IBM Tioli Monitoring Version 6.3.0 Windows OS Agent User Interface Reference April 2013
IBM Tioli Monitoring Version 6.3.0 Windows OS Agent User Interface Reference April 2013
Note Before using this information and the product it supports, read the information in Notices on page 235. This edition applies to ersion 6, release 3 of IBM Tioli Monitoring (product number 5724-C04) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 1994, 2013. US Goernment Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents Tables............... Chapter 1. Attributes......... 1 Actie Serer Pages attributes........ 4 Agent Aailability Management Status attributes.. 8 Agent Actie Runtime Status attributes..... 9 Alerts Table attributes........... 10 BIOS Information attributes......... 11 Cache attributes............. 12 Computer Information attributes....... 16 Configuration Information attributes...... 17 Deice Dependencies attributes........ 18 Deices attributes............ 19 DHCP Serer attributes.......... 20 DNS Dynamic Update attributes....... 22 DNS Memory attributes.......... 24 DNS Query attributes........... 25 DNS WINS attributes........... 27 DNS Zone Transfer attributes........ 28 Eent Log attributes........... 31 File Change attributes........... 33 File Trend attributes........... 36 FTP Serer Statistics attributes........ 39 FTP Serice attributes........... 41 Gopher Serice attributes.......... 43 HTTP Content Index attributes........ 45 HTTP Serice attributes.......... 46 ICMP Statistics attributes.......... 50 IIS Statistics attributes........... 53 Indexing Serice attributes......... 55 Indexing Serice Filter attributes....... 57 IP Address attributes........... 58 IP Statistics attributes........... 58 Job Object attributes........... 61 Job Object Details Attributes......... 64 Job Object Details Attributes (32-bit - Superseded) 68 Logical Disk attributes........... 73 Memory attributes............ 76 Memory attributes (32-bit - Superseded)..... 81 Monitored Logs Report attributes....... 86 Mount Point attributes........... 88 MSMQ Information Store attributes...... 88 MSMQ Queue attributes.......... 89 MSMQ Serice attributes.......... 90 MSMQ Sessions attributes......... 92 Network Interface attributes......... 93 Network Interface attributes (32-bit - Superseded) 96 Network Port attributes.......... 99 Network Segment attributes......... 99 NNTP Commands attributes........ 100 NNTP Serer attributes.......... 106 Objects attributes............ 110 Paging File attributes........... 111 Physical Disk attributes.......... 112 Print Job attributes........... 115 Print Queue attributes.......... 117 Printer attributes............ 119 Process attributes............ 121 Process attributes (32-bit - Superseded)..... 124 Process IO attributes........... 128 Processor attributes........... 129 Processor Information attributes....... 131 Processor Summary attributes........ 132 RAS Port attributes........... 134 RAS Total attributes........... 136 Redirector attributes........... 138 Registry attributes............ 146 Serer attributes............ 147 Serer Work Queue attributes........ 151 Serer Work Queue attributes (32-bit - Superseded) 153 Serice Dependencies attributes....... 156 Serices attributes............ 157 SMTP Serer attributes.......... 158 System attributes............ 164 TCP Statistics attributes.......... 169 Thread attributes............ 170 UDP Statistics attributes.......... 172 VMWare Memory attributes........ 172 VMWare Processor attributes........ 174 Web Serice attributes.......... 175 Disk capacity planning for historical data.... 182 Chapter 2. Situations........ 187 Predefined situations: actiated at startup.... 188 Predefined situations: not actiated at startup.. 190 Predefined situations: bottleneck analysis.... 193 Chapter 3. Take Action commands 197 AMS Recycle Agent Instance........ 197 AMS Reset Agent Daily Restart Count..... 198 AMS Start Agent action.......... 199 AMS Start Agent Instance action....... 199 AMS Stop Agent action.......... 200 AMS Start Management action....... 200 AMS Stop Management action....... 201 Start Serices action........... 201 Stop Serices action........... 201 Chapter 4. Workspaces....... 203 Predefined workspaces.......... 203 Attribute groups used by predefined workspaces 207 Actie Serer Pages workspace....... 209 Agent Management Serices workspace.... 209 Agents' Management Log workspace..... 209 Cache workspace............ 210 Deices workspace........... 210 Deice Dependencies workspace....... 211 DHCP Serer workspace......... 211 Disk workspace............ 211 DNS Dynamic Update workspace...... 211 Copyright IBM Corp. 1994, 2013 iii
