User Tools
Sidebar
monitoring_and_preventive_maintenance:triggers_glossary
Table of Contents
Triggers Glossary
The list below describes all available triggers that can be monitored on the Client Device.
sys.reg.value
Definition
Monitor the value of a specified registry key.
Operator
= ; > ; < ; Contains
Value
String value
Parameters
Specify the path of the registry key
Example
To be notified when 'HKEY_LOCAL_MACHINE\Software\my_key\one_value' takes the value 'XYZ':
Operator : = Value : XYZ Parameters : HKEY_LOCAL_MACHINE\Software\my_key\one_value
sys.regexist
Definition
Monitor whether a specified registry key exists or not.
Operator
=, Contains
Value
True=exist, false=does not exist
Parameters
Specify the path of the registry key
Example
To be notified when the registry key 'my_key' exists:
Operator : = Value : true Parameters : HKEY_LOCAL_MACHINE\Software\XcaliburW \my_key
sys.gen.result
Definition
Monitor the output of a shell command (windows command or custom script).
Operator
= ; Contains
Value
String value
Parameters
Specify the command to use
Script File
If your command is using a script or executable that is not present in the host system, you can select the script or executable here so that it is distributed to the devices along with the rule.
Example 1
To be notified when a ping command doesn't lose any packets:
Operator : Contains Value : 0% Loss Parameters : ping www.google.fr
Example 2
To be notified when available RAM is below a specified value (in MB):
Operator : <
Value : 150
Parameters : for /f "tokens=4 delims=: " %i in ('systeminfo ^| find "Available Physical Memory"') do @echo %i
Example with script
To be notified when the CPU temp exceeds 50°:
Operator : > Value : 50 Parameters : -cpu0 Script File : getTemperatureCPU.exe
sys.serv.started
Definition
Monitor the current state of a specified service (Started/Stopped).
Operator
= ; Contains
Value
True=started, False=stopped
Parameters
Specify the name of the service
Example
To be notified when the Windows Audio service is started:
Operator : = Value : True Parameters : Windows Audio
sys.proc.exited
Definition
This trigger allows to monitor if a process/application is stopped.
Operator
=
Value
True
Parameters
Specify the process name (without the .EXE extension)
Example
To be notified when the process mspaint is missing.
Operator : = Value : True Parameters : mspaint
sys.partition.freespace
Definition
Monitor the free space of a specified disk partition.
Operator
All applicable
Value
Numerical value followed by the unit %, Kb, Mb or Gb
Parameters
Specify the partition letter
Example
To be notified when the free space on C: partition is less than 10% of the total partition size:
Operator : < Value : 10% Parameters : C
sys.diskdrive.health
Definition
Monitor the health of Smart-enabled hard disk drive.
Operator
= ; Contains
Value
OK ; Error ; Degraded ; PredFail
Parameters
Not Applicable
Example
To be notified when the health of hard disk drive is degraded:
Operator : Contains Value : Degraded Parameters :
sys.temperature
Definition
Monitor the motherboard system temperature.
Operator
All applicable
Value
Numerical value followed by the unit °C (default) or °F
Parameters
Not Applicable
Example
To be notified when the motherboard temperature is greater than 50°C:
Operator : > Value : 50°C Parameters :
file.create
Definition
Monitor the creation of a specified file or directory.
Operator
= ; Contains
Value
The location of specified file or directory
Parameters
Specify the path of the file or directory
Example
To be notified when the file 'XcaliburW .txt' is created on C:\:
Operator : Contains Value : C:\XcaliburW .txt Parameters : C:\
file.size
Definition
Monitor the size of a specified file.
Operator
All Applicable
Value
Numerical value followed by the unit Kb, Mb or Gb
Parameters
Specify the path of the file
Example
To be notified when the file size of my_file.txt is greater than 1GB:
Operator : > Value : 1 Gb Parameters : c:\UsersAdmin\Desktop\my_file.txt
file.exist
Definition
Monitor whether a specified file or directory exists or not.
Operator
= ; Contains
Value
True=exists, false=does not exist
Parameters
Specify the path of the file or directory
Example
To be notified if the file c:\Windows\explorer.exe does not exist:
Operator : = Value : false Parameters : c:\Windows\explorer.exe
writefilter.cachesize.current
Definition
Monitor the cache size of the FBWF Write Filter.
Operator
All applicable
Value
Numerical valued follow by the unit %, Kb, Mb or Gb
Parameters
Not applicable
Example
To be notified when the cache size exceeds 90MB:
Operator : > Value : 90 Mb Parameters :
monitoring_and_preventive_maintenance/triggers_glossary.txt · Last modified: 2021/11/21 17:18 (external edit)
Page Tools
