User's Guide - Beta 1 Draft

Transcription

1 IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent vnext User's Guide - Beta 1 Draft SC

2

3 IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent vnext User's Guide - Beta 1 Draft SC

4 Note Before using this information and the product it supports, read the information in Notices on page 377. This edition applies to IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent (product number 5724-U18) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 2008, US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

5 Contents Tables vii Chapter 1. Overview of the agent IBM Tivoli Monitoring Functions of the monitoring agent New in this release Components of the IBM Tivoli Monitoring environment Agent Management Services User interface options Data sources Chapter 2. Agent installation and configuration Requirements Language pack installation Installing language packs on Windows systems.. 9 Installing language packs on UNIX or Linux systems Silent installation of language packs on Windows, UNIX, or Linux systems Running as a non-administrator user Prerequisites checking Agent-specific installation and configuration Configuration values Remote installation and configuration Chapter 3. Workspaces reference Predefined workspaces Workspace descriptions Microsoft Internet Information Services Navigator item Active Server Pages Navigator item ASP NET Navigator item Availability Navigator item Event Log Navigator item FTP Server Navigator item IIS Configuration Navigator item IIS Global Navigator item NNTP Server Navigator item SMTP Server Navigator item Web Server Navigator item Worker Process Navigator item Chapter 4. Attributes reference Attribute groups for the monitoring agent Attributes in each attribute group Active Server Pages attribute group Application Pool WAS attribute group ASP NET attribute group ASP NET Apps Filter attribute group ASP NET Apps V4 attribute group Availability attribute group Centralized Certificate Details attribute group.. 59 Event Log attribute group Failed Request Tracing attribute group Failed Request Tracing Rules attribute group.. 64 FTP Logon Attempt Restrictions Settings attribute group FTP Server Site Status attribute group FTP Service attribute group FTP Site Dynamic IP and Domain Restrictions attribute group FTP Site IP and Domain Restrictions Settings attribute group FTP Version Information attribute group HTTP Custom Error Messages attribute group.. 81 Http Error Log attribute group IIS Application Pools Details attribute group.. 85 IIS Application Pools Setting attribute group.. 87 IIS Components attribute group IIS FTP Server Bindings attribute group IIS FTP Server Status attribute group IIS FTP Sites Detail attribute group IIS NNTP Server Status attribute group IIS SMTP Server Status attribute group IIS Version Information attribute group IIS Web Server Bindings attribute group IIS Web Server Site Status attribute group IIS Web Server Status attribute group IIS Web Sites Detail attribute group Internet Information Services Gl attribute group 116 Microsoft FTP Service attribute group Mime s attribute group MSMQ Incoming HTTP Traffic attribute group 131 NNTP Server attribute group NNTP Version Information attribute group Performance Object Status attribute group SMTP Server attribute group SMTP Version Information attribute group Thread Pool Status attribute group Virtual Domain Setting attribute group W3SVC W3WP attribute group WAS W3WP attribute group Web Service attribute group Web Service Cache attribute group Web Service Extensions Restricted List attribute group Website Certificate Details attribute group Website Dynamic IP and Domain Restrictions attribute group Website Dynamic IP Restrictions Settings attribute group Website IP and Domain Restrictions Settings attribute group Website Virtual Dir Details attribute group Websites W3C Logs attribute group Disk capacity planning for historical data Copyright IBM Corp. 2008, 2013 iii

6 Chapter 5. Situations reference Predefined situations Situation descriptions Microsoft Internet Information Services Navigator item Active Server Pages Navigator item ASP NET Navigator item Availability Navigator item Event Log Navigator item FTP Server Navigator item IIS Configuration Navigator item IIS Global Navigator item NNTP Server Navigator item SMTP Server Navigator item Web Server Navigator item Worker Process Navigator item Chapter 6. Take Action commands reference Predefined Take Action commands Take Action command descriptions Start Application Host Helper Service action 238 Start Application Pool action Start FTP Publishing Service action Start FTP Site action Start FTP Site by Name action Start HTTP SSL Service action Start IIS Admin Service action Start IIS web server action Start Microsoft FTP Service action Start Net.Msmq Listener Adapter Service action 247 Start Net.Pipe Listener Adapter Service action 248 Start Net.Tcp Listener Adapter Service action 249 Start Net.Tcp Port Sharing Service action Start Network News Transfer Protocol Service action Start Simple Mail Transfer Protocol Service action Start Web Management Service action Start Website action Start Website by Name action Start Windows Process Activation Service action 255 Stop Application Host Helper Service action Stop Application Pool action Stop FTP Publishing Service action Stop FTP Site action Stop FTP Site by Name action Stop HTTP SSL Service action Stop IIS Admin Service action Stop IIS web server action Stop Microsoft FTP Service action Stop Net.Msmq Listener Adapter Service action 264 Stop Net.Pipe Listener Adapter Service action 264 Stop Net.Tcp Listener Adapter Service action 265 Stop Net.Tcp Port Sharing Service action Stop Network News Transfer Protocol Service action Stop Simple Mail Transfer Protocol Service action Stop Web Management Service action Stop Website action Stop Website by Name action Stop Windows Process Activation Service action 271 Chapter 7. Policies reference Predefined policies Chapter 8. Tivoli Common Reporting for the monitoring agent Cognos-based report packages Prerequisites Importing Cognos report packages Cognos data models and reports Chapter 9. Troubleshooting Trace logging Overview of log file management Principal trace log files Examples: Using trace logs RAS trace parameters Dynamic modification of trace settings Setting trace parameters for the Tivoli Enterprise Console server Problems and workarounds Installation and configuration troubleshooting 300 Remote deployment troubleshooting Agent troubleshooting Workspace troubleshooting Situation troubleshooting Take Action commands troubleshooting Tivoli Common Reporting troubleshooting Support information Informational, warning, and error messages overview Message format Agent messages Appendix A. Event mapping Appendix B. Discovery Library Adapter for the Microsoft IIS agent DLA data model class types represented in CDM 363 DLA data model classes for Microsoft IIS agent IIsWebServer class IISWebServices class TMSAgent class Appendix C. Integration with Tivoli Business Service Manager Components for integrating with Tivoli Business Service Manager Tasks to integrate the agent with Tivoli Business Service Manager Installing the Discovery Library Toolkit on the Tivoli Business Service Manager Configuring the Tivoli Event Integration Facility (EIF) probe to enrich events Creating a service in Tivoli Business Service Manager iv Microsoft IIS agent User's Guide - Beta 1 Draft

7 Creating a data source mapping for each data source Configuring additional IBM Tivoli Monitoring web services Viewing data in the Tivoli Enterprise Portal Appendix D. Documentation library 371 Prerequisite publications Related publications Other sources of documentation Accessibility Notices Trademarks Index Contents v

8 vi Microsoft IIS agent User's Guide - Beta 1 Draft

9 Tables 1. Attribute groups that display data for users who are members of the Administrators group Capacity planning for historical data logged by the Microsoft IIS agent IIS Agent Reports Prerequisite Scanner report Web Service Data Transfer report Active Server Pages Request and Error report Web Server Availability In Terms Of Hours report [Hourly Heat Map] Web Service HTTP Request report Web Service Request Errors and Error Rate report Web Sites Availability report Web Server Availability report Information to gather before contacting IBM Software Support Trace log files for troubleshooting agents Problems and solutions for installation and configuration General problems and solutions for uninstallation Remote deployment problems and solutions Agent problems and solutions Workspace problems and solutions Situation problems and solutions Take Action commands problems and solutions Tivoli Common Reporting for Microsoft IIS agent problems and solutions Copyright IBM Corp. 2008, 2013 vii

10 viii Microsoft IIS agent User's Guide - Beta 1 Draft

11 Chapter 1. Overview of the agent The IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent provides you with the capability to monitor Microsoft Internet Information Services. You can also use the agent to take basic actions with the Microsoft Internet Information Services. IBM Tivoli Monitoring is the base software for the Microsoft IIS agent. The Microsoft IIS agent monitors the following functions: v Availability and resources v Error and event log v Performance v Historical data IBM Tivoli Monitoring IBM Tivoli Monitoring provides a way to monitor the availability and performance of all the systems in your enterprise from one or several designated workstations. It also provides useful historical data that you can use to track trends and to troubleshoot system problems. You can use IBM Tivoli Monitoring to achieve the following tasks: v Monitor for alerts on the systems that you are managing by using predefined situations or custom situations. v Establish your own performance thresholds. v Trace the causes leading to an alert. v Gather comprehensive data about system conditions. v Use policies to take actions, schedule work, and automate manual tasks. The Tivoli Enterprise Portal is the interface for IBM Tivoli Monitoring products. You can use the consolidated view of your environment as seen in the Tivoli Enterprise Portal to monitor and resolve performance issues throughout the enterprise. See the IBM Tivoli Monitoring publications listed in Prerequisite publications on page 371 for complete information about IBM Tivoli Monitoring and the Tivoli Enterprise Functions of the monitoring agent Availability Monitoring Monitors the following services and processes: v IIS Admin Service v World Wide Web Publishing Service v FTP Publishing Service [MS FTP V6.0] v Network News Transfer Protocol (NNTP) Service [MS IIS V6.0] v Simple Mail Transfer Protocol (SMTP) Service v HTTP SSL Service [MS IIS V6.0] v Windows Process Activation Service (WAS) [MS IIS V7.x and later] v Application Host Helper Service [MS IIS V7.x and later] v Web Management Service [MS IIS V7.x and later] v Net.Pipe Listener Adapter Service [MS IIS V7.x] Copyright IBM Corp. 2008,

12 v Net.Tcp Listener Adapter Service [MS IIS V7.x] v Net.Msmq Listener Adapter Service [MS IIS V7.x] v Net.Tcp Port Sharing Service v Microsoft FTP Service [MS FTP V7.x] v DCOM DLL Host Process v ASP.Net Worker Process Note: The services for which the IIS version is not mentioned are applicable to both IIS V6.0 and IIS V7.x. Error and Event log Monitoring Monitors for the following event sources that affect Microsoft IIS Server availability or performance: v IISADMIN v FtpCtrs v IISInfoCtrs v W3Ctrs v W3SVC-WP v HostableWebCore v Microsoft-Windows-IIS-IISManager v WMSVC v IISService v WAS-LA v Http v IIS Config v IISCTLS v IISLOG v IISMAP v IISWMI v isapnp v MSFTPSVC v NNTPSVC v SMTPSVC v W3SVC v APPHOSTSVC v IIS-METABASE v SMSvcHost v WAS v FTPSVC v DCOM v IIS-METABASE Performance monitoring Gathers performance attributes in the following areas and provides situations where appropriate: v Web Service v Web Service Cache v Internet Information Service Gl v FTP Service 2 Microsoft IIS agent User's Guide - Beta 1 Draft

13 v ASP v ASP.NET Applications v WAS-W3WP v W3SVC-W3WP v Microsoft FTP Service v IIS Web Server Status v IIS FTP Server Status v IIS SMTP Server Status v IIS NNTP Server Status v IIS Version Information v FTP Version Information v SMTP Version Information v NNTP Version Information v IIS Web Server Sites Status v FTP Server Sites Status v SMTP Server v NNTP Server v IIS Components v Application Pools Settings v Mime s v HTTP Error Log v Web Service Extensions Restricted List v HTTP Custom Error Messages v IIS Web Server Bindings v IIS websites Detail v IIS FTP Server Bindings v IIS FTP Sites Detail v Website Certificate Details Actions Provides actions to start and stop websites, FTP sites, and the following services: v IIS Admin Service v World Wide Web Publishing Service v FTP Publishing Service v Network News Transfer Protocol (NNTP) Service v Simple Mail Transfer Protocol (SMTP) Service v HTTP SSL Service v Windows Process Activation Service (WAS) v Application Host Helper Service v Web Management Service v Net.Pipe Listener Adapter Service v Net.Tcp Listener Adapter Service v Net.Msmq Listener Adapter Service v Net.Tcp Port Sharing Service v Microsoft FTP Service Chapter 1. Overview of the agent 3

14 Reporting Provides a history enablement file that generates reports for all the attributes that are collected. New in this release For the Microsoft IIS agent, the following enhancements were made since version 6.3, including the fix packs: v New attribute groups: Failed Request Tracing Failed Request Tracing Rules v New or changed workspaces: Failed Request Tracing Statistics v New or changed views: Failed Request Tracing Summary Failed Request Tracing Rules Summary v New or changed situations: KQ7_WAS_SID_Mappings_Failed KQ7_WAS_Terminated v Updated kq7.baroc file to support IBM Tivoli Enterprise Console event mapping changes v Added the self describing agent support for the monitoring agent to generate agent support files as part of the agent image v Integration with Tivoli Business Service Manager V6.1, or later v Added new Cognos data models and reports Components of the IBM Tivoli Monitoring environment After you install and set up the Microsoft IIS agent, you have an environment that contains the client, server, and monitoring agent implementation for Tivoli Monitoring. This Tivoli Monitoring environment contains the following components: Tivoli Enterprise Portal client The portal has a user interface based on Java for viewing and monitoring your enterprise. Tivoli Enterprise Portal Server The portal server is placed between the client and the Tivoli Enterprise Monitoring Server and enables retrieval, manipulation, and analysis of data from the monitoring agents. The Tivoli Enterprise Portal Server is the central repository for all user data. Tivoli Enterprise Monitoring Server The monitoring server acts as a collection and control point for alerts received from the monitoring agents, and collects their performance and availability data. The Tivoli Enterprise Monitoring Server is also a repository for historical data. Tivoli Enterprise Monitoring Agent, Microsoft IIS agent This monitoring agent collects data and distributes the data to the Tivoli Enterprise Monitoring Server, Tivoli Enterprise Portal Server, Tivoli Enterprise Portal, Tivoli Data Warehouse, and Tivoli Integrated IBM Tivoli Netcool/OMNIbus Tivoli Netcool/OMNIbus is an optional component and the recommended event management component. The Netcool/OMNIbus software is a service level management (SLM) system that delivers real-time, centralized monitoring of complex networks and IT domain events. Event information is tracked in a high-performance, in-memory database and presented to specific users through individually configurable filters and views. The software includes automation functions 4 Microsoft IIS agent User's Guide - Beta 1 Draft

15 that you can use to perform intelligent processing on managed events. You can use this software to forward events for Tivoli Monitoring situations to Tivoli Netcool/OMNIbus. IBM Tivoli Enterprise Console The Tivoli Enterprise Console is an optional component that acts as a central collection point for events from various sources, including events from other Tivoli software applications, Tivoli partner applications, custom applications, network management platforms, and relational database systems. You can view these events through the Tivoli Enterprise Portal (by using the event viewer), and you can forward events from Tivoli Monitoring situations to the Tivoli Enterprise Console component. If you do not already use Tivoli Enterprise Console and need an event management component, you can choose to use IBM Tivoli Netcool/OMNIbus. IBM Tivoli Common Reporting Tivoli Common Reporting is a separately installable feature available to users of Tivoli software that provides a consistent approach to generating and customizing reports. Some individual products provide reports that are designed for use with Tivoli Common Reporting and have a consistent look and feel. IBM Tivoli Application Dependency Discovery Manager (TADDM) TADDM delivers automated discovery and configuration tracking capabilities to build application maps that provide real-time visibility into application complexity. IBM Tivoli Business Service Manager The Tivoli Business Service Manager component delivers real-time information to help you respond to alerts effectively based on business requirements. Optionally, you can use this component to meet service-level agreements (SLAs). Use the Tivoli Business Service Manager tools to help build a service model that you can integrate with Tivoli Netcool/OMNIbus alerts or optionally integrate with data from an SQL data source. Optional components provide access to data from other IBM Tivoli applications such as Tivoli Monitoring and TADDM. Agent Management Services You can use IBM Tivoli Monitoring Agent Management Services to manage the Microsoft IIS agent. Agent Management Services is available for the following IBM Tivoli Monitoring OS agents: Windows, Linux, and UNIX. The services are designed to keep the Microsoft IIS agent available, and to provide information about the status of the product to the Tivoli Enterprise For more information about Agent Management Services, see Agent Management Services in the IBM Tivoli Monitoring Administrator's Guide. IBM Tivoli Monitoring V6.2.2, Fix Pack 2 or later provides support for Agent Management Services. User interface options Installation of the base IBM Tivoli Monitoring software and other integrated applications provides various interfaces that you can use to work with your resources and data. The following interfaces are available: Tivoli Enterprise Portal user interface You can run the Tivoli Enterprise Portal as a desktop application or a browser application. The client interface is a graphical user interface (GUI) based on Java on a Windows or Linux workstation. The browser application is automatically installed with the Tivoli Enterprise Portal Server. The desktop application is installed by using the Tivoli Monitoring installation media or with a Java Web Start application. To start the Tivoli Enterprise Portal browser client in your Internet browser, enter the URL for a specific Tivoli Enterprise Portal browser client installed on your Web server. Command-line interface You can use Tivoli Monitoring commands to manage the Tivoli Monitoring components and their Chapter 1. Overview of the agent 5

16 configuration. You can also run commands at the Tivoli Enterprise Console event server or the Tivoli Netcool/OMNIbus ObjectServer to configure event synchronization for enterprise situations. Manage Tivoli Enterprise Monitoring Services window You can use the window for the Manage Tivoli Enterprise Monitoring Services utility to configure the agent and start Tivoli services not designated to start automatically. IBM Tivoli Netcool/OMNIbus event list You can use the Netcool/OMNIbus event list to monitor and manage events. An event is created when the Netcool/OMNIbus ObjectServer receives an event, alert, message, or data item. Each event is made up of columns (or fields) of information that are displayed in a row in the ObjectServer alerts.status table. The Tivoli Netcool/OMNIbus web GUI is also a web-based application that processes network events from one or more data sources and presents the event data in various graphical formats. IBM Tivoli Enterprise Console You can use the Tivoli Enterprise Console to help ensure the optimal availability of an IT service for an organization. The Tivoli Enterprise Console is an event management application that integrates system, network, database, and application management. If you do not already use Tivoli Enterprise Console and need an event management component, you can choose to use Tivoli Netcool/OMNIbus. IBM Tivoli Common Reporting Use the Tivoli Common Reporting web user interface for specifying report parameters and other report properties, generating formatted reports, scheduling reports, and viewing reports. This user interface is based on the Tivoli Integrated IBM Tivoli Application Dependency Discovery Manager The Discovery Management Console is the TADDM client user interface for managing discoveries. IBM Tivoli Business Service Manager The Tivoli Business Service Manager console provides a graphical user interface that you can use to logically link services and business requirements within the service model. The service model provides an operator with a second-by-second view of how an enterprise is performing at any moment in time or how the enterprise performed over a time period. Data sources Monitoring agents collect data from specific data sources. The Microsoft IIS agent collects data from the following sources: WMI By using WMI (Windows Management Instrumentation), you can monitor and control managed resources throughout the network. Resources include hard drives, file systems, operating system settings, processes, services, shares, registry settings, networking components, event logs, users, and groups. WMI is built into clients with Windows 2000 or later, and can be installed on any 32-bit Windows client. Perfmon Use the Windows Performance Monitor, or Perfmon, to view various system and application performance metrics for collection and use by management applications. You typically view system metrics on a Windows system through the 'perfmon' application. Scripts The agent uses application-specific commands and interfaces to gather metrics. Log files The agent uses the file system to monitor application log files or other data files to gather metrics. 6 Microsoft IIS agent User's Guide - Beta 1 Draft