DNS Memory workspace......... 212 DNS Query workspace.......... 212 DNS WINS workspace.......... 212 DNS Zone Transfer workspace....... 212 Enterprise Serices workspace........ 212 Eent Log workspace........... 213 File Change workspace.......... 213 File Trend workspace........... 213 FTP Serer Statistics workspace....... 213 FTP Serice workspace.......... 214 Gopher Serice workspace......... 214 Historical Summarized Aailability workspace.. 214 Historical Summarized Aailability Daily workspace.............. 214 Historical Summarized Aailability Hourly workspace.............. 215 Historical Summarized Aailability Weekly workspace.............. 215 Historical Summarized Capacity workspace... 215 Historical Summarized Capacity Daily workspace 216 Historical Summarized Capacity Hourly workspace 216 Historical Summarized Capacity Weekly workspace 216 Historical Summarized Performance workspace 217 Historical Summarized Performance Daily workspace.............. 217 Historical Summarized Performance Hourly workspace.............. 217 Historical Summarized Performance Weekly workspace.............. 217 HTTP Content Index workspace....... 218 HTTP Serice workspace......... 218 ICMP Statistics workspace......... 218 IIS Statistics workspace.......... 219 Indexing Serice workspace........ 219 Indexing Serice Filter workspace...... 219 IP Statistics workspace.......... 219 Job Object workspace........... 220 Job Object Details workspace........ 220 Logical Disk workspace.......... 220 Logical Disk I/O workspace........ 221 Memory workspace........... 221 Memory Allocation workspace....... 221 Monitored Logs workspace......... 222 Mount Point workspace.......... 222 MSMQ Information Store workspace..... 222 MSMQ Queue workspace......... 222 MSMQ Serice workspace......... 223 MSMQ Sessions workspace......... 223 Network workspace........... 223 Network Interface workspace........ 224 Network Ports workspace......... 224 Network Segment workspace........ 224 NNTP Commands workspace........ 224 NNTP Serer workspace......... 225 Objects workspace............ 225 Paging workspace............ 225 Paging File workspace.......... 225 Physical Disk workspace......... 226 Print Job workspace........... 226 Print Queue workspace.......... 226 Printer workspace............ 227 Printer Oeriew workspace........ 227 Process workspace............ 227 Process I/O workspace.......... 228 Process Oeriew workspace........ 228 Process Storage workspace......... 228 Processor workspace........... 228 Processor Oeriew workspace....... 229 Processor Summary workspace....... 229 RAS Port workspace........... 229 RAS Total workspace........... 229 Redirector workspace........... 229 Serer Oeriew workspace........ 230 Serer Work Queues workspace....... 230 Serices workspace........... 230 Serice Dependencies workspace....... 230 SMTP Serer workspace.......... 230 System I/O workspace.......... 231 System workspace............ 231 System Information workspace....... 231 System Oeriew workspace........ 231 System Pools workspace.......... 232 System Timings workspace......... 232 TCP Statistics workspace......... 233 Threads workspace........... 233 UDP Statistics workspace......... 233 Web Serice workspace.......... 233 Windows OS workspace.......... 234 Windows OS Details workspace....... 234 Windows Systems workspace........ 234 Notices.............. 235 Index............... 239 i IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
Tables 1. Capacity planning for historical data logged by component........... 183 2. Attribute groups used by predefined workspaces............ 207 Copyright IBM Corp. 1994, 2013
i IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
Chapter 1. Attributes Attributes are the application properties being measured and reported by the monitoring agent, such as the amount of memory usage or the message ID. Attributes are organized in to groups according to their purpose. The attributes in a group can be used in the following two ways: Chart or table iews Attributes are displayed in chart and table iews. The chart and table iews use queries to specify which attribute alues to request from a monitoring agent. You use the Query editor to create a new query, modify an existing query, or apply filters and set styles to define the content and appearance of a iew based on an existing query. Situations You use attributes to create situations that monitor the state of your operating system, database, or application. A situation describes a condition you want to test. When you start a situation, the Tioli Enterprise Portal compares the alues you hae assigned to the situation attributes with the alues collected by Monitoring Agent for Windows OS and registers an eent if the condition is met. You are alerted to eents by indicator icons that are displayed in the Naigator. Some of the attributes in this chapter are listed twice, with the second attribute haing a "(Unicode)" designation after the attribute name. These Unicode attributes were created to proide access to globalized data. For more information about using attributes and attribute groups, see the IBM Tioli Monitoring User's Guide. Attribute groups and attributes An attribute is a characteristic of a managed object (node). For example, Disk Name is an attribute for a disk, which is a managed object. Use attributes to build situations that monitor the performance of your network managed systems. When the alues of the selected attributes in a situation exceed their threshold settings, the agent posts an alert to the Tioli Enterprise Portal console notifying you of a problem. Attributes groups contain System Name and Timestamp attributes. The following entries describe these attributes. System Name The managed system name. The form should be hostname:agent_code. Examples include spark:kux or deux.raleigh.ibm.com:kux. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Timestamp The date and time the agent collects information as set on the monitored Copyright IBM Corp. 1994, 2013 1
Attribute groups system. The timestamp for SCAN and STR functions is in the CYYMMDDHHMMSSmmm format (as in 1020315064501000 for 03/15/02 06:45:01) where: C = Century (0=20th) YY = Year MM = Month of the Year (01-12) DD = Day of the Month (01-31) HH = Hour, in 24-hour time (00-23) MM = Minute SS = Second mmm = Millisecond Note: Some of the attributes in this chapter are listed twice, with the second attribute haing a "(Unicode)" designation after the attribute name. These Unicode attributes were created to proide access to globalized data. Each attribute belongs to an attribute group. The attribute group includes attributes that are related. Each attribute item stores data for a particular property of an attribute group. The following are the attribute groups for the monitoring agent. The groups are collected in attribute tables that are designated in brackets [ ] after the group name. Actie Serer Pages [ACTSRVPG] Agent Aailability Management Status [KNTPASMGMT] Agent Actie Runtime Status [KNTPASSTAT] Alerts Table [KNTPASALRT] BIOS Information [NTBIOSINFO] Cache [NTCACHE] Computer Information [NTCOMPINFO] Configuration Information [KNTPASCAP] Deice Dependencies [NTDEVDEP] Deices [NTDEVICE] DHCP Serer [DHCPSRV] DNS Dynamic Update [DNSDYNUPD] DNS Memory [DNSMEMORY] DNS Query [DNSQUERY] DNS WINS [DNSWINS] DNS Zone Transfer [DNSZONET] Eent Log [NTEVTLOG] File Change [NTFLCHG] File Trend [NTFLTREND] FTP Serer Statistics [FTPSTATS] FTP Serice [FTPSVC] Gopher Serice [GOPHRSVC] HTTP Content Index [HTTPCNDX] HTTP Serice [HTTPSRVC] ICMP Statistics [ICMPSTAT] IIS Statistics [IISSTATS] Indexing Serice [INDEXSVC] Indexing Serice Filter [INDEXSVCF] IP Address [NTIPADDR] IP Statistics [IPSTATS] Job Object [JOBOBJ] Job Object Details [NTJOBOBJD] 2 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
Job Object Details (superseded) [JOBOBJD] Logical Disk [WTLOGCLDSK] Mount Point [NTMNTPT] Memory [NTMEMORY] Memory (superseded) [WTMEMORY] Monitored Logs Report [NTLOGINFO] MSMQ Information Store [MSMQIS] MSMQ Queue [MSMQQUE] MSMQ Serice [MSMQSVC] MSMQ Sessions [MSMQSESS] Network Interface [NTNETWRKIN] Network Interface (superseded) [NETWRKIN] Network Port [NTNETWPORT] Network Segment [NETSEGMT] NNTP Commands [NNTPCMD] NNTP Serer [NNTPSRV] Objects [WTOBJECTS] Paging File [NTPAGEFILE] Physical Disk [WTPHYSDSK] Print Job [NTPRTJOB] Print Queue [PRINTQ] Printer [NTPRINTER] Process [NTPROCESS] Process (superseded) [WTPROCESS] Process IO [PROCESSIO] Processor [NTPROCSSR] Processor Information [NTPROCINFO] Processor Summary [NTPROCRSUM] RAS Port [KNTRASPT] RAS Total [KNTRASTOT] Redirector [NTREDIRECT] Registry [WTREGISTRY] Serer [WTSERVER] Serer Work Queue [NTSERVERQ] Serer Work Queue (superseded) [WTSERVERQ] Serice Dependencies [NTSVCDEP] Serices [NTSERVICE] SMTP Serer [SMTPSRV] System [WTSYSTEM] TCP Statistics [TCPSTATS] Thread [WTTHREAD] UDP Statistics [UDPSTATS] VMWare Memory [VMMEMORY] VMWare Processor [VMPROCSSR] Web Serice [WEBSVC] IBM Tioli Monitoring proides other attribute groups that are aailable to all monitoring agents, for example Uniersal Time and Local Time. The attributes in these common attribute groups are documented in the Tioli Enterprise Portal Help. Chapter 1. Attributes 3
Actie Serer Pages attributes Use the Actie Serer Pages attributes to create situations to monitor Actie Serer Page requests, session information, and memory allocation. Actie Serer Pages is a single-instance attribute group. If the serice being monitored is not installed or if the serice is minimally loaded most attributes report 0 alues. Allocated Memory The total amount of memory currently allocated by Actie Serer Pages. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Allocated Memory In Free List The number of bytes of allocated memory in the free memory list. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Allocated Memory In Used List The number of bytes of allocated memory in the used memory list. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Browser Requests Executing The number of browser requests currently executing. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Communication Failed The number of requests that failed due to communication failure. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Debugging Requests Number of debugging document requests. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Errors During Script Runtime Number of requests failed due to runtime errors. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Errors From ASP Preprocessor Number of requests failed due to preprocessor errors. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates 4 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
