IBM Tivoli Monitoring Version Windows OS Agent User Interface Reference

Transcription

1 IBM Tioli Monitoring Version Windows OS Agent User Interface Reference April 2013

2

3 IBM Tioli Monitoring Version Windows OS Agent User Interface Reference April 2013

4 Note Before using this information and the product it supports, read the information in Notices on page 235. This edition applies to ersion 6, release 3 of IBM Tioli Monitoring (product number 5724-C04) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 1994, US Goernment Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

5 Contents Tables Chapter 1. Attributes Actie Serer Pages attributes Agent Aailability Management Status attributes.. 8 Agent Actie Runtime Status attributes Alerts Table attributes BIOS Information attributes Cache attributes Computer Information attributes Configuration Information attributes Deice Dependencies attributes Deices attributes DHCP Serer attributes DNS Dynamic Update attributes DNS Memory attributes DNS Query attributes DNS WINS attributes DNS Zone Transfer attributes Eent Log attributes File Change attributes File Trend attributes FTP Serer Statistics attributes FTP Serice attributes Gopher Serice attributes HTTP Content Index attributes HTTP Serice attributes ICMP Statistics attributes IIS Statistics attributes Indexing Serice attributes Indexing Serice Filter attributes IP Address attributes IP Statistics attributes Job Object attributes Job Object Details Attributes Job Object Details Attributes (32-bit - Superseded) 68 Logical Disk attributes Memory attributes Memory attributes (32-bit - Superseded) Monitored Logs Report attributes Mount Point attributes MSMQ Information Store attributes MSMQ Queue attributes MSMQ Serice attributes MSMQ Sessions attributes Network Interface attributes Network Interface attributes (32-bit - Superseded) 96 Network Port attributes Network Segment attributes NNTP Commands attributes NNTP Serer attributes Objects attributes Paging File attributes Physical Disk attributes Print Job attributes Print Queue attributes Printer attributes Process attributes Process attributes (32-bit - Superseded) Process IO attributes Processor attributes Processor Information attributes Processor Summary attributes RAS Port attributes RAS Total attributes Redirector attributes Registry attributes Serer attributes Serer Work Queue attributes Serer Work Queue attributes (32-bit - Superseded) 153 Serice Dependencies attributes Serices attributes SMTP Serer attributes System attributes TCP Statistics attributes Thread attributes UDP Statistics attributes VMWare Memory attributes VMWare Processor attributes Web Serice attributes Disk capacity planning for historical data Chapter 2. Situations Predefined situations: actiated at startup Predefined situations: not actiated at startup Predefined situations: bottleneck analysis Chapter 3. Take Action commands 197 AMS Recycle Agent Instance AMS Reset Agent Daily Restart Count AMS Start Agent action AMS Start Agent Instance action AMS Stop Agent action AMS Start Management action AMS Stop Management action Start Serices action Stop Serices action Chapter 4. Workspaces Predefined workspaces Attribute groups used by predefined workspaces 207 Actie Serer Pages workspace Agent Management Serices workspace Agents' Management Log workspace Cache workspace Deices workspace Deice Dependencies workspace DHCP Serer workspace Disk workspace DNS Dynamic Update workspace Copyright IBM Corp. 1994, 2013 iii

