threshold Monitor b2988b2f-d7a3-a68e-d53c-c44ca84cb38b Microsoft.SystemCenter.2007 true True Information True This monitor ensures that the “Process\Handle Count” counter for the “MonitoringHost.exe” processes do not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the “Health Service State” monitor. The “Health Service State” monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
CounterName Handle Count
Direction greater
Frequency 120
InstanceName MonitoringHost*
NumSamples 5
ObjectName Process
Threshold 6000
ParameterName DefaultValue EffectiveValue
Frequency 120 120
NumSamples 5 5
Threshold 6000 30000
446 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.Agent 118c0f18-7a70-5f57-3a9b-eeaf1705b3fc Microsoft.SystemCenter.Agent.MonitoringHost.PrivateBytesThreshold Monitoring Host Private Bytes Threshold Monitor fa7f1961-154a-3dbf-b26a-3383a31e9239 Microsoft.SystemCenter.2007 true True Information True This monitor ensures that the “Process\Private Bytes” counter for the “MonitoringHost.exe” processes do not exceed a set threshold over a series of consecutive samples. If the conditions are met, this monitor will change to a critical state, which will then roll up to the “Health Service State” monitor. The “Health Service State” monitor is configured to run a recovery when its state is critical, which will automatically attempt to restart the System Center Management Health Service.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
CounterName Private Bytes
Direction greater
Frequency 120
InstanceName MonitoringHost*
NumSamples 5
ObjectName Process
Threshold 314572800
ParameterName DefaultValue EffectiveValue
Frequency 120 120
NumSamples 5 5
Threshold 314572800 1887436800
447 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.BytesReceivedPerSec.Collection Network Adapter Bytes Received per Second Windows Server 2016 and 1709+ Rule 8a1e3f69-8027-79a1-ae43-1c8718d20ad6 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Network Interface\Bytes Received/sec
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Bytes Received/sec
Frequency 300
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
MaximumSampleSeparation 12
ObjectName Network Adapter
Tolerance 25
ToleranceType Percentage
448 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.BytesSentPerSec.Collection Network Adapter Bytes Sent per Second Windows Server 2016 and 1709+ Rule 0193fdcb-d94c-34ef-aed4-bcc84f72d690 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Network Interface\Bytes Sent/sec
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Bytes Sent/sec
Frequency 300
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
MaximumSampleSeparation 12
ObjectName Network Adapter
Tolerance 25
ToleranceType Percentage
449 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.BytesTotalPerSec.Collection Network Adapter Bytes Total per Second Windows Server 2016 and 1709+ Rule e9024ff3-1cdb-e5af-14e1-abac1e7d49f6 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Network Interface/Bytes Total/sec
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Bytes Total/sec
Frequency 300
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
MaximumSampleSeparation 12
ObjectName Network Adapter
Tolerance 25
ToleranceType Percentage
450 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.NetworkAdapterConnectionHealth Network Adapter Connection Health Monitor bf3a9023-1f5e-65e6-6022-182e82754773 Microsoft.Windows.Server.2016.Monitoring false True Error Normal False Monitors the network adapter connection’s health.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
DeviceName $Target/Property[Type=”Windows!Microsoft.Windows.LogicalDevice”]/DeviceID$
MonitorDisconnection true
MonitorHardwareMalfunction false
MonitorMediaDisconnection false
TimeoutSeconds 300
451 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 System.NetworkManagement.SNMPTrapPortAlreadyInUse.Monitor Network Monitoring SNMP Trap port is already in use by another program Monitor 71f045bb-5db2-b199-1986-2e390569e86a System.NetworkManagement.Monitoring true True Error High False This monitor checks whether Network Discovery failed for a SNMP Trap port is already in use by another program.
Name Value
ComputerName
Expression System.Xml.XmlElement
LogName Operations Manager
452 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.NetworkManagement.IsExperiencingExcessiveTimeouts Network Monitoring Timeouts Monitor 4be917f2-b7fc-556b-614d-d243628f449e Microsoft.SystemCenter.2007 true True Warning High False This monitor checks whether Network Monitoring is experiencing excessive timeouts
Name Value
Count 1
IntervalSeconds 300
453 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorWarning No End to End Event for 30 Minutes (Warning Level) Monitor 628463fe-15c7-ecc9-6d27-36f1af0a1c69 Microsoft.SystemCenter.2007 false False False This monitor detects if the local System Center Management Health Service was able to log an event in the last 30 minutes as a synthetic transaction to check the System Center Management Health Service’s ability to process events.
Name Value
ComputerName .
Consolidator System.Xml.XmlElement
Expression System.Xml.XmlElement
LogName Operations Manager
MissingComputerName .
MissingExpression System.Xml.XmlElement
MissingLogName Operations Manager
454 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.AgentManagement.EndToEndEventMonitorError No End to End Event for 45 Minutes (Critical Level) Monitor 5ee3ce88-088e-898f-8ae7-2c6eeda36bf6 Microsoft.SystemCenter.2007 false False False This monitor detects if the local System Center Management Health Service was able to log an event in the last 45 minutes as a synthetic transaction to check the System Center Management Health Service’s ability to process events.
Name Value
ComputerName .
Consolidator System.Xml.XmlElement
Expression System.Xml.XmlElement
LogName Operations Manager
MissingComputerName .
MissingExpression System.Xml.XmlElement
MissingLogName Operations Manager
455 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSDelayedWriteLost.Alert NTFS – Delayed Write Lost Rule fbbb9319-0451-331a-c884-c4fd16682813 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False NT file system reports a delayed write was lost.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
456 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSDelayedWriteLost.Alert NTFS – Delayed Write Lost Rule fbbb9319-0451-331a-c884-c4fd16682813 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False NT file system reports a delayed write was lost.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
457 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSFileSystemCorrupt.Alert NTFS – File System Corrupt Rule 8a16bb44-e0a3-3e7b-36d9-94c16722b6c1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False NT file system indicates a corrupt file system.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
458 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.NTFSFileSystemCorrupt.Alert NTFS – File System Corrupt Rule 8a16bb44-e0a3-3e7b-36d9-94c16722b6c1 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False NT file system indicates a corrupt file system.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
459 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.OleDbProbe.Modules.EventCollection OleDb Probe Module Events Collector Rule Rule 6cbac59e-6219-d85e-a420-02dff356a63d Microsoft.SystemCenter.2007 false False False This rule collects OleDb Probe module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
460 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.Computer e817d034-02e8-294c-3509-01ca25481689 Microsoft.Windows.Server.Computer.OSAvailabilityRollup Operating System Availability Rollup Monitor 814e24b7-ef2b-15a4-d457-89df03ed0802 Microsoft.Windows.Server.Library true False False This monitor rolls up the availability health of the Operating System to the Windows computer.
461 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.Monitoring.BPA.OperatingSystem.Monitor Operating System BPA Monitor Monitor c732ae9a-4f24-7d37-25ad-777d3ab37319 Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitors compliance of Windows Server 2016 and 1709+ operating systems with Best Practices Analyzer rules. As long as Windows Nano Server does not support BPA PowerShell cmdlets, the monitor will always be displayed as “Healthy”.
Name Value
Interval 86400
462 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.Monitoring.BPA.OperatingSystem.Monitor Operating System BPA Monitor Monitor c732ae9a-4f24-7d37-25ad-777d3ab37319 Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Monitors compliance of Windows Server 2016 and 1709+ operating systems with Best Practices Analyzer rules. As long as Windows Nano Server does not support BPA PowerShell cmdlets, the monitor will always be displayed as “Healthy”.