Errors From Script Compilers Number of requests failed due to script compilation errors. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Free Script Engines in Cache The number of free script engines in cache. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Request Errors/sec The number of errors per second, including connection errors, compile errors, and runtime errors. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Request Execution Time The number of milliseconds that it took to execute the most recent request. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Request Total Bytes In The total size, in bytes, of all the requests that hae been enqueued. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Request Total Bytes Out The total size, in bytes, of responses sent to clients. This does not include standard HTTP headers. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Request Wait Time The number of milliseconds since the most recent request. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Requests Current The number of requests expecting serice from the queue. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Requests Executed The total number of requests that hae been dequeued and successfully executed. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Requests Failed The total number of requests that had a compile time or runtime error. Valid alues are positie integers in the range 0 to 2147483647 and can Chapter 1. Attributes 5
include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Requests Not Authorized Number of requests failed due to insufficient access rights. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Requests Not Found The number of requests for files that were not found. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Requests Rejected The total number of requests not executed because the queue was full or there were insufficient resources to enqueue the requests. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Requests/sec The number of requests executed per second. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Requests Timed Out The number of requests that timed out. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Requests Total The total number of requests that hae been enqueued since the serice was started. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Session Duration The number of milliseconds that the most recent session persisted. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Session Timed Out Requests Executing The number of sessions timed out with requests currently executing. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Sessions Current The current number of sessions being sericed. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, 6 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
*MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Sessions Timed Out The number of sessions timed out. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Sessions Timed Out Requests In Queue The number of sessions timed out with requests queued to execute. Note that this attribute is only aailable on systems running with IIS installed and configured. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Sessions Total The total number of sessions since the serice was started. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates System Name The managed system name. The form should be hostname:agent_code. Examples include spark:knt or deux.raleigh.ibm.com:knt. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Template Cache Hit Rate Percent of requests found in template cache. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown. Template Notifications The number of templates inalidated in the cache due to change notification. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Templates Cached The number of templates currently cached. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Thread Pool Current The current number of threads in the Actie Serer Pages thread pool. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Chapter 1. Attributes 7
