IBM Tioli Composite Application Manager for Microsoft Applications: Microsoft Actie Directory Agent 6.3.1 Fix Pack 13 Reference IBM
IBM Tioli Composite Application Manager for Microsoft Applications: Microsoft Actie Directory Agent 6.3.1 Fix Pack 13 Reference IBM
Note Before using this information and the product it supports, read the information in Notices on page 205 This edition applies to ersion 6.3.1.13 of IBM Tioli Composite Application Manager for Microsoft Applications: Microsoft Actie Directory Agent (product number 5724-U17) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 2005, 2017. US Goernment Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents Tables............... Chapter 1. Workspaces reference.... 1 Predefined workspaces........... 1 Workspace description.......... 3 Chapter 2. Attributes reference.... 11 Attributes in each attribute group....... 11 Address Book attributes......... 12 Actie Directory Database Information attributes 13 Asynchronous Thread Queue attributes.... 14 Containers attributes.......... 15 DHCP attributes............ 16 Direct Access Serer attributes....... 19 Directory Serices attributes........ 20 Distributed File System Replication attributes.. 22 DFS Replication Connections attributes.... 25 DFS Replication Folders attributes...... 27 DFS Serice Volumes attributes....... 29 DNS ADIntegrated attributes....... 30 DNS ADIntegrated Details attributes..... 31 DNS attributes............ 32 Domain Controller Aailability attributes... 37 Domain Controller Performance attributes... 41 Eent Log attributes.......... 45 Exchange Directory Serices attributes.... 46 Federation Serer Detail attributes...... 47 Federation Serer Proxy Detail attributes... 50 File Replication Serice attributes...... 51 Forest Topology attributes........ 55 Group Policy Object attributes....... 56 K3z Replication attributes........ 57 Kerberos Key Distribution Center attributes.. 62 Knowledge Consistency Checker attributes... 63 Lightweight Directory Access Protocol attributes 64 LDAP attributes............ 65 Local Security Authority attributes..... 68 Lost and Found Objects attributes...... 68 Moed or Deleted Organizational Units attributes 69 Name Serice Proider attributes...... 70 Netlogon attributes........... 71 Password Settings Objects attributes..... 72 Remote Access Serer attributes...... 74 Replication (Superseded) attributes..... 75 Replication Conflict Objects attributes.... 79 Replication Partner attributes....... 80 Replication Partner Latency attributes.... 82 RID Pool Information attributes...... 83 Root Directory Serer attributes...... 84 Security Accounts Manager attributes..... 85 Serices attributes........... 87 Sysol Replication attributes........ 88 Trust attributes............ 89 Trust Topology attributes......... 90 Disk capacity planning for historical data.... 92 Chapter 3. Situations reference.... 95 Predefined situations........... 95 Situations descriptions........... 99 Actie Directory Database Information workspace situations.......... 99 DHCP workspace situations....... 100 Directory System Agent workspace situation 101 Distributed File System Replication workspace situation.............. 101 DNS workspace situations........ 102 DNS ADIntegrated workspace situations... 102 Domain Controller Aailability workspace situations.............. 103 Domain Controller Performance workspace situations.............. 106 File Replication Serice workspace situations 107 Group Policy Objects workspace situations.. 108 Kerberos Key Distribution Center workspace situations.............. 108 Knowledge Consistency Checker workspace situation.............. 109 Lightweight Directory Access Protocol workspace situation.......... 109 LDAP Attributes workspace situation.... 109 Name Serice Proider workspace situation.. 109 Moed or Deleted Organizational Units workspace situation.......... 109 Replication workspace situations...... 109 Replication Partner workspace situations... 113 Replication Partner Latency workspace situations.............. 114 RID Pool Information workspace situations.. 114 Root Directory Serer workspace situation... 114 Trust workspace situations........ 114 Chapter 4. Take Action commands reference............. 117 Take Action command descriptions...... 117 Fetch Disabled User Accounts....... 118 Fetch Expired User Accounts....... 118 Fetch Expired Password User Accounts.... 119 Fetch Inactie User Accounts....... 119 Fetch Inalid Logon Attempts User Accounts 120 Fetch Locked User Accounts....... 121 Fetch New User Accounts........ 121 Chapter 5. Policies reference..... 123 Predefined policies........... 123 Chapter 6. Tioli Common Reporting for the monitoring agent...... 125 Cognos-based report packages........ 125 Prerequisites for installing and running packages.............. 125 Copyright IBM Corp. 2005, 2017 iii
Extracting the package......... 126 Importing Cognos report packages..... 127 Cognos data models and reports...... 127 Chapter 7. Eent mapping...... 145 Chapter 8. Upgrading for warehouse summarization........... 189 Tables in the warehouse.......... 189 Effects on summarized attributes....... 189 Upgrading your warehouse with limited user permissions.............. 190 Chapter 9. Discoery Library Adapter for the Microsoft Actie Directory agent............... 193 DLA data model class types represented in CDM 193 DLA data model classes for Microsoft Actie Directory agent............. 193 ActieDirectory class.......... 194 SericeAccessPoint class......... 194 BindAddress class........... 195 IpAddress class............ 196 Chapter 10. Integration with Tioli Business Serice Manager..... 199 Components for integrating with Tioli Business Serice Manager............ 199 Tasks to integrate the agent with Tioli Business Serice Manager............ 200 Installing the Discoery Library Toolkit on the Tioli Business Serice Manager...... 200 Configuring the Tioli Eent Integration Facility (EIF) probe to enrich eents....... 200 Creating a serice in Tioli Business Serice Manager.............. 201 Creating a data source mapping for each data source............... 202 Configuring additional IBM Tioli Monitoring web serices............. 202 Viewing data in the Tioli Enterprise Portal.. 202 Appendix. ITCAM for Microsoft Applications documentation library.. 203 Prerequisite publications.......... 203 Related publications........... 204 Tioli Monitoring Community on Serice Management Connect.......... 204 Other sources of documentation....... 204 Notices.............. 205 Trademarks.............. 207 Terms and conditions for product documentation 207 IBM Online Priacy Statement........ 208 Index............... 209 i Microsoft Actie Directory agent Reference
