Views

The Microsoft Forefront Server Security Management Pack for MOM 2005 provides a set of views that are accessible through the MOM 2005 Operator Console. These views separate and filter the alert, state, event, and performance data received from MOM agents into a relational hierarchy.

For more information about the criteria for these Views, see Views Reference - Forefront Security for Exchange Server and Views Reference - Forefront Security for SharePoint.

Alert Views

Alert Views display the alerts generated by Alert Event Rules in a hierarchy.

Each of the individual alert view containers filters the alerts using a set of criteria that are largely based on the CustomField values generated from the event rules. While the Event Views show you the success or failure of, for example, engine updates, alert rules would normally only show you failures (since you would not choose to be alerted to the success of an update process).

For more information about CustomField values, see "Event Rules" in the Rules chapter.

State Views

State Views display a “summarized state” of systems that match a set of specified criteria. There are two state views (No Heartbeat and Open Alerts), located at the top level of the hierarchy under the “Microsoft Forefront Server Security” folder.

If you are monitoring Forefront for SharePoint systems, there is a third state view, called “StateForefront for SharePoint”, which is also located under the “Microsoft Forefront Server Security” folder.

Event Views

Event Views display the events captured by the event rules, arranged in a hierarchy. Each of the individual event view containers displays events based on a set of criteria.

Performance Views

Performance Views display the data captured by the performance rules, arranged in a hierarchy. Each of the individual performance view containers displays events based on a set of criteria.