Event management operations for Microsoft System Center Operations Manager 2012
This section describes the adapter requests and responses for the following Event management operations.
Find Event by ID operation
The Find Event by ID operation retrieves an event based on the Globally Unique Identifier (GUID) of the event.
The following table describes the adapter request elements for the Find Event by ID operation.
Adapter request elements for the Find Event by ID operation
Element | Definition | Required |
|---|---|---|
<operation-name> | Specifies the operation name: Get-SCOMEvent | Yes |
<timeout-secs> | Specifies the duration after which the operation times out Default value: 60 seconds | No |
<command-parameters> | Specifies the parent element for the command parameters | Yes |
<event-id> | Specifies the GUID of the event whose details are retrieved | Yes |
The following figure shows the <items> XML for the Find Event by ID operation.
<items> XML for the Find Event by ID operation
<items>
<item>
<timeout-secs>120</timeout-secs>
<command-parameters>
<event-id>CEE96D8E-853D-4368-8366-84E778754CA9</event-id>
</command-parameters>
</item>
</items>
<item>
<timeout-secs>120</timeout-secs>
<command-parameters>
<event-id>CEE96D8E-853D-4368-8366-84E778754CA9</event-id>
</command-parameters>
</item>
</items>
The following figure shows the sample adapter request for the Find Event by ID operation.
Sample adapter request for the Find Event by ID operation
<request-data>
<scom-request>
<operation-name>Get-Event-By-Id</operation-name>
<command-request>
<timeout-secs>120</timeout-secs>
<command-parameters>
<event-id>710255F6-ADFE-47DE-BB93-032D19B3B0D0</event-id>
</command-parameters>
</command-request>
</scom-request>
</request-data>
<scom-request>
<operation-name>Get-Event-By-Id</operation-name>
<command-request>
<timeout-secs>120</timeout-secs>
<command-parameters>
<event-id>710255F6-ADFE-47DE-BB93-032D19B3B0D0</event-id>
</command-parameters>
</command-request>
</scom-request>
</request-data>
The following figure shows the adapter response for the Find Event by ID operation.
Adapter response for the Find Event by ID operation
<scom-response>
<metadata>
<status>success</status>
<count>1</count>
</metadata>
<commands-output>
<command-output>
<metadata>
<command> Import-Module OperationsManager; Get-SCOMEvent -id 710255F6-ADFE-47DE-BB93-032D19B3B0D0 | format-list</command>
<execution-milliseconds>59126</execution-milliseconds>
<exit-code>0</exit-code>
<status>success</status>
<count>1</count>
</metadata>
<output>
<item>
<Id><![CDATA[710255f6-adfe-47de-bb93-032d19b3b0d0]]></Id>
<OriginalId><![CDATA[0c56cfd6-f8a8-4f41-a400-bffa4467df73]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></MonitoringRuleId>
<RuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></RuleDisplayName>
<MonitoringRuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</MonitoringRuleDescription>
<RuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</RuleDescription>
<PublisherName><![CDATA[Health Service Script]]></PublisherName>
<Number><![CDATA[6022]]></Number>
<Description>LogEndToEndEvent.ps1 : This event is logged to the Windows Event Log periodically to test a event collection.</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2016-12-21T00:00:01.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>LogEndToEndEvent.ps1</Data><Data>This event is logged to the Windows Event Log periodically to test a event collection.</Data></EventData></DataItem></EventData>
<Parameters>{LogEndToEndEvent.ps1, This event is logged to the Windows Event Log periodically to test a event collection.}</Parameters>
<TimeGenerated>12/20/2016 01:30:01 PM</TimeGenerated>
<TimeAdded>12/20/2016 01:30:01 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
</output>
</command-output>
</commands-output>
</scom-response>
<metadata>
<status>success</status>
<count>1</count>
</metadata>
<commands-output>
<command-output>
<metadata>
<command> Import-Module OperationsManager; Get-SCOMEvent -id 710255F6-ADFE-47DE-BB93-032D19B3B0D0 | format-list</command>
<execution-milliseconds>59126</execution-milliseconds>
<exit-code>0</exit-code>
<status>success</status>
<count>1</count>
</metadata>
<output>
<item>