17 Windows Event Log The agent collects Windows Event Log entries related to the monitored resource and forwards them to IBM Tivoli Monitoring. Chapter 1. Overview of the agent 7

18 8 Microsoft IIS agent User's Guide - Beta 1 Draft

19 Chapter 2. Agent installation and configuration Agent installation and configuration requires the use of the IBM Tivoli Monitoring Installation and Setup Guide and agent-specific installation and configuration information. To install and configure the Microsoft IIS agent, use the Installing monitoring agents procedures in the IBM Tivoli Monitoring Installation and Setup Guide along with the agent-specific installation and configuration information. If you are installing silently by using a response file, see Performing a silent installation of IBM Tivoli Monitoring in the IBM Tivoli Monitoring Installation and Setup Guide. With the self-describing agent capability, new or updated IBM Tivoli Monitoring agents using IBM Tivoli Monitoring V6.2.3 or later can become operational after installation without having to perform additional product support installation steps. To take advantage of this capability, see Enabling self-describing agent capability at the hub monitoring server in the IBM Tivoli Monitoring Installation and Setup Guide. Also, see Self-describing monitoring agents in the IBM Tivoli Monitoring Administrator's Guide. Requirements Before installing and configuring the agent, make sure your environment meets the requirements for the IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. For information about requirements, see the Prerequisites topic for the agent in the IBM Tivoli Composite Application Manager for Microsoft Applications Information Center ( infocenter/tivihelp/v24r1/topic/com.ibm.itcamms.doc_6.3/welcome_msapps63.html). Language pack installation The steps for installing language packs depend on which operating system and mode of installation you are using. To install a language pack for the agent support files on the Tivoli Enterprise Monitoring Server, the Tivoli Enterprise Monitoring Agent, and the Tivoli Enterprise Portal Server, make sure that you installed the product in the English language. Then use the steps for the operating system or mode of installation you are using: v Installing language packs on Windows systems v Installing language packs on UNIX or Linux systems on page 10 v Silent installation of language packs on Windows, UNIX, or Linux systems on page 10 Installing language packs on Windows systems You can install the language packs on a Windows system. Before you begin First, make sure that you installed the product in the English language. Procedure 1. On the language pack CD, double-click the lpinstaller.bat file to start the installation program. 2. Select the language of the installer and click OK. Copyright IBM Corp. 2008,

20 3. In the Introduction panel, click Next 4. Click Add/Update and click Next. 5. Select the folder where the National Language Support package (NLSPackage) files are located. Typically, the NLSPackage files are located in the nlspackage folder where the installer executable file is located. 6. Select the language support for the agent of your choice and click Next. To make multiple selections, press Ctrl and select the language that you want. 7. Select the languages that you want to install and click Next. 8. Examine the installation summary page and click Next to begin installation. 9. After installation completes, click Finish to exit the installer. 10. Restart the Tivoli Enterprise Portal, Tivoli Enterprise Portal Server, and Eclipse Help Server if any of these components are installed. Installing language packs on UNIX or Linux systems You can install the language packs on a UNIX or Linux system. Before you begin First, make sure that you installed the product in the English language. Procedure 1. Enter the mkdir command to create a temporary directory on the computer, for example, mkdir dir_name. Make sure that the full path of the directory does not contain any spaces. 2. Mount the language pack CD to the temporary directory that you created. 3. Enter the following command to start the installation program: cd dir_name lpinstaller.sh -c install_dir where install_dir is where you installed IBM Tivoli Monitoring. Typically, the directory name is /opt/ibm/itm for UNIX and Linux systems. 4. Select the language of the installer and click OK. 5. In the Introduction panel, click Next. 6. Click Add/Update and click Next. 7. Select the folder where the National Language Support package (NLSPackage) files are located. Typically, the NLSPackage files are located in the nlspackage folder where the installer executable file is located. 8. Select the language support for the agent of your choice and click Next. To make multiple selections, press Ctrl and select the language that you want. 9. Select the languages that you want to install and click Next. 10. Examine the installation summary page and click Next to begin installation. 11. After installation completes, click Finish to exit the installer. 12. Restart the Tivoli Enterprise Portal, Tivoli Enterprise Portal Server, and Eclipse Help Server if any of these components are installed. Silent installation of language packs on Windows, UNIX, or Linux systems You can use the silent-mode installation method to install the language packs. In silent mode, the installation process obtains the installation settings from a predefined response file. It does not prompt you for any information. Before you begin First, make sure that you installed the product in the English language. 10 Microsoft IIS agent User's Guide - Beta 1 Draft

21 Procedure 1. Copy and paste the ITM_Agent_LP_silent.rsp response file template as shown in Response file example. 2. Change the following parameter settings: NLS_PACKAGE_FOLDER Folder where the National Language Support package (NLSPackage) files are located. Typically, the NLSPackage files are located in the nlspackage folder, for example: NLS_PACKAGE_FOLDER = //tmp//lp//nlspackage. PROD_SELECTION_PKG Name of the language pack to install. Several product components can be included in one language package. You might want to install only some of the available components in a language pack. BASE_AGENT_FOUND_PKG_LIST Agent for which you are installing language support. This value is usually the same as PROD_SELECTION_PKG. LANG_SELECTION_LIST Language you want to install. 3. Enter the command to install the language pack with a response file (silent installation): v For Windows systems: lpinstaller.bat -f path_to_response_file v For UNIX or Linux systems: lpinstaller.sh -c candle_home -f path_to_response_file where candle_home is the IBM Tivoli Monitoring base directory. Response file example # IBM Tivoli Monitoring Agent Language Pack Silent Installation Operation # #This is a sample response file for silent installation mode for the IBM Tivoli #Monitoring Common Language Pack Installer. #. #This file uses the IBM Tivoli Monitoring Common Agent Language Pack with the #install package as an example. #Note: #This response file is for the INSTALLATION of language packs only. #This file does not support UNINSTALLATION of language packs in silent mode. # # #To successfully complete a silent installation of the the example of Common Agent #localization pack, complete the following steps: # #1.Copy ITM_Agent_LP_silent.rsp to the directory where lpinstaller.bat or #lpinstaller.sh is located (IBM Tivoli Monitoring Agent Language Pack build #location). # #2.Modify the response file so that it is customized correctly and completely for #your site. # Complete all of the following steps in the response file. # #3.After customizing the response file, invoke the silent installation using the #following command: #For Windows: # lpinstaller.bat -f <path_to_response_file> #For UNIX and Linux: # lpinstaller.sh -c <candle_home> -f <path_to_response_file> #Note:<candle_home> is the IBM Tivoli Monitoring base directory. # Chapter 2. Agent installation and configuration 11

22 # #Force silent install mode. # INSTALLER_UI=silent # #Run add and update actions. # CHOSEN_INSTALL_SET=ADDUPD_SET # #NLS Package Folder, where the NLS Packages exist. #For Windows: # Use the backslash-backslash(\\) as a file separator (for example, #C:\\zosgmv\\LCD \\nlspackage). #For UNIX and Linux: # Use the slash-slash (//) as a file separator (for example, #//installtivoli//lpsilenttest//nlspackage). # #NLS_PACKAGE_FOLDER=C:\\zosgmv\\LCD \\nlspackage NLS_PACKAGE_FOLDER=//tmp//LP//nlspackage # #List the packages to process; both variables are required. #Each variable requires that full paths are specified. #Separate multiple entries with a semicolon (;). #For Windows: # Use the backslash-backslash(\\) as a file separator. #For Unix and Linux: # Use the slash-slash (//) as a file separator. # #PROD_SELECTION_PKG=C:\\zosgmv\\LCD \\nlspackage\\KIP_NLS.nlspkg #BASE_AGENT_FOUND_PKG_LIST=C:\\zosgmv\\LCD \\nlspackage\\KIP_NLS.nlspkg PROD_SELECTION_PKG=//tmp//LP//nlspackage//kex_nls.nlspkg;//tmp//LP//nlspackage// koq_nls.nlspkg BASE_AGENT_FOUND_PKG_LIST=//tmp//LP//nlspackage//kex_nls.nlspkg;// tmp//lp//nlspackage//koq_nls.nlspkg # #List the languages to process. #Separate multiple entries with semicolons. # LANG_SELECTION_LIST=pt_BR;fr;de;it;ja;ko;zh_CN;es;zh_TW Running as a non-administrator user You can run the monitoring agent for Internet Information Services as a non-administrator user. However, some functionality is unavailable. To create a non-administrator user, create a new user and set up registry permissions for the new user as follows : v Full access to the HKEY_LOCAL_MACHINE\SOFTWARE\Candle directory v Read access to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib directory If you define these permissions for a non-administrator user, data is displayed for all the Perfmon-based attribute groups. See Data sources on page 6 for a list of all the Perfmon-based attributes. The non-administrator user must be a member of the Performance Monitor Users and Performance Log Users groups. The following table contains the attribute groups for the IIS Server versions that display data for users who are members of the Administrators group. Table 1. Attribute groups that display data for users who are members of the Administrators group Attribute group IIS 6.0 IIS 7.x IIS 8 ASP NET Apps Filter Yes Yes Yes Availability Yes Yes Yes 12 Microsoft IIS agent User's Guide - Beta 1 Draft

23 Table 1. Attribute groups that display data for users who are members of the Administrators group (continued) Attribute group IIS 6.0 IIS 7.x IIS 8 Mime s Yes Yes Yes Web Service Extensions Restricted List HTTP Custom Error Messages Yes Yes Yes Yes Yes Yes IIS FTP Server Status Yes Yes Yes IIS Version Information Yes Yes Yes FTP Version Information Yes Yes Yes IIS SMTP Server Status Yes Yes Yes SMTP Version Information Yes Yes Yes SMTP Server Yes Yes Yes IIS NNTP Server Status Yes No No IIS FTP Sites Detail Yes No No NNTP Version Information Yes No No NNTP Server Yes No No W3SVC W3WP No Yes Yes WAS W3WP No Yes Yes IIS Components No Yes Yes Microsoft FTP Service No Yes Yes Prerequisites checking The prerequisite checker utility verifies whether all the prerequisites that are required for the agent installation are met. The prerequisite checker creates a log file that contains a report of all the prerequisites checks when the prerequisite checker was run. For the Microsoft IIS agent, the prerequisite checker verifies the following requirements: v Memory v Disk v Operating systems v Microsoft Internet Information Services versions Additionally, the prerequisite checker verifies whether the user, who installs the agent, is a member of the Administrators group. For detailed information about installation prerequisites, see the Prerequisites topic for the agent in the IBM Tivoli Composite Application Manager for Microsoft Applications Information Center ( welcome_msapps63.html ). You can run the prerequisite checker in stand-alone mode or remotely. For more information about the prerequisite checker, see "Prerequisite Checking for IBM Tivoli Monitoring Agents" in the IBM Tivoli Monitoring Installation and Setup Guide. Chapter 2. Agent installation and configuration 13

24 Agent-specific installation and configuration In addition to the installation and configuration information in the IBM Tivoli Monitoring Installation and Setup Guide, use this agent-specific installation and configuration information to install the Microsoft IIS agent. Configuration values For both local and remote configuration, you provide the configuration values for the agent to operate. When you are configuring an agent, a panel is displayed so you can enter each value. When a default value exists, this value is pre-entered into the field. If a field represents a password, two entry fields are displayed. You must enter the same value in each field. The values you type are not displayed to help maintain the security of these values. The configuration for this agent is organized into the following groups: HTTP Error Log Configuration (HTTP_ERROR_LOG) The configuration elements defined in this group are always present in the agent's configuration. This group defines information that applies to the entire agent. Log File Directory (KQ7_HTTP_ERROR_LOG_FILE) HTTP Error Log File Directory The type is string. This value is optional. Default value: C:\WINDOWS\system32\LogFiles\HTTPERR Site Log Configuration (SITE_LOG) The configuration elements defined in this group are always present in the agent's configuration. This group defines information that applies to the entire agent. Log File Directory (KQ7_SITE_LOG_FILE) Site Log File Directory The type is string. This value is optional. Default value: C:\inetpub\logs\LogFiles Remote installation and configuration You can install the monitoring agent remotely from the Tivoli Enterprise Portal or from the command line. When installing the agent remotely, you must provide the configuration values for the agent to operate. See Configuration values. To install from the portal, see the IBM Tivoli Monitoring Installation and Setup Guide. To remotely install or configure an agent through the Tivoli Enterprise Portal, you must have installed the application support for that agent (Tivoli Enterprise Monitoring Server, Tivoli Enterprise Portal Server, and Tivoli Enterprise Portal). You must also have installed the agent bundle into the Remote Deploy Depot. 14 Microsoft IIS agent User's Guide - Beta 1 Draft

25 For information about displaying the configuration options that are available to use with the configuresystem or addsystem commands see "tacmd describesystem" in the IBM Tivoli Monitoring Command Reference. If you are using the command line, the following command is an example of remote installation and configuration for Windows operating systems: tacmd addsystem -t Q7 -n Primary:sample.node.name:NT -p HTTP_ERROR_LOG.KQ7_HTTP_ERROR_LOG_FILE=value SITE_LOG.KQ7_SITE_LOG_FILE=value Chapter 2. Agent installation and configuration 15

26 16 Microsoft IIS agent User's Guide - Beta 1 Draft

27 Chapter 3. Workspaces reference A workspace is the working area of the Tivoli Enterprise Portal application window. The Navigator tree contains a list of the workspaces provided by the agent. About workspaces Use the Navigator tree to select the workspace you want to see. As part of the application window, the status bar shows the Tivoli Enterprise Portal Server name and port number to which the displayed information applies and the ID of the current user. When you select an item in the Navigator tree, a default workspace is displayed. When you right-click a Navigator item, a menu that includes a Workspace item is displayed. The Workspace item contains a list of workspaces for that Navigator item. Each workspace has at least one view. Some views have links to other workspaces. You can also use the Workspace Gallery tool as described in the Tivoli Enterprise Portal User's Guide to open workspaces. The workspaces in the Navigator are displayed in a Physical view that shows your enterprise as a physical mapping or a dynamically populated logical view that is agent-specific. You can also create a Logical view. The Physical view is the default view. This monitoring agent provides predefined workspaces. You cannot modify or delete the predefined workspaces, but you can create new workspaces by editing them and saving the changes with a different name. Workspace views can be any combination of query-based views, event views, and special purpose views. Additional information about workspaces For more information about creating, customizing, and working with workspaces, see "Using workspaces" in the Tivoli Enterprise Portal User's Guide. For a list of the predefined workspaces for this monitoring agent and a description of each workspace, see Predefined workspaces and the information about each individual workspace. Some attribute groups for this monitoring agent might not be represented in the predefined workspaces or views for this agent. For a full list of the attribute groups, see Attribute groups for the monitoring agent on page 29. Predefined workspaces The Microsoft IIS agent provides predefined workspaces, which are organized by Navigator item. v Microsoft Internet Information Services Navigator item Microsoft Internet Information Services workspace v Active Server Pages Navigator item Active Server Pages workspace Session and Transaction Statistics workspace v ASP NET Navigator item ASP NET workspace v Availability Navigator item Copyright IBM Corp. 2008,

28 Availability workspace Performance Object Status workspace Thread Pool Status workspace v Event Log Navigator item Event Log workspace v FTP Server Navigator item Data and File Traffic Statistics workspace FTP Server workspace FTP Site Dynamic IP and Domain Restrictions Statistics workspace User and Connection Statistics workspace User and Connection Statistics for Microsoft FTP V6 workspace v IIS Configuration Navigator item Identity and Recycling Application Pool Setting workspace IIS Configuration workspace Mime s and Extension Restriction List workspace Performance and Health Application Pool Setting workspace Website Requests and Errors Statistics workspace v IIS Global Navigator item IIS Global workspace IIS Installed Components workspace Server Status workspace v NNTP Server Navigator item NNTP Server workspace v SMTP Server Navigator item SMTP Server workspace v Web Server Navigator item CGI and ISAPI Extension Request Statistics workspace Data and File Transfer Statistics workspace Error Statistics workspace User Request Statistics workspace Web Server workspace Web Server Cache Statistics workspace Website Dynamic IP and Domain Restrictions Statistics workspace v Worker Process Navigator item WAS Application Pool Statistics workspace WAS Worker Process Statistics workspace Worker Process workspace Workspace descriptions Each workspace description provides information about the workspace such as the purpose and a list of views in the workspace. Workspaces are listed under Navigator items. 18 Microsoft IIS agent User's Guide - Beta 1 Draft

29 Microsoft Internet Information Services Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. Microsoft Internet Information Services workspace This workspace provides information about Microsoft IIS web server V6.0 and V7.x, including the application pool state and the availability of services and processes. This workspace contains the following views: ASP Request Traffic Displays the average number of ASP requests that were executed per second. Web Data Traffic Displays the rate in seconds at which data in KB was sent and received by the web server. File Cache Lookup Displays the number of successful and unsuccessful lookups in the file cache. BLOB Cache Lookup Displays the number of successful and unsuccessful lookups in the Binary Large Objects (BLOB) cache. Application Pool State Displays the status of the individual application pool. Processes and Services Displays the state of services and processes in the application. The state is UP if the service is running and DOWN if the service exists but is not running. Active Server Pages Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. Active Server Pages workspace This workspace displays statistics for ASP Requests and Errors. This workspace contains the following views: Request and Error Statistics Displays the information about Request and Error related attributes of ASP. Error Rate Displays the average number of errors that occurred per second. Request Rate Displays the average number of requests that were executed per second. Response Time Displays the time, in milliseconds, that it took to execute the most recent request and the time the most recent request waited in the queue. Request Statistics Displays the number of Rejected, Not Found, Not Authorized, and Timed out requests for ASP. Session and Transaction Statistics workspace This workspace displays the session and transaction statistics for ASP. This workspace contains the following views: Session and Transaction Statistics Displays the information about sessions and transaction related attributes of ASP. Current Sessions Displays the number of sessions currently being serviced. Transaction Rate Displays the average number of transactions that have been started per second. ASP NET Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. ASP NET workspace This workspace displays the ASP.NET application statistics. Chapter 3. Workspaces reference 19