Total Queue Length The total number of requests that are currently enqueued. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Transactions Aborted The number of transactions aborted. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Transactions Committed The number of transactions committed. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Transactions Pending Number of transactions in progress. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Transactions Total The total number of transactions since the serice was started. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Transactions/sec Transactions started per second. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: -1 indicates Unknown, 2147483647 indicates Value_Exceeds_Maximum and -2147483648 indicates Agent Aailability Management Status attributes Use Agent Aailability Management Status attributes to iew the current management status of an agent relatie to Agent Management Serices. Agent Management Status The watched agent management status. The following alues are alid: Unmanaged (0), Managed (1), Watchdog (2). A alue of 'Managed' means that the agent is under the management of Agent Management Serices. A alue of 'Unmanaged' means it is known, but that the agent is not under the management of Agent Management Serices. Agent Name The watched agent name. Agent Type The watched agent type. The following alues are alid: Unknown (0), ITM_Unix (1), Console (2), Windows_Serice (3), Discoer_ITM (4), Discoer_Bin (5), Linux_Serice (6), ITM_Windows (7). Agent Version The ersion, release, and modification information for the agent. Build Date The build date information for the agent. Superseded by the Build Number attribute. 8 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
Build Number The build number information for the agent. Manager Type The enum defining the manager type. The following are alues are alid: Unknown (0), Not_Managed (1), Agent_Management Serices (2), Watchdog (3), External (4). A alue of 'Agent Management Serices' means that Agent Management Serices is responsible. A alue of 'NotManaged' means that the agent is not under aailability monitoring by any application. A alue of 'Externally' means that some other application besides Agent Management Serices is responsible for aailability monitoring of the agent, for example Tioli System Automation or Windows serice control manager. Operating System The operating system identification. The following are alues are alid: Unknown (0), Windows (1), Linux (2). Serer Name The origin node of the collecting agent. Serice Name The serice name. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Agent Actie Runtime Status attributes Use the Agents Actie Runtime Status attributes to iew the current aailability status of an agent: Running, Not present, Unknown, Stopped, Manually Stopped. You can iew the frequency at which the agent's aailability and runtime properties are queried and also the agent's Daily Restart Count. % Priileged Time The system CPU. % Processor Time The CPU used by the process. % User Time The user CPU time. Agent Aailability Status The watched agent aailability status. The following are alues are alid: Unknown (0), Not_found (1), Stopped (2), Start_Pending (3), Running (4), Manually_Stopped (5), Stop_Pending (6), Not_Configured (7). For agents that hae an Aailability Status of 'Running', use the attribute group to see runtime properties of the agent such as its Process ID and Thread Count. Agent Host Name The host name of the agent. Agent Name The watched agent name. Agent Type The watched agent type. The following are alues are alid: Unknown (0), ITM_Unix (1), Console (2), Win_Serice (3), Discoer_ITM (4), Discoer_Bin (5), Linux_Serice (6), ITM_Windows (7). Check Frequency The frequency to check status in seconds. Command Line The command line. Daily Restart Count The restarts within a period of a day. Handle Count The handle count. Chapter 1. Attributes 9
Alerts Table attributes Instance Name The instance name of the running IBM Tioli Monitoring agent. IP Address The IP address of the agent. Last Health Check The last health check timestamp. Operating System The operating system identification. The following alues are alid: Unknown (0), Windows (1), Linux (2). Page Faults sec The page faults per second. Process ID The process ID. Process Name The process name. Serer Name The origin node of the collecting agent. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Thread Count The thread count. Total Working Set kbytes The working set size in kilobytes. User Name The user name of the running managed agent. Virtual kbytes The total size. Use the Alerts Table attributes to iew exceptional Warning and Critical leel eents surfaced by Agent Management Serices. These eents hae to do with the operation of Agent Management Serices or conditions affecting its ability to manage agents. The following alerts are included: Agent stopped abnormally. Agent restart failed. Agent exceeded restart tries. Agent not found. Agent exceeded policy defined memory threshold. Agent exceeded policy defined CPU threshold. Agent manual stop failed. Agent remoed from system - CAP file remoed. Agent Name The watched agent name. Agent Status The agent status. The following alues are alid: Unknown (0), Not_found (1), Stopped (2), Start_Pending (3), Running (4), Manually_Stopped (5), Stop_Pending (6), Not_Configured (7). Agent Type The watched agent type. The following alues are alid: Unknown (0), ITM_Unix (1), Console (2), Windows_Serice (3), Discoer_ITM (4), Discoer_Bin (5), Linux_Serice (6), ITM_Windows (7). Alert Details The alert message details. 10 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