Name Value
Interval 86400
463 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.Computer e817d034-02e8-294c-3509-01ca25481689 Microsoft.Windows.Server.Computer.OSConfigurationRollup Operating System Configuration Rollup Monitor 492471a6-da28-de82-5464-46cabeaffbff Microsoft.Windows.Server.Library true False False This monitor rolls up the configuration health of the Operating System to the Windows computer.
464 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.Computer e817d034-02e8-294c-3509-01ca25481689 Microsoft.Windows.Server.Computer.OSPerformanceRollup Operating System Performance Rollup Monitor b3a3caae-1904-0299-40e1-b61f517893b8 Microsoft.Windows.Server.Library true False False This monitor rolls up the performance health of the Operating System to the Windows computer.
465 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Microsoft.SystemCenter.SCOM.Certificate.Expiry OpsMgr Certificate Expiration Rule fd747767-330e-a7f8-d6ae-818f309673d0 Microsoft.SystemCenter.2007 false True Error High False Rule to alert if OpsMgr certificate is about to Expire.
Name Value
AlertBeforeNumDays 7
IntervalSeconds 86400
TimeoutSeconds 600
466 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.OutputQueueLength.Collection Output Queue Length Rule 546fa8d9-dc1a-e2e4-9396-04de59baa5ee Microsoft.Windows.Server.2016.Monitoring false False False Rule collects Network Interface\Output Queue Length counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Output Queue Length
Frequency 300
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
MaximumSampleSeparation 12
ObjectName Network Adapter
Tolerance 2
ToleranceType Absolute
467 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PageFilePercentUsage.Collection Page File Percentage Use Windows Server 2016 and 1709+ Rule d0782104-c860-c267-7139-ecbed3c15386 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for the performance counter Paging File\% Usage
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Usage
Frequency 600
InstanceName _Total
MaximumSampleSeparation 6
ObjectName Paging File
Tolerance 10
ToleranceType Absolute
468 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PageFilePercentUsage.Collection Page File Percentage Use Windows Server 2016 and 1709+ Rule d0782104-c860-c267-7139-ecbed3c15386 Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for the performance counter Paging File\% Usage
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Usage
Frequency 600
InstanceName _Total
MaximumSampleSeparation 6
ObjectName Paging File
Tolerance 10
ToleranceType Absolute
469 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesInputPerSec.Collection Pages Input Per Second Rule 087f69ab-a3a5-e6e0-dd04-f1f4b5cdacfc Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Pages Input/sec
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages Input/sec
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
470 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesInputPerSec.Collection Pages Input Per Second Rule 087f69ab-a3a5-e6e0-dd04-f1f4b5cdacfc Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Pages Input/sec
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages Input/sec
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
471 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesOutputPerSec.Collection Pages Output Per Second Rule 621a9e4b-ef7c-412d-fc4c-cd4bb3466078 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Pages Output/sec
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages Output/sec
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
472 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPagesOutputPerSec.Collection Pages Output Per Second Rule 621a9e4b-ef7c-412d-fc4c-cd4bb3466078 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Pages Output/sec
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pages Output/sec
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
473 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Alert.ParamReplacementFailure Parameter Replacement Failure During Alert Creation Rule 409e9bea-fa02-3bd5-bbc5-2578e12ac4a2 Microsoft.SystemCenter.2007 true True Warning Low False Parameter replacement failed during alert creation.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
474 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Alert.ParamReplacementFailure.EventCollection Parameter Replacement Failure Event Collection Rule Rule b33eda3d-7b39-e3d3-c335-11d4a7a346a7 Microsoft.SystemCenter.2007 false False False This rule collects System Center Management Health Service events related to parameter replacement failures.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
475 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedReads.Collection Percent Bandwidth Used Read Rule 8e7d391d-751a-cc46-759f-9ba1494d0f69 Microsoft.Windows.Server.2016.Monitoring false False False Rule collects Bandwidth Used Read counter for network adapters.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName PercentBandwidthUsedRead
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
IntervalSeconds 300
IsDiscoverDisabled true
IsUseMacAddress true
476 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedReads Percent Bandwidth Used Read Monitor 0b9b5ca2-3bfd-cbf0-0d6d-91d880d79577 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False This monitor checks percentage of used network adapter read bandwidth.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName PercentBandwidthUsedRead
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
IntervalSeconds 300
IsDiscoverDisabled false
IsUseMacAddress true
NumOfSamples 12
Threshold 60
477 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedTotal Percent Bandwidth Used Total Monitor 88ae182e-43bd-727a-a60b-a5f69d2b884a Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False This monitor checks percentage of total used network adapter bandwidth..
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName PercentBandwidthUsedTotal
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
IntervalSeconds 300
IsDiscoverDisabled false
IsUseMacAddress true
NumOfSamples 12
Threshold 75
478 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedTotal.Collection Percent Bandwidth Used Total Rule 3b3bff12-790a-c6ea-bef1-8feb1b1a86cc Microsoft.Windows.Server.2016.Monitoring true False False Rule collects Bandwidth Used Total counter for network adapters.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName PercentBandwidthUsedTotal
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
IntervalSeconds 300
IsDiscoverDisabled true
IsUseMacAddress true
479 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedWrites Percent Bandwidth Used Write Monitor 72bf1716-63d1-e520-1eeb-ecaa55139c17 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False This monitor checks percentage of used network adapter write bandwidth.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName PercentBandwidthUsedWrite
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
IntervalSeconds 300
IsDiscoverDisabled false
IsUseMacAddress true
NumOfSamples 12
Threshold 60
480 Ethernet c8d19996-b782-1aa1-ba70-f69e4fb358cd Microsoft.Windows.Server.10.0.NetworkAdapter 97116693-b8e7-f4b3-fdd6-9644eb842a4d Microsoft.Windows.Server.10.0.NetworkAdapter.PercentBandwidthUsedWrites.Collection Percent Bandwidth Used Write Rule 51311534-9cb4-bff8-90c4-3826dbcaf612 Microsoft.Windows.Server.2016.Monitoring false False False Rule collects Bandwidth Used Write counter for network adapters.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName PercentBandwidthUsedWrite
InstanceName $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.NetworkAdapter”]/PerfmonInstance$
IntervalSeconds 300
IsDiscoverDisabled true
IsUseMacAddress true
481 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PercentMemoryUsed.Collection Percent Memory Used Rule 3ab93915-ec49-6ca9-5d67-6f873eed0baa Microsoft.Windows.Server.2016.Monitoring true False False This rule collects data about used physical memory.
Name Value
Frequency 300
MaximumSampleSeparation 12
PhysicalMemory $Target/Property[Type=”Windows!Microsoft.Windows.OperatingSystem”]/PhysicalMemory$
Tolerance 50
482 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PercentMemoryUsed.Collection Percent Memory Used Rule 3ab93915-ec49-6ca9-5d67-6f873eed0baa Microsoft.Windows.Server.2016.Monitoring true False False This rule collects data about used physical memory.
