Nimsoft Monitor. ad_server Guide. v1.5 series

Transcription

1 Nimsoft Monitor ad_server Guide v1.5 series

2 Legal Notices Copyright 2013, CA. All rights reserved. Warranty The material contained in this document is provided "as is," and is subject to being changed, without notice, in future editions. Further, to the maximum extent permitted by applicable law, Nimsoft LLC disclaims all warranties, either express or implied, with regard to this manual and any information contained herein, including but not limited to the implied warranties of merchantability and fitness for a particular purpose. Nimsoft LLC shall not be liable for errors or for incidental or consequential damages in connection with the furnishing, use, or performance of this document or of any information contained herein. Should Nimsoft LLC and the user have a separate written agreement with warranty terms covering the material in this document that conflict with these terms, the warranty terms in the separate agreement shall control. Technology Licenses The hardware and/or software described in this document are furnished under a license and may be used or copied only in accordance with the terms of such license. No part of this manual may be reproduced in any form or by any means (including electronic storage and retrieval or translation into a foreign language) without prior agreement and written consent from Nimsoft LLC as governed by United States and international copyright laws. Restricted Rights Legend If software is for use in the performance of a U.S. Government prime contract or subcontract, Software is delivered and licensed as "Commercial computer software" as defined in DFAR (June 1995), or as a "commercial item" as defined in FAR 2.101(a) or as "Restricted computer software" as defined in FAR (June 1987) or any equivalent agency regulation or contract clause. Use, duplication or disclosure of Software is subject to Nimsoft LLC s standard commercial license terms, and non-dod Departments and Agencies of the U.S. Government will receive no greater than Restricted Rights as defined in FAR (c)(1-2) (June 1987). U.S. Government users will receive no greater than Limited Rights as defined in FAR (June 1987) or DFAR (b)(2) (November 1995), as applicable in any technical data. Trademarks Nimsoft is a trademark of CA. Adobe, Acrobat, Acrobat Reader, and Acrobat Exchange are registered trademarks of Adobe Systems Incorporated. Intel and Pentium are U.S. registered trademarks of Intel Corporation. Java(TM) is a U.S. trademark of Sun Microsystems, Inc. Microsoft and Windows are U.S. registered trademarks of Microsoft Corporation. Netscape(TM) is a U.S. trademark of Netscape Communications Corporation. Oracle is a U.S. registered trademark of Oracle Corporation, Redwood City, California. UNIX is a registered trademark of the Open Group. ITIL is a Registered Trade Mark of the Office of Government Commerce in the United Kingdom and other countries. All other trademarks, trade names, service marks and logos referenced herein belong to their respective companies. For information on licensed and public domain software, see the Nimsoft Monitor Third-Party Licenses and Terms of Use document at:

3 Contact CA Contact CA Support For your convenience, CA Technologies provides one site where you can access the information that you need for your Home Office, Small Business, and Enterprise CA Technologies products. At you can access the following resources: Online and telephone contact information for technical assistance and customer services Information about user communities and forums Product and documentation downloads CA Support policies and guidelines Other helpful resources appropriate for your product Providing Feedback About Product Documentation Send comments or questions about CA Technologies Nimsoft product documentation to To provide feedback about general CA Technologies product documentation, complete our short customer survey which is available on the CA Support website at

4

5 Contents Chapter 1: ad_server ad_server Overview... 8 Chapter 2: ad_server Probe Deployment 11 Supported Platforms System Requirements Software Requirements Monitoring System Requirements Probe Deployment Information Chapter 3: ad_server Configuration 13 Probe Configuration Interface Installation Probe GUI Probe Configuration Add or Edit a Profile Chapter 4: QoS Threshold Metrics 35 ad_server QoS Metrics ad_server Alert Metrics Default Settings Contents 5

6

7 Chapter 1: ad_server 1.5 This description applies to ad_server probe version 1.5. This section contains the following topics: ad_server Overview (see page 8) Documentation Changes (see page 9) Chapter 1: ad_server 1.5 7