30 This workspace contains the following views: ASP.NET Application Statistics Displays the attributes that provide information about a single instance of an ASP.NET application. Infrastructure Error Event Rate Displays the number of HTTP error events raised per second. Cache % Machine Memory Displays the amount of physical memory used by the computer divided by the physical memory limit for the cache, as a percentage. Cache % Process Memory Displays the value of private bytes for the worker process divided by the private bytes memory limit for the cache, as a percentage. Availability Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. Availability workspace The Availability workspace displays the overall health of the application. This workspace contains the following views: Availability Displays the state of each component in the application. Each process is displayed using a descriptive name, the name of the running process, and the state of the process (UP, DOWN, or PROCESS_DATA_NOT_AVAILABLE). Each service is displayed using a descriptive name, the short name of the service, and the state of the service (UP, DOWN, or UNKNOWN). The state is UP if the service is running, DOWN if the service exists but is not running. UNKNOWN indicates that the service is not installed, so these elements are filtered from the view. When the state of the component is DOWN (for a process, or service) it is highlighted with a red background. Processor Displays the amount of CPU used by each process that is a component of the application. This displays the 2 main components of CPU usage, privileged time which is time spent in the kernel on behalf of the process and user mode time, which is the time spent running the process code. Threads Displays the number of threads used by each process that is a component of the application. Memory Displays the amount of memory being consumed by each process that is a component of the application. This total (virtual) size of the process and the size of the process in memory (working set) are displayed. Performance Object Status workspace This workspace displays the overall health of the application. This workspace contains the following view: Performance Object Status Displays the status of the data collection from the application. Usually this will display NO ERROR indicating that the agent is collecting application data correctly. If some of the agent's other views are empty, then this view will help isolate the cause of the failure. PerfMon objects will display the object class name. Thread Pool Status workspace This workspace displays the information of the Thread Pool Status attribute group. This workspace contains the following view: Thread Pool Status Provides information about the Thread Pool Status attribute group and the status of the internal thread pool used to collect the data asynchronously. 20 Microsoft IIS agent User's Guide - Beta 1 Draft

31 Event Log Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. Event Log workspace The Event Log workspace shows the details for the recent events logged by the application to the Windows Event Log. By default, the agent only displays events that occur after the agent is started. Events are removed from the Event Log view 1 hour after they occur. This workspace contains the following view: Event Log Shows the recent Event Log entries for Microsoft Internet Information Server. FTP Server Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. Data and File Traffic Statistics workspace This workspace displays the data and file traffic statistics of the Microsoft FTP service V7.x and later. This workspace contains the following views: Data and File Traffic Statistics Displays the attributes that provide information about data and file traffic of Microsoft FTP service V7.x and later. Data Traffic Displays the rate of data sent, received, and transferred by the Microsoft FTP service in KB per second. File Traffic Displays the rate of files sent, received, and transferred by the Microsoft FTP service per second. FTP Server workspace This workspace displays the data and file traffic statistics of FTP service V6. This workspace contains the following views: Data and File Traffic Statistics Displays the attributes that provide information about data and file traffic of FTP service. FTP Sites Displays status for FTP sites running on Microsoft IIS FTP Server. Data Traffic Displays the rate of data sent, received, and transferred by the FTP service in KB per second. File Traffic Displays the rate of files sent, received, and transferred by the FTP service per second. FTP Site Dynamic IP and Domain Restrictions Statistics workspace This workspace displays the settings for the dynamic IP and domain restrictions of each FTP site. This workspace contains the following views: FTP Site Dynamic IP and Domain Restrictions Summary Displays the attributes that provide information about the dynamic IP and domain restrictions that are applied to each FTP site. FTP Site IP and Domain Restrictions Settings Summary Displays the attributes that provide configuration information about the dynamic IP and domain restrictions that are applied to each FTP site. User and Connection Statistics workspace This workspace displays the user and connection statistics of the Microsoft FTP service V7.x and later. This workspace contains the following views: Chapter 3. Workspaces reference 21

32 User and Connection Statistics Displays the information about user and connection related attributes of Microsoft FTP service. Current Users Displays the number of users who currently have anonymous and nonanonymous connections that have been made by using the Microsoft FTP service. Current Connections Displays the current number of connections that have been established with the Microsoft FTP service. % Current Users Displays the percentage of users who have anonymous and nonanonymous connections that have been made by using the Microsoft FTP service. Logon Attempt Rate Displays the rate of number of logons that have been attempted by using the Microsoft FTP service per second. User and Connection Statistics for Microsoft FTP V6 workspace This workspace displays the user and connection statistics of FTP service V6. This workspace contains the following views: User and Connection Statistics Displays the information about user and connection related attributes of FTP service. Current Users Displays the number of users who currently have anonymous and nonanonymous connections that were made by using the FTP service. Current Connections Displays the current number of connections that have been established with the FTP service. % Current Users Displays the percentage of users who have anonymous and nonanonymous connections that were made by using the FTP service. Logon Attempt Rate Displays the rate of number of logons that have been attempted by using the FTP service per second. IIS Configuration Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. Identity and Recycling Application Pool Setting workspace This workspace displays the identity and recycling related setting for an application pool. This workspace contains the following views: Recycling Displays the recycling related configuration settings of an application pool. Identity Displays the identity related configuration settings of an application pool. Application Pool Configuration Displays the status and configuration settings of an application pool. IIS Configuration workspace This workspace displays the HTTP custom error messages configured with web server and HTTP errors logged by HTTP API. This workspace contains the following views: HTTP Custom Error Messages Displays the information related to HTTP custom error messages. HTTP Error Log Displays the information about HTTP errors logged by HTTP sys kernel in the Httperr log file. 22 Microsoft IIS agent User's Guide - Beta 1 Draft

33 Mime s and Extension Restriction List workspace This workspace displays the MIME types and web service extensions associated with web server. This workspace contains the following views: Mime s Displays all the Multipurpose Internet Mail Extensions (MIME) types so that you can identify the types of content that can be served from a web server to a browser or a mail client. Web Service Extension Restriction List Displays information about all the available web service extensions for Microsoft IIS. Performance and Health Application Pool Setting workspace This workspace displays the performance and health related setting for an application pool. This workspace contains the following views: Performance Displays the performance related configuration settings of an application pool. Health Displays the health related configuration settings of an application pool. Website Requests and Errors Statistics workspace This workspace displays the details of each request that arrives at a web server. This workspace contains the following view: Website W3C Logs Summary Displays information about each request that is compliant to the W3C format and that arrives at a web server. IIS Global Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. IIS Global workspace This workspace displays the statistics for Internet Information Services Global object. This workspace contains the following views: Global Parameters Displays the attributes that show statistics for Internet Information Services Global object. % Cache Hits Displays the percentage(%) hits for file cache and BLOB cache. Current Files Cached Displays the number of files that are currently in the cache. Cache Memory Usage Displays the current and maximum number of KB used for the file cache. Current BLOB Cached Displays the number of BLOB information blocks that are currently in the cache. Active Flushed Entries Displays the number of cached file handles that will close when all current transfers are complete. IIS Installed Components workspace This workspace displays the installed modules of IIS V7.x and later. This workspace contains the following view: IIS Installed Components Displays the installed module names of Microsoft IIS V7.x and later. Server Status workspace This workspace displays the status and version information for SMTP, NNTP, FTP, and IIS web server. This workspace contains the following views: Web Server Status Displays the current status of the Microsoft IIS web server. Chapter 3. Workspaces reference 23

34 IIS Version Displays the information about Microsoft IIS web server version. FTP Server Status Displays the current status of the Microsoft IIS FTP Server. FTP Version Displays the information about Microsoft IIS FTP Server version. NNTP Server Status Displays the current status of the NNTP Server on Microsoft IIS 6.0. NNTP Version Displays the information about NNTP Server version on Microsoft IIS 6.0. SMTP Server Status Displays the current status of the Microsoft IIS SMTP Server. SMTP Version Displays the information about Microsoft IIS SMTP Server version. NNTP Server Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. NNTP Server workspace This workspace displays the status for each NNTP Virtual Server running on Microsoft IIS 6.0. This workspace contains the following view: NNTP Virtual Server Status Displays the status for each NNTP Virtual Server running on Microsoft IIS 6. SMTP Server Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. SMTP Server workspace This workspace displays the status for each SMTP Virtual Server running on Microsoft IIS SMTP server. This workspace contains the following view: SMTP Virtual Server Status Displays the status for each SMTP Virtual Server running on Microsoft IIS SMTP server. Web Server Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. CGI and ISAPI Extension Request Statistics workspace This workspace displays the request statistics for CGI/ISAPI extension requests made to the web service. This workspace contains the following views: CGI/ISAPI Extension Request Statistics Displays the information about the CGI / ISAPI Extension Requests attributes of web service. CGI Request Rate Displays the rate, in seconds, at which CGI requests are processed simultaneously by the web service. ISAPI Request Rate Displays the rate, in seconds, at which ISAPI extension requests are processed by the web service. Data and File Transfer Statistics workspace This workspace displays the data and file traffic statistics of web service. This workspace contains the following views: Data and File Transfer Statistics Displays the attributes that provide information about data and file traffic of web service. 24 Microsoft IIS agent User's Guide - Beta 1 Draft

35 Data Transfer Rate Displays the rate of data sent, received, and transferred by the web service in KB per second. File Transfer Rate Displays the rate of files sent and received by the web service per second. Error Statistics workspace This workspace displays the error statistics of the web service. This workspace contains the following views: Error and Request Statistics Displays the information about the error related attributes of the web service. Page Not Found Error Rate Displays the rate, in seconds, at which requests were not satisfied by the server because the requested document was not found. Locked Error Rate Displays the rate, in seconds, at which requests were not satisfied because the requested document was locked. User Request Statistics workspace This workspace displays the user request statistics of the web service. This workspace contains the following views: User Request Statistics Displays the information about user and request related attributes of the web service. Current Users Request Displays the number of users who currently have anonymous and nonanonymous requests pending with the web service. User Request Rate Displays the rate, in seconds, at which users made anonymous and nonanonymous requests to the web service. % Current Users Displays the percentage of users who currently have anonymous and nonanonymous requests pending with the web service. Web Server workspace This workspace displays connection and logon attempts statistics of web service and status of each website hosted on Microsoft IIS. This workspace contains the following views: Connection and Logon Attempt Statistics Displays the attributes that provide information about connection and logon attempts of web service. Web Sites Displays status for websites running on Microsoft IIS web server. Current Connections Displays the number of active connections made to the web service. Connection and Logon Attempts Displays the rate, in seconds, at which logon and connections are attempted to the web service. Website Certificate Details Displays the details of the website certificate for each website hosted on Microsoft IIS. Web Server Cache Statistics workspace This workspace displays the web server cache statistics. This workspace contains the following views: Web Server Cache Statistics Displays the information about the web server cache attributes. Current File Cache Memory Usage Displays the current number of KB that are used for the user-mode file cache. Chapter 3. Workspaces reference 25

36 Current File Cached Displays the current number of files that are in the user-mode cache. Flushed Entries Displays the file handles cached in user-mode that will be closed when all current transfers complete. Website Dynamic IP and Domain Restrictions Statistics workspace This workspace displays the settings for the dynamic IP and domain restrictions of each website. This workspace contains the following views: Website Dynamic IP and Domain Restrictions Summary Displays the attributes that provide information about the dynamic IP and domain restrictions that are applied on each website. Website IP and Domain Restrictions Settings Summary Displays the attributes that provide configuration information about the dynamic IP and domain restrictions that are applied on each website. Website Dynamic IP Restrictions Settings Summary Displays the attributes that provide configuration information about the dynamic IP restrictions that are applied on each website. Worker Process Navigator item The workspace descriptions are organized by the Navigator item to which the workspaces are relevant. WAS Application Pool Statistics workspace This workspace displays the information related to the Windows Process Activation Service (WAS) for application pool of the IIS V7.5 and later. This workspace contains the following views: WAS Application Pool Statistics Displays the information related to the Windows Process Activation Service (WAS) for application pool of the IIS V7.5 and later. Current Worker Processes Displays the current number of worker processes that are running in application pool the IIS V7.5 and later. WAS Worker Process Statistics workspace This workspace displays the statistics of worker processes running on Microsoft IIS V7.x and later. This workspace contains the following views: WAS Worker Process Statistics Displays data about a specific worker process. Message Received Rate Displays the rate of total number of messages received by the worker process from Web Admin service per second. Health Ping Rate Displays the rate of total number of health pings received by the process per second. Message Sent Rate Displays the rate of total number of messages sent to Web Admin service by the worker process per second. Worker Process workspace This workspace displays the HTTP request processing related data for the worker processes on Microsoft IIS V7.x and later. This workspace contains the following views: W3SVC Worker Process Statistics Displays the HTTP request processing related data for the worker processes on Microsoft IIS V7.x and later. HTTP Request Rate Displays the HTTP requests being processed by the worker process per second. 26 Microsoft IIS agent User's Guide - Beta 1 Draft

37 Active Thread Count Displays the number of threads actively processing requests in the worker process. Chapter 3. Workspaces reference 27

38 28 Microsoft IIS agent User's Guide - Beta 1 Draft

39 Chapter 4. Attributes reference Attributes are the application properties that are being measured and reported by the IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. About attributes Attributes are organized into attribute groups. Attributes in an attribute group relate to a single object such as an application, or to a single kind of data such as status information. Attributes in a group can be used in queries, query-based views, situations, policy workflows, take action definitions, and launch application definitions. Chart or table views and situations are two examples of how attributes in a group can be used: v Chart or table views Attributes are displayed in chart and table views. The chart and table views use queries to specify which attribute values to request from a monitoring agent. You use the Properties editor to apply filters and set styles to define the content and appearance of a view based on an existing query. v Situations You use attributes to create situations that monitor the state of your operating system, database, or application. A situation describes a condition you want to test. When you start a situation, the values you assign to the situation attributes are compared with the values collected by the Microsoft IIS agent and registers an event if the condition is met. You are alerted to events by indicator icons that are displayed in the Navigator. Additional information about attributes For more information about using attributes and attribute groups, see the Tivoli Enterprise Portal User's Guide. For a list of the attribute groups, a list of the attributes in each attribute group, and descriptions of the attributes for this monitoring agent, see Attribute groups for the monitoring agent and Attributes in each attribute group on page 33. Attribute groups for the monitoring agent The Microsoft IIS agent contains the following attribute groups. The table name depends on the maximum table name limits of the target database being used for the Tivoli Data Warehouse. If the maximum name is 30 characters, any warehouse table name longer than 30 characters is shortened to 30 characters. v Attribute group name: Active Server Pages Table name: KQ7ACTIVES Warehouse table name: KQ7_ACTIVE_SERVER_PAGES or KQ7ACTIVES v Attribute group name: Application Pool WAS Table name: KQ7APPLWAS Warehouse table name: KQ7_APPLICATION_POOL_WAS or KQ7APPLWAS v Attribute group name: ASP NET Table name: KQ7ASPNETA Warehouse table name: KQ7_ASP_NET or KQ7ASPNETA Copyright IBM Corp. 2008,

40 v Attribute group name: ASP NET Apps Filter Table name: KQ7ASPNETF Warehouse table name: KQ7_ASP_NET_APPS_FILTER or KQ7ASPNETF v Attribute group name: ASP NET Apps V4 Table name: KQ7ASPNET4 Warehouse table name: KQ7_ASP_NET_APPS_V4 or KQ7ASPNET4 v Attribute group name: Availability Table name: KQ7AVAIL Warehouse table name: KQ7_AVAILABILITY or KQ7AVAIL v Attribute group name: Centralized Certificate Details Table name: KQ7CENCER Warehouse table name: KQ7_CENTRALIZED_CERTIFICATE_DETAILS or KQ7CENCER v Attribute group name: Event Log Table name: KQ7EVTLOG Warehouse table name: KQ7_EVENT_LOG or KQ7EVTLOG v Attribute group name: Failed Request Tracing Table name: KQ7FARETR Warehouse table name: KQ7_FAILED_REQUEST_TRACING or KQ7FARETR v Attribute group name: Failed Request Tracing Rules Table name: KQ7FAREQTR Warehouse table name: KQ7_FAILED_REQUEST_TRACING_RULES or KQ7FAREQTR v Attribute group name: FTP Logon Attempt Restrictions Settings Table name: KQ7FTPLAR Warehouse table name: KQ7_FTP_LOGON_ATTEMPT_RESTRICTIONS_SETTINGS or KQ7FTPLAR v Attribute group name: FTP Server Site Status Table name: KQ7IISFTPS Warehouse table name: KQ7_FTP_SERVER_SITE_STATUS or KQ7IISFTPS v Attribute group name: FTP Service Table name: KQ7FTPSERV Warehouse table name: KQ7_FTP_SERVICE or KQ7FTPSERV v Attribute group name: FTP Site Dynamic IP and Domain Restrictions Table name: KQ7FDYNIPD Warehouse table name: KQ7_FTP_SITE_DYNAMIC_IP_AND_DOMAIN_RESTRICTIONS or KQ7FDYNIPD v Attribute group name: FTP Site IP and Domain Restrictions Settings Table name: KQ7FIPDORS Warehouse table name: KQ7_FTP_SITE_IP_AND_DOMAIN_RESTRICTIONS_SETTINGS or KQ7FIPDORS v Attribute group name: FTP Version Information Table name: KQ7IISFTPI Warehouse table name: KQ7_FTP_VERSION_INFORMATION or KQ7IISFTPI v Attribute group name: HTTP Custom Error Messages Table name: KQ7HTTPCUS Warehouse table name: KQ7_HTTP_CUSTOM_ERROR_MESSAGES or KQ7HTTPCUS v Attribute group name: Http Error Log 30 Microsoft IIS agent User's Guide - Beta 1 Draft

41 Table name: KQ7HTTPERR Warehouse table name: KQ7_HTTP_ERROR_LOG or KQ7HTTPERR v Attribute group name: IIS Application Pools Details Table name: KQ7APPPOOL Warehouse table name: KQ7_IIS_APPLICATION_POOLS_DETAILS or KQ7APPPOOL v Attribute group name: IIS Application Pools Setting Table name: KQ7IISAPPL Warehouse table name: KQ7_IIS_APPLICATION_POOLS_SETTING or KQ7IISAPPL v Attribute group name: IIS Components Table name: KQ7IISCOMP Warehouse table name: KQ7_IIS_COMPONENTS or KQ7IISCOMP v Attribute group name: IIS FTP Server Bindings Table name: KQ7FTPBIND Warehouse table name: KQ7_IIS_FTP_SERVER_BINDINGS or KQ7FTPBIND v Attribute group name: IIS FTP Server Status Table name: KQ7IISFTPM Warehouse table name: KQ7_IIS_FTP_SERVER_STATUS or KQ7IISFTPM v Attribute group name: IIS FTP Sites Detail Table name: KQ7FSITDTL Warehouse table name: KQ7_IIS_FTP_SITES_DETAIL or KQ7FSITDTL v Attribute group name: IIS NNTP Server Status Table name: KQ7IISNNT2 Warehouse table name: KQ7_IIS_NNTP_SERVER_STATUS or KQ7IISNNT2 v Attribute group name: IIS SMTP Server Status Table name: KQ7IISSMM Warehouse table name: KQ7_IIS_SMTP_SERVER_STATUS or KQ7IISSMM v Attribute group name: IIS Version Information Table name: KQ7IISWEBI Warehouse table name: KQ7_IIS_VERSION_INFORMATION or KQ7IISWEBI v Attribute group name: IIS Web Server Bindings Table name: KQ7WEBBIND Warehouse table name: KQ7_IIS_WEB_SERVER_BINDINGS or KQ7WEBBIND v Attribute group name: IIS Web Server Site Status Table name: KQ7IISWEBS Warehouse table name: KQ7_IIS_WEB_SERVER_SITE_STATUS or KQ7IISWEBS v Attribute group name: IIS Web Server Status Table name: KQ7IISWEB1 Warehouse table name: KQ7_IIS_WEB_SERVER_STATUS or KQ7IISWEB1 v Attribute group name: IIS Web Sites Detail Table name: KQ7WSITDTL Warehouse table name: KQ7_IIS_WEB_SITES_DETAIL or KQ7WSITDTL v Attribute group name: Internet Information Services Gl Table name: KQ7INTERNE Warehouse table name: KQ7_INTERNET_INFORMATION_SERVICES_GL or KQ7INTERNE v Attribute group name: Microsoft FTP Service Chapter 4. Attributes reference 31