<Id><![CDATA[710255f6-adfe-47de-bb93-032d19b3b0d0]]></Id>
<OriginalId><![CDATA[0c56cfd6-f8a8-4f41-a400-bffa4467df73]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></MonitoringRuleId>
<RuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></RuleDisplayName>
<MonitoringRuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</MonitoringRuleDescription>
<RuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</RuleDescription>
<PublisherName><![CDATA[Health Service Script]]></PublisherName>
<Number><![CDATA[6022]]></Number>
<Description>LogEndToEndEvent.ps1 : This event is logged to the Windows Event Log periodically to test a event collection.</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2016-12-21T00:00:01.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>LogEndToEndEvent.ps1</Data><Data>This event is logged to the Windows Event Log periodically to test a event collection.</Data></EventData></DataItem></EventData>
<Parameters>{LogEndToEndEvent.ps1, This event is logged to the Windows Event Log periodically to test a event collection.}</Parameters>
<TimeGenerated>12/20/2016 01:30:01 PM</TimeGenerated>
<TimeAdded>12/20/2016 01:30:01 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
</output>
</command-output>
</commands-output>
</scom-response>
Find Event by Management Object operation
The Find Event by Management Object operation retrieves events associated with the specified management object.
The following table describes the adapter request elements for the Find Event by Management Object operation.
Adapter request elements for the Find Event by Management Object operation
Element | Definition | Required |
|---|---|---|
<operation-name> | Specifies the operation name: Get-SCOMEvent | Yes |
<timeout-secs> | Specifies the duration after which the operation times out | No |
<command-parameters> | Specifies the parent element for the command parameters | Yes |
<managementobject> | Specifies the parent element for the <managementobject-id> element | Yes |
<managementobject-id> | Specifies the globally unique identifier (GUID) of the monitoring object | Yes |
The following figure shows the <items> XML for the Find Event by Management Object operation.
<items> XML for the Find Event by Management Object operation
<items>
<item>
<timeout-secs>120</timeout-secs>
<command-parameters>
<instance>
<filters>
<filter>
<management-object-prop-key>DisplayName</management-object-prop-key>
<management-object-prop-val>Management Configuration Service</management-object-prop-val>
<operand>equals</operand>
</filter>
</filters>
</instance>
</command-parameters>
</item>
</items>
<item>
<timeout-secs>120</timeout-secs>
<command-parameters>
<instance>
<filters>
<filter>
<management-object-prop-key>DisplayName</management-object-prop-key>
<management-object-prop-val>Management Configuration Service</management-object-prop-val>
<operand>equals</operand>
</filter>
</filters>
</instance>
</command-parameters>
</item>
</items>
The following figure shows the sample adapter request for the Find Event by Management Object operation.
Sample adapter request for the Find Event by Management Object operation
<request-data>
<scom-request>
<operation-name>Get-Event-By-Enterprise-Management-Object</operation-name>
<command-request>
<timeout-secs>500</timeout-secs>
<command-parameters>
<instance>
<filters>
<filter>
<management-object-prop-key>id</management-object-prop-key>
<management-object-prop-val>a0d974ba-e24b-10b1-b6ab-a05af10234d3</management-object-prop-val>
<operand>equals</operand>
</filter>
</filters>
</instance>
</command-parameters>
</command-request>
</scom-request>
</request-data>
<scom-request>
<operation-name>Get-Event-By-Enterprise-Management-Object</operation-name>
<command-request>
<timeout-secs>500</timeout-secs>
<command-parameters>
<instance>
<filters>
<filter>
<management-object-prop-key>id</management-object-prop-key>
<management-object-prop-val>a0d974ba-e24b-10b1-b6ab-a05af10234d3</management-object-prop-val>
<operand>equals</operand>
</filter>
</filters>
</instance>
</command-parameters>
</command-request>
</scom-request>
</request-data>
The following figure shows the adapter response for the Find Event by Management Object operation.