8 ad_server Overview ad_server Overview The ad_server probe monitors the selected checkpoints on Active Directory. Active Directory is the directory service included with Windows servers to manage the identities and relationships that make up network environments. The probe uses monitoring profiles, which are classified in the following seven predefined groups or categories: Event logs Event logs for specific event ID s contents (e.g. messages) etc. Filesystems Monitoring file systems for specific patterns. Files Monitoring for specific files. Performance counters Performance counters for a wide range of system objects, such as disk, CPU performance, memory print queues etc. Processes A wide range of counters for the different processes running on the system. Services Services outside Active Directory that are essential to the proper operation of Active Directory. WMI Checking authentication failures and the inability to access resources. Note that WMI of Datatype Reference is not supported. Each of these categories can contain several profiles. The ad_server probe is delivered with a default configuration with a selected set of profiles to be monitored, but you can also define your own profiles. Each of the profiles can contain several counters. 8 ad_server Guide

9 ad_server Overview Documentation Changes This table describes the version history for this document. Version Date What's New? 1.5 December 2013 Updated the Software Requirements section and the support matrix for Windows Server 2012 support. 1.4 September 2012 Added support for extended NIS database information Added fix to send alarm for eventlog profile with long eventid. Added QoS metric information October 2011 Updated document to reflect if the controller is configured to use robot name for QoS, the probe will send configured name in the QoS source. Otherwise the probe will send the host name in QoS source Related Documentation Documentation for other versions of the ad_server probe The Release Notes for the ad_server probe Monitor Metrics Reference Information for CA Nimsoft Probes ( Documentation Changes 9

10

11 Chapter 2: ad_server Probe Deployment This section contains the prerequisites, system requirements and deployment information for the ad_server probe. This section contains the following topics: Supported Platforms (see page 11) System Requirements (see page 11) Software Requirements (see page 12) Monitoring System Requirements (see page 12) Probe Deployment Information (see page 12) Supported Platforms The New Probe probe is supported on the same set of operating systems and databases as the Nimsoft Monitor Server solution. Please refer to the: Nimsoft Compatibility Support Matrix for the latest information on supported platforms. Support Matrix for Nimsoft Probes for additional information on the New Probe probe. System Requirements The ad_server probe should be installed on systems with the following minimum resources: Memory: 2-4GB of RAM. Probe's OOB configuration requires 256MB of RAM' CPU: 3GHz dual-core processor, 32-bit or 64-bit Chapter 2: ad_server Probe Deployment 11

12 Software Requirements Software Requirements The ad_server probe requires the following software environment: Nimsoft Monitor Server or later Nimsoft Robot 5.23 or later Java Virtual Machine 1.6 or later (typically installed with NMS 5.0 and above).net Framework 4.5, if Nimsoft Robot is installed.net Framework 2.0, if Nimsoft Monitor Server is installed Note:.Net Framework 4.5 is required if Nimsoft Robot and Nimsoft Monitor Server are installed on the same machine. Monitoring System Requirements The ad_server probe is used to monitor selected checkpoints on Active Directory. Probe Deployment Information There are three ways to distribute archive packages. You can distribute the package within the web-based Admin Console (for supported probes), from within Infrastructure Manager, or use the standalone Nimsoft Distribution application.see Probe Deployment for more information on deploying probes. 12 ad_server Guide

13 Chapter 3: ad_server Configuration This section describes the configuration concepts and procedures for setting up the ad_server probe. This probe is configured to monitor the selected checkpoints on Active Directory, through profiles which are grouped into pre-defined groups or categories. This section contains the following topics: Probe Configuration Interface Installation (see page 13) Probe GUI (see page 14) Probe Configuration (see page 21) Probe Configuration Interface Installation The probe configuration interface is automatically downloaded and installed by the Nimsoft Infrastructure Manager when the probe is deployed on a robot. Chapter 3: ad_server Configuration 13

14 Probe GUI Probe GUI The Active Directory Server probe is configured by double-clicking the probe in the Infrastructure Manager, which brings up the GUI (configuration tool). The application window The window consists of two window panes, a menu bar located in the upper part of the window and a status bar located in the lower part. Pressing the F1 button on the keyboard, selecting Help > Show help from the menu bar or clicking the Help button in the lower right corner opens the on-line help documentation describing the probe. Note that you must click the Apply button to activate any configuration modifications done. The left pane The left-pane contains a node called Active Directory Server. Under this node you will find seven groups, used to logically group the different profiles: Eventlogs 14 ad_server Guide