42 Table name: KQ7WIN32P1 Warehouse table name: KQ7_MICROSOFT_FTP_SERVICE or KQ7WIN32P1 v Attribute group name: Mime s Table name: KQ7MIMETYP Warehouse table name: KQ7_MIME_TYPES or KQ7MIMETYP v Attribute group name: MSMQ Incoming HTTP Traffic Table name: KQ7MQHTPIT Warehouse table name: KQ7_MSMQ_INCOMING_HTTP_TRAFFIC or KQ7MQHTPIT v Attribute group name: NNTP Server Table name: KQ7IISNNTP Warehouse table name: KQ7_NNTP_SERVER or KQ7IISNNTP v Attribute group name: NNTP Version Information Table name: KQ7IISNNT0 Warehouse table name: KQ7_NNTP_VERSION_INFORMATION or KQ7IISNNT0 v Attribute group name: Performance Object Status Table name: KQ7POBJST Warehouse table name: KQ7_PERFORMANCE_OBJECT_STATUS or KQ7POBJST v Attribute group name: SMTP Server Table name: KQ7IISSMTP Warehouse table name: KQ7_SMTP_SERVER or KQ7IISSMTP v Attribute group name: SMTP Version Information Table name: KQ7IISSMT0 Warehouse table name: KQ7_SMTP_VERSION_INFORMATION or KQ7IISSMT0 v Attribute group name: Thread Pool Status Table name: KQ7THPLST Warehouse table name: KQ7_THREAD_POOL_STATUS or KQ7THPLST v Attribute group name: Virtual Domain Setting Table name: KQ7VIRDOSE Warehouse table name: KQ7_VIRTUAL_DOMAIN_SETTING or KQ7VIRDOSE v Attribute group name: W3SVC W3WP Table name: KQ7WIN32PE Warehouse table name: KQ7_W3SVC_W3WP or KQ7WIN32PE v Attribute group name: WAS W3WP Table name: KQ7WIN32P0 Warehouse table name: KQ7_WAS_W3WP or KQ7WIN32P0 v Attribute group name: Web Service Table name: KQ7WEBSERV Warehouse table name: KQ7_WEB_SERVICE or KQ7WEBSERV v Attribute group name: Web Service Cache Table name: KQ7WEBSER1 Warehouse table name: KQ7_WEB_SERVICE_CACHE or KQ7WEBSER1 v Attribute group name: Web Service Extensions Restricted List Table name: KQ7RESTRIC Warehouse table name: KQ7_WEB_SERVICE_EXTENSIONS_RESTRICTED_LIST or KQ7RESTRIC v Attribute group name: Website Certificate Details 32 Microsoft IIS agent User's Guide - Beta 1 Draft

43 Table name: KQ7SITECER Warehouse table name: KQ7_WEBSITE_CERTIFICATE_DETAILS or KQ7SITECER v Attribute group name: Website Dynamic IP and Domain Restrictions Table name: KQ7DYNIPDO Warehouse table name: KQ7_WEBSITE_DYNAMIC_IP_AND_DOMAIN_RESTRICTIONS or KQ7DYNIPDO v Attribute group name: Website Dynamic IP Restrictions Settings Table name: KQ7DYIPRS Warehouse table name: KQ7_WEBSITE_DYNAMIC_IP_RESTRICTIONS_SETTINGS or KQ7DYIPRS v Attribute group name: Website IP and Domain Restrictions Settings Table name: KQ7IPDORS Warehouse table name: KQ7_WEBSITE_IP_AND_DOMAIN_RESTRICTIONS_SETTINGS or KQ7IPDORS v Attribute group name: Website Virtual Dir Details Table name: KQ7VIRDIR Warehouse table name: KQ7_WEBSITE_VIRTUAL_DIR_DETAILS or KQ7VIRDIR v Attribute group name: Websites W3C Logs Table name: KQ7WW3CLOG Warehouse table name: KQ7_WEBSITES_W3C_LOGS or KQ7WW3CLOG Attributes in each attribute group Attributes in each Microsoft IIS agent attribute group collect data that the agent uses for monitoring. The descriptions of the attribute groups contain the following information: Historical group Whether the attribute group is a historical type that you can roll off to a data warehouse. Attribute descriptions Information such as description, type, source, and warehouse name, as applicable, for each attribute in the attribute group. Some attributes are designated as key attributes. A key attribute is an attribute that is used in warehouse aggregation to identify rows of data that represent the same object. The information sometimes uses C programming code syntax for if-then-else clauses to describe how an attribute is derived, for example: (CPU_Pct <0) (Memory_Pct <0)?0:1 This example means that if the CPU_Pct attribute is less than 0 or if the Memory_Pct attribute is less than 0, then the attribute is set to 0. Otherwise, the attribute is set to 1. Active Server Pages attribute group This attribute group monitors Active Server Pages performance. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Active Server Pages attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. Chapter 4. Attributes reference 33

44 The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Error Rate (per sec) attribute The average number of errors that occurred per second. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Errors/Sec. ERRORS_RATE or ERRORS_SEC Errors During Script Runtime attribute The number of requests that failed because run-time errors occurred. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Errors During Script Runtime. ERRORS_DURING_SCRIPT_RUNTIME or ERRORS_DUR Errors From ASP Preprocessor attribute The number of requests that failed because preprocessor errors occurred. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 34 Microsoft IIS agent User's Guide - Beta 1 Draft

45 The source for this attribute is Perfmon - Active Server Pages\*\Errors From ASP Preprocessor. ERRORS_FROM_ASP_PREPROCESSOR or ERRORS_FRO Errors From Script Compilers attribute The number of requests that failed because script compilation errors occurred. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Errors From Script Compilers. ERRORS_FROM_SCRIPT_COMPILERS or ERRORS_FR0 Request KBytes In Total attribute The total size, in KB, of data received due to ASP requests. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Request_Bytes_In_Total / REQUEST_KBYTES_IN_TOTAL or REQKBIN_TO Request KBytes Out Total attribute The total size, in KB, of responses sent to clients and does not include standard HTTP response headers. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Request_Bytes_Out_Total / Chapter 4. Attributes reference 35

46 REQUEST_KBYTES_OUT_TOTAL or REQKOUT_TO Request Execution Time (ms) attribute The number of milliseconds that it took to execute the most recent request. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Request Execution Time. REQUEST_EXECUTION_TIME or REQUEST_EX Request Wait Time (ms) attribute The number of milliseconds that the most recent request waited for in the queue. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Request Wait Time. REQUEST_WAIT_TIME or REQUEST_WA Request Wait GT Execution Time (ms) attribute The difference between request wait time and request execution time. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Request_Wait_Time - Request_Execution_Time. REQUEST_WAIT_GT_EXECUTION_TIME or REQW_TIME Requests Disconnected Count attribute The number of requests that were disconnected because the communication had failed. 36 Microsoft IIS agent User's Guide - Beta 1 Draft

47 Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Disconnected. REQUESTS_DISCONNECTED or REQUESTS_D Requests Executing Count attribute The number of requests that are currently executing. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Executing. REQUESTS_EXECUTING or REQUESTS_E Requests Failed Total attribute The number of requests that failed due to errors, authorization failure, and rejections. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Failed Total. REQUESTS_FAILED_TOTAL or REQUESTS_F Requests Not Authorized Count attribute The number of requests that failed because access rights were insufficient. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 37

48 The source for this attribute is Perfmon - Active Server Pages\*\Requests Not Authorized. REQUESTS_NOT_AUTHORIZED or REQUESTS_N Requests Not Found Count attribute The number of requests that were made for files that were not found. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Not Found. REQUESTS_NOT_FOUND or REQUESTS_0 Requests Queued Count attribute The number of requests that are waiting in the queue for service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Queued. REQUESTS_QUEUED or REQUESTS_Q Requests Queued Delta attribute The change in requests queued. Integer (difference between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 38 Microsoft IIS agent User's Guide - Beta 1 Draft

49 The source for this attribute is Perfmon - Active Server Pages\*\Requests Queued. REQUESTS_QUEUED_DELTA or REQ_QDT Requests Rejected Count attribute The number of requests that were not executed because there were insufficient resources to process them. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Rejected. REQUESTS_REJECTED or REQUESTS_R Requests Succeeded Count attribute The number of requests that executed successfully. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Succeeded. REQUESTS_SUCCEEDED or REQUESTS_1 Requests Timed Out Count attribute The number of requests that timed out. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Timed Out. REQUESTS_TIMED_OUT or REQUESTS_T Chapter 4. Attributes reference 39

50 Requests Total attribute The number of requests that have been made since the service was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests Total. REQUESTS_TOTAL or REQUESTS_2 Request Rate (per sec) attribute The average number of requests that were executed per second. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Requests/Sec. REQUESTS_RATE or REQUESTS_S Current Sessions attribute The number of sessions currently being serviced. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Sessions Current. SESSIONS_CURRENT or SESSIONS_C Timed Out Sessions attribute The number of sessions that have timed out. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 40 Microsoft IIS agent User's Guide - Beta 1 Draft

51 The source for this attribute is Perfmon - Active Server Pages\*\Sessions Timed Out. SESSIONS_TIMED_OUT or SESSIONS_T Total Sessions attribute The number of sessions that have run since the service was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Sessions Total. SESSIONS_TOTAL or SESSIONS_0 Transaction Rate (per sec) attribute The average number of transactions that have been started per second. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Transactions/sec. TRANSACTIONS_RATE or TRANSACTIO Transactions Aborted attribute The number of transactions that have been canceled. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Transactions Aborted. Chapter 4. Attributes reference 41

52 TRANSACTIONS_ABORTED or TRANSACTI0 Transactions Committed attribute The number of transactions that have been committed. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Transactions Committed. TRANSACTIONS_COMMITTED or TRANSACTI1 Transactions Pending Count attribute The number of transactions that are pending. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Transactions Pending. TRANSACTIONS_PENDING_COUNT or TRANSACTI2 Total Transactions attribute The number of transactions that have occurred since the service was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Active Server Pages\*\Transactions Total. TRANSACTIONS_TOTAL or TRANSACTI3 Application Pool WAS attribute group This attribute group provides information related to the Windows Process Activation Service (WAS) for application pool of IIS V7.5 and later. 42 Microsoft IIS agent User's Guide - Beta 1 Draft

53 Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Application Pool WAS attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Name attribute: This attribute is a key attribute. The name of the application pool. The source for this attribute is derived: instancename(0). NAME Current AppPool State attribute The current state of an application pool. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v UNINITIALIZED (1) v INITIALIZED (2) v RUNNING (3) v DISABLING (4) v DISABLED (5) v SHUTDOWN PENDING (6) v DELETE PENDING (7) The source for this attribute is Perfmon - APP_POOL_WAS\*\Current Application Pool State. CURRENT_APPPOOL_STATE or CURAPLSTAT Current Application Pool Uptime (hrs) attribute Chapter 4. Attributes reference 43

54 The number of hours that the application pool is running since it was started. Real number (64-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Value Exceeds Maximum ( ) v Value Exceeds Minimum ( ) The source for this attribute is derived: Current_Application_Pool_Uptime / CURRENT_APPLICATION_POOL_UPTIME_IN_HRS or CURAPLUPHR Current Worker Processes attribute The current number of worker processes that are running in the application pool. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Current Worker Processes. CURRENT_WORKER_PROCESSES or CURRENTWPS Maximum Worker Processes attribute The maximum number of worker processes that have been created for the application pool since the service was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Maximum Worker Processes. MAXIMUM_WORKER_PROCESSES or MAXIMUMWPS Recent Worker Process Failures attribute The number of times that the worker process for the application pool failed during the rapid-fail protection interval. Integer (32-bit gauge) with enumerated values. The strings are displayed in the 44 Microsoft IIS agent User's Guide - Beta 1 Draft

55 Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Recent Worker Process Failures. RECENT_WORKER_PROCESS_FAILURES or RCNTWPFAIL Time Since Last Worker Process Failure (hrs) attribute The number of hours since the last worker process failed in the application pool. Real number (64-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Value Exceeds Maximum ( ) v Value Exceeds Minimum ( ) The source for this attribute is derived: Time_Since_Last_Worker_Process_Failure / TIME_SINCE_LAST_WORKER_PROCESS_FAILURE_IN_HRS or WPFAILRHRS Total Application Pool Recycles attribute The total number of times that the application pool has been recycled since the service was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Total Application Pool Recycles. TOTAL_APPLICATION_POOL_RECYCLES or TOTAPPRCYC Total Application Pool Uptime (hrs) attribute The number of hours that the application pool is running since the application pool was started. Real number (64-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Value Exceeds Maximum ( ) v Value Exceeds Minimum ( ) Chapter 4. Attributes reference 45

56 The source for this attribute is derived: Total_Application_Pool_Uptime / TOTAL_APPLICATION_POOL_UPTIME_IN_HRS or TOTAPPUPHR Total Worker Process Failures attribute The total number of times that the worker process failed since the application pool was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Total Worker Process Failures. TOTAL_WORKER_PROCESS_FAILURES or TOTLWPFAIL Total Worker Process Ping Failures attribute The total number of times that the WAS did not receive a response to the ping messages that were sent to the worker process. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Total Worker Process Ping Failures. TOTAL_WORKER_PROCESS_PING_FAILURES or TOTPNGFAIL Total Worker Process Shutdown Failures attribute The total number of times that the WAS failed to shut down the worker process since the application pool was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 46 Microsoft IIS agent User's Guide - Beta 1 Draft

57 The source for this attribute is Perfmon - APP_POOL_WAS\*\Total Worker Process Shutdown Failures. TOTAL_WORKER_PROCESS_SHUTDOWN_FAILURES or TOTSHTFAIL Total Worker Process Startup Failures attribute The total number of times that the WAS failed to start the worker process since the application pool was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Total Worker Process Startup Failures. TOTAL_WORKER_PROCESS_STARTUP_FAILURES or TOTWPSFAIL Total Worker Processes Created attribute The total number of worker processes that were created for the application pool since the service was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - APP_POOL_WAS\*\Total Worker Processes Created. TOTAL_WORKER_PROCESSES_CREATED or TOTALWPCRT Application Pool Name attribute The name of the application pool. The source for this attribute is derived: "W3SVC/APPPOOLS/" +instancename(0). APP_POOL_NAME or APPOOLNAME ASP NET attribute group This attribute group provides information of ASP.NET applications for.net framework V2.0. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Chapter 4. Attributes reference 47

58 Attribute descriptions The following list contains information about each attribute in the ASP NET attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Name attribute: This attribute is a key attribute. The Name of the ASP.NET application instance. The source for this attribute is Script data. NAME Cache % Machine Memory Limit Used attribute The amount of physical memory used by the computer divided by the physical memory limit for the cache, as a percentage. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. CACHE_PERCENT_MACHINE_MEMORY_LIMIT_USED or CACHE_MACH Cache % Process Memory Limit Used attribute The value of private bytes for the worker process divided by the private bytes memory limit for the cache, as a percentage. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 48 Microsoft IIS agent User's Guide - Beta 1 Draft

59 The source for this attribute is Script data. CACHE_PERCENT_PROCESS_MEMORY_LIMIT_USED or CACHE_PROC Infrastructure Error Event Raised Rate (per sec) attribute The number of HTTP error events that are raised per second. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. INFRASTRUCTURE_ERROR_EVENTS_RAISED_RATE or INFRASTRUC Membership Authentication Failures attribute The number of failed membership credential validations since the application was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MEMBERSHIP_AUTHENTICATION_FAILURE or MEMBERSHIP Version attribute The version of.net Framework for this ASP.NET application. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v v2.0 (1) v v4.0 (2) The source for this attribute is derived: 1. Chapter 4. Attributes reference 49

60 VERSION or VERASP2 ASP Site Name attribute The name of the ASP.NET site. The source for this attribute is Script data. ASP_SITE_NAME or ASPSITE ASP NET Apps Filter attribute group This attribute group provides information of all ASP.NET applications. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the ASP NET Apps Filter attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Name attribute: This attribute is a key attribute. The Name of the ASP.NET application instance. The source for this attribute is Filtered data - Name. NAME Cache % Machine Memory Limit Used attribute The amount of physical memory used by the computer divided by the physical memory limit for the cache, as a percentage. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 50 Microsoft IIS agent User's Guide - Beta 1 Draft

61 The source for this attribute is Filtered data - Cache_Percent_Machine_Memory_Limit_Used. CACHE_PERCENT_MACHINE_MEMORY_LIMIT_USED or CACHE_MACH Cache % Process Memory Limit Used attribute The value of private bytes for the worker process divided by the private bytes memory limit for the cache, as a percentage. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Filtered data - Cache_Percent_Process_Memory_Limit_Used. CACHE_PERCENT_PROCESS_MEMORY_LIMIT_USED or CACHE_PROC Infrastructure Error Event Raised Rate (per sec) attribute The number of HTTP error events raised per second. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Filtered data - Infrastructure_Error_Events_Raised_Rate. INFRASTRUCTURE_ERROR_EVENTS_RAISED_RATE or INFRASTRUC Membership Authentication Failures attribute The number of failed membership credential validations since the application was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 51

62 The source for this attribute is Filtered data - Membership_Authentication_Failure. MEMBERSHIP_AUTHENTICATION_FAILURE or MEMBERSHIP Version attribute The version of.net Framework for this ASP.NET application. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v v2.0 (1) v v4.0 (2) The source for this attribute is Filtered data - Version. VERSION or VERASP2 ASP Site Name attribute The name of the ASP.NET site. The source for this attribute is Filtered data - ASP_Site_Name. ASP_SITE_NAME or ASPSITE ASP NET Apps V4 attribute group This attribute group provides information of ASP.NET applications for.net framework V4.0. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the ASP NET Apps V4 attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. 52 Microsoft IIS agent User's Guide - Beta 1 Draft

63 TIMESTAMP Name attribute: This attribute is a key attribute. The Name of the ASP.NET application instance. The source for this attribute is Script data. NAME Cache % Machine Memory Limit Used attribute The amount of physical memory used by the computer divided by the physical memory limit for the cache, as a percentage. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. CACHE_PERCENT_MACHINE_MEMORY_LIMIT_USED or CACHE_MACH Cache % Process Memory Limit Used attribute The value of private bytes for the worker process divided by the private bytes memory limit for the cache, as a percentage. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. CACHE_PERCENT_PROCESS_MEMORY_LIMIT_USED or CACHE_PROC Infrastructure Error Event Raised Rate (per sec) attribute The number of HTTP error events raised per second. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 53

