Views Reference - Forefront Security for SharePoint

Article
07/23/2014

The following tables provide a reference to each of the Forefront Security for SharePoint views included in the Microsoft Forefront Server Security Management Pack for MOM 2005. For more information about views, see Views.

Alert Views for Forefront Security - General

Parent Folder	Microsoft Forefront Server Security
View Name	Alerts – Microsoft Forefront Server Security
Criteria	Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND Computer Group = “Forefront Security *”
Description	Displays all alerts generated for agent systems that are members of the “Forefront Security *” computer group.

Parent Folder	Microsoft Forefront Server Security\Engines
View Name	Engine Update Failure
Criteria	Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField3 = “EngineUpdateFailure” AND Computer Group = “Forefront Security *”
Description	Displays alerts about engine update failures.

Alert Views for Forefront for SharePoint

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint
View Name	Alerts – Forefront for SharePoint
Criteria	Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField2 = “Forefront Security for SharePoint” AND Computer Group = “Forefront Security for SharePoint *”
Description	Displays all alerts generated for agent systems that are members of the “Forefront Security for SharePoint *” computer group.

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Scan Job Failure
Criteria	Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField2 = “Forefront Security for SharePoint” AND CustomField3 = “ScanJobFailure” AND Computer Group = “Forefront Security for SharePoint *”
Description	Displays alerts about scan job failures.

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Services
View Name	Service Failure
Criteria	Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField2 = “Forefront Security for SharePoint” AND CustomField3 = “ServicesFailure” AND Computer Group = “Forefront Security for SharePoint *”
Description	Displays alerts about service failures.

State Views

Parent Folder	Microsoft Forefront Server Security
View Name	State – No Heartbeat
Criteria	Computer Group = “Forefront Security*” AND No heartbeat detected within the last 15 minutes
Description	Displays agent systems which have lost contact with the MOM Server.

Parent Folder	Microsoft Forefront Server Security
View Name	State – Open Alerts
Criteria	Computer Group = “Forefront Security *” AND Computer has Open Alerts
Description	Displays agent systems that have unresolved open alerts.

Parent Folder	Microsoft Forefront Server Security
View Name	State – Forefront for SharePoint
Criteria	Computer Group = “Forefront Security for SharePoint”
Description	Displays state of computers that are member of the “Forefront Security for SharePoint” computer group.

Event Views for Forefront Security - General

Parent Folder	Microsoft Forefront Server Security
View Name	Events – Microsoft Forefront
Criteria	Generated in the last 7 days AND Computer Group = “Forefront Security *”
Description	Displays all events generated by agent systems that are members of the “Forefront Security *” computer group.

Parent Folder	Microsoft Forefront Server Security\Engines
View Name	Engine Update Success
Criteria	Event ID = (2014 or 2016 or 6014 or 9525 or 9897 or 9898) AND Generated in the last 7 days AND Computer Group = “Forefront Security *”
Description	Displays all events that indicate a successfully-completed scan engine update on “Forefront Server Security” systems.

Event Views for Forefront for SharePoint

Parent Folder	Microsoft Forefront Server Security for SharePoint
View Name	Events – Forefront for SharePoint
Criteria	Generated in the last 7 days AND Computer Group = “Forefront Security for SharePoint *”
Description	Displays all events generated from agent systems in the “Forefront Security for SharePoint” computer group.

Parent Folder	Microsoft Forefront Server Security for SharePoint\Scan Jobs
View Name	Scan Job Status
Criteria	Event ID = (2000 or 2001 or 2002 or 2005 or 2007 or 2008) AND Generated in the last 7 days AND Computer Group = “Forefront Security for SharePoint *”
Description	Displays all events that indicate Scan Jobs going into an enabled or disabled state on “Forefront Security for SharePoint” systems.

Parent Folder	Microsoft Forefront Server Security for SharePoint\Services
View Name	Service Status
Criteria	Event ID = (332 or 333 or 1002 or 1003 or 1005 or 1006 or 1007 or 1008 or 7036) AND Generated in the last 7 days AND Computer Group = “Forefront Security for SharePoint *”
Description	Displays events that indicate Forefront Security and related services started or stopped successfully on “Forefront Security for SharePoint” systems.

Performance Views for Forefront Security - General

Parent Folder	Microsoft Forefront Server Security
View Name	Performance – Microsoft Forefront Server Security
Criteria	Computer Group = “Forefront Security *”
Description	Displays a list of agent systems (and their measured counters) that belong to the “Forefront Security *” computer group.

Performance Views for Forefront for SharePoint

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint
View Name	Performance – Forefront for SharePoint
Criteria	Computer Group = “Forefront Security for SharePoint *”
Description	Displays a list of agent systems (and their measured counters) that belong to the “Forefront Security for SharePoint” computer group.

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Document Clean Rate
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Cleaned Rate”
Description	Document Clean Rate for Realtime scanner

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Documents Cleaned
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Cleaned”
Description	Number of documents cleaned by latest Realtime scan session

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Document Detect Rate
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Detected Rate”
Description	Document Detect Rate for Realtime scanner

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Documents Detected
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Detected”
Description	Number of documents detected by latest Realtime scan session

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Document Block Rate
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Removed Rate”
Description	Document Block Rate for Realtime scanner

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Documents Blocked
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Removed”
Description	Number of documents blocked by latest Realtime scan session

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Document Scan Rate
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Scanned Rate”
Description	Document Scan Rate for Realtime scanner

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Documents Scanned
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Scanned”
Description	Number of documents scanned by latest Realtime scan session

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Total Documents Cleaned
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Cleaned”
Description	Total number of documents cleaned by Realtime scan

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Total Documents Detected
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Detected”
Description	Total number of documents detected by Realtime scan

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Total Documents Blocked
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Removed”
Description	Total number of documents blocked by Realtime scan

Parent Folder	Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs
View Name	Realtime Total Documents Scanned
Criteria	Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Scanned”
Description	Total number of documents scanned by Realtime scan

Computers and Groups Views for Forefront Security - General

Parent Folder	Microsoft Forefront Server Security
View Name	Microsoft Forefront
Criteria	Computer Group = “Forefront Security *”
Description	Displays a list of agent-managed Computers with Microsoft Forefront Security Products installed.

Parent Folder	Microsoft Forefront Server Security
View Name	Microsoft Forefront Groups
Criteria	Computer Group = “Forefront Security *”
Description	Computer Groups for Microsoft Forefront Server Security

Computers and Groups Views for Forefront Security for SharePoint

Parent Folder	Microsoft Forefront Security For SharePoint
View Name	Microsoft Forefront
Criteria	Computer Group = “Forefront Security for SharePoint *”
Description	Displays a list of agent-managed Computers with Microsoft Forefront Security for SharePoint installed.