MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_NextPart_01C935BD.A8D98AD0" This document is a Single File Web Page, also known as a Web Archive file. If you are seeing this message, your browser or editor doesn't support Web Archive files. Please download a browser that supports Web Archive, such as Windows® Internet Explorer®. ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007.htm Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset="us-ascii" Regular Expression support in SCOM 2007

Regular expression support in SCOM 2007

Many teams that are authoring management packs may nee= d to include regular expression matching in their discoveries and groups, as wel= l as for pattern matching in expression criteria in monitors and rules.

There are two different types of regular expression su= pport in the SCOM product, and you have to know which element you are working in = to choose the correct one.  Specifically, Group membership calculation and expression filters use distinctly different syntaxes for pattern matching.

Group Calculation matching criteria

Group calculation uses PERL regular expression syntax.=   By default, the matching is case insensitive, but in the XML you can specify that an expression needs to be = case sensitive by way of a special attribute dedicated to specifying that the expression content should be evaluated in a case sensitive way.

Group Calculation is found in your MP whenever you are= using the Group Calc module.

The GroupCalc expression has an operator called MatchesRegularExpression that is used to create dynamic group membership ba= sed on pattern matching expressions.  The implementation of this operator passes the expression found in t= he MP XML to the SQL call name dbo.fn_MatchesRegularExpression.  If this call returns 0, the match = is false.  If the expression retu= rns 1, the match is true.

GroupCalc also supports two special sub-elements that abstract away a couple of common regex style queries.

GroupCalc= sub element

Regex Equ= ivalent

ContainsSubstring

^*{O}.*$       &nbs= p;        ({O} is replaced by the substring)

MatchesWildcard

MP expression

Regex Equivalent

?

.

*

.*

#

[0-9]

Table 1:  GroupCalc special functions

Note:  If either of these two special operators are used, the evaluation will always = be case sensitive.

Expression Filter matching criteria

Expression filters used in management packs use .NET R= egex expression syntax.  A summary of the .NET regular expression syntax elements appears below.  Expression filters are present in = your management pack whenever you are using the Expression Eval module.

Construct

SCOM Regex

Any Character

.

Character in Range

[ ]

Character not in range=

[^ ]

Beginning of Line

^

End of Line

$

Or

|

Group

( )

0 or 1 matches

?

0 or more matches

*

1 or more matches

+

Exactly N matches

{n}

Atleast N matches

{n, }

Atmost N matches

{ , n}

N to M Matches

{n, m}

New line character

\n

Tab character

\t

 Regular expressions via SDK

The SCOM SDK has a Matches criteria operator for filtering objects. This operator use the same functionality as MatchesCrite= ria in the GroupCalc case explained above.

When using the SDK to construct a criteria expression = to find objects in the Ops Manager database, the following syntax elements are valid (see below).  This synta= x is useful when creating a criteria expression that includes any of the followi= ng elements:

·         Comparison operators

·         Wildcard characters

·         DateTime values

·         Integer to XML Enumeration comparisons

Comparison operators

You can use comparison operators when constructing a criteria expression. The valid operators are described in the following tab= le:

Operator

Description

Example(s)

=3D, =3D=3D

Ev= aluates to true if the left and right operand are equal.

Name =3D 'mymachine.mydomain.c= om'

!=3D, &l= t;>

Ev= aluates to true if the left and right operand are unequal.

Name !=3D 'mymachine.mydomain.= com'

> <= /o:p>

Ev= aluates to true if the left operand is greater than the right operand.

Severity > 0

< <= /o:p>

Ev= aluates to true if the left operand is less than the right operand.

Severity < 2

>=3D <= /o:p>

Ev= aluates to true if the left operand is greater than or equal to the right operand.

Severity >=3D 1

<=3D <= /o:p>

Ev= aluates to true if the left operand is less than or equal to the right ope= rand.

Severity <=3D 3

LIKE

Ev= aluates to true if the left operand matches the pattern that is defined by= the right operand. Use the characters in the wildcard table later in this top= ic to define the pattern.

Name 'LIKE SQL%'

Evaluates to true if the Name value is "SQLEngine."

Name LIKE '%SQL%'

Evaluates to true if the Name value is "MySQLEngine."

MATCHES <= /o:p>

Ev= aluates to true if the left operand matches the regular expression defined= by the right operand.

Name MATCHES 'SQL*05'

Evaluates to true if the Name value is "SQL2005."

IS NULL <= /o:p>

Ev= aluates to true if the value of the left operand is null.

ConnectorId IS NULL

Evaluates to true if the ConnectorId property does not contain a value.

IS NOT NULL

Ev= aluates to true if the value of the left operand is not null.

ConnectorId IS NOT NULL=

Evaluates to true if the ConnectorId property contains a value.