64 The source for this attribute is Script data. INFRASTRUCTURE_ERROR_EVENTS_RAISED_RATE or INFRASTRUC Membership Authentication Failures attribute The number of failed membership credential validations since the application was started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MEMBERSHIP_AUTHENTICATION_FAILURE or MEMBERSHIP Version attribute The version of.net Framework for this ASP.NET application. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v v2.0 (1) v v4.0 (2) The source for this attribute is derived: 2. VERSION or VERASP2 ASP Site Name attribute The name of the ASP.NET site. The source for this attribute is Script data. ASP_SITE_NAME or ASPSITE Availability attribute group The Availability attribute group contains the availability data for all processes and services that make up this application. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Availability attribute group: 54 Microsoft IIS agent User's Guide - Beta 1 Draft

65 Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Application Component attribute: This attribute is a key attribute. The descriptive name of a part of the application. The source for this attribute is the agent. APPLICATION_COMPONENT or COMPONENT Name attribute The name of the process, service, or functionality test. This name matches the executable name of the process, the service short name or the name of the process used to test the application. with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v N/A (N/A) The source for this attribute is the agent. NAME Status attribute The status of the application component. v For processes 'UP', 'DOWN', 'WARNING', or 'PROCESS_DATA_NOT_AVAILABLE': 'PROCESS_DATA_NOT_AVAILABLE' is displayed for a process when the matching process is running but the resource use information cannot be collected for that process. v For services 'UP', 'DOWN', or 'UNKNOWN': 'UNKNOWN' is displayed when the service is not installed. v For functionality tests: 'PASSED' or 'FAILED' is displayed. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise Chapter 4. Attributes reference 55

66 The warehouse and queries return the values that are shown in parentheses. The following values are defined: v DOWN (0) v UP (1) v WARNING (2) v UNKNOWN (3) v PASSED (4) v FAILED (5) v PROCESS DATA NOT AVAILABLE (6) The source for this attribute is the agent. STATUS Full Name attribute The full name of the process including the path. with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v N/A (N/A) The source for this attribute is collected from the operating system. The data is gathered from the Windows process. The data is limited to 256 bytes. FULL_NAME or FULLNAME attribute The type of the application component. Components are processes, services, or functionality tests. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v PROCESS (0) v SERVICE (1) v FUNCTIONALITY TEST (2) The source for this attribute is the agent. TYPE Virtual Size attribute The virtual size (in MB) of the process. Integer (32-bit gauge) 56 Microsoft IIS agent User's Guide - Beta 1 Draft

67 The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process - Private Bytes.. VIRTUAL_SIZE or VIRTSIZE Page Faults per Sec attribute The rate of page faults for the process measured in faults per second. This attribute only contains valid data for processes. Integer (32-bit gauge) The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process - Page Faults/sec.. PAGE_FAULTS_PER_SEC or PAGEFAULTS Working Set Size attribute The working set size of the process in MB. This attribute only contains valid data for processes. Integer (32-bit gauge) The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process - Working Set.. WORKING_SET_SIZE or WORKSET Thread Count attribute The number of threads currently allocated by this process. This attribute only contains valid data for processes. Integer (32-bit gauge) The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process - Thread Count.. THREAD_COUNT or THREADS PID attribute The process ID associated with the process. This attribute only contains valid data for processes. Integer (32-bit gauge) The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process - ID Process.. PID Percent Privileged Time attribute The percentage of the available CPU time that is being used by this process for privileged operation. Integer (32-bit gauge) Chapter 4. Attributes reference 57

68 The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process - % Privileged Time.. PERCENT_PRIVILEGED_TIME or PERCPRIV Percent User Mode Time attribute The percentage of the available CPU time that is being used by this process for user mode operation. Integer (32-bit gauge) The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process - % User Time.. PERCENT_USER_MODE_TIME or PERCUSER Percent Processor Time attribute The percentage of the elapsed time that this process used the processor to execute instructions. Integer (32-bit gauge) The source for this attribute is Collected from the operating system. It is gathered from the Perfmon counter Process -% Processor Time.. PERCENT_PROCESSOR_TIME or PERCPROC Command Line attribute The program name and any arguments specified on the command line when the process was started. This has the value N/A if this is a Service, or Functionality test. with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v N/A (N/A) The source for this attribute is Collected from the operating system. It is gathered from the process.. COMMAND_LINE or CMDLINE Functionality Test Status attribute The return code of the functionality test. When the monitored application is running correctly, 'SUCCESS' is displayed. 'NOT_RUNNING' is displayed when it is not running correctly. 'N/A' is displayed when the row does not represent a functionality test. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v SUCCESS (0) 58 Microsoft IIS agent User's Guide - Beta 1 Draft

69 v N/A (1) v GENERAL ERROR (2) v WARNING (3) v NOT RUNNING (4) v DEPENDENT NOT RUNNING (5) v ALREADY RUNNING (6) v PREREQ NOT RUNNING (7) v TIMED OUT (8) v DOESNT EXIST (9) v UNKNOWN (10) v DEPENDENT STILL RUNNING (11) v INSUFFICIENT USER AUTHORITY (12) The source for this attribute is the agent. FUNCTIONALITY_TEST_STATUS or FUNCSTATUS Functionality Test Message attribute The text message that corresponds to the Functionality Test Status. This is only valid for functionality tests. with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v N/A (N/A) The source for this attribute is the agent. FUNCTIONALITY_TEST_MESSAGE or FUNCMSG Centralized Certificate Details attribute group This attribute group provides information about the Secure Sockets Layer (SSL) certificates that are stored on a file share.this attribute group is applicable to IIS 8 and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Centralized Certificate Details attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. Chapter 4. Attributes reference 59

70 The source for this attribute is the agent. TIMESTAMP Use Centralized Certificate attribute Indicates whether the web server is configured to use a centralized SSL certificate store. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v False (0) v True (1) The source for this attribute is Script data. USE_CENTRALIZED_CERTIFICATE or ENCENCER Centralized Certificate Location attribute This attribute displays the UNC (Universal Naming Convention) path to the file share where the SSL certificates are located. The source for this attribute is Script data. CENTRALIZED_CERTIFICATE_LOCATION or CENCERST Username attribute This attribute displays the name of the user account that has read access to a file share. The source for this attribute is Script data. USERNAME Event Log attribute group The Event Log attribute group contains any event log entries that pertain to this application. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Event Log attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. 60 Microsoft IIS agent User's Guide - Beta 1 Draft

71 The source for this attribute is the agent. NODE Log Name attribute The name of the event log - Application, System, Security or an application-specific log LOG_NAME or LOGNAME Event attribute The event source defined by the application EVENT_SOURCE or EVTSOURCE Event attribute Event - Error(0), Warning(1), Informational(2), Audit_Success(3), Audit_Failure(4), Unknown(5) Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Error (0) v Warning (1) v Informational (2) v Audit Success (3) v Audit Failure (4) v Unknown (5) EVENT_TYPE or EVTTYPE Event ID attribute The ID of the event Integer (32-bit counter) EVENT_ID or EVTID Event Category attribute The Category of the event with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v None (None) Chapter 4. Attributes reference 61

72 EVENT_CATEGORY or EVTCATEG Message attribute The event message MESSAGE Time Generated attribute The time the event was generated Timestamp TIME_GENERATED or TIMESTAMP Event Level attribute The Level value specified in the event. This is an expanded version of the Event_ field only available on Windows 2008 or later with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Not Available (-1) EVENT_LEVEL or EVTLEVEL Event Keywords attribute A comma-separated list of the keywords specified in the event. This field only available on Windows 2008 or later with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Not Available (-1) EVENT_KEYWORDS or EVTKEYWDS Event API Version attribute The version of the Event Log API used to retrieve this event Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NT Event Log (1) v Windows Event Log (2) 62 Microsoft IIS agent User's Guide - Beta 1 Draft

73 EVENT_API_VERSION or EVTAPIVER Failed Request Tracing attribute group This attribute group provides information about the tracing of requests that are applied to a website but failed.this attribute group is applicable for IIS 7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Failed Request Tracing attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Website Name attribute Shows the name of the website. The source for this attribute is Script data. WEBSITE_NAME or SITENAME Tracing attribute Shows whether the tracing of failed requests is enabled or disabled for the website. The source for this attribute is Script data. TRACING Directory Path attribute Shows the location of the log file that is created for the failed requests. The source for this attribute is Script data. Chapter 4. Attributes reference 63

74 DIRECTORY_PATH or DIRPATH Max Number of Log Files attribute Shows the maximum number of log files that are saved for the failed requests. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MAX_NUMBER_OF_LOG_FILES or MAXLOFF Max Log File Size attribute Shows the maximum size of the log file that is allowed for monitoring failed requests. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MAX_LOG_FILE_SIZE or MAXLOGS Failed Request Tracing Rules attribute group This attribute group provides information about the rules for tracing the requests that failed which were applied to a website.this attribute group is applicable for IIS 7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Failed Request Tracing Rules attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. 64 Microsoft IIS agent User's Guide - Beta 1 Draft

75 The source for this attribute is the agent. TIMESTAMP Website Name attribute Shows the name of the website. The source for this attribute is Script data. WEBSITE_NAME or SITENAME Path attribute Shows the path (content type) of files that are traced for the requests that failed when they were applied to the website. The source for this attribute is Script data. PATH Associated Providers attribute Shows the trace providers that are configured for tracing the requests that failed. The source for this attribute is Script data. ASSOCIATED_PROVIDERS or ASSPROV Status Codes attribute Shows the HTTP status codes that are to be traced. The source for this attribute is Script data. STATUS_CODES or STATCOD Time Taken attribute Shows the maximum time (in days.hh:mm:ss) that can be taken by the request to execute before tracing.it is measured in HH:MM:SS The source for this attribute is Script data. TIME_TAKEN or TIMETAK Chapter 4. Attributes reference 65

76 FTP Logon Attempt Restrictions Settings attribute group This attribute group provides the configuration information about the restrictions for logon attempts to an FTP server.this attribute group is applicable for FTP 7.5 and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the FTP Logon Attempt Restrictions Settings attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP FTP Logon Attempt Restrictions attribute Indicates that the FTP service is configured to either allow or deny access to the FTP server if the user exceeds the number of failed logon attempts within the duration that is specified in the IIS Manager. The source for this attribute is Script data. FTP_LOGON_ATTEMPT_RESTRICTIONS or NAME Max Number of Failed Login Attempts attribute The maximum number of failed logon attempts that are allowed. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MAX_NUMBER_OF_FAILED_LOGIN_ATTEMPTS or MAXNFLA Time Duration (in sec) attribute The duration (in seconds) within which the number of failed logon attempts can 66 Microsoft IIS agent User's Guide - Beta 1 Draft

77 reach the maximum limit, after which the FTP service either allows or denies access to the FTP server according to the configuration settings that are specified in the IIS Manager. The source for this attribute is Script data. TIME_DURATION_IN_SEC or TIMEDURS Time Duration (in Days.hh:mm:ss) attribute The duration (in days.hours, minutes, and seconds) within which the number of failed logon attempts can reach the maximum limit, after which the FTP service either allows or denies access to the FTP server according to the configuration settings that are specified in the IIS Manager. The source for this attribute is Script data. TIME_DURATION_IN_DAYS_HH_MM_SS or TIMEDURH Action attribute The action that is taken if the number of failed logon attempts exceeds the maximum limit over a duration (in days,hours, minutes, and seconds). The source for this attribute is Script data. ACTION FTP Server Site Status attribute group This attribute group displays information related to each FTP site status running on Microsoft IIS FTP server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the FTP Server Site Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. Chapter 4. Attributes reference 67

78 The source for this attribute is the agent. TIMESTAMP FTP Site attribute: This attribute is a key attribute. The name used to identify FTP site. The source for this attribute is Script data. FTP_SITE or SITE_NAME State attribute The current state of FTP site. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Starting (1) v Started (2) v Stopping (3) v Stopped (4) v Pausing (5) v Paused (6) v Continuing (7) The source for this attribute is Script data. STATE FTPSiteName attribute The name of the FTP site. The source for this attribute is Script data. FTPSITENAME or SITENAME FTP Service attribute group This attribute group monitors the FTP Service Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the FTP Service attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. 68 Microsoft IIS agent User's Guide - Beta 1 Draft

79 The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP KB Sent Rate (per sec) attribute The rate at which KB are sent by the FTP service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Sent_Rate / KBYTES_SENT_RATE or KB_SENT KB Received Rate (per sec) attribute The rate at which KB are received by the FTP service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Received_Rate / KBYTES_RECEIVED_RATE or KB_RECE KB Total Rate (per sec) attribute The total rate of KB transferred by the FTP service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 69

80 The source for this attribute is derived: Bytes_Total_Rate / KBYTES_TOTAL_RATE or KBS_TOTA Total Files Sent attribute The total number of files that are sent by the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Files Sent. TOTAL_FILES_SENT or TOTAL_FIL0 Total Files Received attribute The total number of files that are received by the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Files Received. TOTAL_FILES_RECEIVED or TOTAL_FILE Total Files Transferred attribute The sum of total files sent and received by the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Files Transferred. TOTAL_FILES_TRANSFERRED or TOTAL_FIL1 File Sent Rate (per sec) attribute 70 Microsoft IIS agent User's Guide - Beta 1 Draft

81 The total number of files that are sent by the FTP service per second. Real number (rate of change between successive values) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Files Sent. FILES_SENT_RATE or FILES_RATE Files Received Rate (per sec) attribute The total number of files that are received by the FTP service per second. Real number (rate of change between successive values) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Files Received. FILES_RECEIVED_RATE or FILER_RATE Files Transferred Rate (per sec) attribute The rate of total files transferred by the FTP service per second. Real number (rate of change between successive values) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Files Transferred. FILES_TRANSFERRED_RATE or FILET_RATE Current Anonymous Users attribute The number of users who currently have an anonymous connection that was made by using the FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Chapter 4. Attributes reference 71

82 Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Current Anonymous Users. CURRENT_ANONYMOUS_USERS or CURRENT_AN % Current Anonymous Users attribute The percentage of users who have an anonymous connection that was made by using the FTP service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Current_Anonymous_Users / (Current_Anonymous_Users + Current_NonAnonymous_Users)) * 100. PERCENT_CURRENT_ANONYMOUS_USERS or CURRAN_PR Current NonAnonymous Users attribute The number of users who currently have a nonanonymous connection that was made by using the FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Current NonAnonymous Users. CURRENT_NONANONYMOUS_USERS or CURRENT_NO % Current NonAnonymous Users attribute The percentage number of users who currently have a nonanonymous connection that was made by using the FTP service. Real number (32-bit gauge) with two decimal places of precision with 72 Microsoft IIS agent User's Guide - Beta 1 Draft

83 enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Current_NonAnonymous_Users / (Current_Anonymous_Users + Current_NonAnonymous_Users)) * 100. PERCENT_CURRENT_NONANONYMOUS_USERS or CURRNAU_PR Total Anonymous Users attribute The number of users who have established an anonymous connection with the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Anonymous Users. TOTAL_ANONYMOUS_USERS or TOTAL_ANON % Total Anonymous Users attribute The percentage of users who established an anonymous connection with the FTP service since the service started. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Total_Anonymous_Users / (Total_Anonymous_Users + Total_NonAnonymous_Users)) * 100. PERCENT_TOTAL_ANONYMOUS_USERS or TOT_ANONPR Total NonAnonymous Users attribute The number of users who established nonanonymous connections with the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 73

84 The source for this attribute is Perfmon - FTP Service\*\Total NonAnonymous Users. TOTAL_NONANONYMOUS_USERS or TOTAL_NONA % Total NonAnonymous Users attribute The percentage of users who established nonanonymous connections with the FTP service since the service started. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Total_NonAnonymous_Users / (Total_Anonymous_Users + Total_NonAnonymous_Users)) * 100. PERCENT_TOTAL_NONANONYMOUS_USERS or TOT_NONAPR Maximum Anonymous Users attribute The maximum number of users who have established concurrent anonymous connections using the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Maximum Anonymous Users. MAXIMUM_ANONYMOUS_USERS or MAXIMUM_AN Maximum NonAnonymous Users attribute The maximum number of users who have established concurrent nonanonymous connections using the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 74 Microsoft IIS agent User's Guide - Beta 1 Draft

85 The source for this attribute is Perfmon - FTP Service\*\Maximum NonAnonymous Users. MAXIMUM_NONANONYMOUS_USERS or MAXIMUM_NO Current Connections attribute The current number of connections that have been established with the FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Current Connections. CURRENT_CONNECTIONS or CURRENT_CO Maximum Connections attribute The maximum number of simultaneous connections that have been established with the FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Maximum Connections. MAXIMUM_CONNECTIONS or MAXIMUM_CO Total Connection Attempts (all instances) attribute The number of connections that have been attempted by using the FTP service for all instances since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Connection Attempts (all instances). Chapter 4. Attributes reference 75

86 TOTAL_CONNECTION_ATTEMPTS_ALL_INSTANCES or TOTAL_CONN Total Logon Attempts attribute The number of logons that have been attempted by using the FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Logon Attempts. TOTAL_LOGON_ATTEMPTS or TOTAL_LOGO Logon Attempt Rate (per sec) attribute The rate of number of logons that have been attempted by using the FTP service per second. Real number (rate of change between successive values) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - FTP Service\*\Total Logon Attempts. LOGON_ATTEMPTS_RATE or LOGON_ATT FTP Service Uptime (hrs) attribute The amount of time, in hours, that the FTP service has been running. Real number (32-bit counter) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: FTP_Service_Uptime_In_Sec / FTP_SERVICE_UPTIME_IN_HRS or FTP_SERVHR Name attribute: This attribute is a key attribute. The name of the instance. 76 Microsoft IIS agent User's Guide - Beta 1 Draft

87 The source for this attribute is PerfMon. NAME FTP Site Dynamic IP and Domain Restrictions attribute group This attribute group provides information about the IP and domain restrictions that are applied on an FTP site.this attribute group is applicable for FTP 7.5. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the FTP Site Dynamic IP and Domain Restrictions attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP FTP Site Name attribute: This attribute is a key attribute. The name of the FTP site. The source for this attribute is Script data. FTP_SITE_NAME or NAME Allowed Specific IP attribute The IP addresses that are allowed to access the FTP site. The source for this attribute is Script data. ALLOWED_SPECIFIC_IP or ALLOWIP Allowed IP Range attribute The ranges of IP addresses that are allowed to access the FTP site.the format of the value is IP address(subnet Mask). Chapter 4. Attributes reference 77

88 The source for this attribute is Script data. ALLOWED_IP_RANGE or ALLOWIPR Allowed Domain attribute The domain names that are allowed to access the FTP site. The source for this attribute is Script data. ALLOWED_DOMAIN or ALLOWDOM Denied Specific IP attribute The specific IP addresses that is not allowed to access the FTP site. The source for this attribute is Script data. DENIED_SPECIFIC_IP or DENYIP Denied IP Range attribute The ranges of IP addresses that are not allowed to access the FTP site.the format of the value is IP address(subnet Mask). The source for this attribute is Script data. DENIED_IP_RANGE or DENYIPR Denied Domain attribute The domain names that are not allowed to access the FTP site. The source for this attribute is Script data. DENIED_DOMAIN or DENYDOM FTP Site IP and Domain Restrictions Settings attribute group This attribute group provides information about the configuration of the IP and domain restrictions that are applied to an FTP site.this attribute group is applicable for FTP 7.5. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the FTP Site IP and Domain Restrictions Settings attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. 78 Microsoft IIS agent User's Guide - Beta 1 Draft