15 Probe GUI Files Filesystems Performance counters Processes Services WMI Selecting the Active Directory Server node, all profiles defined will appear in the right pane. Selecting one of the groups, the profiles sorted under that group will be listed. The ad_server probe is delivered with a default configuration with a selected set of profiles to be monitored, but you can also define your own profiles. Each of the profiles can contain several counters. Chapter 3: ad_server Configuration 15

16 Probe GUI The right pane This pane lists the profiles defined. Selecting the Active Directory Server node in the left pane, all profiles defined will appear in the right pane. Selecting one of the groups under the Active Directory Server node in the left pane, the profiles sorted under that group will be listed. The following information can be found in the list: The name of the profile. If the profile is enabled or not. The last status message received from the counter. If all profiles are listed (the Active Directory Server node is selected in the left pane), the group name for each profile is also shown in the list. 16 ad_server Guide

17 Probe GUI Icons The icon next to the profile name in the list indicates the profile status. Immediately after a restart, there is no icon at all during a short initialization period. After a few seconds, the following icon appears: This indicates an active profile, but no data is yet sampled. The sample period is defined in profile s property dialog. This indicates an inactive profile. After the first sample period, defined in the profile s property dialog, one of the following icons should appear. Green means OK (Clear). Other colours means the threshold defined for the profile is breached, and the color reflects the severity level: Information Warning Minor Major Critical Right-clicking in the right pane Right-clicking in the right pane opens a small menu offering a set of options. Chapter 3: ad_server Configuration 17

18 Probe GUI Selecting one of the groups in the left pane and right-clicking in the right pane, a small menu offers you the possibility to : Add new profiles (New) Delete the selected profile (Delete) Edit the properties for the selected profile (Properties ). Selecting the Active Directory Server node in the left pane, the right-click menu lets you: Delete the selected profile (Delete). Edit the properties for the selected profile (Properties ). Provided that a profile is selected in the right pane, the right-click menu lets you: Create a new profile for the selected group (New ). Delete the selected profile (Delete). Edit the properties for the selected profile (Properties ). The Menu bar The menu bar, located in the upper part of the window, contains some options and tools to be used to manage the probe. File This menu entry contains two options: Save Select this menu entry to save any configuration modifications you have done. Note: You can also save configuration modifications by simultaneously pressing the <CTRL>+S keys on your keyboard. 18 ad_server Guide

19 Probe GUI Exit Use this option to exit the configuration tool. If you have modified your configuration, you will be asked if you want to save the changes before exiting the configuration tool. Probe This menu entry contains four options: Activate This option is enabled only when the probe is stopped (by using the Deactivate option, see below). It starts the probe again, and the status Started will be displayed in the Status bar. Deactivate This option is enabled only when the probe is activated (the status Started will be displayed in the Status bar). It stops the probe, and the status Stopped will be displayed in the Status bar. Restart This option stops and then starts the probe again. Chapter 3: ad_server Configuration 19

20 Probe GUI Options Use this option to set the log level of the probe. This sets the level of details written to the probe s log file. It is recommended to log as little as possible during normal operation, to minimize disk consumption. You may temporarily increase the log level for debugging purposes. Help This menu entry contains two options: Show help Select this menu entry to launch the Nimsoft Probe on-line documentation, pointing directly to the section describing this probe. You may also launch this documentation by pressing the F1 key on your keyboard or by clicking the Help button in the lower right corner. About The Status bar This option opens a small window displaying the probe configurator version number and the date it was built. The status bar located in the lower part of the application window. The status bar offers the following information: The name and the version number of the probe. The status of the probe: Started or Stopped. 20 ad_server Guide

21 Probe Configuration Probe Configuration This section contains specific configuration for the ad_server probe. Add or Edit a Profile The General Tab Selecting one of the groups in the left pane, right-clicking in the right pane and selecting the New option, you can add a profile to the selected group. The properties dialog will appear, enabling you to configure the profile. Alternatively, you can also double-click an existing profile. The properties dialog appears that enables you to edit the parameters for the profile. The properties dialog for the profiles have three tabs. Two of the tabs are common for all types of profiles (General and Counters), while the third is specific for the type of profile. This tab lets you define the general properties for the profile. This tab is valid for all types of profiles. Chapter 3: ad_server Configuration 21