Name Value
Frequency 300
MaximumSampleSeparation 12
PhysicalMemory $Target/Property[Type=”Windows!Microsoft.Windows.OperatingSystem”]/PhysicalMemory$
Tolerance 50
483 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PercentCommittedBytesInUse Percentage of Committed Memory in Use Monitor f2b58496-98df-c6b3-e9d1-2b99d37e049c Microsoft.Windows.Server.2016.Monitoring false True Error Normal False Monitor the performance counter Memory\% Committed Bytes in Use
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Committed Bytes In Use
Direction greater
Frequency 120
InstanceName
NumSamples 3
ObjectName Memory
Threshold 80
484 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PercentCommittedBytesInUse Percentage of Committed Memory in Use Monitor f2b58496-98df-c6b3-e9d1-2b99d37e049c Microsoft.Windows.Server.2016.Monitoring false True Error Normal False Monitor the performance counter Memory\% Committed Bytes in Use
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Committed Bytes In Use
Direction greater
Frequency 120
InstanceName
NumSamples 3
ObjectName Memory
Threshold 80
485 DCSecurity-Logoff d20d0c29-ca1a-f17f-bb09-7baf6602ddce 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
486 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
487 Fake-WEC-ServerSource2.contoso.com 6bb7c7bd-5c87-f07c-8b9c-8eabb0cb4c4d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
488 Fake-WEC-ServerSource1.contoso.com f48c044e-0030-8bad-a2ef-5ed415b1c165 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
489 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
490 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
491 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
492 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
493 Fake-WEC-ServerSource1.contoso.com a0e82d2f-873f-7350-c0e1-28d9635a449e 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
494 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
495 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
496 DCSecurity-Logon 9a06a44d-93e3-c9c5-bfab-2076cf9ac489 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
497 DCSecurity-Others babf47a4-2c1d-5325-68ae-c3b9eed985c6 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
498 Fake-WEC-ServerSource2.contoso.com fbfe1b9d-c476-8902-7bb5-43457edc2448 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
499 Fake-WEC-ServerSource1.contoso.com 723a3006-2614-f8eb-d44e-f34d646ad371 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
500 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
501 Fake-WEC-ServerSource2.contoso.com cbe50619-b83c-e838-0f7b-d8175809b356 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
502 DCSecurity-Authentication b309ae13-922c-09af-3c23-57fcb2af0cad 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
503 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
504 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
505 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
506 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
507 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
508 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
509 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
510 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
511 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
512 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
513 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
514 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.PerformanceState Performance Monitor 7db3eece-fd0d-fddd-3af7-f8371a914874 System.Health.Library true False False Roll up monitor that aggregates entity performance health.
515 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.DataWarehouse.CollectPerformanceData Performance data collector Rule 762c9f4a-582a-2bf0-cb9d-51c341ba8bf9 Microsoft.SystemCenter.DataWarehouse.Library true False True This rule collects all published (on default channel) performance data for Data Warehouse collection (to default store)
Name Value
DropItems true
QueueDataOnStall false
QueueDataStallInterval PT2M
StalledDataQueueSizeMB 100
ParameterName DefaultValue EffectiveValue
BulkInsertBatchSize 5000 5000
DropItems true false
ExecutionAttemptTimeoutIntervalSeconds 0 0
MaxBatchesToProcessBeforeMaintenanceCount 200 200
MaxExecutionAttemptCount 0 0
QueueDataOnStall false false
QueueDataStallInterval PT2M PT2M
StalledDataQueueSizeMB 100 100
516 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.PerfDataSourceModule.FailedInitialization.Alert Performance Data Source Module could not find a performance counter Rule 5fbe825f-0ace-aec5-3549-c09f3f4d0752 Microsoft.SystemCenter.2007 false True Warning Normal False This rule generates alerts when the Performance Data Source Module module is unable to find the performance counter that the workflow has been configured to collect or alert on.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
517 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PerformanceRegistryCorruption.Alert Performance registry corruption Rule 508f4ea6-2a18-3aa1-3a48-af73a7f3a603 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Corruption was detected in the registry related to performance counters.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Application
518 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PerformanceRegistryCorruption.Alert Performance registry corruption Rule 508f4ea6-2a18-3aa1-3a48-af73a7f3a603 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Corruption was detected in the registry related to performance counters.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Application
519 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.HealthServiceStoreMaintenance Periodic System Center Management Health Service Store Maintenance Rule 01dfc1fd-d88c-9980-def2-a73962ba317f Microsoft.SystemCenter.2007 true False False Rule which runs periodic maintenance of the System Center Management Health Service ESE store.
Name Value
Scheduler System.Xml.XmlElement
520 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Microsoft.SystemCenter.Ping Ping Status Monitor 97a55dc4-bb82-dc45-ec91-1551f3e6c87b Microsoft.SystemCenter.2007 false True Error Normal False This monitor pings a agentless computer using an ICMP ping. If the computer is agent-managed, it pings itself locally.
Name Value
Computer $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/PrincipalName$
Frequency 300
ResponseTimeThreshold 5000
521 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PlugandPlayServiceHealth Plug and Play Service Health Monitor 5c925256-7224-1d7d-ceac-6d89290b7186 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for Plug and Play
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName PlugPlay
522 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.PlugandPlayServiceHealth Plug and Play Service Health Monitor 5c925256-7224-1d7d-ceac-6d89290b7186 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for Plug and Play
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName PlugPlay
523 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedResidentBytes.Collection Pool Paged Resident Bytes Rule 585ac12e-2b05-6df4-e8f4-cd3de61ab283 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Pool Paged Resident Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pool Paged Resident Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
524 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemoryPoolPagedResidentBytes.Collection Pool Paged Resident Bytes Rule 585ac12e-2b05-6df4-e8f4-cd3de61ab283 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\Pool Paged Resident Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Pool Paged Resident Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
525 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.Process.HealthState.Collection Process Monitoring: Health State Collection Rule 49389698-0aff-9786-48bd-2e61178ac606 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects information about the health state of the processes.
Name Value
HandleCountIncreaseThreshold 20
IntervalSeconds 60
LogLevel 4
ManagedEntityId $Target/Host/Id$
MemoryPercentageThreshold 50
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
PercentProcessorTimeThreshold 50
SampleCount 6
526 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.Process.HealthState.Collection Process Monitoring: Health State Collection Rule 49389698-0aff-9786-48bd-2e61178ac606 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects information about the health state of the processes.
Name Value
HandleCountIncreaseThreshold 20
IntervalSeconds 60
LogLevel 4
ManagedEntityId $Target/Host/Id$
MemoryPercentageThreshold 50
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
PercentProcessorTimeThreshold 50
SampleCount 6
527 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessHandleCount.Alert Process Monitoring: High Handle Count Rule 8b8bd43c-04f1-f944-49ad-b309a20c9b9e Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule generates an alert when handle count increases too fast.
Name Value
HandleCountIncreaseThreshold 20
IntervalSeconds 120
LogLevel 4
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
SampleCount 6
528 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessHandleCount.Alert Process Monitoring: High Handle Count Rule 8b8bd43c-04f1-f944-49ad-b309a20c9b9e Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule generates an alert when handle count increases too fast.
Name Value
HandleCountIncreaseThreshold 20
IntervalSeconds 120
LogLevel 4
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
SampleCount 6
529 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessMemoryPercentage.Alert Process Monitoring: High Memory Percentage Rule 38482917-a6df-5f55-6060-482c19f0c578 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule generates an alert when the memory percentage is too high.
Name Value
IntervalSeconds 67
LogLevel 4
MemoryPercentageThreshold 50
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
SampleCount 6
530 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessMemoryPercentage.Alert Process Monitoring: High Memory Percentage Rule 38482917-a6df-5f55-6060-482c19f0c578 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule generates an alert when the memory percentage is too high.
Name Value
IntervalSeconds 67
LogLevel 4
MemoryPercentageThreshold 50
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
SampleCount 6
531 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessPercentProcessorTime.Alert Process Monitoring: High Processor Time Percentage Rule 515b772e-10e4-95f2-53c5-bee2e1d5c458 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule generates an alert when the percentage of processor time is too high.
Name Value
IntervalSeconds 73
LogLevel 4
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
PercentProcessorTimeThreshold 50
SampleCount 6
532 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessPercentProcessorTime.Alert Process Monitoring: High Processor Time Percentage Rule 515b772e-10e4-95f2-53c5-bee2e1d5c458 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule generates an alert when the percentage of processor time is too high.