Adapter response for the Find Event by Management Object operation
<scom-response>
<metadata>
<status>success</status>
<count>1</count>
</metadata>
<commands-output>
<command-output>
<metadata>
<command> Import-Module OperationsManager; Get-SCOMEvent -instance (Get-SCOMClassInstance | where-object {$_.id -eq 'a0d974ba-e24b-10b1-b6ab-a05af10234d3'}) | format-list</command>
<execution-milliseconds>500039</execution-milliseconds>
<exit-code>9999</exit-code>
<status>success</status>
<count>20</count>
</metadata>
<output>
<item>
<Id><![CDATA[d472d51c-dc1f-4fb2-b9a2-0011b4d631d9]]></Id>
<OriginalId><![CDATA[d47ae880-7796-4e2f-ba8b-49bf23631c2b]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></MonitoringRuleId>
<RuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></RuleDisplayName>
<MonitoringRuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</MonitoringRuleDescription>
<RuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</RuleDescription>
<PublisherName><![CDATA[Health Service Script]]></PublisherName>
<Number><![CDATA[6022]]></Number>
<Description>LogEndToEndEvent.ps1 : This event is logged to the Windows Event Log periodically to test a event collection.</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2016-12-28T05:45:00.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>LogEndToEndEvent.ps1</Data><Data>This event is logged to the Windows Event Log periodically to test a event collection.</Data></EventData></DataItem></EventData>
<Parameters>{LogEndToEndEvent.ps1, This event is logged to the Windows Event Log periodically to test a event collection.}</Parameters>
<TimeGenerated>12/27/2016 07:15:00 PM</TimeGenerated>
<TimeAdded>12/27/2016 07:15:00 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
<item>
<Id><![CDATA[401d232b-7b4c-4a14-b623-00352f05749c]]></Id>
<OriginalId><![CDATA[6e1075e7-fdd8-49c2-bcd0-b2549eb3690d]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></MonitoringRuleId>
<RuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Data Warehouse related event collection]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Data Warehouse related event collection]]></RuleDisplayName>
<MonitoringRuleDescription>This rule collections events related to Data Warehouse operation</MonitoringRuleDescription>
<RuleDescription>This rule collections events related to Data Warehouse operation</RuleDescription>
<PublisherName><![CDATA[Health Service Modules]]></PublisherName>
<Number><![CDATA[31551]]></Number>
<Description></Description>
<CategoryId><![CDATA[3]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[1]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2017-01-02T07:26:27.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>SCOM-GROUP</Data><Data>Microsoft.SystemCenter.DataWarehouse.Synchronization.MaintenanceMode</Data><Data>Data Warehouse Synchronization Service</Data><Data>{3889FBD2-704F-9335-B568-5654B54766FC}</Data><Data>SqlTimeoutException</Data><Data>Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.Timed out stored procedure: MaintenanceModeChange</Data></EventData></DataItem></EventData>
<Parameters>{SCOM-GROUP, Microsoft.SystemCenter.DataWarehouse.Synchronization.MaintenanceMode, Data Warehouse Synchronization Service, {3889FBD2-704F-9335-B568-5654B54766FC}...}</Parameters>
<TimeGenerated>01/01/2017 08:56:27 PM</TimeGenerated>
<TimeAdded>01/01/2017 08:56:31 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
</output>
</command-output>
</commands-output>
</scom-response>
<metadata>
<status>success</status>
<count>1</count>
</metadata>
<commands-output>
<command-output>
<metadata>
<command> Import-Module OperationsManager; Get-SCOMEvent -instance (Get-SCOMClassInstance | where-object {$_.id -eq 'a0d974ba-e24b-10b1-b6ab-a05af10234d3'}) | format-list</command>
<execution-milliseconds>500039</execution-milliseconds>
<exit-code>9999</exit-code>
<status>success</status>
<count>20</count>
</metadata>
<output>
<item>
<Id><![CDATA[d472d51c-dc1f-4fb2-b9a2-0011b4d631d9]]></Id>
<OriginalId><![CDATA[d47ae880-7796-4e2f-ba8b-49bf23631c2b]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></MonitoringRuleId>
<RuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></RuleDisplayName>
<MonitoringRuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</MonitoringRuleDescription>
<RuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</RuleDescription>
<PublisherName><![CDATA[Health Service Script]]></PublisherName>