Tables 1. Capacity planning for historical data logged by the Microsoft Actie Directory agent.... 92 2. Actie Directory Agent Reports Prerequisites Scanner............. 128 3. Lightweight Directory Access Protocol report 128 4. Actie Directory Authentication report 130 5. Flexible Single Master Operation Role Aailability report.......... 131 6. Replication Failure on Directory Partition report.............. 131 7. Replication Failure on Partners report 132 8. Serice Aailability report....... 133 9. DNS Performance report........ 134 10. Global Catalog Serer Aailability report 136 11. Trust Aailability report........ 137 12. Replication Latency Heat Map report 138 13. Replication Partner Aailability report 139 14. DNS AD Integrated Performance report 140 15. Directory System Agent Performance report 141 16. Database Performance report...... 142 17. Oeriew of attribute groups to eent classes and slots............. 145 18. Time periods and suffixes for summary tables and iews............. 189 19. Additional columns to report summarization information............ 190 Copyright IBM Corp. 2005, 2017
i Microsoft Actie Directory agent Reference
Chapter 1. Workspaces reference A workspace is the working area of the Tioli Enterprise Portal application window. The naigator tree contains a list of the workspaces proided by the agent. About workspaces Use the naigator tree to select the workspace you want to see. As part of the application window, the status bar shows the Tioli Enterprise Portal Serer name and port number to which the displayed information applies and the ID of the current user. When you select an item in the naigator tree, a default workspace is displayed. When you right-click a naigator item, a menu that includes a Workspace item is displayed. The Workspace item contains a list of workspaces for that naigator item. Each workspace has at least one iew. Some iews hae links to other workspaces. You can also use the Workspace Gallery tool as described in the Tioli Enterprise Portal User's Guide to open workspaces. The workspaces in the naigator are displayed in a Physical iew that shows your enterprise as a physical mapping or a dynamically populated logical iew that is agent-specific. You can also create a Logical iew. The Physical iew is the default iew. To select the dynamically populated logical iew, select ADO from the View list in the naigator. To iew the dynamically populated ADO logical iew, you must log in to the Tioli Enterprise Portal as a system administrator. This monitoring agent proides predefined workspaces. You cannot modify or delete the predefined workspaces, but you can create new workspaces by editing them and saing the changes with a different name. A table iew within a workspace corresponds to a group of attributes; the columns in the table iew show some or all the attributes aailable in the attribute group. Additional information about workspaces For more information about creating, customizing, and working with workspaces, see "Using workspaces" in the Tioli Enterprise Portal User's Guide. For a list of the predefined workspaces for this monitoring agent and a description of each workspace, see Predefined workspaces and the information about each indiidual workspace. Some attribute groups for this monitoring agent might not be represented in the predefined workspaces or iews for this agent. For a full list of the attribute groups, see Attributes in each attribute group on page 11. Predefined workspaces The Microsoft Actie Directory agent proides the following predefined workspaces, which are organized by naigator item and are aailable in both Physical as well as Logical Naigator View (Actie Directory View): Actie Directory workspace Address Book workspace DHCP workspace Copyright IBM Corp. 2005, 2017 1
Directory System Agent workspace DNS workspace DNS ADIntegrated DNS ADIntegrated workspace DNS ADIntegrated Details workspace Domain Controller Aailability Actie Directory Database Information workspace Domain Controller Aailability workspace Eent Log workspace Serices workspace RID Pool Information workspace Domain Controller Performance Domain Controller Performance workspace Remote Access workspace Exchange Directory Serice workspace Federation Serer Federation Serer workspace Federation Proxy Serer workspace File Replication Serice Distributed File System Replication workspace Distributed File System Replication Details workspace File Replication Serice workspace Forest Topology Forest Topology workspace Domain Controllers Details workspace Kerberos Key Distribution Center workspace Knowledge Consistency Checker workspace Lightweight Directory Access Protocol workspace LDAP Attributes workspaces LDAP Attributes workspace User History worspace Local Security Authority workspace Lost and Found Objects workspace GPO workspaces Group Policy Object workspace Password Settings Object workspace Name Serice Proider workspace Replication Historical workspace Replication workspace Replication Conflict Objects workspace Replication Latency workspace Replication Partner Replication Partner workspace Sysol Replication workspace 2 Microsoft Actie Directory agent Reference