6 DNS Memory workspace DNS Query workspace DNS WINS workspace DNS Zone Transfer workspace Enterprise Serices workspace Eent Log workspace File Change workspace File Trend workspace FTP Serer Statistics workspace FTP Serice workspace Gopher Serice workspace Historical Summarized Aailability workspace Historical Summarized Aailability Daily workspace Historical Summarized Aailability Hourly workspace Historical Summarized Aailability Weekly workspace Historical Summarized Capacity workspace Historical Summarized Capacity Daily workspace 216 Historical Summarized Capacity Hourly workspace 216 Historical Summarized Capacity Weekly workspace 216 Historical Summarized Performance workspace 217 Historical Summarized Performance Daily workspace Historical Summarized Performance Hourly workspace Historical Summarized Performance Weekly workspace HTTP Content Index workspace HTTP Serice workspace ICMP Statistics workspace IIS Statistics workspace Indexing Serice workspace Indexing Serice Filter workspace IP Statistics workspace Job Object workspace Job Object Details workspace Logical Disk workspace Logical Disk I/O workspace Memory workspace Memory Allocation workspace Monitored Logs workspace Mount Point workspace MSMQ Information Store workspace MSMQ Queue workspace MSMQ Serice workspace MSMQ Sessions workspace Network workspace Network Interface workspace Network Ports workspace Network Segment workspace NNTP Commands workspace NNTP Serer workspace Objects workspace Paging workspace Paging File workspace Physical Disk workspace Print Job workspace Print Queue workspace Printer workspace Printer Oeriew workspace Process workspace Process I/O workspace Process Oeriew workspace Process Storage workspace Processor workspace Processor Oeriew workspace Processor Summary workspace RAS Port workspace RAS Total workspace Redirector workspace Serer Oeriew workspace Serer Work Queues workspace Serices workspace Serice Dependencies workspace SMTP Serer workspace System I/O workspace System workspace System Information workspace System Oeriew workspace System Pools workspace System Timings workspace TCP Statistics workspace Threads workspace UDP Statistics workspace Web Serice workspace Windows OS workspace Windows OS Details workspace Windows Systems workspace Notices Index i IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

7 Tables 1. Capacity planning for historical data logged by component Attribute groups used by predefined workspaces Copyright IBM Corp. 1994, 2013

8 i IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

9 Chapter 1. Attributes Attributes are the application properties being measured and reported by the monitoring agent, such as the amount of memory usage or the message ID. Attributes are organized in to groups according to their purpose. The attributes in a group can be used in the following two ways: Chart or table iews Attributes are displayed in chart and table iews. The chart and table iews use queries to specify which attribute alues to request from a monitoring agent. You use the Query editor to create a new query, modify an existing query, or apply filters and set styles to define the content and appearance of a iew based on an existing query. Situations You use attributes to create situations that monitor the state of your operating system, database, or application. A situation describes a condition you want to test. When you start a situation, the Tioli Enterprise Portal compares the alues you hae assigned to the situation attributes with the alues collected by Monitoring Agent for Windows OS and registers an eent if the condition is met. You are alerted to eents by indicator icons that are displayed in the Naigator. Some of the attributes in this chapter are listed twice, with the second attribute haing a "(Unicode)" designation after the attribute name. These Unicode attributes were created to proide access to globalized data. For more information about using attributes and attribute groups, see the IBM Tioli Monitoring User's Guide. Attribute groups and attributes An attribute is a characteristic of a managed object (node). For example, Disk Name is an attribute for a disk, which is a managed object. Use attributes to build situations that monitor the performance of your network managed systems. When the alues of the selected attributes in a situation exceed their threshold settings, the agent posts an alert to the Tioli Enterprise Portal console notifying you of a problem. Attributes groups contain System Name and Timestamp attributes. The following entries describe these attributes. System Name The managed system name. The form should be hostname:agent_code. Examples include spark:kux or deux.raleigh.ibm.com:kux. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Timestamp The date and time the agent collects information as set on the monitored Copyright IBM Corp. 1994,

