Class CIM_SecurityIndication extends CIM_AlertIndication SecurityIndication provides a common superclass for the CIM Security Events schema. SecurityIndications are messages produced by Detectors that watch for and report on events that have security implications. Detectors may include, but are not limited to intrusion detection systems Class CIM_SecurityIndication extends CIM_AlertIndication SecurityIndication provides a common superclass for the CIM Security Events schema. SecurityIndications are messages produced by Detectors that watch for and report on events that have security implications. Detectors may include, but are not limited to intrusion detection systems Instances of this class or its subclasses have different meaning depending upon the value of MessageType. For example, overrides of this property in subclasses can define new MethodTypes, such as "Virus Found" or "Vulnerability Detected". CIM_SecurityIndication.IndicationStartCountTime The start time and date of a range of events extends CIM_SecurityIndication IPNetworkSecurityIndication is a class that represents events that have a network context, i.e. a source or destination address is a necessary property of the indication. More specific Indication subclasses that can derive from this class are for example, firewall or intrusion detection subclasses. The CIM indication class hierarchy models the types of events that can be detected. An instance of CIM_Indication represents the occurrence of an event in general. Indication instances cannot be addressed, but they have a source namespace. Although indications are modeled using CIM classes, indications are unique in that they cannot be It defines the CIM indication class hierarchy that is used to model various types of events, and the CIM subscription mechanism. For more information, see the following: CIM Event Model White Paper , provided by the Distributed Management Task Force (DMTF), describes the CIM Event Model. CIM_Indication is the abstract

root class for all notifications about changes in schema, objects and their data, and about events detected by providers and instrumentation. Subclasses represent specific types of notifications. To receive an Indication, a consumer (or subscriber) must create an instance of CIM_IndicationFilter describing the To ensure that SequenceContext is unique, it should use the following format:. indication-service-name#cim-service-start-id #listener-destination-creation-time; indication-service-name is the value of the Name property of the CIM_IndicationService instance that delivers the indication.; cim-service-start-id is an identifier that uniquely identifies the start operation of a service. In this article. A concrete superclass for CIM alert notifications. CIM_AlertIndication is a specialized type of CIM_Indication class that contains information about the severity, cause, recommended actions, and other data for a real world event. This event and its data may or may not be modeled in the CIM class hierarchy. Common classes are an extension of the core classes. The CIM_UnitaryComputerSystem class is an example of a common class. Extended. Extended classes represent managed objects that are technology-specific additions to the common classes. An extended class typically applies to a specific platform, such as UNIX or the Microsoft Win32 environment.