IN <= /o:p>

Ev= aluates to true if the value of the left operand is in the list of values defined by the right operand.

3D"http://i.msdn.microsoft.com/Bb437603.note(en-us,MSDN.10).gif"Note

The IN operator is valid for use only with properties of type Guid.

Id IN ('080F192C-52D2-423D-8953-B3EC8C3CD001', '080F192C-53B2-403D-8753-B3EC8C3CD002')

Evaluates to true if the value of the Id property is one of the two globally unique identifiers provided in the expression.

AND <= /o:p>

Ev= aluates to true if the left and right operands are both true.

Name =3D 'SQL%' AND Descriptio= n LIKE 'MyData%'

OR <= /o:p>

Ev= aluates to true if either the left or right operand is true.

Name =3D 'SQL%' OR Description= LIKE 'MyData%'

NOT <= /o:p>

Ev= aluates to true if the right operand is not true.

NOT (Name =3D 'IIS' OR Name = =3D 'SQL')

Table 3: SDK comparison operators

Wildcards

The following table defines the wildcard characters yo= u can use to construct a pattern when using the LIKE operator:

Wildcard

Descri= ption

Example

% <= /p>

A = wildcard that matches any number of characters.

Name LIKE 'SQL%'=

Evaluates to true if the Na= me value is "SQLEngine."

Name LIKE '%SQL%'

Evaluates to true if the Name value is "MySQLEngine."

_ <= /p>

A = wildcard that matches a single character.

Name LIKE 'SQL200_'

Evaluates to true for the following Name values:

"SQL2000"=

"SQL2005"=

3D"http://i.msdn.microsoft.com/Bb437603.note(en-us,MSDN.10).gif"Note

The expression evaluates to false for "SQL200" because the symbol _ m= ust match exactly one character in the Name value.

[] <= /p>

A = wildcard that matches any one character that is enclosed in the character set.

3D"http://i.msdn.microsoft.com/Bb437603.note(en-us,MSDN.10).gif"Note

Brackets are also = used when qualifying references to MonitoringObject properties. For more information, see Defining Queries for Monitoring Objects.

Name LIKE 'SQL200[05]'

Evaluates to true for the following Name values:

"SQL2000"=

"SQL2005"=

The expression evaluates to false<= /b> for

"SQL2003."

[^]

A = wildcard that matches any one character that is not enclosed in the character set.=

Name LIKE 'SQL200[^05]'=

Evaluates to true for

"SQL2003."

The expression evaluates to false<= /b> for

"SQL2000" and

"SQL2005."

Table 4:  Wildcard operators used with LIKE operator

DateTime comparisons

When you use a DateT= ime value in a query expression, use the general DateTime format ("G"= ) to convert the DateTime value to a string value. For example,

stringManagementPackCriteria mpCriteria =3D <= span style=3D'color:blue'>new ManagementPackCriteria(qStr);

All date values need to be converted to the G format (= GMT) so that valid string comparisons can be made.

Integer value comparison to enumerations

When you use an integer enumeration value in a query expression, cast the enumeration value to an integer. For example,

stringMonitoringAlertCriteria alertCriteria = =3D new MonitoringAlertCriteria(qStr);

 