<Number><![CDATA[6022]]></Number>
<Description>LogEndToEndEvent.ps1 : This event is logged to the Windows Event Log periodically to test a event collection.</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2016-12-28T05:45:00.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>LogEndToEndEvent.ps1</Data><Data>This event is logged to the Windows Event Log periodically to test a event collection.</Data></EventData></DataItem></EventData>
<Parameters>{LogEndToEndEvent.ps1, This event is logged to the Windows Event Log periodically to test a event collection.}</Parameters>
<TimeGenerated>12/27/2016 07:15:00 PM</TimeGenerated>
<TimeAdded>12/27/2016 07:15:00 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
<item>
<Id><![CDATA[401d232b-7b4c-4a14-b623-00352f05749c]]></Id>
<OriginalId><![CDATA[6e1075e7-fdd8-49c2-bcd0-b2549eb3690d]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></MonitoringRuleId>
<RuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Data Warehouse related event collection]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Data Warehouse related event collection]]></RuleDisplayName>
<MonitoringRuleDescription>This rule collections events related to Data Warehouse operation</MonitoringRuleDescription>
<RuleDescription>This rule collections events related to Data Warehouse operation</RuleDescription>
<PublisherName><![CDATA[Health Service Modules]]></PublisherName>
<Number><![CDATA[31551]]></Number>
<Description></Description>
<CategoryId><![CDATA[3]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[1]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2017-01-02T07:26:27.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>SCOM-GROUP</Data><Data>Microsoft.SystemCenter.DataWarehouse.Synchronization.MaintenanceMode</Data><Data>Data Warehouse Synchronization Service</Data><Data>{3889FBD2-704F-9335-B568-5654B54766FC}</Data><Data>SqlTimeoutException</Data><Data>Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.Timed out stored procedure: MaintenanceModeChange</Data></EventData></DataItem></EventData>
<Parameters>{SCOM-GROUP, Microsoft.SystemCenter.DataWarehouse.Synchronization.MaintenanceMode, Data Warehouse Synchronization Service, {3889FBD2-704F-9335-B568-5654B54766FC}...}</Parameters>
<TimeGenerated>01/01/2017 08:56:27 PM</TimeGenerated>
<TimeAdded>01/01/2017 08:56:31 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
</output>
</command-output>
</commands-output>
</scom-response>
Find Event by Computer Name operation
The Find Event by Computer Name operation retrieves events that are filtered by the specified search criterion.
The following table describes the adapter request elements for the Find Event by Computer Name operation.
Adapter request elements for the Find Event by Computer Name operation
Element | Definition | Required |
|---|---|---|
<operation-name> | Specifies the operation name: Get-SCOMEvent | Yes |
<timeout-secs> | Specifies the duration after which the operation times out | No |
<command-parameters> | Specifies the parent element for the command parameters | Yes |
<computer-name> | Specifies the name of the host for which the events are to be retrieved | Yes |
The following figure shows the <items> XML for the Find Event by Computer Name operation.
<items> XML for the Find Event by Computer Name operation
<items>
<item>
<timeout-secs>120</timeout-secs>
<command-parameters>
<computer-name>clm-pun-021145.vmw28rds1561dc.local</computer-name>
</command-parameters>
</item>
</items>
<item>
<timeout-secs>120</timeout-secs>
<command-parameters>
<computer-name>clm-pun-021145.vmw28rds1561dc.local</computer-name>
</command-parameters>
</item>
</items>
The following figure shows the sample adapter request for the Find Event operation.
Sample adapter request for the Find Event operation
<request-data>
<scom-request>
<operation-name>Get-SCOMEvent</operation-name>
<command-request>
<timeout-secs>220</timeout-secs>
<command-parameters>
<computer-name>VW-PUN-BNA-DV22.punbnadv21.local</computer-name>
</command-parameters>
</command-request>
</scom-request>
</request-data>
<scom-request>
<operation-name>Get-SCOMEvent</operation-name>
<command-request>
<timeout-secs>220</timeout-secs>
<command-parameters>
<computer-name>VW-PUN-BNA-DV22.punbnadv21.local</computer-name>
</command-parameters>
</command-request>
</scom-request>
</request-data>
The following figure shows the adapter response for the operation.