22 Probe Configuration The fields in the above dialog are explained below: Name Defines the name of the profile. Give the profile a descriptive name. Description Provides a short description of the profile. This description will not be shown in the list of profiles in the right pane. Sample data every Specifies the profile s poll interval (how often the profile collects data). Valid units are seconds, minutes, hours or days. Startup delay If you want a delay before the profile starts polling after the profile has been activated, you can specify this delay here. Valid units are seconds, minutes, hours or days. Enabled (runs at specified interval) Enables the profile. If enabled, the profile samples data at the poll interval specified. The Counters Tab This tab lists the counters available for the object being monitored by the profile. This tab is valid for all types of profiles. 22 ad_server Guide

23 Probe Configuration The fields in the above dialog are listed below: Counters Lists the counters available for the object. Thresholds Selecting one counter, you may define one or more thresholds for the counter. Select a counter in the list and click the Add button to set or modify the threshold value and severity for the selected counter. The counters available depends on category: EventLog EventFound (true/false) NumberOfEventsFound Files Changed : seconds since file was changed Created : seconds since file was created NotFound (true / false) Filesystems Directories: Number of directories in the directory specified. NotFound (true / false). This is set to true is critical for default Filesystem profiles. FileAgeNewest: Age in seconds of the newest file in the directory. FileAgeOldest: Age in seconds of the oldest file in the directory. Files: Number of files in the directory specified. TotalSize: Size of all the files in the directory specified, in bytes. The ad_server configuration: (pre-configured) C:\, TotalSize > And C:\Windows\NTDS\ ntds.dit, TotalSize > Performance counters Will vary with the type of counter. As given for the ad_server configuration. LSASS: % Processor time, default threshold value: = 50 is warning. IO Read bytes per sec: > is major. IO Write bytes per sec: > is major. Page faults/sec: > 1000 is major. NTFRS: the same as for LSASS. Chapter 3: ad_server Configuration 23

24 Probe Configuration Processes As given for the ad_server configuration: none pre-configured. Services As given for the ad_server configuration. Default monitored services: Lan Manager, File replication service, DNS client, Security accounts manager, Intersite messaging, Kerberos key distribution center, net logon. Threshold for all Services: State!= Running is minor. WMI As given for the ad_server configuration. Default monitores wmi counters: Microsoft_DomainTrustStatus (exist only on windows 2003 server), TrustIsOK, false is critical. MSAD_ReplNeighbor(exist only on windows 2003 server), ModifiedNumConsecutiveSyncFailures, > 0 is critical, and NumConsecutiveSyncFailures, > 0 is critical. Select a message to be issued if the threshold specified is breached. The Text and Subsystem fields are read-only. Send QoS data The probe sends QoS data on the counters defined in this profile. 24 ad_server Guide

25 Probe Configuration Add Allows you to define a threshold value and associated severity level for the selected counter (see above). Note that you may define several thresholds. Remove Removes the selected threshold. This button is enabled only when a threshold is selected in the threshold list. Chapter 3: ad_server Configuration 25

26 Probe Configuration The <variable> Tab The name of this tab depends on the type of profile selected. It can have following names: Eventlog Files Filesystem Performance counter Process Service WMI All these tabs are explained below in detail. The Eventlog tab This tab lets you define the log file to be monitored by the profile. This tab is valid for Eventlog profiles only. 26 ad_server Guide

27 Probe Configuration The fields in the above dialog are explained below: Log Select the log file to be monitored by this profile. Computer Source Specify, optionally, the name of a computer to be searched for in entries in the log file. Severity User Specify, optionally, the name of a source to be searched for in entries in the log file. Select, optionally, the severity to be searched for in entries in the log file Specify, optionally, the name of a user to be searched for in entries in the log file. Category Event ID Specify, optionally, the category to be searched for in entries in the log file. Specify, optionally, an event ID to be searched for in entries in the log file. Message Specify, optionally, a message to be searched for in entries in the log file. The Files tab This tab lets you define the performance object to be monitored by the profile. This tab is valid for File profiles only. Chapter 3: ad_server Configuration 27

28 Probe Configuration The field in the above dialog is explained below: File Browse for a specific file to monitor. The probe will check if the file is created or changed. 28 ad_server Guide