10 Attribute groups system. The timestamp for SCAN and STR functions is in the CYYMMDDHHMMSSmmm format (as in for 03/15/02 06:45:01) where: C = Century (0=20th) YY = Year MM = Month of the Year (01-12) DD = Day of the Month (01-31) HH = Hour, in 24-hour time (00-23) MM = Minute SS = Second mmm = Millisecond Note: Some of the attributes in this chapter are listed twice, with the second attribute haing a "(Unicode)" designation after the attribute name. These Unicode attributes were created to proide access to globalized data. Each attribute belongs to an attribute group. The attribute group includes attributes that are related. Each attribute item stores data for a particular property of an attribute group. The following are the attribute groups for the monitoring agent. The groups are collected in attribute tables that are designated in brackets [ ] after the group name. Actie Serer Pages [ACTSRVPG] Agent Aailability Management Status [KNTPASMGMT] Agent Actie Runtime Status [KNTPASSTAT] Alerts Table [KNTPASALRT] BIOS Information [NTBIOSINFO] Cache [NTCACHE] Computer Information [NTCOMPINFO] Configuration Information [KNTPASCAP] Deice Dependencies [NTDEVDEP] Deices [NTDEVICE] DHCP Serer [DHCPSRV] DNS Dynamic Update [DNSDYNUPD] DNS Memory [DNSMEMORY] DNS Query [DNSQUERY] DNS WINS [DNSWINS] DNS Zone Transfer [DNSZONET] Eent Log [NTEVTLOG] File Change [NTFLCHG] File Trend [NTFLTREND] FTP Serer Statistics [FTPSTATS] FTP Serice [FTPSVC] Gopher Serice [GOPHRSVC] HTTP Content Index [HTTPCNDX] HTTP Serice [HTTPSRVC] ICMP Statistics [ICMPSTAT] IIS Statistics [IISSTATS] Indexing Serice [INDEXSVC] Indexing Serice Filter [INDEXSVCF] IP Address [NTIPADDR] IP Statistics [IPSTATS] Job Object [JOBOBJ] Job Object Details [NTJOBOBJD] 2 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

11 Job Object Details (superseded) [JOBOBJD] Logical Disk [WTLOGCLDSK] Mount Point [NTMNTPT] Memory [NTMEMORY] Memory (superseded) [WTMEMORY] Monitored Logs Report [NTLOGINFO] MSMQ Information Store [MSMQIS] MSMQ Queue [MSMQQUE] MSMQ Serice [MSMQSVC] MSMQ Sessions [MSMQSESS] Network Interface [NTNETWRKIN] Network Interface (superseded) [NETWRKIN] Network Port [NTNETWPORT] Network Segment [NETSEGMT] NNTP Commands [NNTPCMD] NNTP Serer [NNTPSRV] Objects [WTOBJECTS] Paging File [NTPAGEFILE] Physical Disk [WTPHYSDSK] Print Job [NTPRTJOB] Print Queue [PRINTQ] Printer [NTPRINTER] Process [NTPROCESS] Process (superseded) [WTPROCESS] Process IO [PROCESSIO] Processor [NTPROCSSR] Processor Information [NTPROCINFO] Processor Summary [NTPROCRSUM] RAS Port [KNTRASPT] RAS Total [KNTRASTOT] Redirector [NTREDIRECT] Registry [WTREGISTRY] Serer [WTSERVER] Serer Work Queue [NTSERVERQ] Serer Work Queue (superseded) [WTSERVERQ] Serice Dependencies [NTSVCDEP] Serices [NTSERVICE] SMTP Serer [SMTPSRV] System [WTSYSTEM] TCP Statistics [TCPSTATS] Thread [WTTHREAD] UDP Statistics [UDPSTATS] VMWare Memory [VMMEMORY] VMWare Processor [VMPROCSSR] Web Serice [WEBSVC] IBM Tioli Monitoring proides other attribute groups that are aailable to all monitoring agents, for example Uniersal Time and Local Time. The attributes in these common attribute groups are documented in the Tioli Enterprise Portal Help. Chapter 1. Attributes 3

12 Actie Serer Pages attributes Use the Actie Serer Pages attributes to create situations to monitor Actie Serer Page requests, session information, and memory allocation. Actie Serer Pages is a single-instance attribute group. If the serice being monitored is not installed or if the serice is minimally loaded most attributes report 0 alues. Allocated Memory The total amount of memory currently allocated by Actie Serer Pages. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Allocated Memory In Free List The number of bytes of allocated memory in the free memory list. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Allocated Memory In Used List The number of bytes of allocated memory in the used memory list. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Browser Requests Executing The number of browser requests currently executing. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Communication Failed The number of requests that failed due to communication failure. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Debugging Requests Number of debugging document requests. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Errors During Script Runtime Number of requests failed due to runtime errors. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Errors From ASP Preprocessor Number of requests failed due to preprocessor errors. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates 4 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