Adapter response for the Find Event operation
<scom-response>
<metadata>
<status>success</status>
<count>1</count>
</metadata>
<commands-output>
<command-output>
<metadata>
<command> Import-Module OperationsManager; Get-SCOMEvent -computername VW-PUN-BNA-DV22.punbnadv21.local | format-list</command>
<execution-milliseconds>220028</execution-milliseconds>
<exit-code>9999</exit-code>
<status>success</status>
<count>3</count>
</metadata>
<output>
<item>
<Id><![CDATA[2ae74a8a-7c93-4000-8bbe-0003d4b73f25]]></Id>
<OriginalId><![CDATA[1190820f-3b4a-440d-82c6-92d7f9938776]]></OriginalId>
<MonitoringObjectId><![CDATA[c0b49124-ec35-a4d3-7aa8-0151a18f45c3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[8526f18c-65e3-d3fa-08cd-d3a7194113f1]]></MonitoringClassId>
<ClassId><![CDATA[8526f18c-65e3-d3fa-08cd-d3a7194113f1]]></ClassId>
<MonitoringObjectName><![CDATA[OMSDK]]></MonitoringObjectName>
<MonitoringObjectDisplayName>Data Access Service - VW-PUN-BNA-DV22.punbnadv21.local</MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName>Data Access Service - VW-PUN-BNA-DV22.punbnadv21.local</MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[a149a089-dc38-6df7-4692-20966dccbe74]]></MonitoringRuleId>
<RuleId><![CDATA[a149a089-dc38-6df7-4692-20966dccbe74]]></RuleId>
<MonitoringRuleDisplayName>Operations Manager Data Access Service Event Collector Rule</MonitoringRuleDisplayName>
<RuleDisplayName>Operations Manager Data Access Service Event Collector Rule</RuleDisplayName>
<MonitoringRuleDescription>This rule collects Operations Manager Data Access Service events.</MonitoringRuleDescription>
<RuleDescription>This rule collects Operations Manager Data Access Service events.</RuleDescription>
<PublisherName><![CDATA[OpsMgr SDK Service]]></PublisherName>
<Number><![CDATA[26329]]></Number>
<Description>A client has disconnected. User name: NT AUTHORITY\SYSTEMSession ID: uuid:f197af37-02f2-4129-bf3f-2798a23811c9;id=1380</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2016-12-29T19:13:41.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>NT AUTHORITY\SYSTEM</Data><Data>uuid:f197af37-02f2-4129-bf3f-2798a23811c9;id=1380</Data></EventData></DataItem></EventData>
<Parameters>{NT AUTHORITY\SYSTEM, uuid:f197af37-02f2-4129-bf3f-2798a23811c9;id=1380}</Parameters>
<TimeGenerated>12/29/2016 08:43:41 AM</TimeGenerated>
<TimeAdded>12/29/2016 08:43:42 AM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
<item>
<Id><![CDATA[0409366c-84e6-4fde-badc-00057f575980]]></Id>
<OriginalId><![CDATA[da244abf-9205-47a6-9c07-29c276e85e6d]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></MonitoringRuleId>
<RuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Data Warehouse related event collection]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Data Warehouse related event collection]]></RuleDisplayName>
<MonitoringRuleDescription>This rule collections events related to Data Warehouse operation</MonitoringRuleDescription>
<RuleDescription>This rule collections events related to Data Warehouse operation</RuleDescription>
<PublisherName><![CDATA[Health Service Modules]]></PublisherName>
<Number><![CDATA[31569]]></Number>
<Description></Description>
<CategoryId><![CDATA[3]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[1]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2017-01-03T04:38:30.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>SCOM-GROUP</Data><Data>Microsoft.SystemCenter.DataWarehouse.Deployment.Report</Data><Data>Data Warehouse Synchronization Service</Data><Data>{3889FBD2-704F-9335-B568-5654B54766FC}</Data><Data>Data Warehouse</Data><Data>SqlTimeoutException</Data><Data>Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.Timed out stored procedure: DeployedManagementPackList</Data></EventData></DataItem></EventData>