89 The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP FTP Site Name attribute: This attribute is a key attribute. The name of the FTP site. The source for this attribute is Script data. FTP_SITE_NAME or NAME Access for Unspecified Clients attribute Indicates whether access is to be allowed or denied to the clients that are not specified by any rule. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Allow (1) v Deny (2) The source for this attribute is Script data. ACCESS_FOR_UNSPECIFIED_CLIENTS or ACCUNCL Domain Name Restrictions attribute Indicates whether access for an FTP request is to be allowed or denied based on the domain name. The source for this attribute is Script data. DOMAIN_NAME_RESTRICTIONS or ENDNRE FTP Version Information attribute group This attribute group displays information about the Microsoft IIS FTP Server version. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Chapter 4. Attributes reference 79

90 Attribute descriptions The following list contains information about each attribute in the FTP Version Information attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute The name that is used to identify the IIS FTP server. The source for this attribute is Script data. SERVER_NAME or SERVER_NAM Major FTP Version Number attribute The major version number of the IIS FTP Server. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MAJOR_FTP_VERSION_NUMBER or MAJORFTPVE Minor FTP Version Number attribute The minor version number of the IIS FTP Server. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 80 Microsoft IIS agent User's Guide - Beta 1 Draft

91 The source for this attribute is Script data. MINOR_FTP_VERSION_NUMBER or MINORFTPVE HTTP Custom Error Messages attribute group This attribute group displays configuration information related to HTTP custom error messages. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the HTTP Custom Error Messages attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP HTTP Status attribute The HTTP status code for the custom error message. The source for this attribute is Script data. HTTP_STATUS or ERRORCODE Error Sub Code attribute The HTTP sub status code for the custom error message. The source for this attribute is Script data. ERROR_SUB_CODE or ERRSUBCODE Error Code attribute: This attribute is a key attribute. The error code. Chapter 4. Attributes reference 81

92 The source for this attribute is derived: HTTP_Status+"."+Error_Sub_Code. ERROR_CODE Message attribute The custom error message source. The source for this attribute is Script data. MESSAGE_SOURCE or MESSAGE_SO Message Location attribute The location of custom error message file. The source for this attribute is Script data. MESSAGE_LOCATION or MESSAGE_LO Http Error Log attribute group This attribute group displays information about HTTP errors logged by HTTP sys kernel in the Httperr log file. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Http Error Log attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Date attribute The date on which the error occurred. The source for this attribute is Log File Data. 82 Microsoft IIS agent User's Guide - Beta 1 Draft

93 DATE Time attribute The time, in Coordinated Universal Time (UTC), at which the activity occurred. The source for this attribute is Log File Data. TIME Client IP Address attribute The IP address of the client that made the request. The source for this attribute is Log File Data. CLIENT_IP_ADDRESS or CLIENTIP Client Port attribute The port number of the client that made the request. The source for this attribute is Log File Data. CLIENT_PORT or CPORT Server IP Address attribute The IP address of the server on which the log file entry was generated. The source for this attribute is Log File Data. SERVER_IP_ADDRESS or SERVERIP Server Port attribute The server port number that is configured for the service. The source for this attribute is Log File Data. SERVER_PORT or SPORT Protocol Version attribute The protocol version that the client used. The source for this attribute is Log File Data. PROTOCOL_VERSION or PROTOCOL Chapter 4. Attributes reference 83

94 Method attribute The requested action, for example, a GET method. The source for this attribute is Log File Data. METHOD URL attribute The target of the action. The source for this attribute is Log File Data. URL or UR0 HTTP Status attribute The HTTP status code. The source for this attribute is Log File Data. HTTP_STATUS or ERRCODE Protocol Sub Status attribute The sub status error code. The source for this attribute is Log File Data. PROTOCOL_SUB_STATUS or ERRSUBCODE Error Code attribute The error code. The source for this attribute is derived: HTTP_Status+"."+Protocol_Sub_Status. ERROR_CODE Error attribute The error description. The source for this attribute is Log File Data. ERROR_DESCRIPTION or DESCRIPTIO 84 Microsoft IIS agent User's Guide - Beta 1 Draft

95 IIS Application Pools Details attribute group This attribute group shows the status and configuration settings of an application pool. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Application Pools Details attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Application Pool Name attribute: This attribute is a key attribute. The name of the application pool. The source for this attribute is Script data. APPLICATION_POOL_NAME or NAME AppPool State attribute Determines the state of an application pool. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v STARTING (1) v STARTED (2) v STOPPING (3) v STOPPED (4) The source for this attribute is Script data. APPPOOL_STATE or APPPOOLSTA AppPool AutoStart attribute Chapter 4. Attributes reference 85

96 Indicates to the World Wide Web Publishing Service (WWW service) to automatically start an application pool when the application pool is created or when IIS is started. The source for this attribute is Script data. APPPOOL_AUTO_START or APPOLAUTST Enable32BitApp On Win64 attribute Indicates whether IIS creates 32-bit worker processes or 64-bit worker processes on 64-bit Windows systems. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v False (0) v True (1) v N/A (2) The source for this attribute is Script data. ENABLE32BITAPPONWIN64 or E32APPON64 Managed Pipeline Mode attribute Indicates the mode used by the IIS server to process the requests for the managed code. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Integrated (0) v Classic (1) v N/A (2) The source for this attribute is Script data. MANAGED_PIPELINE_MODE or MANPIPMODE Managed Runtime Version attribute Indicates the version of the.net Framework used for the managed applications in the application pool. The source for this attribute is Script data. MANAGED_RUN_TIME_VERSION or MANRUNTMVE AppPool Queue Length attribute 86 Microsoft IIS agent User's Guide - Beta 1 Draft

97 Indicates to the Universal Listener the number of requests to queue up for an application pool before rejecting future requests. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. APPPOOL_QUEUE_LENGTH or APPOLQUELN IIS Application Pools Setting attribute group This attribute group shows the individual application pool settings. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Application Pools Setting attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP AppPool AutoStart attribute Indicates the World Wide Web Publishing Service (WWW service) to automatically start an application pool when the application pool is created or when IIS is started. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) Chapter 4. Attributes reference 87

98 The source for this attribute is derived: abs(auto_start). APPPOOL_AUTO_START or APPPOOLAUT Application Pool Name attribute: This attribute is a key attribute. The name of the application pool. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingName. APPLICATION_POOL_NAME or NAME AppPool Command attribute Allows an application to send commands to the application pool to start or stop the application pool. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v START (1) v STOP (2) v NONE (0) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingAppPoolCommand. APPPOOL_COMMAND or APPPOOLCOM AppPool Identity attribute Allows application pools to run as a specific user account. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v LOCALSYSTEM (0) v LOCALSERVICE (1) v NETWORKSERVICE (2) v SPECIFICUSER (3) v APPLICATIONPOOLIDENTITY (4) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingAppPoolIdentity. APPPOOL_IDENTITY_TYPE or APPPOOLIDE AppPool Queue Length attribute Indicates to the Universal Listener the number of requests to queue up for an application pool before rejecting future requests. 88 Microsoft IIS agent User's Guide - Beta 1 Draft

99 Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingAppPoolQueueLength. APPPOOL_QUEUE_LENGTH or APPPOOLQUE AppPool Recycle Config Change attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(recycleconfigchange). APPPOOL_RECYCLE_CONFIG_CHANGE or APPPOOLREC AppPool Recycle Isapi Unhealthy attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(recycle_isapi_unhealthy). APPPOOL_RECYCLE_ISAPI_UNHEALTHY or APPPOOLRE0 AppPool Recycle Memory attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise Chapter 4. Attributes reference 89

100 The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(recycle_memory). APPPOOL_RECYCLE_MEMORY or APPPOOLRE1 AppPool Recycle OnDemand attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(recycle_ondemand). APPPOOL_RECYCLE_ONDEMAND or APPPOOLRE2 AppPool Recycle Private Memory attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(recycle_private_memory). APPPOOL_RECYCLE_PRIVATE_MEMORY or APPPOOLRE3 AppPool Recycle Requests attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) 90 Microsoft IIS agent User's Guide - Beta 1 Draft

101 v FALSE (0) The source for this attribute is derived: abs(recycle_requests). APPPOOL_RECYCLE_REQUESTS or APPPOOLRE4 AppPool Recycle Schedule attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(recycle_schedule). APPPOOL_RECYCLE_SCHEDULE or APPPOOLRE5 AppPool Recycle Time attribute Specifies that IIS should log an event when an application pool is recycled.in order for IIS to log the event, the "LogEventOnRecycle" attribute must have a bit set corresponding to the reason for the recycle. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(recycle_time). APPPOOL_RECYCLE_TIME or APPPOOLRE6 AppPool State attribute This value is used by applications to determine the state of an application pool. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v STARTING (1) v STARTED (2) v STOPPING (3) v STOPPED (4) Chapter 4. Attributes reference 91

102 The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingAppPoolState. APPPOOL_STATE or APPPOOLSTA Auto Shutdown AppPool Exe attribute Specifies an executable to run when the World Wide Web Publishing Service (WWW service) shuts down an application pool for rapid fail protection.it will display blank if not configured. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingAutoShutdownAppPoolExe. AUTO_SHUTDOWN_APPPOOL_EXE or AUTOSHUTDO Auto Shutdown AppPool Params attribute Specifies any command-line parameters for the executable that is specified in the "AutoShutdownAppPoolExe" attribute.it will display blank if not configured. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingAutoShutdownAppPoolParams. AUTO_SHUTDOWN_APPPOOL_PARAMS or AUTOSHUTD0 CPU Action attribute Configures the actions that IIS takes when Microsoft Windows NT job objects run.only one Windows NT job object exists per application pool.therefore the CPUAction property is configured on a per application pool basis. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO ACTION (0) v KILL W3WP (1) v TRACE (2) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingCPUAction. CPU_ACTION or CPUACTION CPU Limit % attribute Configures the maximum percentage of CPU resources that worker processes in an application pool are allowed to consume over a period of time, as indicated by the "CPUResetInterval" attribute. Real number (32-bit numeric property) with two decimal places of precision with 92 Microsoft IIS agent User's Guide - Beta 1 Draft

103 enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: CPU_Limit / CPU_LIMIT_PERCENT or CPULIMPR CPU Reset Interval attribute Specifies the reset period, in minutes, for CPU monitoring and throttling limits on the application pool. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingCPUResetInterval. CPU_RESET_INTERVAL or CPURESETIN Disallow Overlapping Rotation attribute Specifies whether the World Wide Web Publishing Service (WWW Service) should start another worker process to replace the existing worker process while it is shutting down. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(disallowoverlappingrotation). DISALLOW_OVERLAPPING_ROTATION or DISALLOWOV Disallow Rotation On Config Change attribute Specifies whether the World Wide Web Publishing Service (WWW Service) should rotate worker processes in an application pool when the configuration has changed. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 93

104 v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(disallowrotationonconfigchange). DISALLOW_ROTATION_ON_CONFIG_CHANGE or DISALLOWRO Idle Timeout attribute Specifies the time, in minutes, that a worker process should run idle if no new requests are received and the worker process is not processing requests. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingIdleTimeout. IDLE_TIMEOUT or IDLETIMEOU Load Balancer Capabilities attribute Specifies behavior when a service is unavailable. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TERMINATE CONNECTION (1) v SEND 503 ERROR CODE (2) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingLoadBalancerCapabilities. LOAD_BALANCER_CAPABILITIES or LOADBALANC Logon Method attribute Specifies the logon method for cleartext logons. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v BATCH (1) v NETWORK (2) v INTERACTIVE (0) v NETWORK CLEARTEXT (3) 94 Microsoft IIS agent User's Guide - Beta 1 Draft

105 The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingLogonMethod. LOGON_METHOD or LOGONMETHO Max Processes attribute The maximum number of worker processes an application pool allows to service requests for an application pool. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingMaxProcesses. MAX_PROCESSES or MAXPROCESS Orphan Action Exe attribute Specifies an executable file to run when the World Wide Web Publishing Service (WWW service) orphans a worker process.it will display blank if not configured. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingOrphanActionExe. ORPHAN_ACTION_EXE or ORPHANACTI Orphan Action Params attribute Specifies command-line parameters for the executable that is specified by the "OrphanActionExe" attribute.it will display blank if not configured. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingOrphanActionParams. ORPHAN_ACTION_PARAMS or ORPHANACT0 Orphan Worker Process attribute When set to true, this notifies the WWW service not to terminate a worker process that fails to respond to pings.instead it should orphan the worker process in the application pool if the worker process causes fatal errors. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) Chapter 4. Attributes reference 95

106 The source for this attribute is derived: abs(orphanworkerprocess). ORPHAN_WORKER_PROCESS or ORPHANWORK Periodic Restart Memory attribute Specifies the amount of virtual memory in KB that a worker process can use before the worker process recycles.the maximum value supported for this attribute is 4,294,967 KB. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingPeriodicRestartMemory. PERIODIC_RESTART_MEMORY or PERIODICRE Periodic Restart Private Memory attribute Specifies the amount of private memory in KB that a worker process can use before the worker process recycles.the maximum value supported for this property is 4,294,967 KB. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingPeriodicRestartPrivateMemory. PERIODIC_RESTART_PRIVATE_MEMORY or PERIODICR0 Periodic Restart Requests attribute Indicates the number of requests that the OOP application should process, after which it is recycled. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 96 Microsoft IIS agent User's Guide - Beta 1 Draft

107 The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingPeriodicRestartRequests. PERIODIC_RESTART_REQUESTS or PERIODICR1 Periodic Restart Time attribute Specifies the period of time, in minutes, after which IIS rotates an isolated OOP application.the maximum supported value for this attribute is 71,582. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingPeriodicRestartTime. PERIODIC_RESTART_TIME or PERIODICR2 Pinging Enabled attribute Specifies whether the World Wide Web Publishing Service (WWW Service) should periodically monitor the health of a worker process. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(pingingenabled). PINGING_ENABLED or PINGINGENA Ping Interval attribute Specifies the period of time, in seconds, between health-monitoring pings that the World Wide Web Publishing Service (WWW Service) sends to a worker process. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingPingInterval. Chapter 4. Attributes reference 97

108 PING_INTERVAL or PINGINTERV Ping Response Time attribute Specifies the amount of time, in seconds, that a worker process is given to respond to a health monitoring ping. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingPingResponseTime. PING_RESPONSE_TIME or PINGRESPON Rapid Fail Protection attribute Indicates whether the Rapid Fail Protection is enabled for application pool. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(rapidfailprotection). RAPID_FAIL_PROTECTION or RAPIDFAILP Rapid Fail Protection Interval attribute Specifies the number of minutes before the failure count for a process is reset. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingRapidFailProtectionInterval. RAPID_FAIL_PROTECTION_INTERVAL or RAPIDFAIL0 Rapid Fail Protection Max Crashes attribute Specifies the maximum number of failures that are allowed within the number of minutes specified by the "RapidFailProtectionInterval" attribute. 98 Microsoft IIS agent User's Guide - Beta 1 Draft

109 Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingRapidFailProtectionMaxCrashes. RAPID_FAIL_PROTECTION_MAX_CRASHES or RAPIDFAIL1 Shutdown Time Limit attribute Specifies the amount of time, in seconds, after a recycle threshold has reached.iis waits for all old requests to finish running in a worker process before terminating the worker process. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingShutdownTimeLimit. SHUTDOWN_TIME_LIMIT or SHUTDOWNTI SMP Affinitized attribute Indicates whether a particular worker process assigned to an application pool should be assigned to a given CPU. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v TRUE (1) v FALSE (0) The source for this attribute is derived: abs(smpaffinitized). SMP_AFFINITIZED or SMPAFFINIT SMP Processor Affinity Mask attribute Configures the hexadecimal processor mask.the hexadecimal processor mask indicates to which CPU the worker processes in an application pool should be bound. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise Chapter 4. Attributes reference 99

110 The warehouse and queries return the values that are shown in parentheses. The following values are defined: v UNLIMITED (-1) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingSMPProcessorAffinityMask. SMP_PROCESSOR_AFFINITY_MASK or SMPPROCESS Startup Time Limit attribute Specifies the amount of time, in seconds, that the WWW Service should wait for a worker process to finish starting up and reporting to the WWW Service. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingStartupTimeLimit. STARTUP_TIME_LIMIT or STARTUPTIM WAM User Name attribute Specifies the account user name that IIS uses by default as the COM+ application identity for newly created IIS out-of-process applications.it will display blank if not configured. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingWAMUserName. WAM_USER_NAME or WAMUSERNAM Win32 Error attribute Indicates the Microsoft Win32 error status code. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingWin32Error. 100 Microsoft IIS agent User's Guide - Beta 1 Draft

111 WIN32_ERROR or WIN32ERROR AppPool CPU Action attribute Configures the actions that IIS takes when Microsoft Windows NT job objects run.only one Windows NT job object exists per application pool.therefore the CPUAction property is configured on a per application pool basis. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO ACTION (0) v KILL W3WP (1) v Throttle (2) v Throttle Under Load (3) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsApplicationPoolSettingCPUAction. APPPOOL_CPU_ACTION or CPUACTIO1 IIS Components attribute group This attribute group displays information about the installed components of IIS V7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Components attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Module Name attribute: This attribute is a key attribute. The name of the installed module of IIS 7.x and later. The source for this attribute is Script data. Chapter 4. Attributes reference 101

112 MODULE_NAME or MODULE_NAM Status attribute The status of the component is Installed. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Installed (1) The source for this attribute is Script data. STATUS IIS FTP Server Bindings attribute group This attribute group displays the server site bindings of FTP sites on the Microsoft IIS FTP server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS FTP Server Bindings attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP FTP Site ID attribute: This attribute is a key attribute. The name that is used to identify the FTP site. The source for this attribute is Script data. FTP_SITE_ID or FTP_SITEID FTP Site Name attribute The name of the FTP site. 102 Microsoft IIS agent User's Guide - Beta 1 Draft

113 The source for this attribute is Script data. FTP_SITE_NAME or FTPSITENAM FTP Port attribute The port number of the FTP site. The source for this attribute is Script data. FTP_PORT IIS FTP Server Status attribute group This attribute group displays the status of the Microsoft IIS FTP Server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS FTP Server Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute Name of the IIS FTP Server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsFtpServiceName. SERVER_NAME or SERVER_NAM Path Name attribute Directory path to the executable file. Chapter 4. Attributes reference 103

114 The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsFtpServicePathName. PATH_NAME Process ID attribute Process identifier of the service. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsFtpServiceProcessId. PROCESS_ID or PID State attribute The current state of the IIS FTP Server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsFtpServiceState. STATE or SERVER_ST Status attribute The current status of the IIS FTP Server (operational and nonoperational status). The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsFtpServiceStatus. STATUS IIS FTP Sites Detail attribute group This attribute group displays detailed information about each FTP site on the Microsoft IIS FTP server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS FTP Sites Detail attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. 104 Microsoft IIS agent User's Guide - Beta 1 Draft