13 Errors From Script Compilers Number of requests failed due to script compilation errors. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Free Script Engines in Cache The number of free script engines in cache. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Request Errors/sec The number of errors per second, including connection errors, compile errors, and runtime errors. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Request Execution Time The number of milliseconds that it took to execute the most recent request. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Request Total Bytes In The total size, in bytes, of all the requests that hae been enqueued. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Request Total Bytes Out The total size, in bytes, of responses sent to clients. This does not include standard HTTP headers. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Request Wait Time The number of milliseconds since the most recent request. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Requests Current The number of requests expecting serice from the queue. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Requests Executed The total number of requests that hae been dequeued and successfully executed. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Requests Failed The total number of requests that had a compile time or runtime error. Valid alues are positie integers in the range 0 to and can Chapter 1. Attributes 5

14 include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Requests Not Authorized Number of requests failed due to insufficient access rights. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Requests Not Found The number of requests for files that were not found. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Requests Rejected The total number of requests not executed because the queue was full or there were insufficient resources to enqueue the requests. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Requests/sec The number of requests executed per second. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Requests Timed Out The number of requests that timed out. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Requests Total The total number of requests that hae been enqueued since the serice was started. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Session Duration The number of milliseconds that the most recent session persisted. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Session Timed Out Requests Executing The number of sessions timed out with requests currently executing. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Sessions Current The current number of sessions being sericed. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, 6 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

15 *MIN, *MAX, or *SUM functions. Note: the alue indicates Sessions Timed Out The number of sessions timed out. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Sessions Timed Out Requests In Queue The number of sessions timed out with requests queued to execute. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Sessions Total The total number of sessions since the serice was started. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates System Name The managed system name. The form should be hostname:agent_code. Examples include spark:knt or deux.raleigh.ibm.com:knt. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Template Cache Hit Rate Percent of requests found in template cache. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown. Template Notifications The number of templates inalidated in the cache due to change notification. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Templates Cached The number of templates currently cached. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Thread Pool Current The current number of threads in the Actie Serer Pages thread pool. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Chapter 1. Attributes 7

16 Total Queue Length The total number of requests that are currently enqueued. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Transactions Aborted The number of transactions aborted. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Transactions Committed The number of transactions committed. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Transactions Pending Number of transactions in progress. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Transactions Total The total number of transactions since the serice was started. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Transactions/sec Transactions started per second. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, indicates Value_Exceeds_Maximum and indicates Agent Aailability Management Status attributes Use Agent Aailability Management Status attributes to iew the current management status of an agent relatie to Agent Management Serices. Agent Management Status The watched agent management status. The following alues are alid: Unmanaged (0), Managed (1), Watchdog (2). A alue of 'Managed' means that the agent is under the management of Agent Management Serices. A alue of 'Unmanaged' means it is known, but that the agent is not under the management of Agent Management Serices. Agent Name The watched agent name. Agent Type The watched agent type. The following alues are alid: Unknown (0), ITM_Unix (1), Console (2), Windows_Serice (3), Discoer_ITM (4), Discoer_Bin (5), Linux_Serice (6), ITM_Windows (7). Agent Version The ersion, release, and modification information for the agent. Build Date The build date information for the agent. Superseded by the Build Number attribute. 8 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