<Parameters>{SCOM-GROUP, Microsoft.SystemCenter.DataWarehouse.Deployment.Report, Data Warehouse Synchronization Service, {3889FBD2-704F-9335-B568-5654B54766FC}...}</Parameters>
<TimeGenerated>01/02/2017 06:08:30 PM</TimeGenerated>
<TimeAdded>01/02/2017 06:08:37 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
<item>
<Id><![CDATA[d472d51c-dc1f-4fb2-b9a2-0011b4d631d9]]></Id>
<OriginalId><![CDATA[d47ae880-7796-4e2f-ba8b-49bf23631c2b]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></MonitoringRuleId>
<RuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></RuleDisplayName>
<MonitoringRuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</MonitoringRuleDescription>
<RuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</RuleDescription>
<PublisherName><![CDATA[Health Service Script]]></PublisherName>
<Number><![CDATA[6022]]></Number>
<Description>LogEndToEndEvent.ps1 : This event is logged to the Windows Event Log periodically to test a event collection.</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><![CDATA[<DataItem type="System.XmlData" ]]></EventData>
</item>
</output>
</command-output>
</commands-output>
</scom-response>
<metadata>
<status>success</status>
<count>1</count>
</metadata>
<commands-output>
<command-output>
<metadata>
<command> Import-Module OperationsManager; Get-SCOMEvent -computername VW-PUN-BNA-DV22.punbnadv21.local | format-list</command>
<execution-milliseconds>220028</execution-milliseconds>
<exit-code>9999</exit-code>
<status>success</status>
<count>3</count>
</metadata>
<output>
<item>
<Id><![CDATA[2ae74a8a-7c93-4000-8bbe-0003d4b73f25]]></Id>
<OriginalId><![CDATA[1190820f-3b4a-440d-82c6-92d7f9938776]]></OriginalId>
<MonitoringObjectId><![CDATA[c0b49124-ec35-a4d3-7aa8-0151a18f45c3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[8526f18c-65e3-d3fa-08cd-d3a7194113f1]]></MonitoringClassId>
<ClassId><![CDATA[8526f18c-65e3-d3fa-08cd-d3a7194113f1]]></ClassId>
<MonitoringObjectName><![CDATA[OMSDK]]></MonitoringObjectName>
<MonitoringObjectDisplayName>Data Access Service - VW-PUN-BNA-DV22.punbnadv21.local</MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName>Data Access Service - VW-PUN-BNA-DV22.punbnadv21.local</MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[a149a089-dc38-6df7-4692-20966dccbe74]]></MonitoringRuleId>
<RuleId><![CDATA[a149a089-dc38-6df7-4692-20966dccbe74]]></RuleId>
<MonitoringRuleDisplayName>Operations Manager Data Access Service Event Collector Rule</MonitoringRuleDisplayName>
<RuleDisplayName>Operations Manager Data Access Service Event Collector Rule</RuleDisplayName>
<MonitoringRuleDescription>This rule collects Operations Manager Data Access Service events.</MonitoringRuleDescription>
<RuleDescription>This rule collects Operations Manager Data Access Service events.</RuleDescription>
<PublisherName><![CDATA[OpsMgr SDK Service]]></PublisherName>
<Number><![CDATA[26329]]></Number>
<Description>A client has disconnected. User name: NT AUTHORITY\SYSTEMSession ID: uuid:f197af37-02f2-4129-bf3f-2798a23811c9;id=1380</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2016-12-29T19:13:41.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>NT AUTHORITY\SYSTEM</Data><Data>uuid:f197af37-02f2-4129-bf3f-2798a23811c9;id=1380</Data></EventData></DataItem></EventData>
<Parameters>{NT AUTHORITY\SYSTEM, uuid:f197af37-02f2-4129-bf3f-2798a23811c9;id=1380}</Parameters>
<TimeGenerated>12/29/2016 08:43:41 AM</TimeGenerated>
<TimeAdded>12/29/2016 08:43:42 AM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
<item>
<Id><![CDATA[0409366c-84e6-4fde-badc-00057f575980]]></Id>
<OriginalId><![CDATA[da244abf-9205-47a6-9c07-29c276e85e6d]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></MonitoringRuleId>