Alert Message The alert message. The following alues are alid: Aailability_policy_remoed (1), Managed_agent_remoed_from_system (2), Unmanaged_agent_remoed_from_system (3), Agent_abnormally_stopped (4), Agent_exceeded_restart_count (5), Agent_restart_failed (6), Agent_oerutilizing_memory (7), Agent_oerutilizing_CPU (8), Agent_manual_stop_failed (9), Agent_Management_Serices_watchdog_not_reliable (11). Operating System The operating system identification. The following alues are alid: Unknown (0), Windows (1), Linux (2). Process ID The process ID. Process Name The process name. BIOS Information attributes Serer Name The origin node of the collecting agent. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Use BIOS Information attributes to monitor general information about the System BIOS. The data source for these attributes is WMI. To aoid throughput issues with the Microsoft WMI stack, you should limit the collection frequency to 5 minute interals. This ensures that the Microsoft WMI Data queues hae sufficient time to serice the WMI queries made for collecting these attributes. BIOS Description BIOS description of the manufacturer. The manufacturer of the BIOS sets this attribute alue. BIOS Manufacturer Manufacturer of the BIOS. The manufacturer of the BIOS sets this attribute alue. BIOS Release Date Release date of the Windows BIOS in the Coordinated Uniersal Time (UTC) format of YYYYMMDDHHMMSS.(+-)OOO. BIOS Serial Number Serial Number of the BIOS. This attribute alue can be equal to the Computer ID Number. Typically this occurs when the computer BIOS manufacturer and system manufacturer are the same. This attribute alue is set by the BIOS manufacturer. BIOS Version Version of the BIOS. This string is created by the BIOS manufacturer. The manufacturer of the BIOS sets this attribute alue. System Name The managed system name. The form should be hostname:agent_code. Examples include spark:knt or deux.raleigh.ibm.com:knt. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Chapter 1. Attributes 11
Cache attributes Use the Cache attributes to create situations to monitor cache actiity, such as the frequency of reads from cache pages, the percentage of cache copy requests that were successful, and the number of pages the cache has flushed to disk. Cache is a single-instance attribute group. Async Copy Reads/sec The frequency of reads from cache pages that inole a memory copy of the data from the cache to the buffer for the application. The application regains control immediately een if the disk must be accessed to retriee the page. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Async Data Maps/sec The frequency that an application uses a file system, such as NTFS or HPFS, to map a page of a file in to the cache to read the page, and does not wish to wait for the cache to retriee the page if it is not in main memory. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Async Fast Reads/sec The frequency of reads from cache pages that bypass the installed file system and retriee the data directly from the cache. Normally, file I/O requests inoke the appropriate file system to retriee data from a file, but this path permits direct retrieal of cache data without file system inolement if the data is in the cache. Een if the data is not in the cache, one inocation of the file system is aoided. If the data is not in the cache, the request (application program call) gets control immediately. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Async MDL Reads/sec The frequency of reads from cache pages using a Memory Descriptor List (MDL) to access the pages. The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages. If the accessed page(s) are not in main memory, the calling application program does not wait for the pages to fault in from disk. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Async Pin Reads/sec The frequency of reading data in to the cache prior to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. The file system regains control immediately een if the disk must be accessed to retriee the page. While pinned, the physical address for the page is not altered. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Copy Read Hits % The percentage of cache copy read requests that hit the cache, that is, that did not require a disk read to proide access to the page in the cache. A copy read is a file read operation that is satisfied by a memory copy from a 12 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
