thanks for your answer,
I tried to find the new correlation architecture as you suggest me.
I've not found
maybe I can explain more my requirement: I 'm working in "supervision
world": I want to find something configurable (without writing complex
application: provider), for the supervision system able to correlate
for example with the SNMP provider through WMI, a trap and one or many
MIB variables. I have a lot of correlation to do and project dependant
(correlation architecture was a solution: because it seams to have a
short time of develpment without reuquireing big devolpment skill)
another question: do you have feedback for SNMP provider performance
(I made some test on 2000, 2003 (500 client, 30 "simple variable"
within 30 secondes))
can I fear a performance decrease or have a hope for higher
performance for windows Server 2008 , windows seven ?
Post by Philhow it is possible to do that without writing your own soft ?
refer:http://msdn.microsoft.com/en-us/library/aa390412(VS.85).aspx
is it possible to do correlation just witting mof file (with
correlation function embedded in it) ?
does someone has an example ?
a bottle in the sea.
thanks a lote for any kind of infomation
From Alain Lissoir (http://www.lissware.net/) book "Leveraging WMI
"Although available in Windows XP, it is very important to note that today
Microsoft does not encourage the use of these WMI correlation providers. This
is the reason why Microsoft doesn't plan to make this provider available
under Windows Server 2003 (although it was available during the beta program
of Windows Server 2003).
Actually, Microsoft does not recommend any time and development investment
in this feature due to the complexity of the current correlation
implementation and some upcoming architectural changes regarding the future
of the Windows management. Microsoft does not plan to enhance and support
these WMI providers in the future and plans to provide a new correlation
architecture, which will be .NET based with the next version of its operating
system. "
I haven't been able to locate this new correlation architecture. Do you have
any additional information on this subject? If not, it would be a good idea
to try to find some, because if things are still in the state they were in
2003 when the book was written, this seems like a dead end. Too bad, because
correlating events is certainly potentially useful.
--
urkec
My blog:http://theadminblog.blogspot.com/
My CodeProject articles:http://www.codeproject.com/script/Articles/MemberArticles.aspx?amid=4...