Name Value
IntervalSeconds 73
LogLevel 4
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
PercentProcessorTimeThreshold 50
SampleCount 6
533 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.Process.Ports.Collection Process Monitoring: Network Port State Collection Rule a5a1a052-0e07-b70d-0474-fdb814d963ba Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects information about Network Port State.
Name Value
IntervalSeconds 60
LogLevel 4
ManagedEntityId $Target/Host/Id$
ManagementGroupId $Target/ManagementGroup/Id$
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
534 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.Process.Ports.Collection Process Monitoring: Network Port State Collection Rule a5a1a052-0e07-b70d-0474-fdb814d963ba Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects information about Network Port State.
Name Value
IntervalSeconds 60
LogLevel 4
ManagedEntityId $Target/Host/Id$
ManagementGroupId $Target/ManagementGroup/Id$
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
535 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessCount.Collection Process Monitoring: Number of Processes Collection Rule 653cb4fc-38c2-9c7b-7a1e-8ea1dd1ce817 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects the Number of Processes performance counter for Windows Server 2016 and 1709+ operating systems.
Name Value
IntervalSeconds 300
SyncTime
536 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.ProcessCount.Collection Process Monitoring: Number of Processes Collection Rule 653cb4fc-38c2-9c7b-7a1e-8ea1dd1ce817 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects the Number of Processes performance counter for Windows Server 2016 and 1709+ operating systems.
Name Value
IntervalSeconds 300
SyncTime
537 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.Process.PerfMetrics.Collection Process Monitoring: Performance Collection Rule 2796a6f7-8cf0-faa5-f983-48118875ea89 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects information about the processes’ performance metrics.
Name Value
IntervalSeconds 60
LogLevel 4
ManagedEntityId $Target/Host/Id$
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
538 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 Microsoft.Windows.Server.10.0.ProcessMonitoring.ProcessSeed 174bfac0-1048-3dbe-0bc2-891842f77ff9 Microsoft.Windows.Server.10.0.Process.PerfMetrics.Collection Process Monitoring: Performance Collection Rule 2796a6f7-8cf0-faa5-f983-48118875ea89 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule collects information about the processes’ performance metrics.
Name Value
IntervalSeconds 60
LogLevel 4
ManagedEntityId $Target/Host/Id$
MonitoringConfiguration $Target/Property[Type=”WindowsServer!Microsoft.Windows.Server.ProcessSeed”]/ThresholdsByProcess$
539 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.Server.10.0.Process.HealthStateSubscription.Rule Process Monitoring: Process Health State Subscription Rule e10fb434-fb4d-3027-1962-15eded6433d2 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule saves Process Health State information to the SCOM data warehouse. To start information collection, make sure that “Process Monitoring: Health State Collection” rule is enabled.
Name Value
ChannelId $MPElement[Name=”Microsoft.Windows.Server.10.0.Process.HealthState.Collection”]$
DropItems false
ManagementGroupId $Target/ManagementGroup/Id$
540 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.Server.10.0.Process.PortSubscription.Rule Process Monitoring: Process Network Port Subscription Rule f2fbf54c-41c9-5362-cf8a-642f359fd775 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule saves Process Network Port information to the SCOM data warehouse. To start information collection, make sure that “Process Monitoring: Network Port State Collection” rule is enabled.
Name Value
ChannelId $MPElement[Name=”Microsoft.Windows.Server.10.0.Process.Ports.Collection”]$
DropItems false
ManagementGroupId $Target/ManagementGroup/Id$
541 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.Windows.Server.10.0.Process.PerfMetricsSubscription.Rule Process Monitoring: Process Performance Metric Subscription Rule 4b602998-5da6-f244-5c5a-0f902f37e662 Microsoft.Windows.Server.2016.ProcessPortMonitoring false False False This rule saves Process Performance Metric information to the SCOM data warehouse. To start information collection, make sure that “Process Monitoring: Performance Collection” rule is enabled.
Name Value
ChannelId $MPElement[Name=”Microsoft.Windows.Server.10.0.Process.PerfMetrics.Collection”]$
DropItems false
ManagementGroupId $Target/ManagementGroup/Id$
542 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceModules.WindowsEventLog.ProcessingBackLoggedEventsTooLong Processing Backlogged Events Taking a Long Time Monitor 5e4852df-dd3c-6532-6a74-baba0f2d96b8 Microsoft.SystemCenter.2007 true True MatchMonitorHealth Normal False This monitor checks the if the Windows Event Log module is processing backlogged events for a period of time.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CorrelatorError System.Xml.XmlElement
CorrelatorWarning System.Xml.XmlElement
Expression System.Xml.XmlElement
FirstCorrelatedMissingEventErrorComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstCorrelatedMissingEventErrorExpression System.Xml.XmlElement
FirstCorrelatedMissingEventErrorLogName Operations Manager
FirstCorrelatedMissingEventWarningComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstCorrelatedMissingEventWarningExpression System.Xml.XmlElement
FirstCorrelatedMissingEventWarningLogName Operations Manager
LogName Operations Manager
SecondCorrelatedMissingEventErrorComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondCorrelatedMissingEventErrorExpression System.Xml.XmlElement
SecondCorrelatedMissingEventErrorLogName Operations Manager
SecondCorrelatedMissingEventWarningComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondCorrelatedMissingEventWarningExpression System.Xml.XmlElement
SecondCorrelatedMissingEventWarningLogName Operations Manager
543 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentProcessorTime.Collection Processor % Processor Time Total Windows Server 2016 and 1709+ Rule 60ec0998-f0ec-14ac-030f-3914361edee4 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Processor\% Processor Time
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Processor Time
Frequency 300
InstanceName _Total
MaximumSampleSeparation 12
ObjectName Processor Information
Tolerance 5
ToleranceType Absolute
544 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.TotalPercentProcessorTime.Collection Processor % Processor Time Total Windows Server 2016 and 1709+ Rule 60ec0998-f0ec-14ac-030f-3914361edee4 Microsoft.Windows.Server.2016.Monitoring true False False Collects the performance counter Processor\% Processor Time
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName % Processor Time
Frequency 300
InstanceName _Total
MaximumSampleSeparation 12
ObjectName Processor Information
Tolerance 5
ToleranceType Absolute
545 2016b.CONTOSO.COM 122a2826-5f2b-1c9f-a1e5-ec228c4aee89 VDS.RadiantLogic.7x.ServerRole 92969f7f-29e0-9c95-75f4-6fe39ff2c9f8 ADI.RadiantLogic.7x.BasicPort.Dependency.Monitor Radiant Logic BasicPort Dependency Monitor Monitor 309cd21e-b746-81d4-27f1-0ead2165833e ADI.RadiantLogic.7x true False False Description for new dependency monitor.
546 2016b.CONTOSO.COM 122a2826-5f2b-1c9f-a1e5-ec228c4aee89 VDS.RadiantLogic.7x.ServerRole 92969f7f-29e0-9c95-75f4-6fe39ff2c9f8 ADI.RadiantLogic.7x.Server.Availability.Aggregate.Monitor Radiant Logic Server Availability Aggregate Monitor Monitor aed0953c-c5e4-601d-09af-58251291e049 ADI.RadiantLogic.7x true False False Description for new aggregate monitor.
547 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM VDS.RadiantLogic.7x.AbstractBaseService 75e9ef58-1ae0-6a10-ee8c-6da082e41e1b ADI.RadiantLogic.7x.Services.Availability.Aggregate.Monitor Radiant Logic Services Availability Aggregate Monitor Monitor f422a654-f129-0b87-2980-89aedcacf860 ADI.RadiantLogic.7x true False False Description for new aggregate monitor.