Root Directory Serer Root Directory Serer workspace Domain Controller Response Time History workspace Moed or Deleted Organizational Units workspace Security Accounts Manager workspace Trusts Trust workspace Trust Topology workspace Domain Trusts Details workspace Netlogon Attributes workspace Some predefined workspaces are not aailable from the naigator item, but are accessed by selecting the link indicator next to a row of data in a iew. Left-clicking a link indicator selects the default workspace associated with that link. Right-clicking a link indicator displays all linked workspaces that can be selected. The Microsoft Actie Directory agent proides the following composite workspaces: Actie Directory serer LDAP utilization workspace Actie Directory serer NTDS utilization workspace Actie Directory serer replication utilization workspace Actie Directory serice utilization workspace Actie Directory system utilization workspace Actie Directory time difference workspace Workspace description The remaining sections of this chapter contain descriptions of each of these predefined workspaces. These workspace descriptions are organized alphabetically. Actie Directory workspace The Actie Directory workspace proides a iew of the serers and their aailability and a summary of the replication topology. This workspace includes the following iews: FSMO Role Serers table FSMO Serer Aailability table Replication Partner Details table Note: The default workspace for the Actie Directory agent was modifiable, which was a defect. The workspace is changed to make it non-modifiable. Actie Directory serer LDAP utilization workspace The Actie Directory serer LDAP utilization workspace is a composite workspace that proides details about the LDAP utilization. This workspace includes the following iews: DS Search Sub-Operations/sec chart DC LDAP Utilization chart Actie Directory serer NTDS utilization workspace The Actie Directory serer NTDS utilization workspace is a composite workspace that proides details about the NTDS utilization. This workspace includes the following iews: lsass Process Memory Usage chart lsass Handle Count chart DS Search Sub-Operations/sec chart Chapter 1. Workspaces reference 3
Actie Directory serer replication utilization workspace The Actie Directory serer replication utilization workspace is a composite workspace that proides details about the replication utilization. This workspace includes the following iews: Intersite Replication Actiity/sec chart Intrasite Replication Actiity/sec chart Actie Directory serice utilization workspace The Actie Directory serice utilization workspace is a composite workspace that proides details about the Actie Directory serice utilization. This workspace includes the following iews: lsass Process Memory Usage chart lsass Percent Processor Time chart lsass Handle Count chart Actie Directory system utilization workspace The Actie Directory system utilization workspace is a composite workspace that proides details about the Actie Directory system utilization. This workspace includes the following iews: Processor Queue Length table Processor Utilization table Physical Memory Aailability and Virtual Memory Utilization chart Memory Paging Actiity/sec Actie Directory time difference workspace The Actie Directory time difference workspace is a composite workspace that proides details about the time difference between the domain controller and the good time serer. If the domain controller cannot find the good time serer in the domain, the time difference is calculated from the preferred good time serer. This workspace includes the following iews: Time Difference bar graph Time Difference Details table Address Book workspace The Address Book workspace displays addressing information from all of the address book proiders in the profile. This workspace includes the following iews: Address Book bar chart Address Book Details table DHCP workspace The DHCP workspace monitors the performance and general functioning of the Dynamic Host Configuration Protocol (DHCP) serer. This workspace includes the following iews: Circular Gauge, which includes the following gauges: DHCP Acks Sec % Increase and DHCP Requests Sec % Increase DHCP Details table Directory System Agent workspace The Directory System Agent workspace proides access to the physical storage data for the Actie Directory serice. This workspace includes the following iews: Directory System Agent bar chart Directory System Agent Details table DNS workspace The DNS workspace monitors the actiity and performance of the Domain Name System (DNS) serer in general and of the DNS serice in particular. It monitors the following items: DNS Response Time plot chart 4 Microsoft Actie Directory agent Reference
DNS Details table DNS ADIntegrated workspaces This section describes the workspaces related to the DNS ADIntegrated naigator item. DNS ADIntegrated workspace: When the DNS serer runs on a domain controller that domain controller stores a copy of the corresponding DNS zone. Domain controllers can register one or more DNS records in the Actie Directory. These entries are Serice Location Records (SRV) that are used to identify serices that are aailable on a host. The DNS ADIntegrated workspace monitors the serer under inestigation and sends an alert if any SRV is inaccurate or missing. This workspace includes the following iews: DNS ADIntegrated Summary table DNS SRV Records Bad bar chart DNS SRV Records Missing bar chart DNS ADIntegrated Details workspace: The DNS ADIntegrated workspace monitors the serer under inestigation and displays SRV records that are inalid or missing. This workspace includes the "DNS ADIntegrated Details" table iew. Domain Controller Aailability workspaces This section describes the workspaces related to the Domain Controller Aailability naigator item. Actie Directory Database Information workspace: The Actie Directory Database Information workspace monitors the size of the Microsoft Actie Directory database and log files, and proides information about the free space that is aailable on the disk where the database and the log files are stored. This workspace includes the "Actie Directory Database Information" table iew. Domain Controller Aailability workspace: The Domain Controller Aailability workspace monitors the aailability and stability of key domain controller serices. This workspace includes the following iews: Domain Controller Aailability Details table FSMO Role Serers table FSMO Serer Aailability table Eent Log workspace: The Eent Log workspace monitors the eents of Directory Serices and DNS Serer that are logged by the Windows Eent Log serice. This workspace includes the "Eent Log" table iew. RID Pool Information workspace: The RID Pool Information workspace displays information about the RID pool. This workspace includes the following iews: RID Pool Information table Exhausted RID Status circular gauge Serices workspace: The Serices workspace displays the status and configuration information related to each serice that is installed on the NT Serer. This workspace is associated with the "Domain Controller Aailability" naigator item. This workspace includes the "Actie Directory Serices Details" table iew. Chapter 1. Workspaces reference 5
