Views Reference - Forefront Security for SharePoint
The following tables provide a reference to each of the Forefront Security for SharePoint views included in the Microsoft Forefront Server Security Management Pack for MOM 2005. For more information about views, see Views.
Alert Views for Forefront Security - General
Parent Folder |
Microsoft Forefront Server Security |
View Name |
Alerts – Microsoft Forefront Server Security |
Criteria |
Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND Computer Group = “Forefront Security *” |
Description |
Displays all alerts generated for agent systems that are members of the “Forefront Security *” computer group. |
Parent Folder |
Microsoft Forefront Server Security\Engines |
View Name |
Engine Update Failure |
Criteria |
Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField3 = “EngineUpdateFailure” AND Computer Group = “Forefront Security *” |
Description |
Displays alerts about engine update failures. |
Alert Views for Forefront for SharePoint
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint |
View Name |
Alerts – Forefront for SharePoint |
Criteria |
Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField2 = “Forefront Security for SharePoint” AND Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays all alerts generated for agent systems that are members of the “Forefront Security for SharePoint *” computer group. |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Scan Job Failure |
Criteria |
Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField2 = “Forefront Security for SharePoint” AND CustomField3 = “ScanJobFailure” AND Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays alerts about scan job failures. |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Services |
View Name |
Service Failure |
Criteria |
Resolution State != “Resolved” AND CustomField1 = “Microsoft Forefront Server Security” AND CustomField2 = “Forefront Security for SharePoint” AND CustomField3 = “ServicesFailure” AND Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays alerts about service failures. |
State Views
Parent Folder |
Microsoft Forefront Server Security |
View Name |
State – No Heartbeat |
Criteria |
Computer Group = “Forefront Security*” AND No heartbeat detected within the last 15 minutes |
Description |
Displays agent systems which have lost contact with the MOM Server. |
Parent Folder |
Microsoft Forefront Server Security |
View Name |
State – Open Alerts |
Criteria |
Computer Group = “Forefront Security *” AND Computer has Open Alerts |
Description |
Displays agent systems that have unresolved open alerts. |
Parent Folder |
Microsoft Forefront Server Security |
View Name |
State – Forefront for SharePoint |
Criteria |
Computer Group = “Forefront Security for SharePoint” |
Description |
Displays state of computers that are member of the “Forefront Security for SharePoint” computer group. |
Event Views for Forefront Security - General
Parent Folder |
Microsoft Forefront Server Security |
View Name |
Events – Microsoft Forefront |
Criteria |
Generated in the last 7 days AND Computer Group = “Forefront Security *” |
Description |
Displays all events generated by agent systems that are members of the “Forefront Security *” computer group. |
Parent Folder |
Microsoft Forefront Server Security\Engines |
View Name |
Engine Update Success |
Criteria |
Event ID = (2014 or 2016 or 6014 or 9525 or 9897 or 9898) AND Generated in the last 7 days AND Computer Group = “Forefront Security *” |
Description |
Displays all events that indicate a successfully-completed scan engine update on “Forefront Server Security” systems. |
Event Views for Forefront for SharePoint
Parent Folder |
Microsoft Forefront Server Security for SharePoint |
View Name |
Events – Forefront for SharePoint |
Criteria |
Generated in the last 7 days AND Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays all events generated from agent systems in the “Forefront Security for SharePoint” computer group. |
Parent Folder |
Microsoft Forefront Server Security for SharePoint\Scan Jobs |
View Name |
Scan Job Status |
Criteria |
Event ID = (2000 or 2001 or 2002 or 2005 or 2007 or 2008) AND Generated in the last 7 days AND Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays all events that indicate Scan Jobs going into an enabled or disabled state on “Forefront Security for SharePoint” systems. |
Parent Folder |
Microsoft Forefront Server Security for SharePoint\Services |
View Name |
Service Status |
Criteria |
Event ID = (332 or 333 or 1002 or 1003 or 1005 or 1006 or 1007 or 1008 or Generated in the last 7 days AND Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays events that indicate Forefront Security and related services started or stopped successfully on “Forefront Security for SharePoint” systems. |
Performance Views for Forefront Security - General
Parent Folder |
Microsoft Forefront Server Security |
View Name |
Performance – Microsoft Forefront Server Security |
Criteria |
Computer Group = “Forefront Security *” |
Description |
Displays a list of agent systems (and their measured counters) that belong to the “Forefront Security *” computer group. |
Performance Views for Forefront for SharePoint
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint |
View Name |
Performance – Forefront for SharePoint |
Criteria |
Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays a list of agent systems (and their measured counters) that belong to the “Forefront Security for SharePoint” computer group. |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Document Clean Rate |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Cleaned Rate” |
Description |
Document Clean Rate for Realtime scanner |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Documents Cleaned |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Cleaned” |
Description |
Number of documents cleaned by latest Realtime scan session |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Document Detect Rate |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Detected Rate” |
Description |
Document Detect Rate for Realtime scanner |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Documents Detected |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Detected” |
Description |
Number of documents detected by latest Realtime scan session |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Document Block Rate |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Removed Rate” |
Description |
Document Block Rate for Realtime scanner |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Documents Blocked |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Removed” |
Description |
Number of documents blocked by latest Realtime scan session |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Document Scan Rate |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Scanned Rate” |
Description |
Document Scan Rate for Realtime scanner |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Documents Scanned |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Documents Scanned” |
Description |
Number of documents scanned by latest Realtime scan session |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Total Documents Cleaned |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Cleaned” |
Description |
Total number of documents cleaned by Realtime scan |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Total Documents Detected |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Detected” |
Description |
Total number of documents detected by Realtime scan |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Total Documents Blocked |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Removed” |
Description |
Total number of documents blocked by Realtime scan |
Parent Folder |
Microsoft Forefront Server Security\Forefront for SharePoint\Scan Jobs |
View Name |
Realtime Total Documents Scanned |
Criteria |
Computer Group = “Forefront Security for SharePoint *” Object=”Microsoft Forefront Server Security Scan” Instance=”Sharepoint(Realtime Scan Job)” Counter=”Total Documents Scanned” |
Description |
Total number of documents scanned by Realtime scan |
Computers and Groups Views for Forefront Security - General
Parent Folder |
Microsoft Forefront Server Security |
View Name |
Microsoft Forefront |
Criteria |
Computer Group = “Forefront Security *” |
Description |
Displays a list of agent-managed Computers with Microsoft Forefront Security Products installed. |
Parent Folder |
Microsoft Forefront Server Security |
View Name |
Microsoft Forefront Groups |
Criteria |
Computer Group = “Forefront Security *” |
Description |
Computer Groups for Microsoft Forefront Server Security |
Computers and Groups Views for Forefront Security for SharePoint
Parent Folder |
Microsoft Forefront Security For SharePoint |
View Name |
Microsoft Forefront |
Criteria |
Computer Group = “Forefront Security for SharePoint *” |
Description |
Displays a list of agent-managed Computers with Microsoft Forefront Security for SharePoint installed. |