This document is part of the Operations Manager Management Pack Authoring Guide
This document is part of the Operations Manager Management Pack Authoring Guide
The following procedure shows how to create an event monitor using the Operations Manager 2007 Authoring console and Visual Studio Authoring Extensions.
This exercise applies to the following products:
Before you perform this procedure, you must first complete the following prerequisite procedures:
The Microsoft System Center team has validated this procedure as of Revision #2. We will continue to review any changes and periodically provide validations on later revisions as they are made. Please feel free to make any corrections or additions to this procedure that you think would assist other users
A sample of the completed code for each exercise is available in the TechNet Gallery. There is a separate sample for each exercise that includes the management pack completed at the end of that exercise and each preceding exercise. This strategy allows you to work through each exercise in order and then compare your results. For VSAE, this also includes the Visual Studio solution.
The event monitor created in this procedure has the following characteristics:
<!-- Computer name for the first event. We will use a variable to get the target computer name. -->
<
FirstComputerName
>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</
FirstComputerName
>
<!-- Name of the log containing the first event. -->
<
FirstLogName
>Application</
FirstLogName
>
<!-- Expression for the first event -->
<
FirstExpression
>
<
And
>
<!-- Expression for the first event number -->
<
Expression
>
<
SimpleExpression
>
<
ValueExpression
>
<
XPathQuery
Type
=
"UnsignedInteger"
>EventDisplayNumber</
XPathQuery
>
</
ValueExpression
>
<
Operator
>Equal</
Operator
>
<
ValueExpression
>
<
Value
Type
=
"UnsignedInteger"
>101</
Value
>
</
ValueExpression
>
</
SimpleExpression
>
</
Expression
>
<!-- Expression for the first event source -->
<
Expression
>
<
SimpleExpression
>
<
ValueExpression
>
<
XPathQuery
Type
=
"String"
>PublisherName</
XPathQuery
>
</
ValueExpression
>
<
Operator
>Equal</
Operator
>
<
ValueExpression
>
<
Value
Type
=
"String"
>MyApplication</
Value
>
</
ValueExpression
>
</
SimpleExpression
>
</
Expression
>
</
And
>
</
FirstExpression
>
<!-- Computer name for the second event. We will use a variable to get the target computer name. -->
<
SecondComputerName
>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</
SecondComputerName
>
<!-- Name of the log containing the first event. -->
<
SecondLogName
>Application</
>
</
And
>
</
FirstExpression
>
<!-- Computer name for the second eve"font-weight:bold;">SecondLogName
>
<!-- Expression for the second event -->
<
SecondExpression
>
<
And
>
<!-- Expression for the second event number -->
<
Expression
>
<
SimpleExpression
>
<
ValueExpression
>
<
XPathQuery
Type
=
"UnsignedInteger"
>EventDisplayNumber</
XPathQuery
>
</
ValueExpression
>
<
Operator
>Equal</
Operator
>
<
ValueExpression
>
<
Value
Type
=
"UnsignedInteger"
>102</
Value
>
</
ValueExpression
>
</
SimpleExpression
>
</
Expression
>
<!-- Expression for the second event source -->
<
Expression
>
<
SimpleExpression
>
<
ValueExpression
>
<
XPathQuery
Type
=
"String"
>PublisherName</
XPathQuery
>
</
ValueExpression
>
<
Operator
>Equal</
Operator
>
<
ValueExpression
>
<
Value
Type
=
"String"
>MyApplication</
Value
>
</
ValueExpression
>
</
SimpleExpression
>
</
Expression
>
</
And
>
</
SecondExpression
>
>
</
SecondExpression
>