Current Path : C:/ProgramData/Microsoft/ServerManager/Events/ |
Current File : C:/ProgramData/Microsoft/ServerManager/Events/FileServer.Events.xml |
<!-- Copyright (c) Microsoft Corporation. All rights reserved. --> <ViewerConfig> <QueryConfig> <QueryParams> <UserQuery /> </QueryParams> <QueryNode> <Name ResourceId="%windir%\system32\svrmgrnc.dll,-412">File Server</Name> <Description ResourceId="%windir%\system32\svrmgrnc.dll,-413">System events for File Server</Description> <SuppressQueryExecutionErrors>1</SuppressQueryExecutionErrors> <QueryList> <Query> <!-- FS Role optional components BEGIN --> <!-- FSRM events BEGIN --> <Select Path="System">*[System[Provider[@Name='DataScrn']]]</Select> <Select Path="System">*[System[Provider[@Name='Quota']]]</Select> <Select Path="Application">*[System[Provider[@Name='SrmSvc']]]</Select> <Select Path="Application">*[System[Provider[@Name='SrmReports']]]</Select> <!-- FSRM events END --> <!-- DFS Namespaces events BEGIN --> <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-DfsSvc']]]</Select> <!-- DFS Namespaces events END --> <!-- DFS Replication events BEGIN --> <Select Path="DFS Replication">*[System[Provider[@Name='DFS Replication']]]</Select> <Select Path="DFS Replication">*[System[Provider[@Name='DFSR']]]</Select> <!-- DFS Replication events END --> <!-- NTFRS events BEGIN --> <Select Path="File Replication Service">*[System[Provider[@Name='File Replication Service']]]</Select> <Select Path="File Replication Service">*[System[Provider[@Name='NtFrs']]]</Select> <!-- NTFRS events END --> <!-- NFS events BEGIN --> <Select Path="Microsoft-Windows-ServicesForNFS-Portmapper/Admin">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Admin">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Analytic">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/IdentityMapping">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Notifications">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Microsoft-Windows-ServicesForNFS-Server/Operational">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="System">*[System[Provider[@Name='NfsServer' or @Name='Portmap' or @Name='Microsoft-Windows-ServicesForNFS-NFSServerService' or @Name='Microsoft-Windows-ServicesForNFS-Portmapper' or @Name='Microsoft-Windows-ServicesForNFS-Server']]]</Select> <Select Path="Application">*[System[Provider[@Name='NfsSvc']]]</Select> <!-- NFS events END --> <!-- SIS events BEGIN --> <Select Path="System">*[System[Provider[@Name='SIS']]]</Select> <Select Path="Application">*[System[Provider[@Name='Groveler']]]</Select> <!-- SIS events END --> <!-- Content Indexing events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Ci']]]</Select> <!-- Content Indexing events END --> <!-- Windows Search events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Microsoft-Windows-Search']]]</Select> <Select Path="Application">*[System[Provider[@Name='Microsoft-Windows-Search-ProfileNotify']]]</Select> <!-- Windows Search events END --> <!-- FS Role optional components END --> <!-- Core components important for FS Role BEGIN --> <!-- VDS, VolMgr events BEGIN --> <Select Path="System">*[System[Provider[@Name='partmgr']]]</Select> <Select Path="System">*[System[Provider[@Name='volmgr']]]</Select> <Select Path="System">*[System[Provider[@Name='Virtual Disk Service']]]</Select> <Select Path="System">*[System[Provider[@Name='VDS Basic Provider 1.0']]]</Select> <Select Path="System">*[System[Provider[@Name='VDS Dynamic Provider 2.0']]]</Select> <!-- VDS, VolMgr events END --> <!-- VSS, VolSnap events BEGIN --> <Select Path="System">*[System[Provider[@Name='Volsnap']]]</Select> <Select Path="Application">*[System[Provider[@Name='VSS']]]</Select> <!-- VSS, VolSnap events END --> <!-- NTFS, TxF, UDF, FAT, exFAT events BEGIN --> <Select Path="System">*[System[Provider[@Name='Ntfs']]]</Select> <!-- NTFS, TxF, UDF, FAT, exFAT events END --> <!-- SMB events BEGIN --> <Select Path="Microsoft-Windows-ResumeKeyFilter/Analytic">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-ResumeKeyFilter/Operational">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-ResumeKeyFilter/Performance">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-SMBClient/HelperClassDiagnostic">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-SMBClient/ObjectStateDiagnostic">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="Microsoft-Windows-SMBClient/Operational">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="WitnessClientAdmin">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="WitnessServiceAdmin">*[System[Provider[@Name='Microsoft-Windows-ResumeKeyFilter' or @Name='Microsoft-Windows-SMBClient' or @Name='Microsoft-Windows-SmbServer' or @Name='Microsoft-Windows-SMBWitnessClient' or @Name='Microsoft-Windows-SMBWitnessService']]]</Select> <Select Path="System">*[System[Provider[@Name='mrxsmb']]]</Select> <Select Path="System">*[System[Provider[@Name='Srv']]]</Select> <Select Path="System">*[System[Provider[@Name='Srv2']]]</Select> <Select Path="System">*[System[Provider[@Name='Workstation']]]</Select> <Select Path="System">*[System[Provider[@Name='Server']]]</Select> <!-- SMB events END --> <!-- Defrag events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Microsoft-Windows-Defrag']]]</Select> <!-- Defrag events END --> <!-- CHKDSK events BEGIN --> <Select Path="Application">*[System[Provider[@Name='Chkdsk']]]</Select> <!-- CHKDSK events END --> <!-- Cluster events BEGIN --> <Select Path="Microsoft-Windows-FailoverClustering/Operational">*[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]]</Select> <Select Path="Microsoft-Windows-FailoverClustering/Performance-CSV">*[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]]</Select> <Select Path="System">*[System[Provider[@Name='Microsoft-Windows-FailoverClustering']]]</Select> <!-- Cluster events END --> <!-- iSCSI events BEGIN --> <Select Path="Microsoft-Windows-iSCSITarget-Service/Admin">*[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]]</Select> <Select Path="Microsoft-Windows-iSCSITarget-Service/Diagnostic">*[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]]</Select> <Select Path="Microsoft-Windows-iSCSITarget-Service/Operational">*[System[Provider[@Name='Microsoft-Windows-iSCSITarget-Service']]]</Select> <!-- iSCSI events BEGIN --> <!-- Work Folders events BEGIN --> <Select Path="Microsoft-Windows-SyncShare/Operational">*[System[Provider[@Name='Microsoft-Windows-SyncShare']]]</Select> <!-- Work Folders events END --> <!-- Core components important for FS Role END --> </Query> </QueryList> </QueryNode> </QueryConfig> </ViewerConfig>