Domain Controller Performance workspaces This section describes the workspaces that are related to the Domain Controller Performance naigator item. Domain Controller Performance workspace: The Domain Controller Performance workspace retriees statistical information about Actie Directory. This workspace includes the following iews: Domain Controller Performance Details table Cache Percent Hit bar chart File Operations Rate bar chart Remote Access workspace: The Remote Access workspace proides information about the actiities of VPN and DirectAccess clients. Historical data collection must be configured for this workspace. This workspace includes the following iews: Remote Access Serer table Direct Access Serer table Exchange Directory Serice workspace The Exchange Directory Serice workspace proides information related to the Microsoft Exchange Serer enironment. This workspace includes the following iews: Exchange Directory Serice bar chart Exchange Directory Serice Details table Federation Serer workspaces This section describes the workspaces related to the Federation Serer naigator item. Federation Serer workspace: The Federation Serer workspace proides information that is associated with the ADFS Serer. This workspace includes the following iews: Federation Serer Details table Federation Serice Detail table Federation Proxy Serer workspace: The Federation Proxy Serer workspace proides information that is associated with the proxy of the ADFS Serer. This workspace includes the following iews: Federation Proxy Serer Details table Federation Proxy Serice Details table File Replication Serice workspaces This section describes the workspaces related to the File Replication Serice naigator item. Distributed File System Replication workspace: The Distributed File System Replication workspace compliments the default File Replication Serice naigator item workspace. This workspace includes the following iews: DFS Replicated Folders bar chart DFS Replication Connections table DFS Replicated Folders table Distributed File System Replication Details workspace: The Distributed File System Replication Details workspace monitors the performance of the DFS Replication serice. This workspace includes the following iews: 6 Microsoft Actie Directory agent Reference
DFS Replication Connection Details table DFS Replicated Folders Details table DFS Serice Volumes Details table File Replication Serice workspace: The File Replication Serice workspace monitors the performance of the File Replication Serice (FRS). This workspace includes the following iews: File Replication Serice Details table FRS Change Orders bar chart Forest Topology workspaces This section describes the workspaces related to the Forest Topology naigator item. Forest Topology workspace: The Forest Topology workspace is associated with the new naigator item "Forest Topology." This workspace includes the "Forest Topology graph" iew. Domain Controller Details workspace: The Domain Controllers Details workspace is a hidden workspace that is associated with the naigator item "Forest Topology." This workspace includes the following iews: Forest Topology graph Domain Controllers Details table Kerberos Key Distribution Center workspace The Kerberos Key Distribution Center workspace monitors session tickets and temporary session keys used in the Kerberos V5 authentication protocol. This workspace includes the following iews: Kerberos Key Distribution Center bar chart Kerberos Key Distribution Center Details table Knowledge Consistency Checker workspace The Knowledge Consistency Checker workspace displays data associated with generating the replication topology between domain controllers. This workspace includes the following iews: Knowledge Consistency Checker Bar chart Knowledge Consistency Checker Details table Lightweight Directory Access Protocol workspace The Lightweight Directory Access Protocol (LDAP) workspace monitors the LDAP serice that proides access to data and objects in a directory or network enironment. This workspace includes the following iews: LDAP bar chart LDAP Details table LDAP Attributes workspaces This section describes the workspaces related to the LDAP attributes. LDAP Attributes workspace: The LDAP Attributes workspace monitors arious LDAP items. This workspace includes the LDAP attributes details iew. User History workspace: The User History workspace is an historical iew of LDAP data oer time. Use this workspace to see the olume of replication actiity in a 7-day period. You must configure historical data collection to iew this workspace. This workspace includes the following iews: User History Graph plot chart Chapter 1. Workspaces reference 7
