Before you begin: Before creating a new rule you need to decide on a rule ID and a display name.
For more information, consult the Management Pack Content document, section Workflow/Element naming.
If the project is not open in Visual Studio, open it.
Find the folder for the class that you want use as target for your rule.
Right-click the folder and choose
In the list, select
Empty Management Pack Fragment.
Enter a name for the fragment. This should be the same as as the description part of the rule name plus the word
AlertRule. So if the rule description is
SyncFailureEvents the new fragment should be named
SyncFailureEventsAlertRule. Click Add. The fragment is created and opened.
Right-click between the
<ManagementPackFragment> tags and select
MPDevToolkit\Rules\Alert Rules\. Select
Alert, Windows Eventlog, Repeating Event.
The code is inserted.
Enter the MPID and press tab. Enter the description part of the rule name. Press
Enter the target class. To use intellisense, press
Backspace and then
Enter the path to the network name property. This depends on if and how the class is hosted. Press
Enter the name of the event log which contains the unhealthy event.
Enter the name of the unhealthy events source. This is shown as "source" in the event viewer but can also be called "publisher name" or "provider name".
Enter the event id for the unhealthy event.
Enter the timeframe (in seconds) for the event count. If the event comes more times than the specified count during this time frame the alert will be created.
The number of events threshold. When this is reached the rule creates an alert. Press
Enter the rule display name and description.
Enter a short summary of what the rule checks and press
tab. Write a resolution for alerts generated by the rule.
enter to stop editing. The rule is now done.
Save the file/project.