Demo.Syslog.Discovery.MP 1.0.0.0 Demo MP for Discover Entities based on Syslog Messages System.Library 6.0.5000.0 9396306c2be7fcc4 Microsoft.SystemCenter.Library 6.0.5000.0 9396306c2be7fcc4 System.ApplicationLog.Library 6.0.5000.0 9396306c2be7fcc4 Microsoft.SystemCenter.ClientMonitoring.Library 6.0.5000.0 9396306c2be7fcc4 System.Health.Library 6.0.5000.0 9396306c2be7fcc4 514 AddUpdate Rule $MPElement$ $Target/Id$ //HostName //Facility //Severity //Priority //PriorityName //TimeStamp //Message $MPElement[Name="Demo.Syslog.IP"]$ $MPElement[Name="Demo.Syslog.IP"]/IP$ HostNameValue $MPElement[Name="Demo.Syslog.IP"]/LastFacility$ FacilityValue $MPElement[Name="Demo.Syslog.IP"]/LastSeverity$ SeverityValue $MPElement[Name="Demo.Syslog.IP"]/LastPriority$ PriorityValue $MPElement[Name="Demo.Syslog.IP"]/LastPriorityName$ PriorityNameValue $MPElement[Name="Demo.Syslog.IP"]/LastTimeStamp$ TimeStampValue $MPElement[Name="Demo.Syslog.IP"]/LastMessage$ MessageValue System!System.Discovery.Data $Config/MinutesFrequency$ $Config/LastFacility$ GreaterEqual $Config/LeastFacility$ $Config/LastSeverity$ GreaterEqual $Config/LeastSeverity$ $Config/LastPriority$ GreaterEqual $Config/LeastPriority$ $Config/LastPriorityName$ MatchesRegularExpression $Config/PriorityNameRegexPattern$ $Config/LastTimeStamp$ MatchesRegularExpression $Config/TimeStampRegexPattern$ $Config/IP$ MatchesRegularExpression $Config/HostNameRegexPattern$ $Config/LastMessage$ MatchesRegularExpression $Config/MessageRegexPattern$ $Config/LastFacility$ GreaterEqual $Config/LeastFacility$ $Config/LastSeverity$ GreaterEqual $Config/LeastSeverity$ $Config/LastPriority$ GreaterEqual $Config/LeastPriority$ $Config/LastPriorityName$ MatchesRegularExpression $Config/PriorityNameRegexPattern$ $Config/LastTimeStamp$ MatchesRegularExpression $Config/TimeStampRegexPattern$ $Config/IP$ MatchesRegularExpression $Config/HostNameRegexPattern$ $Config/LastMessage$ MatchesRegularExpression $Config/MessageRegexPattern$ Discovery Alert Error true High Error $Target/Property[Type="Demo.Syslog.IP"]/LastTimeStamp$ $Target/Property[Type="Demo.Syslog.IP"]/IP$ $Target/Property[Type="Demo.Syslog.IP"]/LastFacility$ $Target/Property[Type="Demo.Syslog.IP"]/LastSeverity$ $Target/Property[Type="Demo.Syslog.IP"]/LastPriority$ $Target/Property[Type="Demo.Syslog.IP"]/LastPriorityName$ $Target/Property[Type="Demo.Syslog.IP"]/LastMessage$ $Target/Property[Type="Demo.Syslog.IP"]/LastFacility$ $Target/Property[Type="Demo.Syslog.IP"]/LastSeverity$ $Target/Property[Type="Demo.Syslog.IP"]/LastPriority$ $Target/Property[Type="Demo.Syslog.IP"]/LastPriorityName$ $Target/Property[Type="Demo.Syslog.IP"]/LastTimeStamp$ $Target/Property[Type="Demo.Syslog.IP"]/IP$ $Target/Property[Type="Demo.Syslog.IP"]/LastMessage$ 10 0 4 0 .* .* .* .* Operations false State Demo.Syslog.IP Maintenance Mode InMaintenanceMode Name Name Path Path IP IP LastPriorityName LastPriorityName LastSeverity LastSeverity LastFacility LastFacility LastPriority LastPriority LastTimeStamp LastTimeStamp LastMessage LastMessage Display Name DisplayName Syslog Demo Discovery MP Syslog DEMO Discovery MP: This Management Pack contains rules that discovers various IPs from syslog messages received and computes their health too. IPs discovered through syslog messages This managed entity type refers to all IPs discovered via syslog messages. Host Name Last Facility Last Severity Last Priority Last Priority Name Last Time Stamp Last Message Syslog Monitor Frequency In Minutes Min. Expected Facility Min. Expected Severity Min. Expected Priority Expected Priority Name Pattern Expected Time Stamp Pattern Expected Host Name Pattern Expected Message Pattern Syslog Message: Alert {0}: A message from {1} was recevied with facility '{2}', severity '{3}', priority '{4}'/priority name '{5}': '{6}'. Syslog Views Syslog discovered IPs