548 2016b.CONTOSO.COM 122a2826-5f2b-1c9f-a1e5-ec228c4aee89 VDS.RadiantLogic.7x.ServerRole 92969f7f-29e0-9c95-75f4-6fe39ff2c9f8 ADI.RadiantLogic.7x.Services.Dependency.Monitor Radiant Logic Services Dependency Monitor Monitor b1b59d18-71cc-07c4-9713-ef7fe843e900 ADI.RadiantLogic.7x true False False Description for new dependency monitor.
549 2016b.CONTOSO.COM 122a2826-5f2b-1c9f-a1e5-ec228c4aee89 VDS.RadiantLogic.7x.ServerRole 92969f7f-29e0-9c95-75f4-6fe39ff2c9f8 ADI.RadiantLogic.7x.RadiantLogic.Discovery.Data.Collection.Script.Rule RadiantLogic Discovery Data Collection Script Rule Rule 5475c7f3-7fd2-e0ae-c215-dc9adbc3f944 ADI.RadiantLogic.7x true False False Collects data, dumped to file for later consumption by Master discovery workflow.
Name Value
Scheduler System.Xml.XmlElement
550 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ReadDiscoveryManagerData Read Discovery Data Rule e0fa5d4f-0361-7f46-a9a2-66d7966ddcc1 Microsoft.SystemCenter.Internal true False False This rule reads and publishes discovery data created by scheduled discoveries
551 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Utility.RebootShutdownInitiatedUnexpectedEvent.Rule Reboot/Shutdown Detected (Unexpected 6008) Rule 418245e4-727d-66f9-e69e-91651d647148 Utility true True Error Normal False Checks Windows system log for event 6008. Indicates a reboot or shutdown was unexpected.
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
552 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Utility.RebootShutdownInitiatedByUserEvent.Rule Reboot/Shutdown Initiated (User Initated 1074) Rule 1a44d42b-6e2b-6f1b-4b17-46683506e5c8 Utility true True Error Normal False Checks Windows system log for event 1074. Indicates a reboot or shutdown was initiated by a user.
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
553 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Computer ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd Utility.RebootShutdownUnexpected_ReasonSuppliedEvent.Rule Reboot/Shutdown Reason Supplied (Unexpected 1076) Rule e857f0fa-243f-a454-c3a6-bca3a2340642 Utility true True Error Normal False Checks Windows system log for event 1076. Indicates a reboot or shutdown was unexpected and a user has supplied a reason upon reboot/login.
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
554 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.Alert.SuppressionReplacementFailure Replacement Failure For Suppression During Alert Creation Rule ba2635ae-18b0-d287-424e-016744bf3cd0 Microsoft.SystemCenter.2007 true True Error Normal False Replacement failed for suppression tag during alert creation.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
555 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.WindowsActivation Reserved Monitor 79955df0-d946-9648-927b-da6f3c58ed7c Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Reserved
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Application
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Application
ThirdComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ThirdExpression System.Xml.XmlElement
ThirdLogName Application
556 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.WindowsActivation Reserved Monitor 79955df0-d946-9648-927b-da6f3c58ed7c Microsoft.Windows.Server.2016.Monitoring false True MatchMonitorHealth Normal False Reserved
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Application
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Application
ThirdComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ThirdExpression System.Xml.XmlElement
ThirdLogName Application
557 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.RPCServiceHealth RPC Service Health Monitor 223ce367-dfa9-fe92-2450-f7a2944c1fd1 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for RPC
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName RpcSs
558 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.RPCServiceHealth RPC Service Health Monitor 223ce367-dfa9-fe92-2450-f7a2944c1fd1 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for RPC
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName RpcSs
559 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceRunAsAccounts.ExpirationCheck.Unit Run As Account and Password Expiration Monitor 294fd0b0-c9a9-a844-27f5-58b73d54bfaf Microsoft.SystemCenter.2007 true True MatchMonitorHealth Normal False Checks for expiring Run As accounts and their passwords
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
ThirdComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ThirdExpression System.Xml.XmlElement
ThirdLogName Operations Manager
560 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceRunAsAccounts.AuthorizationCheck.Unit Run As Account Authorization Monitor b778944d-d2b6-2308-a08b-d74a7397e2cf Microsoft.SystemCenter.2007 true True Error Normal False This monitor checks that a set of Run As accounts are authorized. Authorization can be restricted when an administrator runs the HSLockdown tool.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
561 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SecureStorageConfiguration.ConfigurationError.Unit Run As Account Configuration Processing Monitor bc178c97-ffe7-e735-3e1b-b0210163f115 Microsoft.SystemCenter.2007 true True Error Normal False Detects when Run As account configuration processing has failed
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
562 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceRunAsAccounts.LogonTypeCheck.Unit Run As Account Logon Locally Monitor f9225b9e-1b13-3a33-d030-f8c2df6463c0 Microsoft.SystemCenter.2007 true True Error Normal False This monitor checks if the computer is configured to allow all Run As accounts to log on locally.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
563 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceRunAsAccounts.SuccessfulLogonCheck.Unit Run As Account or Password Expired or Incorrect Monitor 9bae8864-50dc-3c5b-db38-7682c405c0ca Microsoft.SystemCenter.2007 true True Error Normal False This monitor checks if a Run As account can successfully log on with the configured username and password.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
564 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceRunAsAccounts.AccountMonitoringCheck.Unit Run As Account Verification Monitor 6ac60ee6-6bef-b96c-5907-2031375800ff Microsoft.SystemCenter.2007 true True Warning Normal False Monitor that verifies Run As accounts.
Name Value
FirstComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstExpression System.Xml.XmlElement
FirstLogName Operations Manager
SecondComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondExpression System.Xml.XmlElement
SecondLogName Operations Manager
565 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceRunAsAccounts.Rollup Run As Accounts Monitor 282c94a1-c4b9-b5a5-6a27-4c054271651e Microsoft.SystemCenter.2007 true False False Monitors health of Run As accounts executing on this System Center Management Health Service.
