MPAuthor.BusinessHours 1.0.0.1 MPAuthor.BusinessHours Microsoft.SystemCenter.Library 6.1.7221.0 31bf3856ad364e35 Microsoft.Windows.Library 6.1.7221.0 31bf3856ad364e35 System.Health.Library 6.1.7221.0 31bf3856ad364e35 System.Library 6.1.7221.0 31bf3856ad364e35 $Config/IntervalSeconds$ $Config/SyncTime$ $Config/ComputerName$ $Config/Successful$ OnSchedule $Config/StartTime$ $Config/EndTime$ $Config/DaysOfWeekMask$ System!System.PropertyBagData $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$ Application EventDisplayNumber Equal $Config/EventNumber$ PublisherName Equal $Config/EventSource$ OnSchedule $Config/StartTime$ $Config/EndTime$ $Config/DaysOfWeekMask$ true Windows!Microsoft.Windows.EventData MyScript.ps1 computerName $Config/ComputerName$ testSuccessful $Config/Successful$ 30 System!System.PropertyBagData true $Config/ComputerName$ $Config/ServiceName$ 60 $Config/CheckStartupType$ $Config/ComputerName$ $Config/ServiceName$ $Config/CheckStartupType$ NotEqual false Property[@Name='StartMode'] NotEqual 2 Property[@Name='State'] Equal 4 Property[@Name='StartMode'] Equal 2 $Config/CheckStartupType$ Equal false Property[@Name='StartMode'] NotEqual 2 Property[@Name='State'] NotEqual 4 OnSchedule $Config/StartTime$ $Config/EndTime$ $Config/DaysOfWeekMask$ true $Config/ComputerName$ $Config/Successful$ $Config/IntervalSeconds$ $Config/SyncTime$ $Config/StartTime$ $Config/EndTime$ $Config/DaysOfWeekMask$ $Config/ComputerName$ $Config/Successful$ Property[@Name='Value'] Equal Good Property[@Name='Value'] Equal Bad System!System.ExpressionEvaluatorSchema $Config/FirstComputerName$ $Config/FirstLogName$ $Config/SecondComputerName$ $Config/SecondLogName$ $Config/FirstExpression$ $Config/SecondExpression$ OnSchedule $Config/StartTime$ $Config/EndTime$ $Config/DaysOfWeekMask$ true System!System.ExpressionEvaluatorSchema $Config/FirstComputerName$ $Config/FirstLogName$ $Config/SecondComputerName$ $Config/SecondLogName$ EventDisplayNumber Equal $Config/FirstEventNumber$ PublisherName Equal $Config/FirstEventSource$ EventDisplayNumber Equal $Config/SecondEventNumber$ PublisherName Equal $Config/SecondEventSource$ OnSchedule $Config/StartTime$ $Config/EndTime$ $Config/DaysOfWeekMask$ true Discovery $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$ AppExists SOFTWARE\MPAuthor\BusinessHours 0 0 3600 $MPElement[Name="MPAuthor.BusinessHours.Target"]$ $MPElement[Name="Windows!Microsoft.Windows.Computer"]/PrincipalName$ $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$ $MPElement[Name="System!System.Entity"]/DisplayName$ $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$ Values/AppExists Equal True Alert $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$ Application EventDisplayNumber Equal 103 PublisherName Equal EventCreate OnSchedule 08:00 17:00 62 TimeXPathQuery 1 2 $MPElement[Name="MPAuthor.BusinessHours.Rule.AlertOnEvent.Scheduled1.AlertMessage"]$ $Data/EventDescription$ Alert 103 EventCreate 08:00 17:00 62 1 2 $MPElement[Name="AlertMessageIDc9864edb5f2846b28764f552466866e0"]$ $Data/EventDescription$ Custom Error true Normal Error $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$ true 600 08:00 17:00 62 Custom Error true Normal Error $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$ alerter 08:00 17:00 62 AvailabilityHealth Error true Normal Error $Data/Context/EventDescription$ $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$ Application EventDisplayNumber Equal 101 PublisherName Equal EventCreate $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$ Application EventDisplayNumber Equal 102 PublisherName Equal EventCreate 08:00 17:00 62 Custom Error true Normal Error $Data/Context/EventDescription$ $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$ Application 101 EventCreate $Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$ Application 102 EventCreate 08:00 17:00 62 Operations 255 Severity Severity Icon Icon Path MonitoringObjectPath Source MonitoringObjectDisplayName Maintenance Mode MonitoringObjectInMaintenanceMode Name Name Resolution State ResolutionState Created TimeRaised Age Age Type Category Owner Owner Priority Priority Latency Latency Description Description Connector ConnectorId Forwarding Status ConnectorStatus Class Class Time in State TimeInState Custom Field 1 CustomField1 Custom Field 2 CustomField2 Custom Field 3 CustomField3 Custom Field 4 CustomField4 Custom Field 5 CustomField5 Custom Field 6 CustomField6 Custom Field 7 CustomField7 Custom Field 8 CustomField8 Custom Field 9 CustomField9 Custom Field 10 CustomField10 Resolved By ResolvedBy Time Resolved TimeResolved Last State Change TimeResolutionStateLastModified Last Modified LastModified Last Modified By LastModifiedBy Management Group ManagementGroup Site SiteName Repeat Count RepeatCount Ticket ID TicketId StateCollection Event 103 Event Description: {0} MPAuthor Sample - Business Hours This management pack provides an example of configuring monitors and rules to run only during business hours. Examples are provided for a service monitor, a monitor running a script, and monitors and rules based on a Windows event. Two different monitor types are used for events. These have identical functionality but illustrate two different strategies for configuring monitor types. Each monitor and rule must specify parameters for the System.ScheduleFilter module. StartTime and EndTime provide the time that the monitor or rule should begin functioning, while EndTime specifies the time that it should stop functioning. DaysOfWeekMask specifies the days of the week that the schedule applies to as described in the following article: http://msdn.microsoft.com/en-us/library/ee692976(v=MSDN.10).aspx. Both event monitors trigger a critical state from an event with a number of 101 and a source of EventCreate. They return to healthy with an event number of 102. The service monitor watches the running state of the Alerter service, The script monitor will set a state according to the Successful parameter on the monitor type. If the Successful parameter is false, then a critical state is set. If the Succesful parameter is true, then a healthy state is set. All rules and monitors are targeted at a class called MPAuthor.BusinessHours.Target. This is discovered by creating a registry key at HKLM\SOFTWARE\MPAuthor\BusinessHours. This registry key must be on the same agent computer where the test events are created. Business Hours NT Service Monitor Type Business Hours MyScript Scheduled MPAuthor Discover BusinessHours Target MPAuthor Sample Business Hours MyScript Scheduled Good Bad Error from MyScript Please see the alert context for details. Alerter Service NotRunning Running Alerter Service Please see the alert context for details. Scheduled Event 1 FirstEventRaised SecondEventRaised Schedule Event 1 Event Description: {0} Scheduled Event 2 SecondEventRaised FirstEventRaised Scheduled Event 2 Event Description: {0} Business Hours MyScript Scheduled Monitor Type Business Hours MyScript Probe Alert on Event 1 Event 103 Event Description: {0} Alert on Event 2 Business Hours Scheduled Event Provider Business Hours Single Event Log Monitor Type Scheduled Business Hours Single Event Log Monitor Type With Hardocded Properties Scheduled MPAuthor BusinessHours Target Alerts Target