User History table Local Security Authority workspace The Local Security Authority workspace monitors built-in logon authentication and user authorization for the local system. This workspace includes the following iews: Local Security Authority bar chart Local Security Authority Details table Lost and Found Objects workspace The Lost and Found Objects workspace monitors Actie Directory Lost and Found Objects. Use Replication Latency attributes to create objects on the system found in the Lost and Found workspace. The Lost and Found Objects workspace shows the Replication Latency 'Test' object if the Replication Latency workspace is selected prior to selecting the Lost and Found Objects workspace. This workspace includes the following iews: Lost and Found Objects table Lost and Found Objects Details table GPO workspaces This section describes the workspaces that are related to the GPO naigator item. Group Policy Object workspace: The Group Policy Object workspace monitors Actie Directory Group Policy Objects. This workspace includes the following iews: Group Policy Objects table Group Policy Objects Details table Note: A new attribute is added in the Group Policy Objects attribute group. The Group Policy Objects Details table iew is updated to show this attribute in the report. Password Setting Objects workspace: This workspace displays the alues of the attributes that are included in the Password Settings Object attribute group. This workspace includes the Password Setting Objects table iew. Name Serice Proider workspace The Name Serice Proider workspace monitors communication between the Actie Directory and Exchange Directory Serice (XDS). This workspace includes the following iews: Name Serice Proider bar chart Name Serice Proider Details table Replication workspaces This section describes the workspaces related to the Replication naigator item. Historical workspace: The Historical workspace is an historical iew of Replication data oer time. Use this workspace to see the olume of replication actiity in a 24-hour period. This workspace includes the following iews: Bytes Total Per Sec plot chart Replication Details table Replication workspace: The Replication workspace monitors synchronization of Actie Directory partition replicas between domain controllers. This workspace includes the following iews: Replication bar chart 8 Microsoft Actie Directory agent Reference
Replication Bytes Traffic bar chart Replication Inbound Details table Replication Outbound Details table USN Details table Replication Conflict Objects workspace: The Replication Conflict Objects workspace displays information about the replication conflict objects that are created due to a replication collision. This workspace includes the "Replication Conflict Objects" table iew. Replication Latency workspace The Replication Latency workspace monitors replication latency for each replication partner. The latency is confirmed, tested, and monitored by creating a LostAndFound object that is monitored with its time stamps for the replication latency time. This workspace includes the following iews: Replication Latency bar chart Replication Latency Details table Replication Partner workspaces This section describes the workspaces related to the Replication Partner naigator item. Replication Partner workspace: The Replication Partner workspace monitors the intrasite replication process, the intersite replication process, and the efficiency of the Actie Directory replication process. This workspace includes the following iews: Replication Partner Details table Replication Failure bar chart Replication Health table Sysol Replication workspace: The Sysol Replication workspace displays the result of the replication that is performed on the Sysol folder, and the time at which replication tests are performed and erified on the Sysol folder. This workspace includes the "Sysol Replication" table iew. Root Directory Serer workspaces This section describes the workspaces related to the Root Directory Serer naigator item. Root Directory Serer workspace: The Root Directory Serer workspace is associated with the naigator item "Root Directory Serer." This workspace includes the following iews: Root Directory Serer Details table Containers Details table Note: The Domain Controller Response Time attribute is added in the Root Directory Serer attribute group. The Root Directory Serer Details table iew is updated to show data for this attribute in the report. Domain Controller Response Time History workspace: The Domain Controller Response Time History workspace shows Domain Controller Response Time data oer time. The historical data is displayed for a 7-day period. Historical data collection must be configured for this workspace. This workspace includes the Domain Controller Response Time History plot chart iew. Moed or Deleted Organizational Units workspace: Chapter 1. Workspaces reference 9
The Moed or Deleted Organizational Units workspace displays information about the status, the name, and the distinguished name of the organizational units that are moed or deleted. This workspace includes the "Moed or Deleted Organizational Units" table iew. Security Accounts Manager workspace The Security Accounts Manager workspace monitors the Security Accounts Manager (SAM), which maintains user account information, including groups to which a user belongs. This workspace includes the following iews: Security Accounts Manager bar chart Security Accounts Manager Details table Trusts workspaces This section describes the workspaces associated with the Trusts naigator item. Trusts workspace: The Trust workspace monitors Actie Directory trusts. This workspace includes the following iews: Trusts table Trusts Details table Trust Topology workspace: The Trust Topology workspace displays a new Trust topology graph that shows the complex trust relationships between domains. This workspace includes the Trust Topology graph iew. Domain Trusts Details workspace: The Domain Trust Details is a hidden workspace that is associated with the Trusts naigator item. This workspace includes the following iews: Trust Topology graph iew Domain Trusts Details table Netlogon Attributes workspace: The Netlogon Attributes workspace displays the alues of all instances of the netlogon performance counters. This workspace includes the Netlogon Attributes table iew. 10 Microsoft Actie Directory agent Reference