cache page to the buffer for the application. The LAN Redirector uses this method to retriee cache information, as does the LAN Serer for small transfers. This is a method used by the disk file systems as well. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). Note: the alue -1 indicates Unaailable. Copy Read Hits Dynamic Aerage A running aerage of the Copy Read Hits % attribute. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Copy Reads/sec The frequency of reads from cache pages that inole a memory copy of the data from the cache to the buffer for the application. The LAN Redirector uses this method to retriee cache information, as does the LAN Serer for small transfers. This is a method used by the disk file systems as well. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Data Flush Pages/sec The number of pages the cache has flushed to disk as a result of a request to flush or to satisfy a write-through file write request. More than one page can be transferred on each flush operation. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Data Flushes/sec The frequency with which the cache has flushed its contents to disk as the result of a request to flush or to satisfy a write-through file write request. More than one page can be transferred on each flush operation. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Data Map Hits % The percentage of data maps in the cache that could be resoled without haing to retriee a page from the disk, that is, the page was already in physical memory. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). Data Map Hits Dynamic Aerage A running aerage of the Data Map Hits % attribute. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Data Map Pins/sec The frequency of data maps in the cache that resulted in pinning a page in main memory, an action usually preparatory to writing to the file on disk. While pinned, the physical address for a page in main memory and the irtual address in the cache is not altered. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Data Maps/sec The number of times per second that a file system, such as NTFS or HPFS, maps a page of a file in to the cache to read the page. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, Chapter 1. Attributes 13
*MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Fast Read Not Possibles/sec The frequency of attempts by an Application Program Interface (API) function call to bypass the file system to get at cache data that could not be honored without inoking the file system. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Fast Read Resource Misses/sec The frequency of cache misses necessitated by the lack of aailable resources to satisfy the request. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Fast Reads/sec The frequency of reads from cache pages that bypass the installed file system and retriee the data directly from the cache. Normally, file I/O requests inoke the appropriate file system to retriee data from a file, but this path permits direct retrieal of cache data without file system inolement if the data is in the cache. Een if the data is not in the cache, one inocation of the file system is aoided. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Lazy Write Flushes/sec The frequency with which the Lazy Write thread flushes its contents to disk. Lazy Writing is the process of updating the disk after the page has been changed in memory, so the application making the change to the file does not hae to wait for the disk write to complete before proceeding. More than one page can be transferred on each write operation. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Lazy Write Pages/sec The frequency with which the Lazy Write thread for the cache writes to disk. Lazy Writing is the process of updating the disk after the page has been changed in memory, so the application making the change to the file does not hae to wait for the disk write to complete before proceeding. More than one page can be transferred on a single disk write operation. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates MDL Read Hits % The percentage of cache Memory Descriptor List (MDL) read requests that hit the cache, that is, that did not require disk accesses to proide memory access to the page(s) in the cache. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). MDL Read Hits Dynamic Aerage A running aerage of the Memory Descriptor List (MDL) Read Hits % attribute. Note: the alue 2147483647 indicates 14 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013