17 Build Number The build number information for the agent. Manager Type The enum defining the manager type. The following are alues are alid: Unknown (0), Not_Managed (1), Agent_Management Serices (2), Watchdog (3), External (4). A alue of 'Agent Management Serices' means that Agent Management Serices is responsible. A alue of 'NotManaged' means that the agent is not under aailability monitoring by any application. A alue of 'Externally' means that some other application besides Agent Management Serices is responsible for aailability monitoring of the agent, for example Tioli System Automation or Windows serice control manager. Operating System The operating system identification. The following are alues are alid: Unknown (0), Windows (1), Linux (2). Serer Name The origin node of the collecting agent. Serice Name The serice name. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Agent Actie Runtime Status attributes Use the Agents Actie Runtime Status attributes to iew the current aailability status of an agent: Running, Not present, Unknown, Stopped, Manually Stopped. You can iew the frequency at which the agent's aailability and runtime properties are queried and also the agent's Daily Restart Count. % Priileged Time The system CPU. % Processor Time The CPU used by the process. % User Time The user CPU time. Agent Aailability Status The watched agent aailability status. The following are alues are alid: Unknown (0), Not_found (1), Stopped (2), Start_Pending (3), Running (4), Manually_Stopped (5), Stop_Pending (6), Not_Configured (7). For agents that hae an Aailability Status of 'Running', use the attribute group to see runtime properties of the agent such as its Process ID and Thread Count. Agent Host Name The host name of the agent. Agent Name The watched agent name. Agent Type The watched agent type. The following are alues are alid: Unknown (0), ITM_Unix (1), Console (2), Win_Serice (3), Discoer_ITM (4), Discoer_Bin (5), Linux_Serice (6), ITM_Windows (7). Check Frequency The frequency to check status in seconds. Command Line The command line. Daily Restart Count The restarts within a period of a day. Handle Count The handle count. Chapter 1. Attributes 9

18 Alerts Table attributes Instance Name The instance name of the running IBM Tioli Monitoring agent. IP Address The IP address of the agent. Last Health Check The last health check timestamp. Operating System The operating system identification. The following alues are alid: Unknown (0), Windows (1), Linux (2). Page Faults sec The page faults per second. Process ID The process ID. Process Name The process name. Serer Name The origin node of the collecting agent. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Thread Count The thread count. Total Working Set kbytes The working set size in kilobytes. User Name The user name of the running managed agent. Virtual kbytes The total size. Use the Alerts Table attributes to iew exceptional Warning and Critical leel eents surfaced by Agent Management Serices. These eents hae to do with the operation of Agent Management Serices or conditions affecting its ability to manage agents. The following alerts are included: Agent stopped abnormally. Agent restart failed. Agent exceeded restart tries. Agent not found. Agent exceeded policy defined memory threshold. Agent exceeded policy defined CPU threshold. Agent manual stop failed. Agent remoed from system - CAP file remoed. Agent Name The watched agent name. Agent Status The agent status. The following alues are alid: Unknown (0), Not_found (1), Stopped (2), Start_Pending (3), Running (4), Manually_Stopped (5), Stop_Pending (6), Not_Configured (7). Agent Type The watched agent type. The following alues are alid: Unknown (0), ITM_Unix (1), Console (2), Windows_Serice (3), Discoer_ITM (4), Discoer_Bin (5), Linux_Serice (6), ITM_Windows (7). Alert Details The alert message details. 10 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

19 Alert Message The alert message. The following alues are alid: Aailability_policy_remoed (1), Managed_agent_remoed_from_system (2), Unmanaged_agent_remoed_from_system (3), Agent_abnormally_stopped (4), Agent_exceeded_restart_count (5), Agent_restart_failed (6), Agent_oerutilizing_memory (7), Agent_oerutilizing_CPU (8), Agent_manual_stop_failed (9), Agent_Management_Serices_watchdog_not_reliable (11). Operating System The operating system identification. The following alues are alid: Unknown (0), Windows (1), Linux (2). Process ID The process ID. Process Name The process name. BIOS Information attributes Serer Name The origin node of the collecting agent. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Use BIOS Information attributes to monitor general information about the System BIOS. The data source for these attributes is WMI. To aoid throughput issues with the Microsoft WMI stack, you should limit the collection frequency to 5 minute interals. This ensures that the Microsoft WMI Data queues hae sufficient time to serice the WMI queries made for collecting these attributes. BIOS Description BIOS description of the manufacturer. The manufacturer of the BIOS sets this attribute alue. BIOS Manufacturer Manufacturer of the BIOS. The manufacturer of the BIOS sets this attribute alue. BIOS Release Date Release date of the Windows BIOS in the Coordinated Uniersal Time (UTC) format of YYYYMMDDHHMMSS.(+-)OOO. BIOS Serial Number Serial Number of the BIOS. This attribute alue can be equal to the Computer ID Number. Typically this occurs when the computer BIOS manufacturer and system manufacturer are the same. This attribute alue is set by the BIOS manufacturer. BIOS Version Version of the BIOS. This string is created by the BIOS manufacturer. The manufacturer of the BIOS sets this attribute alue. System Name The managed system name. The form should be hostname:agent_code. Examples include spark:knt or deux.raleigh.ibm.com:knt. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Chapter 1. Attributes 11