------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/item0001.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml This value indicates the number of saves or revisio= ns. The application is responsible for updating this value after each revis= ion. ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/props0002.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml <= ds:schemaRef ds:uri=3D"http://purl.org/dc/elements/1.1/"/><= /ds:datastoreItem> ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/item0003.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml DocumentLibraryFormD= ocumentLibraryFormDocumentLibraryForm ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/props0004.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/item0005.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/props0006.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/themedata.thmx Content-Transfer-Encoding: base64 Content-Type: application/vnd.ms-officetheme UEsDBBQABgAIAAAAIQCCirwT+gAAABwCAAATAAAAW0NvbnRlbnRfVHlwZXNdLnhtbKyRy2rDMBBF 94X+g9C22HK6KKXYzqJJd30s0g8Y5LEtao+ENAnJ33fsuFC6CC10IxBizpl7Va6P46AOGJPzVOlV XmiFZH3jqKv0++4pu9cqMVADgyes9AmTXtfXV+XuFDApmaZU6Z45PBiTbI8jpNwHJHlpfRyB5Ro7 E8B+QIfmtijujPXESJzxxNB1+SoLRNegeoPILzCKx7Cg8Pv5DCSAmAtYq8czYVqi0hDC4CywRDAH an7oM9+2zmLj7X4UaT6DF9jNBDO/XGD1P+ov5wZb2A+stkfp4lx/xCH9LdtSay6Tc/7Uu5AuGC6X t7Rh5r+tPwEAAP//AwBQSwMEFAAGAAgAAAAhAKXWp+fAAAAANgEAAAsAAABfcmVscy8ucmVsc4SP z2rDMAyH74W9g9F9UdLDGCV2L6WQQy+jfQDhKH9oIhvbG+vbT8cGCrsIhKTv96k9/q6L+eGU5yAW mqoGw+JDP8to4XY9v3+CyYWkpyUIW3hwhqN727VfvFDRozzNMRulSLYwlRIPiNlPvFKuQmTRyRDS SkXbNGIkf6eRcV/XH5ieGeA2TNP1FlLXN2Cuj6jJ/7PDMMyeT8F/ryzlRQRuN5RMaeRioagv41O9 kKhlqtQe0LW4+db9AQAA//8DAFBLAwQUAAYACAAAACEAa3mWFoMAAACKAAAAHAAAAHRoZW1lL3Ro ZW1lL3RoZW1lTWFuYWdlci54bWwMzE0KwyAQQOF9oXeQ2TdjuyhFYrLLrrv2AEOcGkHHoNKf29fl 44M3zt8U1ZtLDVksnAcNimXNLoi38Hwspxuo2kgcxSxs4ccV5ul4GMm0jRPfSchzUX0j1ZCFrbXd INa1K9Uh7yzdXrkkaj2LR1fo0/cp4kXrKyYKAjj9AQAA//8DAFBLAwQUAAYACAAAACEAlrWt4pYG AABQGwAAFgAAAHRoZW1lL3RoZW1lL3RoZW1lMS54bWzsWU9v2zYUvw/YdyB0b2MndhoHdYrYsZst TRvEboceaYmW2FCiQNJJfRva44ABw7phhxXYbYdhW4EW2KX7NNk6bB3Qr7BHUpLFWF6SNtiKrT4k Evnj+/8eH6mr1+7HDB0SISlP2l79cs1DJPF5QJOw7d0e9i+teUgqnASY8YS0vSmR3rWN99+7itdV RGKCYH0i13Hbi5RK15eWpA/DWF7mKUlgbsxFjBW8inApEPgI6MZsablWW12KMU08lOAYyN4aj6lP 0FCT9DZy4j0Gr4mSesBnYqBJE2eFwQYHdY2QU9llAh1i1vaAT8CPhuS+8hDDUsFE26uZn7e0cXUJ r2eLmFqwtrSub37ZumxBcLBseIpwVDCt9xutK1sFfQNgah7X6/W6vXpBzwCw74OmVpYyzUZ/rd7J aZZA9nGedrfWrDVcfIn+ypzMrU6n02xlsliiBmQfG3P4tdpqY3PZwRuQxTfn8I3OZre76uANyOJX 5/D9K63Vhos3oIjR5GAOrR3a72fUC8iYs+1K+BrA12oZfIaCaCiiS7MY80QtirUY3+OiDwANZFjR BKlpSsbYhyju4ngkKNYM8DrBpRk75Mu5Ic0LSV/QVLW9D1MMGTGj9+r596+eP0XHD54dP/jp+OHD 4wc/WkLOqm2chOVVL7/97M/HH6M/nn7z8tEX1XhZxv/6wye//Px5NRDSZybOiy+f/PbsyYuvPv39 u0cV8E2BR2X4kMZEopvkCO3zGBQzVnElJyNxvhXDCNPyis0klDjBmksF/Z6KHPTNKWaZdxw5OsS1 4B0B5aMKeH1yzxF4EImJohWcd6LYAe5yzjpcVFphR/MqmXk4ScJq5mJSxu1jfFjFu4sTx7+9SQp1 