29 Probe Configuration The Filesystem tab This tab lets you define the Filesystem to be monitored by the profile. This tab is valid for Filesystem profiles only. The fields in the above dialog are explained below: Directory Pattern Specify the filesystem to be monitored for a specific pattern. The probe will check that the directory exists, the size of the directory and age of the oldest and newest file. It can also check that a file exists. Specify the pattern (e.g. the name of a file) to be searched for within the filesystem specified. Chapter 3: ad_server Configuration 29

30 Probe Configuration The Performance counters tab This tab lets you define the performance object to be monitored by the profile. This tab is valid for Performance counter profiles only. The fields in the above dialog are explained below: Object Select the performance object to be monitored. The drop-down list lets you select between all performance objects available on the host. Description Indicates a read-only field containing a description of the selected performance object. Instance Some of the objects may have more than one instance on the system. If so, the Instance field will be enabled, letting you select an instance. Otherwise, the field is grayed out. 30 ad_server Guide

31 Probe Configuration The Process tab This tab lets you define the process to be monitored by the profile. This tab is valid for Processes profiles only. The fields in the above dialog are explained below: Process name Select the process to be monitored by this profile. Chapter 3: ad_server Configuration 31

32 Probe Configuration The Service tab This tab lets you define the service to be monitored by the profile. This tab is valid for Service profiles only. The fields in the above dialog are explained below: Service Select the service to be monitored by the profile. Display name This is a read-only field, showing with which name the service will be displayed in the list of services. Description This is a read-only field, showing a brief description of the selected service. 32 ad_server Guide

33 Probe Configuration The WMI tab This tab lets you define the WMI to be monitored by the profile. This tab is valid for WMI profiles only. The fields in the above dialog are explained below: Namespace Select the namespace of the WMI to be monitored. Class Select the class to be monitored. Instance Select the instance, if more than one is found. Chapter 3: ad_server Configuration 33

34

35 Chapter 4: QoS Threshold Metrics Many Nimsoft Monitor probes are shipped with some default QoS threshold values set. The default threshold values provide an idea of the type of values to be entered in the fields. These default values are not necessarily recommended best practice values. To aid in tuning thresholds and reducing false-positive alarms, this section describes the QoS metrics and provides the default QoS thresholds. This section contains the following topics: ad_server QoS Metrics (see page 35) ad_server Alert Metrics Default Settings (see page 38) ad_server QoS Metrics The following table describes the checkpoint metrics that can be configured using the ad_server probe. Monitor Name Units Description Eventlogs QOS_NUMBEROFEVENTSFOUND - Number of events found Files QOS_CHANGED - Changed QOS_CREATED - Created Filesystems QOS_DIRECTORIES - Directories QOS_FILEAGENEWEST - File Age Newest QOS_FILEAGEOLDEST - File Age Oldest QOS_FILES - Files QOS_TOTALSIZE - Total Size Performance Counters QOS_SQLCLIENT:_CURRENT_#_CONNECTION_POOLS - Sql Client: Current # of connection pools QOS_SQLCLIENT:_CURRENT_#_POOLED_AND_NONP OOLED_CONNECTIONS QOS_SQLCLIENT:_CURRENT_#_POOLED_CONNECTIO NS - Sql Client: Current # of pooled and nonpooled connections - Sql Client: Current # of pooled connections Chapter 4: QoS Threshold Metrics 35