<RuleId><![CDATA[3d8bd8b6-7579-245f-0921-4c3863a5055b]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Data Warehouse related event collection]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Data Warehouse related event collection]]></RuleDisplayName>
<MonitoringRuleDescription>This rule collections events related to Data Warehouse operation</MonitoringRuleDescription>
<RuleDescription>This rule collections events related to Data Warehouse operation</RuleDescription>
<PublisherName><![CDATA[Health Service Modules]]></PublisherName>
<Number><![CDATA[31569]]></Number>
<Description></Description>
<CategoryId><![CDATA[3]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[1]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><DataItem type="System.XmlData" time="2017-01-03T04:38:30.0000000+05:30" sourceHealthServiceId="A0D974BA-E24B-10B1-B6AB-A05AF10234D3"><EventData xmlns="http://schemas.microsoft.com/win/2004/08/events/event"><Data>SCOM-GROUP</Data><Data>Microsoft.SystemCenter.DataWarehouse.Deployment.Report</Data><Data>Data Warehouse Synchronization Service</Data><Data>{3889FBD2-704F-9335-B568-5654B54766FC}</Data><Data>Data Warehouse</Data><Data>SqlTimeoutException</Data><Data>Timeout expired. The timeout period elapsed prior to completion of the operation or the server is not responding.Timed out stored procedure: DeployedManagementPackList</Data></EventData></DataItem></EventData>
<Parameters>{SCOM-GROUP, Microsoft.SystemCenter.DataWarehouse.Deployment.Report, Data Warehouse Synchronization Service, {3889FBD2-704F-9335-B568-5654B54766FC}...}</Parameters>
<TimeGenerated>01/02/2017 06:08:30 PM</TimeGenerated>
<TimeAdded>01/02/2017 06:08:37 PM</TimeAdded>
<ManagementGroup><![CDATA[SCOM-GROUP]]></ManagementGroup>
<ManagementGroupId><![CDATA[f0bfdf68-bb60-15e4-e21a-3678feeaa78e]]></ManagementGroupId>
</item>
<item>
<Id><![CDATA[d472d51c-dc1f-4fb2-b9a2-0011b4d631d9]]></Id>
<OriginalId><![CDATA[d47ae880-7796-4e2f-ba8b-49bf23631c2b]]></OriginalId>
<MonitoringObjectId><![CDATA[a0d974ba-e24b-10b1-b6ab-a05af10234d3]]></MonitoringObjectId>
<MonitoringClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></MonitoringClassId>
<ClassId><![CDATA[ab4c891f-3359-3fb6-0704-075fbfe36710]]></ClassId>
<MonitoringObjectName></MonitoringObjectName>
<MonitoringObjectDisplayName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectDisplayName>
<MonitoringObjectPath><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectPath>
<MonitoringObjectFullName><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></MonitoringObjectFullName>
<MonitoringRuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></MonitoringRuleId>
<RuleId><![CDATA[fe17ed88-9f59-8b80-b1a5-ee42b80b95c8]]></RuleId>
<MonitoringRuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></MonitoringRuleDisplayName>
<RuleDisplayName><![CDATA[Collect Distributed Workflow Test Event]]></RuleDisplayName>
<MonitoringRuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</MonitoringRuleDescription>
<RuleDescription>Collects events logged by the "Log Distributed Workflow Test Event" rule.</RuleDescription>
<PublisherName><![CDATA[Health Service Script]]></PublisherName>
<Number><![CDATA[6022]]></Number>
<Description>LogEndToEndEvent.ps1 : This event is logged to the Windows Event Log periodically to test a event collection.</Description>
<CategoryId><![CDATA[0]]></CategoryId>
<Category></Category>
<User><![CDATA[N/A]]></User>
<Channel><![CDATA[Operations Manager]]></Channel>
<LevelId><![CDATA[4]]></LevelId>
<Level></Level>
<LoggingComputer><![CDATA[VW-PUN-BNA-DV22.punbnadv21.local]]></LoggingComputer>
<EventData><![CDATA[<DataItem type="System.XmlData" ]]></EventData>
</item>
</output>
</command-output>
</commands-output>
</scom-response>
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*