Event Collection Rules
Applies To: System Center Operations Manager 2007
Note
This topic has been updated in the latest version of the System Center Management Pack Authoring Guide on the TechNet Wiki.
Events in System Center Operations Manager 2007 can be collected from any of the data sources detailed in the Events section of this guide. For most data sources, all that is required is the criteria for which events are to be collected. This criteria is specified using the properties available to the particular data source being used.
Script Based Event Collection
Script based event collection runs a monitoring script on a regular schedule and stores the results as an event. The monitoring script returns a property bag as described in the Monitoring Scripts section of this guide. The performance collection rule maps values of the property bag into properties of the event by using $Data variables referring to different values in the property bag.
Event properties that the rule may populate are listed in the following table:
| Property | Description |
|---|---|
Computer |
The computer logging the event. Typically uses the PrincipalName property of the target object’s host computer. |
Event source |
The source of the event. Typically either a static string or a value from the property bag. |
Event log |
The name of the event log. Typically either a static string or a value from the property bag. |
Event ID |
The number of the event. Typically either a static string or a value from the property bag. |
Category |
The category of the event. |
Level |
The level of the event. Typically selected from the list of available options. |
Parameters |
Multiple values that contains data that does fit into the other properties. Typically one or more values from the property bag. |
See Also
Tasks
How to create a script-based event collection rule