36 ad_server QoS Metrics Monitor Name Units Description QOS_SQLCLIENT:_PEAK_#_POOLED_CONNECTIONS - Sql Client: Peak # of pooled connctions QOS_SQLCLIENT:_TOTAL_#_FAILED_COMMANDS - Sql Client: Total # of failed commands QOS_SQLCLIENT:_TOTAL_#_FAILED_CONNECTS - Sql Client: Total # of failed connects QOS_WORKFLOWS_ABORTED - Workflows Aborted QOS_WORKFLOWS_ABORTED/SEC - Workflows Aborted per second QOS_WORKFLOWS_COMPLETED - Workflows Completed QOS_WORKFLOWS_COMPLETED/SEC - Workflows Completed per second QOS_WORKFLOWS_CREATED - Workflows Created QOS_WORKFLOWS_CREATED/SEC - Workflows Created per second QOS_WORKFLOWS_EXECUTING - Workflows Executing QOS_WORKFLOWS_IDLE/SEC - Workflows Idle per second QOS_WORKFLOWS_IN_MEMORY - Workflows in Memory QOS_WORKFLOWS_LOADED - Workflows Loaded QOS_WORKFLOWS_LOADED/SEC - Workflows Loaded per second QOS_WORKFLOWS_PENDING - Worklfows Pending QOS_WORKFLOWS_PERSISTED - Workflows Persisted QOS_WORKFLOWS_PERSISTED/SEC - Workflows Persisted per second QOS_WORKFLOWS_RUNNABLE - Workflows Runnable QOS_WORKFLOWS_SUSPENDED - Workflows Suspended QOS_WORKFLOWS_SUSPENDED/SEC - Workflows Suspended per second QOS_WORKFLOWS_TERMINATED - Workflows Terminated QOS_WORKFLOWS_TERMINATED/SEC - Workflows Terminated per second QOS_WORKFLOWS_UNLOADED - Workflows Unloaded QOS_WORKFLOWS_UNLOADED/SEC - Workflows Unloaded per second QOS_FRAGMENTATION_FAILURES - Fragmentation Failures Processes QOS_EXECUTIONSTATE - Execution State QOS_HANDLECOUNT - Handle Count QOS_KERNELMODETIME 100ns Kernel Mode Time QOS_MAXIMUMWORKINGSETSIZE Kilobytes Maximum Working Set Size 36 ad_server Guide

37 ad_server QoS Metrics Monitor Name Units Description QOS_MINIMUMWORKINGSETSIZE Kilobytes Minimum Working Set Size QOS_OTHEROPERATIONCOUNT - Other Operation Count QOS_OTHERTRANSFERCOUNT Bytes Other Transfer Count QOS_PAGEFAULTS - Page Faults QOS_PAGEFILEUSAGE Kilobytes Page File Usage QOS_PARENTPROCESSID - Parent Process Id QOS_PEAKPAGEFILEUSAGE Kilobytes Peak Page File Usage QOS_PEAKVIRTUALSIZE Bytes PeakVirtualSize QOS_PEAKWORKINGSETSIZE Kilobytes Peak Working Set Size QOS_PRIORITY - Priority QOS_PRIVATEPAGECOUNT - Private Page Count QOS_PROCESSID - Process ID QOS_QUOTANONPAGEDPOOLUSAGE - Quota Nonpaged Pool Usage QOS_QUOTAPAGEDPOOLUSAGE - Quota Paged Pool Usage QOS_QUOTAPEAKNONPAGEDPOOLUSAGE - Quota Peak Nonpaged Pool Usage QOS_QUOTAPEAKPAGEDPOOLUSAGE - Quota Peak Paged Pool Usage QOS_READOPERATIONCOUNT - Read Operation Count QOS_READTRANSFERCOUNT Bytes Read Transfer Count QOS_SESSIONID - Session ID QOS_THREADCOUNT - Thread Count QOS_USERMODETIME 100ns User Mode Time QOS_VIRTUALSIZE Bytes Virtual Size QOS_WORKINGSETSIZE - Working Set Size QOS_WORKINGOPERATIONCOUNT - Write Operation Count QOS_WRITETRANSFERCOUNT - Write Transfer Count WMI QOS_COUNTERVALUE - Counter Value Chapter 4: QoS Threshold Metrics 37

38 ad_server Alert Metrics Default Settings ad_server Alert Metrics Default Settings This section contains the alert metric default settings for the ad_server probe. Alert Metric Eventlogs Warning Threshold Warning Severity Error Threshold Error Severity Description Event Found - - TRUE Critical Event matched Number of Events Found Critical Event matched Files Not Found - - TRUE Critical File failure Changed Critical File failure Created Critical File failure Filesystems Directories Critical File system failure File Age Newest Critical File system failure File Age Oldest Critical File system failure Files Critical File system failure Total Size Critical File system failure Not Found - - TRUE Critical File system failure Performance Counters Sql Client: Current # of connection pools Critical Performance failure Sql Client: Current # of pooled and nonpooled connections Critical Performance failure Sql Client: Current # of pooled connections Critical Performance failure Sql Client: Peak # of pooled connections Critical Performance failure Sql Client: Total # of failed commands Critical Performance failure Sql client: Total # of failed connects Critical Performance failure % Processor Time 50 Warning - - Performance failure 38 ad_server Guide

