//////////////////////////////////////////////////////////////////////////////// // HMDefaults.Mof // Copyright (c)2000 Microsoft Corporation, All Rights Reserved // #pragma namespace("\\\\.\\ROOT\\CIMV2\\MicrosoftHealthMonitor") #pragma autorecover //////////////////////////////////////////////////////////////////////////////// // STATIC HIDDEN INSTANCES TO USE AS DEFAULT VALUES //////////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////////// // PERFORMANCE MONITOR //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledGetObjectDataCollectorConfiguration AS $DC1 { GUID = "{03B9B361-2299-11d3-BE00-0000F87A3912}"; TypeGUID = "{03B9B361-2299-11d3-BE00-0000F87A3912}"; Name = "Performance Monitor"; Description = "Monitors Performance Counter Data"; CollectionIntervalMsecs = 60000; StatisticsWindowSize = 6; ObjectPath = ""; Properties = {}; RequireReset = FALSE; TargetNamespace = "root\\cimv2\\MicrosoftHealthmonitor\\perfmon"; Enabled = FALSE; Hidden = TRUE; Message = "%Name% : %State% condition. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC1T1 { GUID = "{4DC9E556-8711-4944-B7C3-E8E8A679BBB9}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC1; ChildPath = $DC1T1; }; //////////////////////////////////////////////////////////////////////////////// // COM+ MONITOR //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledGetObjectDataCollectorConfiguration AS $DC2 { GUID = "{E2F3E715-AEE4-454e-AB05-D062DBBFAA0F}"; Name = "COM+ Application Monitor"; Description = "Monitors COM+ Data Objects"; CollectionIntervalMsecs = 60000; StatisticsWindowSize = 6; ObjectPath = "MicrosoftComPlus_AppStats.AppName=\"\",MaxIdleTimeSeconds=180"; Properties = {"AbortedTransactionsPerSecond", "AdminShutdowns", "AppName", "CommittedTransactionsPerSecond", "FailureShutdowns", "HandleCount", "ObjectActivationsPerSecond", "ObjectCreationsPerSecond", "ObjectPoolTimeouts", "ThreadCount", "TimeoutShutdowns", "TotalAbortedTransactions", "TotalCommittedTransactions", "TotalShutdowns", "VirtualSize", "WorkingSetSize"}; RequireReset = FALSE; TargetNamespace = "root\\cimv2\\MicrosoftHealthmonitor"; TypeGUID = "{E2F3E715-AEE4-454e-AB05-D062DBBFAA0F}"; Hidden = TRUE; Enabled = FALSE; Message = "%EmbeddedCollectedInstance.AppName% Application: %State% condition. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC2T1 { GUID = "{C5F4BF3C-4115-4af6-BE88-289A0A310B93}"; Name = "Failure Shutdowns > 0"; Description = "Unexpected shutdowns since monitoring began."; PropertyName = "FailureShutdowns"; TestCondition = 1; // > CompareValue = "0"; State = 9; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC2; ChildPath = $DC2T1; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC2T2 { GUID = "{D9F360C9-6D23-4c9e-B0A2-1E200824B1DE}"; Name = "Aborted Transactions/Sec > 0"; Description = "Aborted transactions per second since the last query."; PropertyName = "AbortedTransactionsPerSecond"; TestCondition = 1; // > CompareValue = "0"; State = 8; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC2; ChildPath = $DC2T2; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC2T3 { GUID = "{EE354542-4D17-4860-B963-5BD41069B1D7}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC2; ChildPath = $DC2T3; }; //////////////////////////////////////////////////////////////////////////////// // HTTP MONITOR //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledGetObjectDataCollectorConfiguration AS $DC3 { GUID = "{C90CD4CD-2297-11d3-BE00-0000F87A3912}"; Name = "Default HTTP Monitor"; Description = "HTTP Monitor"; ObjectPath = "HTTPProvider.Method=\"GET\",Url=\"http://\",TimeoutMSecs=30000,AuthType=0,FollowRedirects=1,ExtraHeaders=\"User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows 5.0; HealthMon 2.1)%0D%0A\""; Properties = {"StatusCode", "StatusText", "ResponseTime", "ErrorDescription", "ContentLength", "TextResponse", "RawHeaders", "ContentType", "Cookie", "LastModified"}; RequireReset = FALSE; TargetNamespace = "root\\cimv2\\MicrosoftHealthmonitor"; TypeGUID = "{C90CD4CD-2297-11d3-BE00-0000F87A3912}"; Hidden = TRUE; Enabled = FALSE; Message = "%EmbeddedCollectedInstance.URL% request failed: %State% condition. HTTP Status: %EmbeddedCollectedInstance.StatusCode% %EmbeddedCollectedInstance.StatusText% %EmbeddedCollectedInstance.ErrorDescription%. Response Time (msec): %EmbeddedCollectedInstance.ResponseTime%. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%EmbeddedCollectedInstance.URL% request succeeded in %EmbeddedCollectedInstance.ResponseTime% msecs"; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC3T1 { GUID = "{9AB87A44-478A-4f3a-A61E-BC0A1A80B7B3}"; Name = "Status code (HTTP) >= 400"; Description = "Test if the return status code is okay."; PropertyName = "StatusCode"; TestCondition = 4; // >= CompareValue = "400"; State = 9; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC3; ChildPath = $DC3T1; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC3T2 { GUID = "{308C10D4-DDFE-4127-8214-9D827517E770}"; Name = "ResponseTime > 30"; Description = "Test if the response time is too high"; PropertyName = "ResponseTime"; TestCondition = 1; // > CompareValue = "30000"; State = 9; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC3; ChildPath = $DC3T2; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC3T3 { GUID = "{AD03BA50-67FC-4308-BDB7-F194D6948356}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC3; ChildPath = $DC3T3; }; //////////////////////////////////////////////////////////////////////////////// // WMI Instance //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledGetObjectDataCollectorConfiguration AS $DC4 { CollectionIntervalMsecs = 60000; Description = "WMI Instance Data Monitor"; GUID = "{C90CD4CA-2297-11d3-BE00-0000F87A3912}"; Name = "WMI Instance Monitor"; ObjectPath = ""; Properties = {}; RequireReset = FALSE; StatisticsWindowSize = 6; TargetNamespace = "ROOT\\CIMV2"; TypeGUID = "{C90CD4CA-2297-11d3-BE00-0000F87A3912}"; Enabled = FALSE; Hidden = TRUE; Message = "%Name% : %State% condition. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC4T1 { GUID = "{92C94FA3-EE0A-4a50-9AC4-1C281A37CDE6}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC4; ChildPath = $DC4T1; }; //////////////////////////////////////////////////////////////////////////////// // Ping (ICMP) Monitor //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledMethodDataCollectorConfiguration AS $DC5 { Arguments = { instance of MicrosoftHM_Context { Name = "IPAddress"; Type = 8; Value = ""; }, instance of MicrosoftHM_Context { Name = "TimeOut"; Type = 19; Value = "10"; }, instance of MicrosoftHM_Context { Name = "Tries"; Type = 19; Value = "4"; }}; GUID = "{D442E727-971E-11d3-BE93-0000F87A3912}"; MethodName = "Ping"; Name = "Ping (ICMP) Monitor"; ObjectPath = "HMPingPoller"; Properties = {"Status"}; RequireReset = FALSE; TargetNamespace = "root\\cimv2\\MicrosoftHealthmonitor"; TypeGUID = "{D442E727-971E-11d3-BE93-0000F87A3912}"; Enabled = FALSE; Hidden = TRUE; Message = "%Name%: ping failed. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name%: ping succeeded."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC5T1 { GUID = "{0C844BCD-111D-42f5-AC5C-A5EBBEE357AA}"; Name = "Status != 0"; Description = "Tests the return status being OK."; PropertyName = "Status"; TestCondition = 3; // != CompareValue = "0"; State = 9; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC5; ChildPath = $DC5T1; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC5T2 { GUID = "{A453D98E-8774-48b0-A80A-03F4117AE91C}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC5; ChildPath = $DC5T2; }; //////////////////////////////////////////////////////////////////////////////// // Service Monitor //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledGetObjectDataCollectorConfiguration AS $DC8 { GUID = "{C90CD4CF-2297-11d3-BE00-0000F87A3912}"; Name = "Service Monitor"; Properties = {"Started", "State", "Status"}; ObjectPath = "Win32_Service.Name=\"\""; RequireReset = FALSE; TargetNamespace = "root\\cimv2"; TypeGUID = "{C90CD4CF-2297-11d3-BE00-0000F87A3912}"; Enabled = FALSE; Hidden = TRUE; Message = "%EmbeddedCollectedInstance.Name% service is %EmbeddedCollectedInstance.State%: %State% condition. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC8T1 { GUID = "{48C4F538-60CD-4C03-A41C-A90DE6BEA5A7}"; Name = "Started != True"; Description = "Verifies that the service is always in started state"; State = 9; PropertyName = "Started"; TestCondition = 3; // != CompareValue = "1"; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC8; ChildPath = $DC8T1; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC8T2 { GUID = "{88494FA4-66C2-41a5-9B3C-8A26CFC6267B}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC8; ChildPath = $DC8T2; }; //////////////////////////////////////////////////////////////////////////////// // WMI Query //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledQueryDataCollectorConfiguration AS $DC10 { GUID = "{EF1D6A51-2759-11d3-9390-00A0CC406605}"; Name = "WMI Data Query"; Properties = {}; Query = ""; RequireReset = FALSE; TargetNamespace = "ROOT\\CIMV2"; TypeGUID = "{EF1D6A51-2759-11d3-9390-00A0CC406605}"; Enabled = FALSE; Hidden = TRUE; Message = "%Name% : %State% condition. Instance: %InstanceName% (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% Instance: %InstanceName% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC10T1 { GUID = "{240C3B2B-8439-49ed-BD78-6549DBCB0524}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC10; ChildPath = $DC10T1; }; //////////////////////////////////////////////////////////////////////////////// // Windows Event Log Monitor //////////////////////////////////////////////////////////////////////////////// // Note:the query below won’t work on non-english machines due to a problem // with how the Type field is localized (as a property value) by WMI. // For Beta, it’s acceptable to leave this as-is, for RTM see #63004. instance of MicrosoftHM_EventQueryDataCollectorConfiguration AS $DC11 { Description = ""; GUID = "{A89E51F1-229F-11d3-BE00-0000F87A3912}"; Name = "Windows Event Monitor"; Properties = {"EventCode", "SourceName", "Type", "Message", "TimeGenerated", "CategoryString", "User", "LogFile", "CollectionInstanceCount"}; Query = "select * from __instancecreationevent where targetinstance isa \"Win32_NtLogEvent\" AND TargetInstance.Logfile=\"\" AND (TargetInstance.Type=\"error\" OR TargetInstance.Type=\"warning\" OR TargetInstance.Type=\"audit failure\")"; RequireReset = FALSE; TargetNamespace = "root\\cimv2"; Local = "ms_409"; TypeGUID = "{A89E51F1-229F-11d3-BE00-0000F87A3912}"; Enabled = FALSE; Hidden = TRUE; CollectionIntervalMsecs = 1000; Message = "%Name%: event received. %State% condition. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC11T1 { GUID = "{CF089291-D011-47D7-94D6-64A55267FF29}"; Name = "# of Instances Collected > 0"; Description = ""; State = 9; PropertyName = "CollectionInstanceCount"; TestCondition = 1; // > CompareValue = "0"; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC11; ChildPath = $DC11T1; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC11T2 { GUID = "{DB925564-8CF7-46f8-8291-238F289DCF7E}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC11; ChildPath = $DC11T2; }; //////////////////////////////////////////////////////////////////////////////// // WMI Event Query //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_EventQueryDataCollectorConfiguration AS $DC12 { GUID = "{C90CD4CB-2297-11d3-BE00-0000F87A3912}"; Name = "WMI Event Query"; Description = ""; Properties = {"CollectionInstanceCount"}; Query = ""; RequireReset = FALSE; TargetNamespace = "ROOT\\CIMV2"; TypeGUID = "{C90CD4CB-2297-11d3-BE00-0000F87A3912}"; Enabled = FALSE; Hidden = TRUE; CollectionIntervalMsecs = 1000; Message = "%Name% : %State% condition. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC12T1 { GUID = "{2077B2B0-62FC-40a1-8B6D-ABD54C1BBE46}"; Name = "# of Instances Collected > 0"; Description = ""; State = 9; PropertyName = "CollectionInstanceCount"; TestCondition = 1; CompareValue = "0"; ThresholdDuration = 0; UseFlag = 0; Hidden = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC12; ChildPath = $DC12T1; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC12T2 { GUID = "{61F1553A-8379-4a0f-8845-DC70153F8BF3}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC12; ChildPath = $DC12T2; }; //////////////////////////////////////////////////////////////////////////////// // Process Monitor //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledQueryDataCollectorConfiguration AS $DC14 { GUID = "{0DD537C8-CA9D-4731-93C2-3154D248EC60}"; Name = "Process Monitor"; Properties = {"State", "Status"}; Query = "select * from Win32_Process where Name=\"\""; RequireReset = FALSE; TargetNamespace = "root\\cimv2"; TypeGUID = "{0DD537C8-CA9D-4731-93C2-3154D248EC60}"; Enabled = FALSE; Hidden = TRUE; Message = "%Name%: %State% condition. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%Name% is Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC14T1 { GUID = "{2A838470-AB97-4337-A5D6-E62FE7DE786C}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL Enabled = TRUE; }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC14; ChildPath = $DC14T1; }; //////////////////////////////////////////////////////////////////////////////// // TCPIP MONITOR //////////////////////////////////////////////////////////////////////////////// instance of MicrosoftHM_PolledGetObjectDataCollectorConfiguration AS $DC15 { GUID = "{B2FB1104-5F35-4167-BF1E-C9D008385138}"; TypeGUID = "{B2FB1104-5F35-4167-BF1E-C9D008385138}"; Name = "TCP/IP Port Monitor"; Description = ""; ObjectPath = "TcpPortConnect.Method=\"GET\",TimeoutMsecs=10000"; Properties = {"Server", "Port", "TimeoutMsecs", "ResponseTimeMsecs", "ErrorCode", "ErrorDescription"}; RequireReset = FALSE; TargetNamespace = "root\\cimv2\\MicrosoftHealthmonitor"; Enabled = FALSE; Hidden = TRUE; Message = "%EmbeddedCollectedInstance.Server%:%EmbeddedCollectedInstance.Port% connect failed. Response Time (msec): %EmbeddedCollectedInstance.ResponseTimeMsecs%. Error Code: %EmbeddedCollectedInstance.ErrorCode%. Error Description: %EmbeddedCollectedInstance.ErrorDescription%. (WMI Status: %CollectionErrorCode% %CollectionErrorDescription%)"; ResetMessage = "%EmbeddedCollectedInstance.Server%:%EmbeddedCollectedInstance.Port% connected Ok."; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC15T1 { GUID = "{0925C491-3323-11d4-928F-006097919914}"; Name = "Error Code (from WMI) != 0"; Description = "Verify the return error code from the Collection"; PropertyName = "CollectionErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC15; ChildPath = $DC15T1; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC15T2 { GUID = "{59DD2B7C-A2B7-442a-A06A-2E0FC123E4F4}"; Name = "TCP Error Code != 0"; Description = "Verify the return error code from the Instance"; PropertyName = "ErrorCode"; UseFlag = 0; TestCondition = 3; // "!=" test CompareValue = "0"; ThresholdDuration = 0; State = 9; // CRITICAL }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC15; ChildPath = $DC15T2; }; instance of MicrosoftHM_ThresholdConfiguration AS $DC15T3 { GUID = "{9A12D556-BAC3-4126-AD58-F25F00065713}"; Name = "Response Time (milliseconds) > 15000"; Description = ""; PropertyName = "ResponseTimeMsecs"; UseFlag = 0; TestCondition = 1; // > test CompareValue = "15000"; ThresholdDuration = 0; State = 9; // CRITICAL }; instance of MicrosoftHM_ConfigurationAssociation { ParentPath = $DC15; ChildPath = $DC15T3; };