The SMS_EPAlert Windows Management Instrumentation (WMI) class is an SMS Provider server class, in Configuration Manager, that represents System Center Endpoint Protection alerts.

The following syntax is simplified from Managed Object Format (MOF) code and includes all inherited properties.

Class SMS_EPAlert : SMS_AlertBase
{
	UInt32 AlertState;
	String ClosedBy;
	String Comments;
	DateTime DateAlertStateModified;
	DateTime DateCreated;
	DateTime DateFirstActivated;
	DateTime DateLastModified;
	Boolean Deletable;
	Boolean Enabled;
	UInt32 FeatureArea;
	UInt32 FeatureGroup;
	UInt32 ID;
	String InstanceNameParam1;
	String InstanceNameParam2;
	String InstanceNameParam3;
	Boolean IsIgnored;
	String LastModifiedBy;
	Boolean MonitoredByScom;
	String Name;
	UInt32 NumberOfSubscription; 
	UInt32 ObjectTypeID;
	UInt32 OccurrenceCount;
	String ParameterValues;
	String RootCauseMessage;
	SInt32 RuleState;
	UInt32 Severity;
	DateTime SkipUntil;
	String SourceSiteCode;
	UInt32 TypeID;
	String TypeInstanceID;
};

Methods

The following table lists the methods in the SMS_EPAlert class.

Method Description

Close Method in Class SMS_EPAlert

Closes the alert.

Properties

AlertState

Data type: UInt32Access type: Read-only Qualifiers: [read, valuemap, values]Current state of this alert.

0

Active

1

Postponed

2

Canceled

3

Unknown

4

Disabled

5

Never Triggered
ClosedBy

Data type: StringAccess type: Read-only Qualifiers: [read]Person who last closed alert, or 'SYSTEM' if canceled.
Comments

Data type: StringAccess type: Read/Write Qualifiers: noneAdministrator-supplied comments for this alert.
DateAlertStateModified

Data type: DateTimeAccess type: Read-only Qualifiers: [read]Date the alert state was last changed.
DateCreated

Data type: DateTimeAccess type: Read-only Qualifiers: [read]Date the instance was created.
DateFirstActivated

Data type: DateTimeAccess type: Read-only Qualifiers: [read]Date the alert was first activated.
DateLastModified

Data type: DateTimeAccess type: Read-only Qualifiers: [read]Date the alert was last changed.
Deletable

Data type: BooleanAccess type: Read/Write Qualifiers: nonetrue if this alert can be deleted.
Enabled

Data type: BooleanAccess type: Read/Write Qualifiers: nonetrue if this alert is enabled. When the alert is not enabled, the condition is not evaluated.
FeatureArea

Data type: UInt32Access type: Read-only Qualifiers: [read]The related feature area.
FeatureGroup

Data type: UInt32Access type: Read-only Qualifiers: [read, valuemap, values]A feature group is a set of one or more feature areas.

1

Administration

2

Resources

3

Deployment

4

Monitoring

5

Reporting
ID

Data type: UInt32Access type: Read-only Qualifiers: [key, key, read]Unique identifier for this instance.
InstanceNameParam1

Data type: StringAccess type: Read-only Qualifiers: [read]The 1st parameter of the linked instance name.
InstanceNameParam2

Data type: StringAccess type: Read-only Qualifiers: [read]The 2nd parameter of the linked instance name.
InstanceNameParam3

Data type: StringAccess type: Read-only Qualifiers: [read]The 3rd parameter of the linked instance name.
IsIgnored

Data type: BooleanAccess type: Read-only Qualifiers: [read]Whether this alert is ignored by the current user. This information applies only to System Center Configuration Manager SP1.
LastModifiedBy

Data type: StringAccess type: Read-only Qualifiers: [read]Person who last modified the alert.
MonitoredByScom

Data type: BooleanAccess type: Read/Write Qualifiers: noneWhether this alert is monitored by Operations Manager.
Name

Data type: StringAccess type: Read/Write Qualifiers: noneThe name of the alert.
NumberOfSubscription

Data type: UInt32Access type: Read-only Qualifiers: [read]The number of subscriptions to this alert.
ObjectTypeID

Data type: UInt32Access type: Read-only Qualifiers: [read]The secured object type id.
OccurrenceCount

Data type: UInt32Access type: Read-only Qualifiers: [read]The number of times this alert has been activated.
ParameterValues

Data type: StringAccess type: Read/Write Qualifiers: noneThe values of administrator-defined parameters, such as thresholds. These values are stored in XML format.
RootCauseMessage

Data type: StringAccess type: Read-only Qualifiers: [read]The root cause of the alert.
RuleState

Data type: SInt32Access type: Read-only Qualifiers: [read, valuemap, values]State of the underlying condition.

0

Bad

1

Good

2

Unknown
Severity

Data type: UInt32Access type: Read/Write Qualifiers: [valuemap, values]The impact of this alert.

1

Error

2

Warning

3

Informational
SkipUntil

Data type: DateTimeAccess type: Read/Write Qualifiers: noneThe evaluation will not start until the specified time.
SourceSiteCode

Data type: StringAccess type: Read/Write Qualifiers: noneThe site code of the source site. For some non-SLA alerts, NULL means it's a global SLA alert.
TypeID

Data type: UInt32Access type: Read/Write Qualifiers: [not_null]Identifier for this type of alert.
TypeInstanceID

Data type: StringAccess type: Read-only Qualifiers: [read]User-defined identifier. The combination of TypeID and TypeInstanceID must be unique.

Remarks

Requirements

Runtime Requirements

For more information, see Configuration Manager Server Runtime Requirements.

Development Requirements

For more information, see Configuration Manager Server Development Requirements.

See Also