Chapter 2. Attributes reference Attributes are the application properties that are being measured and reported by the IBM Tioli Composite Application Manager for Microsoft Applications: Microsoft Actie Directory Agent. About attributes Attributes are organized into attribute groups. Attributes in an attribute group relate to a single object such as an application, or to a single kind of data such as status information. Attributes in a group can be used in queries, query-based iews, situations, policy workflows, take action definitions, and launch application definitions. Chart or table iews and situations are two examples of how attributes in a group can be used: Chart or table iews Attributes are displayed in chart and table iews. The chart and table iews use queries to specify which attribute alues to request from a monitoring agent. You use the Properties editor to apply filters and set styles to define the content and appearance of a iew based on an existing query. Situations You use attributes to create situations that monitor the state of your operating system, database, or application. A situation describes a condition you want to test. When you start a situation, the alues you assign to the situation attributes are compared with the alues collected by the Microsoft Actie Directory agent and registers an eent if the condition is met. You are alerted to eents by indicator icons that are displayed in the naigator. Additional information about attributes For more information about using attributes and attribute groups, see the Tioli Enterprise Portal User's Guide. For a list of the attributes groups, a list of the attributes in each attribute group, and descriptions of the attributes for this monitoring agent, refer to the Attribute groups and attributes section in this chapter. Attributes in each attribute group The following sections contain descriptions of these attribute groups, which are listed alphabetically. Each description contains a list of attributes in the attribute group. IBM Tioli Monitoring proides other attribute groups that are aailable to all monitoring agents, for example Uniersal Time and Local Time. The attributes in these common attribute groups are documented in the Tioli Enterprise Portal Help. The following attribute groups are included: Address Book attributes Actie Directory Database Information attributes Asynchronous Thread Queue attributes Containers attributes DHCP attributes Direct Access Serer attributes Directory Serices attributes Distributed File System Replication attributes Copyright IBM Corp. 2005, 2017 11
DFS Replication Connections attributes DFS Replication Folders attributes DFS Serice Volumes attributes DNS ADIntegrated attributes DNS ADIntegrated Details attributes DNS attributes Domain Controller Aailability attributes Domain Controller Performance attributes Eent Log attributes Exchange Directory Serices attributes Federation Serer Detail attributes Federation Serer Proxy Detail attributes File Replication Serice attributes Forest Topology attributes Group Policy Object attributes K3z Replication attributes Kerberos Key Distribution Center attributes Knowledge Consistency Checker attributes Lightweight Directory Access Protocol attributes LDAP attributes Local Security Authority attributes Lost and Found Objects attributes Moed or Deleted Organizational Units attributes Name Serice Proider attributes Netlogon attributes Password Settings Objects attributes Remote Access Serer attributes Replication (Superseded) attributes Replication Conflict Objects attributes Replication Partner attributes Replication Partner Latency attributes RID Pool Information attributes Root Directory Serer attributes Security Accounts Manager attributes Serices attributes Sysol Replication attributes Trust attributes Trust Topology attributes Address Book attributes Use the Address Book attributes to create situations to monitor address book clients. AB Browses per sec Rate at which Address Book clients perform browse operations. An integer is a alid entry. AB Client Sessions Number of connected address book client sessions. An integer is a alid entry. 12 Microsoft Actie Directory agent Reference
AB Matches per sec Rate at which address book clients perform find operations. An integer is a alid entry. AB Property Reads per sec Rate at which address book clients perform property read operations. An integer is a alid entry. AB Proxy Lookups per sec Rate at which the proxy clients perform search operations. An integer is a alid entry. AB Searches per sec Rate at which address book clients perform key search operations. An integer is a alid entry. AB Ambiguous Name Resolutions per sec Rate at which the Address Book clients perform Ambiguous Name Resolutions (ANR) operations. An integer is a alid entry. Serer Name The managed system name. The format is hostname:agent_code. Examples include spark:k3z or deux.raleigh.ibm.com:k3z. In workspace queries, set this attribute equal to the NODE enironment ariable alue to populate the workspace with data. This attribute is generally not included in situations unless you want to customize the situation for a specific managed system. Timestamp Date and time the Tioli Enterprise Management Serer samples the data. Standard character timestamp format is (CYYMMDDHHMMSSmmm), where the following measures apply: Format C YY MM DD HH MM SS mmm Century Year Month Day Hour Minute Second Millisecond Use the simple text strings described in the timestamp format table. For example, enter 1101009130500000 to express October 9, 2010, 1:05:00 PM. Actie Directory Database Information attributes The Actie Directory Database Information attributes proide information about the database and log files of the Microsoft Actie Directory. ADDB Database File Path The full directory path where the Microsoft Actie Directory database is stored. Chapter 2. Attributes reference 13