115 NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP FTP Site attribute: This attribute is a key attribute. The name used to identify FTP site. The source for this attribute is Script data. FTP_SITE or SITE_NAME State attribute The current state of FTP site. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Starting (1) v Started (2) v Stopping (3) v Stopped (4) v Pausing (5) v Paused (6) v Continuing (7) The source for this attribute is Script data. STATE FTP Site ID attribute: This attribute is a key attribute. The name that is used to identify the FTP site. The source for this attribute is Script data. FTP_SITE_ID or FTP_SITEID FTP Site Name attribute The name of the FTP site. Chapter 4. Attributes reference 105

116 The source for this attribute is Script data. FTP_SITE_NAME or FTPSITENAM FTP Port attribute The port number of the FTP site. The source for this attribute is Script data. FTP_PORT FTPSiteName attribute The name of the FTP site. The source for this attribute is Script data. FTPSITENAME or SITENAME IIS NNTP Server Status attribute group This attribute group displays the status of the Microsoft IIS NNTP Server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS NNTP Server Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute Name of the IIS NNTP Server. 106 Microsoft IIS agent User's Guide - Beta 1 Draft

117 The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsNntpServiceName. SERVER_NAME or SERVER_NAM Path Name attribute Directory path to the executable file. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsNntpServicePathName. PATH_NAME Process ID attribute Process identifier of the service. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsNntpServiceProcessId. PROCESS_ID or PID State attribute The current state of the IIS NNTP Server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsNntpServiceState. STATE or SERVER_ST Status attribute The current status of the IIS NNTP Server (operational and nonoperational status). The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsNntpServiceStatus. STATUS IIS SMTP Server Status attribute group This attribute group displays the status of Microsoft IIS SMTP Server. Chapter 4. Attributes reference 107

118 Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS SMTP Server Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute Name of the IIS SMTP Server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsSmtpServiceName. SERVER_NAME or SERVER_NAM Path Name attribute Directory path to the executable file. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsSmtpServicePathName. PATH_NAME Process ID attribute Process identifier of the service. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 108 Microsoft IIS agent User's Guide - Beta 1 Draft

119 The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsSmtpServiceProcessId. PROCESS_ID or PID State attribute The current state of the IIS SMTP Server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsSmtpServiceState. STATE or SERVER_ST Status attribute The current status of the IIS SMTP Server (operational and nonoperational status). The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsSmtpServiceStatus. STATUS IIS Version Information attribute group This attribute group displays information about the Microsoft IIS web server version. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Version Information attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute The name that is used to identify IIS web server. Chapter 4. Attributes reference 109

120 The source for this attribute is Script data. SERVER_NAME or SERVER_NAM Major IIS Version Number attribute The major version number of the IIS web server. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MAJOR_IIS_VERSION_NUMBER or MAJORIISVE Minor IIS Version Number attribute The minor version number of the IIS web server. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MINOR_IIS_VERSION_NUMBER or MINORIISVE IIS Web Server Bindings attribute group This attribute group displays the site bindings of the websites on the Microsoft IIS web server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Web Server Bindings attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. 110 Microsoft IIS agent User's Guide - Beta 1 Draft

121 The source for this attribute is the agent. TIMESTAMP Site ID attribute: This attribute is a key attribute. The name that is used to identify a website. The source for this attribute is Script data. SITE_ID Web Site Name attribute The name of a website. The source for this attribute is Script data. WEB_SITE_NAME or SITE_NAME HTTP Port attribute The HTTP port number of the website. The source for this attribute is Script data. HTTP_PORT SSL Port attribute The SSL port number of the website. The source for this attribute is Script data. SSL_PORT IIS Web Server Site Status attribute group This attribute group displays information related to the status of each website that is running on the Microsoft IIS web server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Web Server Site Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. Chapter 4. Attributes reference 111

122 The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Web Site attribute: This attribute is a key attribute. The name that is used to identify a website. The source for this attribute is Script data. WEB_SITE or NAME State attribute The current state of the website. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Starting (1) v Started (2) v Stopping (3) v Stopped (4) v Pausing (5) v Paused (6) v Continuing (7) The source for this attribute is Script data. STATE WebSiteName attribute The name of a website. The source for this attribute is Script data. WEBSITENAME or SITENAME 112 Microsoft IIS agent User's Guide - Beta 1 Draft

123 IIS Web Server Status attribute group This attribute group displays status of the Microsoft IIS web server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Web Server Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute Name of the IIS web server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsWebServiceName. SERVER_NAME or SERVER_NAM Path Name attribute Directory path to the executable file. The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsWebServicePathName. PATH_NAME Process ID attribute Process identifier of the service. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 113

124 The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsWebServiceProcessId. PROCESS_ID or PID State attribute The current state of the IIS web server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsWebServiceState. STATE or SERVER_ST Status attribute The current status of the IIS web server (operational and nonoperational status). The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsWebServiceStatus. STATUS IIS Web Sites Detail attribute group This attribute group displays information about each website on the Microsoft IIS web server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the IIS Web Sites Detail attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Web Site attribute: This attribute is a key attribute. The name that is used to identify a website. 114 Microsoft IIS agent User's Guide - Beta 1 Draft

125 The source for this attribute is Script data. WEB_SITE or NAME State attribute The current state of the website. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Starting (1) v Started (2) v Stopping (3) v Stopped (4) v Pausing (5) v Paused (6) v Continuing (7) The source for this attribute is Script data. STATE Site ID attribute: This attribute is a key attribute. The name that is used to identify a website. The source for this attribute is Script data. SITE_ID Web Site Name attribute The name of a website. The source for this attribute is Script data. WEB_SITE_NAME or SITE_NAME HTTP Port attribute The HTTP port number of the website. The source for this attribute is Script data. HTTP_PORT SSL Port attribute The SSL port number of the website. Chapter 4. Attributes reference 115

126 The source for this attribute is Script data. SSL_PORT WebSiteName attribute The name of a website. The source for this attribute is Script data. WEBSITENAME or SITENAME Internet Information Services Gl attribute group This attribute group monitors FTP, SMTP, and NNTP services as a whole. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Internet Information Services Gl attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Current Files Cached attribute The number of files that are currently in the cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\Current Files Cached. 116 Microsoft IIS agent User's Guide - Beta 1 Draft

127 CURRENT_FILES_CACHED or CURRENT_F0 Total Files Cached attribute The number of files that are added to the cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\Total Files Cached. TOTAL_FILES_CACHED or TOTAL_FILE File Cache Hits attribute The number of successful lookups in the file cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\File Cache Hits. FILE_CACHE_HITS or FILE_CACH0 File Cache Misses attribute The number of unsuccessful lookups in the file cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\File Cache Misses. FILE_CACHE_MISSES or FILE_CACH2 File Cache Hits % attribute The ratio of file cache hits to the total number of cache requests. Chapter 4. Attributes reference 117

128 Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\File Cache Hits %. FILE_CACHE_HITS_PERCENT or FILE_CACH1 File Cache Flushes attribute The number of file cache flushes that occurred since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\File Cache Flushes. FILE_CACHE_FLUSHES or FILE_CACHE Current File Cache Memory Usage (KB) attribute The current number of KB used for the file cache. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Current_File_Cache_Memory_Usage / CURRENT_FILE_CACHE_MEMORY_USAGE_IN_KB or CURR_MUKB Maximum File Cache Memory Usage (KB) attribute The maximum number of KB used for the file cache. Real number (32-bit counter) with two decimal places of precision with 118 Microsoft IIS agent User's Guide - Beta 1 Draft

129 enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Maximum_File_Cache_Memory_Usage / MAXIMUM_FILE_CACHE_MEMORY_USAGE_IN_KB or MAXIMU_KB Active Flushed Entries attribute The number of cached file handles that will close when all the current transfers are complete. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\Active Flushed Entries. ACTIVE_FLUSHED_ENTRIES or ACTIVE_FLU Total Flushed Files attribute The number of file handles that are removed from the cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\Total Flushed Files. TOTAL_FLUSHED_FILES or TOTAL_FLU0 Current BLOBs Cached attribute The BLOB information blocks that are currently in the cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 119

130 The source for this attribute is Perfmon - Internet Information Services Global\*\Current BLOBs Cached. CURRENT_BLOBS_CACHED or CURRENT_BL Total BLOBs Cached attribute The number of BLOB information blocks that are added to the cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\Total BLOBs Cached. TOTAL_BLOBS_CACHED or TOTAL_BLOB BLOB Cache Hits attribute The number of successful lookups in the BLOB cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\BLOB Cache Hits. BLOB_CACHE_HITS or BLOB_CACH0 BLOB Cache Misses attribute The number of unsuccessful lookups in the BLOB cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\BLOB Cache Misses. 120 Microsoft IIS agent User's Guide - Beta 1 Draft

131 BLOB_CACHE_MISSES or BLOB_CACH2 BLOB Cache Hits % attribute The ratio of BLOB cache hits to the total number of cache requests. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\BLOB Cache Hits %. BLOB_CACHE_HITS_PERCENT or BLOB_CACH1 BLOB Cache Flushes attribute The number of BLOB cache flushes that occurred since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\BLOB Cache Flushes. BLOB_CACHE_FLUSHES or BLOB_CACHE Total Flushed BLOBs attribute The number of BLOB information blocks that are removed from the cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Internet Information Services Global\*\Total Flushed BLOBs. TOTAL_FLUSHED_BLOBS or TOTAL_FLUS Chapter 4. Attributes reference 121

132 Microsoft FTP Service attribute group This attribute group monitors Microsoft FTP Service V7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Microsoft FTP Service attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Name attribute: This attribute is a key attribute. Name of the FTP site. The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceName. NAME KB Sent Rate (per sec) attribute The rate at which KB are sent by the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Sent_Rate / KBYTES_SENT_RATE or KB_SENT KB Received Rate (per sec) attribute The rate at which KB are received by the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the 122 Microsoft IIS agent User's Guide - Beta 1 Draft

133 Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Received_Rate / KBYTES_RECEIVED_RATE or KB_RECE KB Total Rate (per sec) attribute The total rate of KB transferred by the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Total_Rate / KBYTES_TOTAL_RATE or KBS_TOTA Total Files Sent attribute The total number of files that have been sent by the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalFilesSent. TOTAL_FILES_SENT or TOTALFILE0 Total Files Received attribute The total number of files that have been received by the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 123

134 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalFilesReceived. TOTAL_FILES_RECEIVED or TOTALFILES Total Files Transferred attribute The sum of total number of files sent and received. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalFilesTransferred. TOTAL_FILES_TRANSFERRED or TOTALFILE1 File Sent Rate (per sec) attribute The total number of files that have been sent by the Microsoft FTP service per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalFilesSent. FILES_SENT_RATE or FILES_RATE Files Received Rate (per sec) attribute The total number of files that have been received by the Microsoft FTP service per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 124 Microsoft IIS agent User's Guide - Beta 1 Draft

135 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalFilesReceived. FILES_RECEIVED_RATE or FILER_RATE Files Transferred Rate (per sec) attribute The rate of total files transferred by the Microsoft FTP service per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalFilesTransferred. FILES_TRANSFERRED_RATE or FILET_RATE Current Anonymous Users attribute The number of users who currently have an anonymous connection that was made by using the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceCurrentAnonymousUsers. CURRENT_ANONYMOUS_USERS or CURRENTANO Current NonAnonymous Users attribute The number of users who currently have a nonanonymous connection that was made by using the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceCurrentNonAnonymousUsers. Chapter 4. Attributes reference 125

136 CURRENT_NONANONYMOUS_USERS or CURRENTNON Total Anonymous Users attribute The number of users who have established an anonymous connection with the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalAnonymousUsers. TOTAL_ANONYMOUS_USERS or TOTALANONY Total NonAnonymous Users attribute The number of users who have established nonanonymous connections with the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalNonAnonymousUsers. TOTAL_NONANONYMOUS_USERS or TOTALNONAN Maximum Anonymous Users attribute The maximum number of users who have established concurrent anonymous connections using the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceMaximumAnonymousUsers. MAXIMUM_ANONYMOUS_USERS or MAXIMUMANO Maximum NonAnonymous Users attribute 126 Microsoft IIS agent User's Guide - Beta 1 Draft

137 The maximum number of users who have established concurrent nonanonymous connections using the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceMaximumNonAnonymousUsers. MAXIMUM_NONANONYMOUS_USERS or MAXIMUMNON % Current Anonymous Users attribute The percentage number of users who currently have an anonymous connection that was made by using the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Current_Anonymous_Users / (Current_Anonymous_Users + Current_NonAnonymous_Users)) * 100. PERCENT_CURRENT_ANONYMOUS_USERS or CURRAN_PR % Current NonAnonymous Users attribute The percentage number of users who currently have a nonanonymous connection that was made by using the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Current_NonAnonymous_Users / (Current_Anonymous_Users + Current_NonAnonymous_Users)) * 100. PERCENT_CURRENT_NONANONYMOUS_USERS or CURRNAU_PR % Total Anonymous Users attribute The percentage of users who have established an anonymous connection with the Microsoft FTP service since the service started. Chapter 4. Attributes reference 127

138 Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Total_Anonymous_Users / (Total_Anonymous_Users + Total_NonAnonymous_Users)) * 100. PERCENT_TOTAL_ANONYMOUS_USERS or TOT_ANONPR % Total NonAnonymous Users attribute The percentage of users who have established nonanonymous connections with the Microsoft FTP service since the service started. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Total_NonAnonymous_Users / (Total_Anonymous_Users + Total_NonAnonymous_Users)) * 100. PERCENT_TOTAL_NONANONYMOUS_USERS or TOT_NONAPR Current Connections attribute The current number of connections that have been established with the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceCurrentConnections. CURRENT_CONNECTIONS or CURRENTCON Maximum Connections attribute The maximum number of simultaneous connections that have been established with the Microsoft FTP service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the 128 Microsoft IIS agent User's Guide - Beta 1 Draft

139 Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceMaximumConnections. MAXIMUM_CONNECTIONS or MAXIMUMCON Total Connection Attempts attribute The number of connections that have been attempted by using the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalConnectionAttempts. TOTAL_CONNECTION_ATTEMPTS or TOTALCONNE Total Logon Attempts attribute The number of logons that have been attempted by using the Microsoft FTP service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalLogonAttempts. TOTAL_LOGON_ATTEMPTS or TOTALLOGON Logon Attempt Rate (per sec) attribute The rate of number of logons that have been attempted by using the Microsoft FTP service per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 129

140 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_ftpsvc_MicrosoftFTPServiceTotalLogonAttempts. LOGON_ATTEMPTS_RATE or LOGON_ATT Microsoft FTP Service Uptime (hrs) attribute The amount of time, in hours, that the Microsoft FTP service has been running. Real number (32-bit counter) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Microsoft_FTP_Service_Uptime_In_Sec / MICROSOFT_FTP_SERVICE_UPTIME_IN_HRS or MSFTPHR Mime s attribute group This attribute group lists all Multipurpose Internet Mail Extensions (MIME) types so that you can identify the types of content that can be served from a web server to a browser or a mail client. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Mime s attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP File Extension attribute: This attribute is a key attribute. 130 Microsoft IIS agent User's Guide - Beta 1 Draft

141 Specifies the file name extension. The source for this attribute is Script data. FILE_EXTENSION or FILE_EXTEN MIME attribute The MIME type that is used to open the files. The source for this attribute is Script data. MIME_TYPE or APPLICATIO MSMQ Incoming HTTP Traffic attribute group This attribute group provides information about the incoming HTTP messages that use the Microsoft Message Queuing (MSMQ) protocol. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the MSMQ Incoming HTTP Traffic attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Incoming HTTP Bytes attribute The total number of message bytes that arrive at the computer by using the incoming HTTP connection. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 131

142 The source for this attribute is Perfmon - MSMQ Incoming HTTP Traffic\*\Incoming HTTP Bytes. INCOMING_HTTP_BYTES or INHTTPB Incoming HTTP Bytes (per sec) attribute The rate at which message bytes arrive at the computer by using the incoming HTTP connection. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - MSMQ Incoming HTTP Traffic\*\Incoming HTTP Bytes per sec. INCOMING_HTTP_BYTES_PER_SEC or INHTPBPS Incoming HTTP Messages attribute The total number of HTTP messages that arrive at the computer by using the MSMQ protocol. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - MSMQ Incoming HTTP Traffic\*\Incoming HTTP Messages. INCOMING_HTTP_MESSAGES or INHTTPMSG Incoming HTTP Messages (per sec) attribute The rate at which HTTP messages arrive at the computer by using the MSMQ protocol. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 132 Microsoft IIS agent User's Guide - Beta 1 Draft

143 The source for this attribute is Perfmon - MSMQ Incoming HTTP Traffic\*\Incoming HTTP Messages per sec. INCOMING_HTTP_MESSAGES_PER_SEC or INHTTPMSGP Name attribute: This attribute is a key attribute. The name of the instance. The source for this attribute is PerfMon. NAME NNTP Server attribute group This attribute group displays the information related to each NNTP Virtual Server status running on Microsoft IIS NNTP server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the NNTP Server attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP NNTP Virtual Server attribute: This attribute is a key attribute. The name used to identify NNTP Virtual Server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsNntpServerName. NNTP_VIRTUAL_SERVER or NNTP_VSR State attribute The current state of the NNTP virtual server. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise Chapter 4. Attributes reference 133

144 The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Starting (1) v Started (2) v Stopping (3) v Stopped (4) v Pausing (5) v Paused (6) v Continuing (7) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsNntpServerServerState. STATE NNTP Version Information attribute group This attribute group displays information about the Microsoft IIS NNTP Server version. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the NNTP Version Information attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute The name that is used to identify IIS NNTP Server. The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsNntpInfoName. SERVER_NAME or SERVER_NAM Major NNTP Version Number attribute The major version number of the IIS NNTP Server. 134 Microsoft IIS agent User's Guide - Beta 1 Draft

145 Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsNntpInfoMajorIIsVersionNumber. MAJOR_NNTP_VERSION_NUMBER or MAJORNNTPV Minor NNTP Version Number attribute The minor version number of the IIS NNTP Server. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsNntpInfoMinorIIsVersionNumber. MINOR_NNTP_VERSION_NUMBER or MINORNNTPV Performance Object Status attribute group The Performance Object Status attribute group contains information that reflects the status of other attribute groups so you can see the status of all of the performance objects that make up this application all at once. Each of these other performance attribute groups is represented by a row in this table (or other type of view). The status for an attribute group reflects the result of the last attempt to collect data for that attribute group, which allows you to see whether the agent is performing correctly. Unlike other attribute groups, the Performance Object Status attribute group does not reflect the state of the monitored application. This attribute group is most often used to determine why data is not available for one of the performance attribute groups. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Performance Object Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute Chapter 4. Attributes reference 135

146 The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Query Name attribute: This attribute is a key attribute. The name of the attribute group. QUERY_NAME or ATTRGRP Object Name attribute The name of the performance object. OBJECT_NAME or OBJNAME Object attribute The type of the performance object. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v WMI (0) v PERFMON (1) v WMI ASSOCIATION GROUP (2) v JMX (3) v SNMP (4) v SHELL COMMAND (5) v JOINED GROUPS (6) v CIMOM (7) v CUSTOM (8) v ROLLUP DATA (9) v WMI REMOTE DATA (10) v LOG FILE (11) v JDBC (12) v CONFIG DISCOVERY (13) v NT EVENT LOG (14) v FILTER (15) v SNMP EVENT (16) v PING (17) v DIRECTOR DATA (18) v DIRECTOR EVENT (19) v SSH REMOTE SHELL COMMAND (20) OBJECT_TYPE or OBJTYPE Object Status attribute 136 Microsoft IIS agent User's Guide - Beta 1 Draft