39 ad_server Alert Metrics Default Settings Alert Metric Warning Threshold Warning Severity Error Threshold Error Severity Description IO Read Bytes per second Major Performance failure IO Write Bytes per second Major Performance failure Page Faults per second Major Performance failure Fragmentation failures Critical Performance failure Active Lines Critical Performance failure Active Telephones Critical Performance failure Client Apps Critical Performance failure Current Incoming Calls Critical Performance failure Current Outgoing Calls Critical Performance failure Incoming Calls per second Critical Performance failure Lines Critical Performance failure Outgoing Calls per second Critical Performance failure Telephone Devices Critical Performance failure Active Sessions Critical Performance failure Inactive Sessions Critical Performance failure Total Sessions Critical Performance failure Datagrams No Port per second Critical Performance failure Datagrams Received Errors Critical Performance failure Datagrams Received per second Critical Performance failure Datagrams Sent per second Critical Performance failure Datagrams per second Critical Performance failure Workflows Aborted Critical Performance failure Workflows Aborted per second Critical Performance failure Workflows Completed Critical Performance failure Workflows Completed per second Critical Performance failure Workflows Created Critical Performance failure Workflows Created per second Critical Performance failure Workflows Executing Critical Performance failure Workflows Idle per second Critical Performance failure Chapter 4: QoS Threshold Metrics 39

40 ad_server Alert Metrics Default Settings Alert Metric Warning Threshold Warning Severity Error Threshold Error Severity Description Workflows in Memory Critical Performance failure Workflows Loaded Critical Performance failure Workflows Loaded per second Critical Performance failure Workflows Pending Critical Performance failure Workflows Persisted Critical Performance failure Workflows Persisted per second Critical Performance failure Workflows runnable Critical Performance failure Workflows suspended Critical Performance failure Workflows suspended per second Critical Performance failure Workflows Terminated Critical Performance failure Workflows Terminated per second Critical Performance failure Workflows Unloaded Critical Performance failure Workflows Unloaded per second Critical Performance failure HiPerf Classes Critical Performance failure HiPerf Validity Critical Performance failure Processes Caption Critical Process failed Command line Critical Process failed Creation Class Name Critical Process failed CS Creation Class Name Critical Process failed CS Name Critical Process failed Description Critical Process failed Executable Path Critical Process failed Execution State Critical Process failed Handle Count Critical Process failed Kernel Mode Time Critical Process failed 40 ad_server Guide

41 ad_server Alert Metrics Default Settings Alert Metric Warning Threshold Warning Severity Error Threshold Error Severity Description Maximum Working Set Size Critical Process failed Minimum Working Set Size Critical Process failed Name Critical Process failed OS Creation Class Name Critical Process failed OS Name Critical Process failed Other Operation Count Critical Process failed Other Transfer Count Critical Process failed Page Faults Critical Process failed Page File Usage Critical Process failed Parent Process ID Critical Process failed Peak Page File Usage Critical Process failed Peak Virtual Size Critical Process failed Peak Working Set Size Critical Process failed Priority Critical Process failed Private Page Count Critical Process failed Process ID Critical Process failed Quota Nonpaged Pool Usage Critical Process failed Quota Paged Pool Usage Critical Process failed Quota Peak Nonpaged Pool Usage Critical Process failed Quota Peak Paged Pool Usage Critical Process failed Read Operation Count Critical Process failed Read Transfer Count Critical Process failed Session ID Critical Process failed Status - - Degraded Critical Process failed Thread Count Critical Process failed User Mode Time Critical Process failed Virtual Size Critical Process failed Windows Version Critical Process failed Working Set Size Critical Process failed Chapter 4: QoS Threshold Metrics 41

42 ad_server Alert Metrics Default Settings Alert Metric Warning Threshold Warning Severity Error Threshold Error Severity Description Write Operation Count Critical Process failed Write Transfer Count Critical Process failed Services State - - Continue Pending Critical Serivce is Continue Pending/Pause Pending/Paused/Running/ Start Pending/Stop Pending/Stopped/Unknow n WMI Counter Value Critical WMI failure 42 ad_server Guide