20 Cache attributes Use the Cache attributes to create situations to monitor cache actiity, such as the frequency of reads from cache pages, the percentage of cache copy requests that were successful, and the number of pages the cache has flushed to disk. Cache is a single-instance attribute group. Async Copy Reads/sec The frequency of reads from cache pages that inole a memory copy of the data from the cache to the buffer for the application. The application regains control immediately een if the disk must be accessed to retriee the page. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Async Data Maps/sec The frequency that an application uses a file system, such as NTFS or HPFS, to map a page of a file in to the cache to read the page, and does not wish to wait for the cache to retriee the page if it is not in main memory. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Async Fast Reads/sec The frequency of reads from cache pages that bypass the installed file system and retriee the data directly from the cache. Normally, file I/O requests inoke the appropriate file system to retriee data from a file, but this path permits direct retrieal of cache data without file system inolement if the data is in the cache. Een if the data is not in the cache, one inocation of the file system is aoided. If the data is not in the cache, the request (application program call) gets control immediately. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Async MDL Reads/sec The frequency of reads from cache pages using a Memory Descriptor List (MDL) to access the pages. The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages. If the accessed page(s) are not in main memory, the calling application program does not wait for the pages to fault in from disk. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Async Pin Reads/sec The frequency of reading data in to the cache prior to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. The file system regains control immediately een if the disk must be accessed to retriee the page. While pinned, the physical address for the page is not altered. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Copy Read Hits % The percentage of cache copy read requests that hit the cache, that is, that did not require a disk read to proide access to the page in the cache. A copy read is a file read operation that is satisfied by a memory copy from a 12 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

21 cache page to the buffer for the application. The LAN Redirector uses this method to retriee cache information, as does the LAN Serer for small transfers. This is a method used by the disk file systems as well. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). Note: the alue -1 indicates Unaailable. Copy Read Hits Dynamic Aerage A running aerage of the Copy Read Hits % attribute. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Copy Reads/sec The frequency of reads from cache pages that inole a memory copy of the data from the cache to the buffer for the application. The LAN Redirector uses this method to retriee cache information, as does the LAN Serer for small transfers. This is a method used by the disk file systems as well. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Data Flush Pages/sec The number of pages the cache has flushed to disk as a result of a request to flush or to satisfy a write-through file write request. More than one page can be transferred on each flush operation. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Data Flushes/sec The frequency with which the cache has flushed its contents to disk as the result of a request to flush or to satisfy a write-through file write request. More than one page can be transferred on each flush operation. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Data Map Hits % The percentage of data maps in the cache that could be resoled without haing to retriee a page from the disk, that is, the page was already in physical memory. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). Data Map Hits Dynamic Aerage A running aerage of the Data Map Hits % attribute. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Data Map Pins/sec The frequency of data maps in the cache that resulted in pinning a page in main memory, an action usually preparatory to writing to the file on disk. While pinned, the physical address for a page in main memory and the irtual address in the cache is not altered. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Data Maps/sec The number of times per second that a file system, such as NTFS or HPFS, maps a page of a file in to the cache to read the page. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, Chapter 1. Attributes 13