ADDB Database File Size The size (in MB) of the database file. ADDB Aailable Disk Space for Database The free space (in MB) that is currently aailable on the hard disk drie where the Microsoft Actie Directory database is stored. ADDB Database Log File Path The full directory path where the log files of the Microsoft Actie Directory are stored. ADDB Database Log File Size The sum of the size (in MB) of all the log files. ADDB Aailable Disk Space for Log Files The free space (in MB) that is currently aailable on the hard disk drie where the log files of the Microsoft Actie Directory are stored. ADDB Percentage Free Disk Space for Database The percentage of free space that is currently aailable on the hard disk drie where the Microsoft Actie Directory database file is stored. ADDB Percentage Free Disk Space for Log Files The percentage of free space that is currently aailable on the hard disk drie where the Microsoft Actie Directory database log files are stored. Serer Name The managed system name. The format is hostname:agent_code. Examples include spark:k3z or deux.raleigh.ibm.com:k3z. In workspace queries, set this attribute equal to the NODE enironment ariable alue to populate the workspace with data. This attribute is generally not included in situations unless you want to customize the situation for a specific managed system. Timestamp Date and time when the Tioli Enterprise Monitoring Serer samples the data. Standard character timestamp format is (CYYMMDDHHMMSSmmm), where the following measures apply: Format C YY MM DD HH MM SS mmm Century Year Month Day Hour Minute Second Millisecond Use the simple text strings described in the timestamp format table. For example, enter 1101009130500000 to express October 9, 2010, 1:05:00 PM. Asynchronous Thread Queue attributes The Asynchronous Thread Queue attributes proide statistics that are associated with the Asynchronous Thread Queue (ATQ). 14 Microsoft Actie Directory agent Reference
ATQ Estimated Queue Delay The estimated time (in milliseconds) that the next request might currently spend in the queue before it is sericed by the ATQ threads. The alue format is an integer. ATQ Outstanding Queued Requests The number of requests that are currently queued and waiting to be sericed by the ATQ threads. The alue format is an integer. ATQ Request Latency The aerage time (in milliseconds) that is currently required by the ATQ threads to process a request, excluding the time spent by the request in the queue. The alue format is an integer. ATQ Threads LDAP The number of threads that ATQ currently allocated to sericing the LDAP requests. The alue format is an integer. ATQ Threads Other The number of threads that the ATQ currently allocated to sericing the Directory Serice (DS), excluding the threads allocated to sericing the LDAP requests. The alue format is an integer. ATQ Threads Total The total number of ATQ threads that are currently either waiting to serice an incoming request, or are already sericing a request. The alue format is an integer. Serer Name The managed system name. The format is hostname:agent_code. Examples include spark:k3z or deux.raleigh.ibm.com:k3z. In workspace queries, set this attribute equal to the NODE enironment ariable alue to populate the workspace with data. This attribute is generally not included in situations unless you want to customize the situation for a specific managed system. Timestamp Date and time when the Tioli Enterprise Monitoring Serer samples the data. Standard character timestamp format is (CYYMMDDHHMMSSmmm), where the following measures apply: Format C YY MM DD HH MM SS mmm Century Year Month Day Hour Minute Second Millisecond Use the simple text strings described in the timestamp format table. For example, enter 1101009130500000 to express October 9, 2010, 1:05:00 PM. Containers attributes The Containers attributes display information about containers and objects. CNT Class Type The class type of the container. For example, container, sitescontainer, crossrefcontainer, and so on. CNT Common Name The common name of the container in the Actie Directory schema. CNT Create Timestamp The object creation timestamp. Chapter 2. Attributes reference 15
CNT Distinguished Name The distinguishable name of the container. CNT Modify Timestamp The object modification timestamp. CNT Partition The directory partition under which the container falls. Serer Name The managed system name. The format is hostname:agent_code. Examples include spark:k3z or deux.raleigh.ibm.com:k3z. In workspace queries, set this attribute equal to the NODE enironment ariable alue to populate the workspace with data. This attribute is generally not included in situations unless you want to customize the situation for a specific managed system. Timestamp Date and time when the Tioli Enterprise Monitoring Serer samples the data. Standard character timestamp format is (CYYMMDDHHMMSSmmm), where the following measures apply: Format C YY MM DD HH MM SS mmm Century Year Month Day Hour Minute Second Millisecond Use the simple text strings described in the timestamp format table. For example, enter 1101009130500000 to express October 9, 2010, 1:05:00 PM. DHCP attributes The DHCP attributes display DHCP information. DHCP Acks sec percent increase Percent increase in DHCP Acks per second. Attributes based on preious alues are alid for situations only. DHCP Actie Queue Length Actie queue length. DHCP Conflict Check Queue Length DHCP length of Conflict Check queue. DHCP Declines Sec DHCP declines per second. DHCP Discoers Sec Rate of DHCP Discoers receied by the DHCP serer. An integer is a alid entry. DHCP Duplicates Dropped Sec DHCP duplicates dropped per second. 16 Microsoft Actie Directory agent Reference
DHCP Informs Sec Rate of DHCP Informs receied by the DHCP serer. An integer is a alid entry. DHCP Milliseconds Packet The aerage time per packet taken by the DHCP serer to send a response. An integer is a alid entry. DHCP Nacks Sec DHCP Nacks per second. DHCP Offers Sec Rate of DHCP Offers sent out by the DHCP serer. An integer is a alid entry. DHCP Packets Expired Sec DHCP packets expired per second. DHCP Packets Receied Sec Packets Receied/Sec is the rate at which packets are receied by the DHCP serer. An integer is a alid entry. DHCP Releases Sec Rate of DHCP Releases receied by the DHCP serer. An integer is a alid entry. DHCP Requests sec percent increasethe percent increase in DHCP requests per second. Attributes based on preious alues are alid for situations only. DHCP Serer Specifies whether this serer is a DHCP serer. Valid alues include TRUE and FALSE. DHCP V6 Acks sec The rate of DHCP Acks sent by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Actie Queue Length The Number of packets in the processing queue of the DHCPV6 serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Adertises sec The rate of DHCP Adertises sent out by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Confirms sec The rate of DHCP Confirms receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Declines Sec Rate of DHCP Declines receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Duplicates Dropped Sec The rate at which the DHCPV6 serer receied duplicate packets. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. Chapter 2. Attributes reference 17