566 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.DatabaseAccountPermission Run As Profile cannot be resolved Rule Rule 774572b9-2d8a-87ac-f93e-5315269c1567 Microsoft.SystemCenter.2007 true True Error Normal False An Account specified in the Run As Profile “Operational Database Account” cannot be resolved
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
567 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ScheduleManager.FailedInitialization.Alert Schedule Manager Initialization Failure Rule 552c9bad-83f4-32f8-656f-094bef0867bc Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Schedule Manager fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
568 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SchedulerConModule.FailedInitialization.Alert Scheduler Condition Module Initialization Failure Rule 4a2aa6fe-c7d3-7759-6e6e-e1666e95dc6b Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Scheduler Condition module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
569 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SchedulerConModule.FailedExecution.Alert Scheduler Condition Module Runtime Failure Rule f4bd50ed-617d-d60b-fcca-7405c1f60436 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Scheduler Condition module experiences a runtime execution failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
570 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SchedulerDSModule.FailedInitialization.Alert Scheduler Data Source Module Initialization Failure Rule 75189cc0-01ac-92ee-2259-e53c19aab745 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Scheduler Data Source module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
571 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SchedulerDSModule.FailedExecution.Alert Scheduler Data Source Module Runtime Failure Rule b20767b7-91b0-0185-40d4-4cd75a7a76fb Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Scheduler Data Source module experiences a runtime execution failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
572 2016b.CONTOSO.COM f2fdba65-652e-8aae-9d3c-48689b89cead SCOM.Management.Class 33c19ec5-3be0-5e53-11b0-ef2e55062eb5 SCOM.Management.TestEvent100.Rule SCOM Management Alert on Test Event 100 Rule Rule 4810964d-7392-e02c-a311-1bdbcb96b2a1 SCOM.ManagementPlus true True Information Low False
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Application
573 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.SecureStorage.PublicKeyCheck.Unit Secure Exchange Key Synchronization Check Monitor 3e1f38ff-eb02-e8de-e76d-0ac45bb32806 Microsoft.SystemCenter.2007 true False False Changes state when an issue synchronizing the secure exchange key exists
Name Value
Consolidator System.Xml.XmlElement
RepeatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
RepeatedExpression System.Xml.XmlElement
RepeatedLogName Operations Manager
TimerWaitInSeconds 21600
574 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
575 Fake-WEC-ServerSource2.contoso.com cbe50619-b83c-e838-0f7b-d8175809b356 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
576 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
577 Fake-WEC-ServerSource2.contoso.com d44511cd-4f3f-cb67-898c-cadd97ef6709 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
578 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
579 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM;DCSecurity-Logon System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
580 Fake-WEC-ServerSource1.contoso.com 723a3006-2614-f8eb-d44e-f34d646ad371 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
581 DCSecurity-Logon 9a06a44d-93e3-c9c5-bfab-2076cf9ac489 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
582 Fake-WEC-ServerSource1.contoso.com c348030c-a0dd-159c-ce5d-f0eda1315d3d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
583 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
584 DCSecurity-Others babf47a4-2c1d-5325-68ae-c3b9eed985c6 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
585 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
586 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
587 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
588 DCSecurity-Logoff d20d0c29-ca1a-f17f-bb09-7baf6602ddce 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
589 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
590 Fake-WEC-ServerSource1.contoso.com a0e82d2f-873f-7350-c0e1-28d9635a449e 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
591 Fake-WEC-ServerSource2.contoso.com fbfe1b9d-c476-8902-7bb5-43457edc2448 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
592 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
593 Fake-WEC-ServerSource1.contoso.com f48c044e-0030-8bad-a2ef-5ed415b1c165 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
594 Microsoft.SystemCenter.Apm.CsmAgent 7527dc10-d0dc-4365-fbde-cc07995c7806 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
595 Fake-WEC-ServerSource2.contoso.com 6bb7c7bd-5c87-f07c-8b9c-8eabb0cb4c4d 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
596 Ethernet 936f8811-971a-43d4-6166-4519b25ee5ea System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
597 DCSecurity-Authentication b309ae13-922c-09af-3c23-57fcb2af0cad 2016b.CONTOSO.COM;2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
598 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
599 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
600 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
601 License 61b65246-19c4-a018-5b47-19eee9aa6cf8 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
602 C: ba303d8f-45dd-57a9-0cb5-e7d2aaeedc2e 2016b.CONTOSO.COM System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
603 Windows Process Monitoring (2016b.CONTOSO.COM) 06e9624a-3829-f71b-2a96-518dcb41c5a6 System.Entity 55270a70-ac47-c853-c617-236b0cff9b4c System.Health.SecurityState Security Monitor c4192440-55eb-398e-f931-d3fd31ca33bf System.Health.Library true False False Roll up monitor that aggregates entity security health.
604 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Performance.SendQueuePercentUsedMonitor Send Queue % Used Monitor a6d25234-8ae3-5096-2eb0-4cb7f40f46bc Microsoft.SystemCenter.2007 false True Error High False This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Send Queue % Used
Direction greaterequal
Frequency 60
InstanceName $Target/ManagementGroup/Name$
NumSamples 5
ObjectName Health Service Management Groups
Threshold 90
605 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.Agent 118c0f18-7a70-5f57-3a9b-eeaf1705b3fc Microsoft.SystemCenter.HealthService.CollectionRule.Performance.SendQueuePercentUsedMonitor Send Queue % Used Monitor 4c67448e-6e95-fd9c-9dc5-23278fc9ee92 Microsoft.SystemCenter.2007 true True Error High False This monitor measures the Health Service Management Groups\Send Queue % Used counter for the Health service.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Send Queue % Used
ErrorThreshold 95
Frequency 180
InstanceName $Target/ManagementGroup/Name$
NumSamples 3
ObjectName Health Service Management Groups
PercentFull 95
WarningThreshold 90
606 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServerServiceConfiguration.Rule Server Service Configuration Health Rule Rule 6aeaa75c-331b-a9ad-080d-556121cc3db6 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Server Service Configuration Health Rule
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
607 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServerServiceConfiguration.Rule Server Service Configuration Health Rule Rule 6aeaa75c-331b-a9ad-080d-556121cc3db6 Microsoft.Windows.Server.2016.Monitoring true True Warning Normal False Server Service Configuration Health Rule
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
608 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServerServiceHealth Server Service Health Monitor 12a53729-061d-54b3-1d0d-21fc76de2b01 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the Server
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName lanmanserver
609 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.ServerServiceHealth Server Service Health Monitor 12a53729-061d-54b3-1d0d-21fc76de2b01 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for the Server
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName lanmanserver
610 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.Library.ServerWebModuleFactoryRegistrationRule Server web module factory registration rule Rule 6ed7a1aa-f3e6-b832-ee63-cb635c7836f0 Microsoft.SystemCenter.Apm.Web true False False Server web module factory registration rule
Name Value
IntervalSeconds 14400
SyncTime
611 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ServiceCheckDataSourceModule.FailedInitialization.Alert Service Check Data Source Module Initialization Failure Rule 25fa6dc2-f8e2-45d3-fa49-e44c6fcf707a Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Service Check Data Source module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
612 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ServiceCheckDataSourceModule.FailedExecution.Alert Service Check Data Source Module Runtime Failure Rule 0a188da7-0273-3b4d-dde4-7bf278cbc68d Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Service Check Data Source module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
613 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ServiceCheckProbeModule.FailedInitialization.Alert Service Check Probe Module Initialization Failure Rule c7e8b98a-bb19-9902-3c3b-1ebc36fde7e8 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Service Check Probe module fails to initialize.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
614 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ServiceCheckProbeModule.FailedExecution.Alert Service Check Probe Module Runtime Failure Rule 53d15db0-0ebe-2ee1-c7d0-00b1a503d558 Microsoft.SystemCenter.2007 true True Warning Normal False This rule generates alerts when the Service Check Probe module experiences a runtime failure.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
615 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 2016b.CONTOSO.COM Microsoft.SystemCenter.NTService 6649a1b7-4cbe-25a0-863e-69a52aa4b0e7 Microsoft.SystemCenter.NTService.ServiceStateMonitor Service Running State Monitor 4a636eb8-861f-c4b9-aec1-dbe297637cbd Microsoft.SystemCenter.NTService.Library false True Error Low False Monitors the current status of the Windows service. An alert from this monitor indicates the Windows Service is not currently running
Name Value
CheckStartupType true
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
616 DBSmart – WildCard Service a8440c0b-0826-33a4-0926-346ea0d273c8 Microsoft.SystemCenter.NTService 6649a1b7-4cbe-25a0-863e-69a52aa4b0e7 Microsoft.SystemCenter.NTService.ServiceStateMonitor Service Running State Monitor 4a636eb8-861f-c4b9-aec1-dbe297637cbd Microsoft.SystemCenter.NTService.Library false True Error Low False Monitors the current status of the Windows service. An alert from this monitor indicates the Windows Service is not currently running
Name Value
CheckStartupType true
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName $Target/Property[Type=”Microsoft.SystemCenter.NTService”]/ServiceName$
617 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM VDS.RadiantLogic.7x.AbstractBaseService 75e9ef58-1ae0-6a10-ee8c-6da082e41e1b ADI.RadiantLogic.7x.ServiceState.Monitor ServiceState Monitor Monitor 249db9af-5d48-a815-05f3-3bcff35a19d5 ADI.RadiantLogic.7x true True MatchMonitorHealth Normal False Description for the new unit monitor.
