Monitor WMI

Applies To: Opalis 6.3

The Monitor WMI object will trigger a Policy when a WMI event is received as a result of the WMI event query that you specify. This object uses a satellite license.

The Monitor WMI object can be used to check for changes in devices that are attached to the server and trigger Policies that take corrective action when errors occur.

Configuring the Monitor WMI Object

To configure the Monitor WMI object you will need to know the computer that you are monitoring as well as the WMI event query that you want to execute. A WMI event query is different than a standard WMI query. For more information about WMI, see the Windows Management Instrumentation SDK (https://go.microsoft.com/fwlink/?LinkID=29400)..

To configure the Monitor WMI object

  1. From the Objects pane, drag a Monitor WMI object to the active Policy.

  2. Double-click the Monitor WMI object icon. The Properties dialog opens.

  3. For information about the settings on the Details tab see the following table.

  4. For information about the settings on the General tab, the Run Behavior tab, and other tabs if applicable, see Common Tabs.

Details Tab

Element Configuration Instructions

Computer

Type the name of the computer that you are monitoring for new WMI events. You can also use the ellipsis ( ... ) button to browse for the computer.

Namespace

Type the name of the WMI namespace that you want to query.

WMI Query

Type the WMI event query that will be used to query the computer that you specified in the Computer box.

Syntax Examples

Here is the syntax of a simple notification query: SELECT * FROM [EventClass] WITHIN [interval] WHERE TargetInstance ISA [object]

When you submit this WMI query, you are submitting a request to be notified of all occurrences of the event represented by [EventClass]. The WITHIN clause denotes how the test is performed, which is at an interval of seconds denoted by [interval]. The WHERE clause is used to narrow down your query and can include objects, properties of embedded objects and condition statements.

Monitor for the Addition of a Modem: The following query submits a notification request to monitor for the addition of a modem and will cause the WMI event to trigger if a modem is added. The test is performed at an interval of every 10 seconds. SELECT * FROM __InstanceCreationEvent WITHIN 10 WHERE TargetInstance ISA "Win32_POTSModem"

Monitor for the Deletion of a Modem: The following query submits a notification request to monitor for the deletion of a modem and will cause the WMI event to trigger if a modem is deleted. The test is performed at an interval of every 50 seconds. SELECT * FROM __InstanceDeletionEvent WITHIN 50 WHERE TargetInstance ISA "Win32_POTSModem"

Monitor for the Modification of a Display Configuration: The following query submits a notification request to monitor for the modification of a display configuration and will cause the WMI event to trigger if the display frequency is greater than 70. The test is performed at an interval of every 20 seconds. SELECT * FROM __InstanceModificationEvent WITHIN 20 WHERE TargetInstance ISA "Win32_DisplayConfiguration" AND TargetInstance.DisplayFrequency > 70

Monitor for a Modification in a Processor value: The following query submits a notification request to monitor for a modification in a Processor value and will cause the WMI event to trigger if the CPU utilization is greater than 50. The test is performed at an interval of every 5 seconds. SELECT * FROM __InstanceModificationEvent WITHIN 5 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 50

Tip

A query can be rejected by WMI if it is too complex or becomes resource-intensive for evaluation.

Monitor WMI Published Data

The following table lists the element names and descriptions of the data published by this object. For information about the published data elements that are common to all objects, see Policy Workflow Rules.

Element Name Description

Computer where the WMI query is performed

The name of the computer where the WMI query was executed.

WMI Query

The WMI query that was sent to the computer.

WMI Query Result as a string

The result of the WMI query.

WMI Namespace

The WMI namespace that you queried.