22 *MIN, *MAX, or *SUM functions. Note: the alue indicates Fast Read Not Possibles/sec The frequency of attempts by an Application Program Interface (API) function call to bypass the file system to get at cache data that could not be honored without inoking the file system. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Fast Read Resource Misses/sec The frequency of cache misses necessitated by the lack of aailable resources to satisfy the request. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Fast Reads/sec The frequency of reads from cache pages that bypass the installed file system and retriee the data directly from the cache. Normally, file I/O requests inoke the appropriate file system to retriee data from a file, but this path permits direct retrieal of cache data without file system inolement if the data is in the cache. Een if the data is not in the cache, one inocation of the file system is aoided. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Lazy Write Flushes/sec The frequency with which the Lazy Write thread flushes its contents to disk. Lazy Writing is the process of updating the disk after the page has been changed in memory, so the application making the change to the file does not hae to wait for the disk write to complete before proceeding. More than one page can be transferred on each write operation. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Lazy Write Pages/sec The frequency with which the Lazy Write thread for the cache writes to disk. Lazy Writing is the process of updating the disk after the page has been changed in memory, so the application making the change to the file does not hae to wait for the disk write to complete before proceeding. More than one page can be transferred on a single disk write operation. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates MDL Read Hits % The percentage of cache Memory Descriptor List (MDL) read requests that hit the cache, that is, that did not require disk accesses to proide memory access to the page(s) in the cache. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). MDL Read Hits Dynamic Aerage A running aerage of the Memory Descriptor List (MDL) Read Hits % attribute. Note: the alue indicates 14 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013

23 MDL Reads/sec The frequency of reads from cache pages that use a Memory Descriptor List (MDL) to access the data. The MDL contains the physical address of each page inoled in the transfer, and thus can employ a hardware Direct Memory Access (DMA) deice to effect the copy. The LAN Serer uses this method for large transfers out of the serer. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Pin Read Hits % The percentage of cache pin read requests that hit the cache, that is, that did not require a disk read to proide access to the page in the cache. While pinned, the physical address for the page in the cache is not altered. The LAN Redirector uses this method for retrieing cache information, as does the LAN Serer for small transfers. This is usually the method used by the disk file systems as well. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). Pin Read Hits Dynamic Aerage A running aerage of the Pin Read Hits % attribute. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Pin Reads/sec The frequency of reading data in to the cache preparatory to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. While pinned, the physical address for a page in the cache is not altered. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Read Aheads/sec The frequency of cache reads where the cache detects sequential access to a file. The read aheads permit the data to be transferred in larger blocks than those being requested by the application, reducing the oerhead per access. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Sync Copy Reads/sec The frequency of reads from cache pages that inole a memory copy of the data from the cache to the buffer for the application. The file system does not regain control until the copy operation is complete, een if the disk must be accessed to retriee the page. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Sync Data Maps/sec The frequency with which a file system, such as NTFS or HPFS, maps a page of a file in to the cache to read the page, and wishes to wait for the cache to retriee the page if it is not in main memory. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Sync Fast Reads/sec The frequency of reads from cache pages that bypass the installed file system and retriee the data directly from the cache. Normally, file I/O requests inoke the appropriate file system to retriee data from a file, but this Chapter 1. Attributes 15

24 path permits direct retrieal of cache data without file system inolement if the data is in the cache. Een if the data is not in the cache, one inocation of the file system is aoided. If the data is not in the cache, the request (application program call) waits until the data is retrieed from disk. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Sync MDL Reads/sec The frequency of reads from cache pages that use a Memory Descriptor List (MDL) to access the pages. The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages. If the accessed page(s) are not in main memory, the caller waits for the pages to fault in from the disk. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates Value_Exceeds_Maximum and the alue indicates Sync Pin Reads/sec The frequency of reading data in to the cache preparatory to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. The file system does not regain control until the page is pinned in the cache, in particular if the disk must be accessed to retriee the page. While pinned, the physical address for a page in the cache is not altered. Valid alues are positie integers in the range 0 to and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue indicates System Name The managed system name. The form should be hostname:agent_code. Examples include spark:knt or deux.raleigh.ibm.com:knt. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Computer Information attributes Use Computer Information attributes to monitor general information about the computer system. The data source for these attributes is WMI. To aoid throughput issues with the Microsoft WMI stack, you should limit the collection frequency to 5 minute interals. This ensures that the Microsoft WMI Data queues hae sufficient time to serice the WMI queries made for collecting these attributes. Computer Domain Name The fully qualified domain name of the host computer. This alue is resoled from the host IP address. Computer Hostname The host name of the host computer. This alue is resoled from the host IP address. 16 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013