Understanding Criteria

You identify the information you want Microsoft Operations Manager 2000 to process by specifying its criteria. Once you specify the provider, you must define the criteria that identify the specific event, alert, or performance data. For example, specific criteria help distinguish one event from another. You can define some criteria using wildcards, regular expressions, or Boolean regular expressions.

Event Criteria

To identify specific events, you can specify the following criteria, as well as combinations of these and other criteria:

• Event source
• Event number
• Event type
• Description text
• User generating the event
• Source computer
• Source domain
• Computer on which the event is logged
• Domain in which the event is logged

Alert Criteria

An alert processing rule requires that you identify a number of alerts to which to assign a response. To identify specific alerts, you can specify the following criteria, as well as combinations of these and other criteria:

• Alert source
• Alert severity
• Alert owner
• Resolution state
• Computer

Performance Criteria

To identify performance data, you can specify the following criteria, as well as combinations of these:

• Counter
• Object
• Instance
• Domain
• Computer