Name Value
CheckStartupType true
ComputerName LOCALHOST
IntervalSeconds 60
SamplesCritical 3
ServiceName $Target/Property[Type=”VDS.RadiantLogic.7x.AbstractBaseService”]/ServiceName$
618 Print Spooler df30defb-ec30-8a26-fe3d-5a28d52235db 2016b.CONTOSO.COM VDS.RadiantLogic.7x.AbstractBaseService 75e9ef58-1ae0-6a10-ee8c-6da082e41e1b ADI.RadiantLogic.7x.ServiceState.RecoveryOnly.Monitor ServiceState RecoveryOnly Monitor Monitor 10a9100c-e262-9f58-b966-ac3c217512b5 ADI.RadiantLogic.7x true False False This monitor will detect service failure/stop and no alert will result from this monitor. There is a service recovery task attached to this workflow that should attempt to start the service.
Name Value
CheckStartupType true
ComputerName LOCALHOST
IntervalSeconds 60
SamplesWarning 0
ServiceName $Target/Property[Type=”VDS.RadiantLogic.7x.AbstractBaseService”]/ServiceName$
619 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Security.SpoofedDataCheck Spoofed Data Check Monitor 1cc91822-da2f-c02e-daaa-df1124d05ade Microsoft.SystemCenter.2007 true True Warning High False This monitor reports on spoofed data received by this System Center Management Health Service.
Name Value
Consolidator System.Xml.XmlElement
RepeatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
RepeatedExpression System.Xml.XmlElement
RepeatedLogName Operations Manager
TimerWaitInSeconds 3600
620 2016b.CONTOSO.COM 23ef085f-3e48-1bd7-c4fd-b87b28e8d519 Microsoft.SystemCenter.Apm.ApmAgent 0d6b9304-4854-bc9b-1aed-7bbc44f18a4f Microsoft.SystemCenter.Apm.ConfigurationManagerControlRule Start APM Agent configuration processing Rule d313edd9-fa01-2970-9709-06f8031aa8c0 Microsoft.SystemCenter.Apm.Infrastructure true False False Start APM Agent configuration processing
Name Value
IntervalSeconds 14400
SyncTime
621 2016b.CONTOSO.COM d22e338a-11e7-abdc-a8c3-61d7751eb285 Microsoft.Windows.Server.10.0.Computer 37492e08-4af9-e1fb-f75b-94e83ce13ad9 Microsoft.Windows.Server.10.0.StorportMiniportDriver.Timedout.153.Monitor Storport Miniport Driver Timed Out Monitor Monitor a8ff749b-a528-aa85-3e2b-9a2e662a5c7b Microsoft.Windows.Server.2016.Monitoring true True Error High False The monitor alerts when the Storport miniport driver times out a request
Name Value
ComputerName $Target/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName System
TimerWaitInSeconds 86400
622 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.ApplicationLog.Syslog.Modules.EventCollection Syslog Module Events Collector Rule Rule f5f34541-bc53-19e8-08a7-a4ea2f785708 Microsoft.SystemCenter.2007 false False False This rule collects Syslog module events.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
623 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemorySystemCacheResidentBytes.Collection System Cache Resident Bytes Rule f1aa3419-7af1-c3fd-bb2e-dc33490b0d98 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\System Cache Resident Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName System Cache Resident Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
624 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.MemorySystemCacheResidentBytes.Collection System Cache Resident Bytes Rule f1aa3419-7af1-c3fd-bb2e-dc33490b0d98 Microsoft.Windows.Server.2016.Monitoring false False False Collects the performance counter Memory\System Cache Resident Bytes
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName System Cache Resident Bytes
Frequency 600
InstanceName
MaximumSampleSeparation 6
ObjectName Memory
Tolerance 10
ToleranceType Percentage
625 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.AvailabilityHealthRollup System Center Management Health Service Availability Monitor a6deaee7-f9e9-ff25-8e95-3af6c86121bd Microsoft.SystemCenter.2007 true False False System Center Management Health Service Availability roll-up monitor.
626 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.ConfigurationStateHealthRollup System Center Management Health Service Configuration Processing Monitor 5f4e5580-04cf-7b94-6c4c-17bf3a0a45a8 Microsoft.SystemCenter.2007 false True Error Normal False Indicates whether the System Center Management Health Service configuration processing is successful and current.
627 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Credentials.NotDefined.Alert System Center Management Health Service Credentials Not Defined Rule 18e50c7c-c1eb-b28e-3b62-29a7bf8185ab Microsoft.SystemCenter.2007 false True Error Normal False This rule raises an alert when unable to resolve Secure Reference override.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
628 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Credentials.NotFound.Alert System Center Management Health Service Credentials Not Found Rule 8ef1f417-2563-3165-9784-b4ae8ce4cfa1 Microsoft.SystemCenter.2007 false True Error Normal False This rule raises an alert when unable to resolve Secure Reference override.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Expression System.Xml.XmlElement
LogName Operations Manager
629 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.Credentials.NotFound.Monitor System Center Management Health Service Credentials Not Found Monitor e932f0e6-4acc-ecec-c932-d6f68533219e Microsoft.SystemCenter.2007 onStandardMonitoring True Error High False This monitor raises an alert when the Operations Manager agent cannot resolve Secure Reference override.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
Correlator System.Xml.XmlElement
Expression System.Xml.XmlElement
FirstMissingCorrelatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
FirstMissingCorrelatedExpression System.Xml.XmlElement
FirstMissingCorrelatedLogName Operations Manager
LogName Operations Manager
SecondMissingCorrelatedComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
SecondMissingCorrelatedExpression System.Xml.XmlElement
SecondMissingCorrelatedLogName Operations Manager
630 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.ServiceStateRollup System Center Management Health Service Memory Utilization Monitor f1baeb56-8cce-f8c7-79ae-d69796c9d926 Microsoft.SystemCenter.2007 true False False This monitor aggregates state from four unit monitors that measure memory utilization of the System Center Management Health Service. When this monitor changes to critical, it starts a recovery task that restarts the System Center Management Health Service.
631 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceModules.PerformanceRollup System Center Management Health Service Modules Performance Rollup Monitor e1281106-4e6f-9537-f249-d2c0e2afe6d1 Microsoft.SystemCenter.2007 true False False System Center Management Health Service modules performance roll-up monitor.
632 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthServiceModules.Rollup System Center Management Health Service Modules Rollup Monitor 8a52bca1-ad65-6757-fcaf-74d1e1db44eb Microsoft.SystemCenter.2007 true False False System Center Management Health Service modules roll-up monitor.
633 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.PerformanceHealthRollup System Center Management Health Service Performance Monitor 58701b09-3c8f-beed-fb14-8df445e55b26 Microsoft.SystemCenter.2007 true False False System Center Management Health Service performance roll-up monitor.
634 2016b.CONTOSO.COM 9dddb16f-e078-62b7-8e4e-643847e99dc6 Microsoft.SystemCenter.HealthService ab4c891f-3359-3fb6-0704-075fbfe36710 Microsoft.SystemCenter.HealthService.SecurityRollup System Center Management Health Service Security Monitor 91c887bc-e89c-2221-6efb-62168abbd55a Microsoft.SystemCenter.2007 true False False Security roll-up for the System Center Management Health Service.