Mw9LR/FuRBwx9xhOFA5JQhTSc/yAkArt7lLq2HWX+oJLPlboLkUdTCtNMqQjJ5pmi7ZpDH6ZVukM /nZss3sHdTir0nqLHLpIyArMKoQfEuaY8TqeKBxXkRzimJUNfgOrqErIwVT4ZVxPKvB0SBhHvYBI WbXmlgB9S07fwVCxKt2+y6axixSKHlTRvIE5LyO3+EE3wnFahR3QJCpjP5AHEKIY7XFVBd/lbobo d/ADTha6+w4ljrtPrwa3aeiINAsQPTMR2pdQqp0KHNPk78oxo1CPbQxcXDmGAvji68cVkfW2FuJN 2JOqMmH7RPldhDtZdLtcBPTtr7lbeJLsEQjz+Y3nXcl9V3K9/3zJXZTPZy20s9oKZVf3DbYpNi1y vLBDHlPGBmrKyA1pmmQJ+0TQh0G9zpwOSXFiSiN4zOq6gwsFNmuQ4OojqqJBhFNosOueJhLKjHQo UcolHOzMcCVtjYcmXdljYVMfGGw9kFjt8sAOr+jh/FxQkDG7TWgOnzmjFU3grMxWrmREQe3XYVbX Qp2ZW92IZkqdw61QGXw4rxoMFtaEBgRB2wJWXoXzuWYNBxPMSKDtbvfe3C3GCxfpIhnhgGQ+0nrP +6hunJTHirkJgNip8JE+5J1itRK3lib7BtzO4qQyu8YCdrn33sRLeQTPvKTz9kQ6sqScnCxBR22v 1VxuesjHadsbw5kWHuMUvC51z4dZCBdDvhI27E9NZpPlM2+2csXcJKjDNYW1+5zCTh1IhVRbWEY2 NMxUFgIs0Zys/MtNMOtFKWAj/TWkWFmDYPjXpAA7uq4l4zHxVdnZpRFtO/ualVI+UUQMouAIjdhE 7GNwvw5V0CegEq4mTEXQL3CPpq1tptzinCVd+fbK4Ow4ZmmEs3KrUzTPZAs3eVzIYN5K4oFulbIb 5c6vikn5C1KlHMb/M1X0fgI3BSuB9oAP17gCI52vbY8LFXGoQmlE/b6AxsHUDogWuIuFaQgquEw2 /wU51P9tzlkaJq3hwKf2aYgEhf1IRYKQPShLJvpOIVbP9i5LkmWETESVxJWpFXtEDgkb6hq4qvd2 D0UQ6qaaZGXA4E7Gn/ueZdAo1E1OOd+cGlLsvTYH/unOxyYzKOXWYdPQ5PYvRKzYVe16szzfe8uK 6IlZm9XIswKYlbaCVpb2rynCObdaW7HmNF5u5sKBF+c1hsGiIUrhvgfpP7D/UeEz+2VCb6hDvg+1 FcGHBk0Mwgai+pJtPJAukHZwBI2THbTBpElZ02atk7ZavllfcKdb8D1hbC3ZWfx9TmMXzZnLzsnF izR2ZmHH1nZsoanBsydTFIbG+UHGOMZ80ip/deKje+DoLbjfnzAlTTDBNyWBofUcmDyA5LcczdKN vwAAAP//AwBQSwMEFAAGAAgAAAAhAA3RkJ+2AAAAGwEAACcAAAB0aGVtZS90aGVtZS9fcmVscy90 aGVtZU1hbmFnZXIueG1sLnJlbHOEj00KwjAUhPeCdwhvb9O6EJEm3YjQrdQDhOQ1DTY/JFHs7Q2u LAguh2G+mWm7l53JE2My3jFoqhoIOumVcZrBbbjsjkBSFk6J2TtksGCCjm837RVnkUsoTSYkUigu MZhyDidKk5zQilT5gK44o49W5CKjpkHIu9BI93V9oPGbAXzFJL1iEHvVABmWUJr/s/04GolnLx8W Xf5RQXPZhQUoosbM4CObqkwEylu6usTfAAAA//8DAFBLAQItABQABgAIAAAAIQCCirwT+gAAABwC AAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAKXW p+fAAAAANgEAAAsAAAAAAAAAAAAAAAAAKwEAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhAGt5 lhaDAAAAigAAABwAAAAAAAAAAAAAAAAAFAIAAHRoZW1lL3RoZW1lL3RoZW1lTWFuYWdlci54bWxQ SwECLQAUAAYACAAAACEAlrWt4pYGAABQGwAAFgAAAAAAAAAAAAAAAADRAgAAdGhlbWUvdGhlbWUv dGhlbWUxLnhtbFBLAQItABQABgAIAAAAIQAN0ZCftgAAABsBAAAnAAAAAAAAAAAAAAAAAJsJAAB0 aGVtZS90aGVtZS9fcmVscy90aGVtZU1hbmFnZXIueG1sLnJlbHNQSwUGAAAAAAUABQBdAQAAlgoA AAAA ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/colorschememapping.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/image001.gif Content-Transfer-Encoding: base64 Content-Type: image/gif R0lGODlhCgAKALMJAP8EAP9dWsbDxtbT1v/PAISGhIyOjAAAAP//zv///wAAAAAAAAAAAAAAAAAA AAAAACH5BAEAAAkALAAAAAAKAAoAAAQo0Mg5RAAG6X0I3lp3JBlHjORWnEOSIsNRIIVbFkNog/oL ooegMOiKAAA7 ------=_NextPart_01C935BD.A8D98AD0 Content-Location: file:///C:/5C69C637/RegularexpressionsupportinSCOM2007_files/filelist.xml Content-Transfer-Encoding: quoted-printable Content-Type: text/xml; charset="utf-8" ------=_NextPart_01C935BD.A8D98AD0--