MDL Reads/sec The frequency of reads from cache pages that use a Memory Descriptor List (MDL) to access the data. The MDL contains the physical address of each page inoled in the transfer, and thus can employ a hardware Direct Memory Access (DMA) deice to effect the copy. The LAN Serer uses this method for large transfers out of the serer. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Pin Read Hits % The percentage of cache pin read requests that hit the cache, that is, that did not require a disk read to proide access to the page in the cache. While pinned, the physical address for the page in the cache is not altered. The LAN Redirector uses this method for retrieing cache information, as does the LAN Serer for small transfers. This is usually the method used by the disk file systems as well. Valid format is a numeric string in the range 0 to 100 (expressing a percentage). Pin Read Hits Dynamic Aerage A running aerage of the Pin Read Hits % attribute. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Pin Reads/sec The frequency of reading data in to the cache preparatory to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. While pinned, the physical address for a page in the cache is not altered. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Read Aheads/sec The frequency of cache reads where the cache detects sequential access to a file. The read aheads permit the data to be transferred in larger blocks than those being requested by the application, reducing the oerhead per access. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Sync Copy Reads/sec The frequency of reads from cache pages that inole a memory copy of the data from the cache to the buffer for the application. The file system does not regain control until the copy operation is complete, een if the disk must be accessed to retriee the page. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Sync Data Maps/sec The frequency with which a file system, such as NTFS or HPFS, maps a page of a file in to the cache to read the page, and wishes to wait for the cache to retriee the page if it is not in main memory. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Sync Fast Reads/sec The frequency of reads from cache pages that bypass the installed file system and retriee the data directly from the cache. Normally, file I/O requests inoke the appropriate file system to retriee data from a file, but this Chapter 1. Attributes 15
path permits direct retrieal of cache data without file system inolement if the data is in the cache. Een if the data is not in the cache, one inocation of the file system is aoided. If the data is not in the cache, the request (application program call) waits until the data is retrieed from disk. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Sync MDL Reads/sec The frequency of reads from cache pages that use a Memory Descriptor List (MDL) to access the pages. The MDL contains the physical address of each page in the transfer, thus permitting Direct Memory Access (DMA) of the pages. If the accessed page(s) are not in main memory, the caller waits for the pages to fault in from the disk. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates Value_Exceeds_Maximum and the alue -2147483648 indicates Sync Pin Reads/sec The frequency of reading data in to the cache preparatory to writing the data back to disk. Pages read in this fashion are pinned in memory at the completion of the read. The file system does not regain control until the page is pinned in the cache, in particular if the disk must be accessed to retriee the page. While pinned, the physical address for a page in the cache is not altered. Valid alues are positie integers in the range 0 to 2147483647 and can include the use of the *AVG, *MIN, *MAX, or *SUM functions. Note: the alue 2147483647 indicates System Name The managed system name. The form should be hostname:agent_code. Examples include spark:knt or deux.raleigh.ibm.com:knt. In workspace queries, this attribute should be set equal to the alue $NODE$ in order to populate the workspace with data. This attribute is generally not included in situations, unless there is a need to customize the situation for a specific managed system. Timestamp The date and time the Tioli Enterprise Monitoring Serer samples the data. Computer Information attributes Use Computer Information attributes to monitor general information about the computer system. The data source for these attributes is WMI. To aoid throughput issues with the Microsoft WMI stack, you should limit the collection frequency to 5 minute interals. This ensures that the Microsoft WMI Data queues hae sufficient time to serice the WMI queries made for collecting these attributes. Computer Domain Name The fully qualified domain name of the host computer. This alue is resoled from the host IP address. Computer Hostname The host name of the host computer. This alue is resoled from the host IP address. 16 IBM Tioli Monitoring: Windows OS Agent User Interface Reference April 2013