635 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SystemContextSwitchesPerSec.Collection System Context Switches per Second Windows Server 2016 and 1709+ Rule fcbb536b-aedc-7736-bca6-1db2dfdd6b9f Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for the performance counter System\Context Switches/sec
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Context Switches/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName System
Tolerance 50
ToleranceType Absolute
636 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SystemContextSwitchesPerSec.Collection System Context Switches per Second Windows Server 2016 and 1709+ Rule fcbb536b-aedc-7736-bca6-1db2dfdd6b9f Microsoft.Windows.Server.2016.Monitoring false False False Collection rule for the performance counter System\Context Switches/sec
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Context Switches/sec
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName System
Tolerance 50
ToleranceType Absolute
637 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SystemProcessorQueueLength.Collection System Processor Queue Length Windows Server 2016 and 1709+ Rule 1ab00089-a138-134c-6455-dd8abc68c18f Microsoft.Windows.Server.2016.Monitoring true False False Collection rule for the performance counter System\Processor Queue Length.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Processor Queue Length
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName System
Tolerance 10
ToleranceType Absolute
638 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.SystemProcessorQueueLength.Collection System Processor Queue Length Windows Server 2016 and 1709+ Rule 1ab00089-a138-134c-6455-dd8abc68c18f Microsoft.Windows.Server.2016.Monitoring true False False Collection rule for the performance counter System\Processor Queue Length.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Processor Queue Length
Frequency 300
InstanceName
MaximumSampleSeparation 12
ObjectName System
Tolerance 10
ToleranceType Absolute
639 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.TCPIPNetBiosHelperBrowserServiceHealth TCP/IP NetBIOS Service Health Monitor f46c34e8-8e21-b933-9ba8-812cf4f6d207 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for TCP/IP NetBIOS
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName LmHosts
640 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.OperatingSystem.TCPIPNetBiosHelperBrowserServiceHealth TCP/IP NetBIOS Service Health Monitor f46c34e8-8e21-b933-9ba8-812cf4f6d207 Microsoft.Windows.Server.2016.Monitoring true True Error Normal False Monitors the health of the Windows service for TCP/IP NetBIOS
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
ServiceName LmHosts
641 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.ConnectionFailures.Collection TCPv4 Connection Failures Rule 439c2653-a0be-0142-5181-8a10d6a40516 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Connection Failures performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Connection Failures
Frequency 600
InstanceName
MaximumSampleSeparation 25
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
642 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.ConnectionFailures.Collection TCPv4 Connection Failures Rule 439c2653-a0be-0142-5181-8a10d6a40516 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Connection Failures performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Connection Failures
Frequency 600
InstanceName
MaximumSampleSeparation 25
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
643 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.ConnectionsEstablished.Collection TCPv4 Connections Established Rule 0b2a43d7-15d9-fd3b-6313-9201b41c7806 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects TCPv4\Connections Established performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Connections Established
Frequency 600
InstanceName
MaximumSampleSeparation 25
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
644 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.ConnectionsEstablished.Collection TCPv4 Connections Established Rule 0b2a43d7-15d9-fd3b-6313-9201b41c7806 Microsoft.Windows.Server.2016.Monitoring false False False This rule collects TCPv4\Connections Established performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Connections Established
Frequency 600
InstanceName
MaximumSampleSeparation 25
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
645 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.ConnectionsReset.Collection TCPv4 Connections Reset Rule 106e4bd6-e02b-8c5b-4e1a-c51a47a5f4d3 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Connections Reset performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Connections Reset
Frequency 600
InstanceName
MaximumSampleSeparation 25
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
646 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.ConnectionsReset.Collection TCPv4 Connections Reset Rule 106e4bd6-e02b-8c5b-4e1a-c51a47a5f4d3 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Connections Reset performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Connections Reset
Frequency 600
InstanceName
MaximumSampleSeparation 25
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
647 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec TCPv4 Segments Received Per Second Monitor 52226f43-ca73-f991-6458-282342b19bc9 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitors the TCPv4\Segments Received/sec performance counter.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Segments Received/sec
Direction greaterequal
Frequency 300
InstanceName
NumSamples 12
ObjectName TCPv4
Threshold 100
648 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec.Collection TCPv4 Segments Received Per Second Rule 8d30347d-b474-ba83-18a8-116cafd458b0 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Segments Received/sec performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Segments Received/sec
Frequency 600
InstanceName
MaximumSampleSeparation 100
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
649 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec.Collection TCPv4 Segments Received Per Second Rule 8d30347d-b474-ba83-18a8-116cafd458b0 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Segments Received/sec performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Segments Received/sec
Frequency 600
InstanceName
MaximumSampleSeparation 100
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
650 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsReceivedPerSec TCPv4 Segments Received Per Second Monitor 52226f43-ca73-f991-6458-282342b19bc9 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitors the TCPv4\Segments Received/sec performance counter.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Segments Received/sec
Direction greaterequal
Frequency 300
InstanceName
NumSamples 12
ObjectName TCPv4
Threshold 100
651 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsRetransmittedPerSec.Collection TCPv4 Segments Retransmitted Per Second Rule 831df6f6-e262-5f9f-cc4b-6fd75ea2ca22 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Segments Retransmitted/sec performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Segments Retransmitted/sec
Frequency 600
InstanceName
MaximumSampleSeparation 100
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
652 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsRetransmittedPerSec TCPv4 Segments Retransmitted Per Second Monitor 80621343-1fa9-4a4f-faf6-695dfd6c1d6d Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitors the TCPv4\Segments Retransmitted/sec performance counter.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Segments Retransmitted/sec
Direction greaterequal
Frequency 300
InstanceName
NumSamples 12
ObjectName TCPv4
Threshold 10
653 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsRetransmittedPerSec.Collection TCPv4 Segments Retransmitted Per Second Rule 831df6f6-e262-5f9f-cc4b-6fd75ea2ca22 Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Segments Retransmitted/sec performance counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Segments Retransmitted/sec
Frequency 600
InstanceName
MaximumSampleSeparation 100
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
654 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsRetransmittedPerSec TCPv4 Segments Retransmitted Per Second Monitor 80621343-1fa9-4a4f-faf6-695dfd6c1d6d Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitors the TCPv4\Segments Retransmitted/sec performance counter.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Segments Retransmitted/sec
Direction greaterequal
Frequency 300
InstanceName
NumSamples 12
ObjectName TCPv4
Threshold 10
655 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsSentPerSec.Collection TCPv4 Segments Sent Per Second Rule 842d93f0-bab1-8ac8-5228-97fd4c655e9d Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Segments Sent/sec counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Segments Sent/sec
Frequency 600
InstanceName
MaximumSampleSeparation 100
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
656 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a 2016b.CONTOSO.COM Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsSentPerSec.Collection TCPv4 Segments Sent Per Second Rule 842d93f0-bab1-8ac8-5228-97fd4c655e9d Microsoft.Windows.Server.2016.Monitoring false False False The rule collects TCPv4\Segments Sent/sec counter.
Name Value
AllInstances false
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetbiosComputerName$
CounterName Segments Sent/sec
Frequency 600
InstanceName
MaximumSampleSeparation 100
ObjectName TCPv4
Tolerance 10
ToleranceType Absolute
657 Microsoft Windows Server 2016 Datacenter 563bc75e-6cf8-6c84-238e-95b15532ee5a Microsoft.Windows.Server.10.0.OperatingSystem 9eac1688-905c-773a-bb05-9079df1c9777 Microsoft.Windows.Server.10.0.TCPv4.SegmentsSentPerSec TCPv4 Segments Sent Per Second Monitor 78fc95e3-2c92-66ae-a41f-629649673012 Microsoft.Windows.Server.2016.Monitoring false True Warning Normal False Monitors the TCPv4\Segments Sent/sec performance counter.
Name Value
ComputerName $Target/Host/Property[Type=”Windows!Microsoft.Windows.Computer”]/NetworkName$
CounterName Segments Sent/sec
Direction greaterequal
Frequency 300
InstanceName
NumSamples 12
ObjectName TCPv4
Threshold