DHCP V6 Informs sec The rate of DHCP Informs receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Milliseconds Packet The aerage time per packet taken by the DHCPV6 serer to send a response. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Packets Expired Sec The rate at which packets get expired in the DHCPV6 serer message queue. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Packets Receied Sec The rate at which packets are receied by the DHCPV6 serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Rebinds sec The rate of DHCP Rebinds receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Releases sec The rate of DHCP Releases receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Renews sec The rate of DHCP Renews receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Requests sec The rate of DHCP Requests receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. DHCP V6 Solicits sec The rate of DHCP Solicits receied by the DHCPV6 Serer. An integer is a alid entry. A alue of -1 indicates Undefined. Note: This attribute is aailable only on Actie Directory 2008 and 2012, but is displayed as Undefined on Windows 2003 operating system. Serer Name The managed system name. The format is hostname:agent_code. 18 Microsoft Actie Directory agent Reference
Examples include spark:k3z or deux.raleigh.ibm.com:k3z. In workspace queries, set this attribute equal to the NODE enironment ariable alue to populate the workspace with data. This attribute is generally not included in situations unless you want to customize the situation for a specific managed system. Timestamp Date and time when the Tioli Enterprise Monitoring Serer samples the data. Standard character timestamp format is (CYYMMDDHHMMSSmmm), where the following measures apply: Format C YY MM DD HH MM SS mmm Century Year Month Day Hour Minute Second Millisecond Use the simple text strings described in the timestamp format table. For example, enter 1101009130500000 to express October 9, 2010, 1:05:00 PM. Direct Access Serer attributes The Direct Access Serer attributes monitor the actiities of DirectAccess clients. This attribute group is a single instance attribute group. This attribute group is aailable only on Windows Serer 2012. Bytes Transmitted By Disconnected DirectAccess Clients (MB) The total amount of data (in MB) that was transmitted by all the disconnected DirectAccess clients since the serice was started. An integer is a alid entry. A alue of -1 indicates Undefined. Bytes Receied By Disconnected DirectAccess Clients (MB) The total amount of data (in MB) that was receied by all the disconnected DirectAccess clients since the serice was started. An integer is a alid entry. A alue of -1 indicates Undefined. Bytes Transmitted By Actie DirectAccess Clients (MB) The total amount of data (in MB) that was transmitted by all the actie DirectAccess clients since the serice was started. An integer is a alid entry. A alue of -1 indicates Undefined. Bytes Receied By Actie DirectAccess Clients (MB) The total amount of data (in MB) that was receied by all the actie DirectAccess clients since the serice was started. An integer is a alid entry. A alue of -1 indicates Undefined. Cumulatie Number of DirectAccess Connections Since Serice Start The cumulatie number of DirectAccess clients that were connected to the serer since the serice was started. An integer is a alid entry. A alue of -1 indicates Undefined. Chapter 2. Attributes reference 19
Total Number of Actie DirectAccess Connections The total number of actie DirectAccess connections. An integer is a alid entry. A alue of -1 indicates Undefined. Serer Name The managed system name. The format is hostname:agent_code. Examples include spark:k3z or deux.raleigh.ibm.com:k3z. In workspace queries, set this attribute equal to the NODE enironment ariable alue to populate the workspace with data. This attribute is not included in situations unless you want to customize the situation for a specific managed system. Timestamp Date and time when the Tioli Enterprise Monitoring Serer samples the data. Standard character timestamp format is (CYYMMDDHHMMSSmmm), where the following measures apply: Format C YY MM DD HH MM SS mmm Century Year Month Day Hour Minute Second Millisecond Use the simple text strings that are described in the timestamp format table. For example, enter 1101009130500000 to express October 9, 2010, 1:05:00 PM. Directory Serices attributes Use the Directory Serices attributes to create situations to monitor the directory serice agent (DSA), the Actie Directory process that runs on each domain controller and manages all the directory serice functions. DS Client Binds per sec The number of ntdsapi(dot)dll binds per second sericed by this domain controller. An integer is a alid entry. DS Client Name Translations per sec The number of ntdsapi(dot)dll name translations per second sericed by this domain controller. An integer is a alid entry. DS Directory Reads per sec The number of directory reads per second. An integer is a alid entry. DS Directory Searches per sec The number of directory searches per second. An integer is a alid entry. DS Directory Writes per sec The number of directory writes per second. An integer is a alid entry. DS Monitor List Size The number of requests to be notified when objects that are currently registered with this directory serice agent (DSA) are updated. An integer is a alid entry. 20 Microsoft Actie Directory agent Reference