147 The status of the performance object. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v ACTIVE (0) v INACTIVE (1) OBJECT_STATUS or OBJSTTS Error Code attribute The error code that is associated with the query. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO ERROR (0) v GENERAL ERROR (1) v OBJECT NOT FOUND (2) v COUNTER NOT FOUND (3) v NAMESPACE ERROR (4) v OBJECT CURRENTLY UNAVAILABLE (5) v COM LIBRARY INIT FAILURE (6) v SECURITY INIT FAILURE (7) v PROXY SECURITY FAILURE (9) v NO INSTANCES RETURNED (10) v ASSOCIATOR QUERY FAILED (11) v REFERENCE QUERY FAILED (12) v NO RESPONSE RECEIVED (13) v CANNOT FIND JOINED QUERY (14) v CANNOT FIND JOIN ATTRIBUTE IN QUERY 1 RESULTS (15) v CANNOT FIND JOIN ATTRIBUTE IN QUERY 2 RESULTS (16) v QUERY 1 NOT A SINGLETON (17) v QUERY 2 NOT A SINGLETON (18) v NO INSTANCES RETURNED IN QUERY 1 (19) v NO INSTANCES RETURNED IN QUERY 2 (20) v CANNOT FIND ROLLUP QUERY (21) v CANNOT FIND ROLLUP ATTRIBUTE (22) v FILE OFFLINE (23) v NO HOSTNAME (24) v MISSING LIBRARY (25) v ATTRIBUTE COUNT MISMATCH (26) v ATTRIBUTE NAME MISMATCH (27) v COMMON DATA PROVIDER NOT STARTED (28) v CALLBACK REGISTRATION ERROR (29) v MDL LOAD ERROR (30) v AUTHENTICATION FAILED (31) v CANNOT RESOLVE HOST NAME (32) v SUBNODE UNAVAILABLE (33) v SUBNODE NOT FOUND IN CONFIG (34) v ATTRIBUTE ERROR (35) v CLASSPATH ERROR (36) Chapter 4. Attributes reference 137

148 v CONNECTION FAILURE (37) v FILTER SYNTAX ERROR (38) v FILE NAME MISSING (39) v SQL QUERY ERROR (40) v SQL FILTER QUERY ERROR (41) v SQL DB QUERY ERROR (42) v SQL DB FILTER QUERY ERROR (43) v PORT OPEN FAILED (44) v ACCESS DENIED (45) v TIMEOUT (46) v NOT IMPLEMENTED (47) v REQUESTED A BAD VALUE (48) v RESPONSE TOO BIG (49) v GENERAL RESPONSE ERROR (50) v SCRIPT NONZERO RETURN (51) v SCRIPT NOT FOUND (52) v SCRIPT LAUNCH ERROR (53) v CONF FILE DOES NOT EXIST (54) v CONF FILE ACCESS DENIED (55) v INVALID CONF FILE (56) v EIF INITIALIZATION FAILED (57) v CANNOT OPEN FORMAT FILE (58) v FORMAT FILE SYNTAX ERROR (59) v REMOTE HOST UNAVAILABLE (60) v EVENT LOG DOES NOT EXIST (61) v PING FILE DOES NOT EXIST (62) v NO PING DEVICE FILES (63) v PING DEVICE LIST FILE MISSING (64) v SNMP MISSING PASSWORD (65) v DISABLED (66) v URLS FILE NOT FOUND (67) v XML PARSE ERROR (68) v NOT INITIALIZED (69) v ICMP SOCKETS FAILED (70) v DUPLICATE CONF FILE (71) ERROR_CODE or ERRCODE Last Collection Start attribute The most recent time a data collection of this group started. Timestamp with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NOT COLLECTED ( ) v NOT COLLECTED ( ) LAST_COLLECTION_START or COLSTRT Last Collection Finished attribute The most recent time a data collection of this group finished. 138 Microsoft IIS agent User's Guide - Beta 1 Draft

149 Timestamp with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NOT COLLECTED ( ) v NOT COLLECTED ( ) LAST_COLLECTION_FINISHED or COLFINI Last Collection Duration attribute The duration of the most recently completed data collection of this group in seconds. Real number (32-bit counter) with two decimal places of precision LAST_COLLECTION_DURATION or COLDURA Average Collection Duration attribute The average duration of all data collections of this group in seconds. Real number (32-bit counter) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-100) AVERAGE_COLLECTION_DURATION or COLAVGD Refresh Interval attribute The interval at which this group is refreshed in seconds. Integer (32-bit counter) REFRESH_INTERVAL or REFRINT Number of Collections attribute The number of times this group has been collected since agent start. Integer (32-bit counter) NUMBER_OF_COLLECTIONS or NUMCOLL Cache Hits attribute The number of times an external data request for this group was satisfied from the cache. Integer (32-bit counter) CACHE_HITS or CACHEHT Cache Misses attribute Chapter 4. Attributes reference 139

150 The number of times an external data request for this group was not available in the cache. Integer (32-bit counter) CACHE_MISSES or CACHEMS Cache Hit Percent attribute The percentage of external data requests for this group that were satisfied from the cache. Real number (32-bit counter) with two decimal places of precision CACHE_HIT_PERCENT or CACHPCT Intervals Skipped attribute The number of times a background data collection for this group was skipped because the previous collection was still running when the next one was due to start. Integer (32-bit counter) INTERVALS_SKIPPED or INTSKIP SMTP Server attribute group This attribute group displays the information related to each SMTP Virtual server status running on Microsoft IIS SMTP server. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the SMTP Server attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP SMTP Virtual Server attribute: This attribute is a key attribute. The name used to identify SMTP Virtual Server. 140 Microsoft IIS agent User's Guide - Beta 1 Draft

151 The source for this attribute is WMI - ROOT\MicrosoftIISv2\IIsSmtpServerName. SMTP_VIRTUAL_SERVER or SMTP_VSR State attribute The current state of the SMTP Virtual Server. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Starting (1) v Started (2) v Stopping (3) v Stopped (4) v Pausing (5) v Paused (6) v Continuing (7) The source for this attribute is WMI - ROOT\MicrosoftIISv2\ IIsSmtpServerServerState. STATE SMTP Version Information attribute group This attribute group displays information about the Microsoft IIS SMTP Server version. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the SMTP Version Information attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Server Name attribute The name that is used to identify IIS SMTP Server. Chapter 4. Attributes reference 141

152 The source for this attribute is Script data. SERVER_NAME or SERVER_NAM Major SMTP Version Number attribute The major version number of the IIS SMTP Server. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MAJOR_SMTP_VERSION_NUMBER or MAJORSMTPV Minor SMTP Version Number attribute The minor version number of the IIS SMTP Server. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MINOR_SMTP_VERSION_NUMBER or MINORSMTPV Thread Pool Status attribute group The Thread Pool Status attribute group contains information that reflects the status of the internal thread pool used to collect data asynchronously. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Thread Pool Status attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE 142 Microsoft IIS agent User's Guide - Beta 1 Draft

153 Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Thread Pool Size attribute The number of threads currently existing in the thread pool. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_SIZE or THPSIZE Thread Pool Max Size attribute The maximum number of threads allowed to exist in the thread pool. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_MAX_SIZE or TPMAXSZ Thread Pool Active Threads attribute The number of threads in the thread pool currently active doing work. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_ACTIVE_THREADS or TPACTTH Thread Pool Avg Active Threads attribute The average number of threads in the thread pool simultaneously active doing work. Real number (32-bit gauge) with two decimal places of precision with Chapter 4. Attributes reference 143

154 enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_AVG_ACTIVE_THREADS or TPAVGAT Thread Pool Min Active Threads attribute The smallest number of threads in the thread pool that have simultaneously been active doing work. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_MIN_ACTIVE_THREADS or TPMINAT Thread Pool Max Active Threads attribute The peak number of threads in the thread pool that have simultaneously been active doing work. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_MAX_ACTIVE_THREADS or TPMAXAT Thread Pool Queue Length attribute The number of jobs currently waiting in the thread pool queue. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_QUEUE_LENGTH or TPQLGTH Thread Pool Avg Queue Length attribute The average length of the thread pool queue during this run. 144 Microsoft IIS agent User's Guide - Beta 1 Draft

155 Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_AVG_QUEUE_LENGTH or TPAVGQL Thread Pool Min Queue Length attribute The minimum length the thread pool queue has reached. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_MIN_QUEUE_LENGTH or TPMINQL Thread Pool Max Queue Length attribute The peak length the thread pool queue has reached. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_MAX_QUEUE_LENGTH or TPMAXQL Thread Pool Avg Job Wait attribute The average time a job spends waiting on the thread pool queue in seconds. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_AVG_JOB_WAIT or TPAVJBW Thread Pool Total Jobs attribute The number of jobs completed by all threads in the pool since agent start. Chapter 4. Attributes reference 145

156 Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v NO DATA (-1) v NO DATA (-100) THREAD_POOL_TOTAL_JOBS or TPTJOBS Virtual Domain Setting attribute group This attribute group provides information about the configuration settings of the virtual domain that is used to access the website, which is hosted on the SSL port. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Virtual Domain Setting attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Website Name attribute The name of the website. The source for this attribute is Script data. WEBSITE_NAME or SITENAM Server Name Indication Enabled attribute This attribute indicates whether a website can be accessed by using a virtual domain name. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v False (0) 146 Microsoft IIS agent User's Guide - Beta 1 Draft

157 v True (1) The source for this attribute is Script data. SERVER_NAME_INDICATION_ENABLED or SERNAIN Virtual Domain Name attribute This attribute displays the name of the virtual domain that is used to access the website, which is hosted on the SSL port. The source for this attribute is Script data. VIRTUAL_DOMAIN_NAME or VIRDONAM SSL Port attribute The SSL port number of the website. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. SSL_PORT or SSLPORT W3SVC W3WP attribute group This attribute group monitors HTTP request processing related data for the worker process. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the W3SVC W3WP attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. Chapter 4. Attributes reference 147

158 The source for this attribute is the agent. TIMESTAMP Name attribute: This attribute is a key attribute. The name of application pool with worker process identifier (ID) for that worker process. The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPName. NAME Total HTTP Requests Served attribute The total number of HTTP requests served by the worker process. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalHTTPRequestsServe TOTAL_HTTP_REQUESTS_SERVED or TOTALHTTPR HTTP Requests Served Rate (per sec) attribute The rate of total number of HTTP requests served by the worker process per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalHTTPRequestsServe HTTP_REQUESTS_SERVED_RATE or TOTHTTPRR Request Rate (per sec) attribute The HTTP requests being processed by the worker process per second. Integer (32-bit gauge) with enumerated values. The strings are displayed in the 148 Microsoft IIS agent User's Guide - Beta 1 Draft

159 Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPRequestsPerSec. REQUESTS_RATE or REQUESTSPE Active Requests attribute The current number of requests being processed by the worker process. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPActiveRequests. ACTIVE_REQUESTS or ACTIVEREQU Total Threads attribute The total number of threads available to process requests in the worker process. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalThreads. TOTAL_THREADS or TOTALTHREA Threads Rate (per sec) attribute The rate of total number of threads available to process requests in the worker process per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 149

160 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalThreads. THREADS_RATE or TOTTHREAR Active Thread Count attribute The number of threads actively processing requests in the worker process. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPActiveThreadsCount. ACTIVE_THREADS_COUNT or ACTIVETHRE Current File Cache Memory Usage (KB) attribute The current number of KB used by user-mode file cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Current_File_Cache_Memory_Usage / CURRENT_FILE_CACHE_MEMORY_USAGE_IN_KB or CURRMUKB Maximum File Cache Memory Usage (KB) attribute The maximum number of KB used by user-mode file cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Maximum_File_Cache_Memory_Usage / Microsoft IIS agent User's Guide - Beta 1 Draft

161 MAXIMUM_FILE_CACHE_MEMORY_USAGE_IN_KB or MAXIMUMKB Output Cache Current Memory Usage (KB) attribute The current number of KB used by output cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Output_Cache_Current_Memory_Usage / OUTPUT_CACHE_CURRENT_MEMORY_USAGE_IN_KB or OUTPUTCAKB Current Files Cached attribute The current number of files whose contents are present in user-mode cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPCurrentFilesCached. CURRENT_FILES_CACHED or CURRENTFI0 Total Files Cached attribute The total number of files whose contents were added to the user-mode cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalFilesCached. TOTAL_FILES_CACHED or TOTALFILES Files Cached Rate (per sec) attribute Chapter 4. Attributes reference 151

162 The rate of total number of files whose contents were added to the user-mode cache per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalFilesCached. FILES_CACHED_RATE or TOTFILESR File Cache Hits attribute The total number of successful lookups in the user-mode file cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPFileCacheHits. FILE_CACHE_HITS or FILECACHEH File Cache Misses attribute The total number of unsuccessful lookups in the user-mode file cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPFileCacheMisses. FILE_CACHE_MISSES or FILECACHEM File Cache Flushes attribute The total number of files removed from the user-mode cache since service started. 152 Microsoft IIS agent User's Guide - Beta 1 Draft

163 Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPFileCacheFlushes. FILE_CACHE_FLUSHES or FILECACHEF Active Flushed Entries attribute The number of file handles cached in user-mode that will be closed when all current transfers complete. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPActiveFlushedEntries. ACTIVE_FLUSHED_ENTRIES or ACTIVEFLUS Total Flushed Files attribute The total number of file handles that have been removed from the user-mode cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalFlushedFiles. TOTAL_FLUSHED_FILES or TOTALFLUSH Flushed Files Rate (per sec) attribute The rate of total number of file handles that have been removed from the user-mode cache per second. Integer (rate of change between successive values) with enumerated values. The Chapter 4. Attributes reference 153

164 strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalFlushedFiles. FLUSHED_FILES_RATE or TOTALFLFR Current Metadata Cached attribute The number of metadata information blocks currently present in user-mode cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPCurrentMetadataCached. CURRENT_METADATA_CACHED or CURRENTMET Total Metadata Cached attribute The total number of metadata information blocks added to the user-mode cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalMetadataCached. TOTAL_METADATA_CACHED or TOTALMETAD Metadata Cached Rate (per sec) attribute The rate of total number of metadata information blocks added to the user-mode cache per second. Integer (rate of change between successive values) with enumerated values. The 154 Microsoft IIS agent User's Guide - Beta 1 Draft

165 strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalMetadataCached. METADATA_CACHED_RATE or TOTALMETCR Metadata Cache Hits attribute The total number of successful lookups in the user-mode metadata cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPMetadataCacheHits. METADATA_CACHE_HITS or METADATAC0 Metadata Cache Misses attribute The total number of unsuccessful lookups in the user-mode metadata cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPMetadataCacheMisses METADATA_CACHE_MISSES or METADATAC2 Metadata Cache Flushes attribute The total number of user-mode metadata cache flushes since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 155

166 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPMetadataCacheFlushes. METADATA_CACHE_FLUSHES or METADATACA Total Flushed Metadata attribute The total number of metadata information blocks removed from the user-mode cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalFlushedMetadata. TOTAL_FLUSHED_METADATA or TOTALFLUS0 Flushed Metadata Rate (per sec) attribute The rate of total number of metadata information blocks removed from the user-mode cache per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPTotalFlushedMetadata. FLUSHED_METADATA_RATE or TOTALFLMR0 Output Cache Current Items attribute The number of items currently present in output cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 156 Microsoft IIS agent User's Guide - Beta 1 Draft

167 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheCurrentIt OUTPUT_CACHE_CURRENT_ITEMS or OUTPUTCAC0 Output Cache Total Hits attribute The total number of successful lookups in output cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheTotalHits OUTPUT_CACHE_TOTAL_HITS or OUTPUTCAC6 Output Cache Total Misses attribute The total number of unsuccessful lookups in output cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheTotalMiss OUTPUT_CACHE_TOTAL_MISSES or OUTPUTCAC7 Output Cache Total Flushes attribute The total number of flushes of output cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheTotalFlus OUTPUT_CACHE_TOTAL_FLUSHES or OUTPUTCAC5 Output Cache Flushes Rate (per sec) attribute Chapter 4. Attributes reference 157

168 The rate of total number of flushes of output cache per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheTotalFlushe OUTPUT_CACHE_FLUSHES_RATE or OUTPUTCAFR Output Cache Total Flushed Items attribute The total number of items flushed from output cache since service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheTotalFlushe OUTPUT_CACHE_TOTAL_FLUSHED_ITEMS or OUTPUTCAC4 Output Cache Flushed Items Rate (per sec) attribute The rate of total number of items flushed from output cache per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheTotalFlushe OUTPUT_CACHE_FLUSHED_ITEMS_RATE or OPCACFIR File Cache Hits Rate (per sec) attribute The rate of successful lookups in file cache during the last sample interval. Integer (32-bit gauge) with enumerated values. The strings are displayed in the 158 Microsoft IIS agent User's Guide - Beta 1 Draft

169 Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPFileCacheHitsPersec. FILE_CACHE_HITS_RATE or FILECACHE0 Metadata Cache Hits Rate (per sec) attribute The rate of successful lookups in metadata cache during the last sample interval. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPMetadataCacheHitsPe METADATA_CACHE_HITS_RATE or METADATAC1 File Cache Misses Rate (per sec) attribute The rate of unsuccessful lookups in file cache during the last sample interval. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPFileCacheMissesPersec FILE_CACHE_MISSES_RATE or FILECACHE1 Metadata Cache Misses Rate (per sec) attribute The rate of unsuccessful lookups in metadata cache during the last sample interval. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 159

170 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPMetadataCacheMissesPer METADATA_CACHE_MISSES_RATE or METADATAC3 Output Cache Misses Rate (per sec) attribute The rate of unsuccessful lookups in output cache during the last sample interval. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheMissesPerse OUTPUT_CACHE_MISSES_RATE or OPCACMR Maximum Thread Count attribute The maximum number of threads to which the thread pool can grow as needed. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPMaximumThreadsCount. MAXIMUM_THREADS_COUNT or MAXIMUMTHR Output Cache Current Flushed Items attribute The number of items that have been flushed from output cache but are still being used by outgoing responses and taking up memory. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheCurrentFlus 160 Microsoft IIS agent User's Guide - Beta 1 Draft

171 OUTPUT_CACHE_CURRENT_FLUSHED_ITEMS or OUTPUTCACH Output Cache Hits Rate (per sec) attribute The rate of successful lookups in output cache during the last sample interval. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPOutputCacheHitsPerse OUTPUT_CACHE_HITS_RATE or OUTPUTCAC2 Websocket Active Reqs attribute The number of WebSocket requests that are currently active. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPWebSocketActiveRequ WEBSOCKET_ACTIVE_REQS or WEBSOCAR Websocket Connection Attempts Rate (per sec) attribute The rate at which WebSocket connection attempts are processed by the worker process. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPWebSocketConnection WEBSOCKET_CONNECTION_ATTEMPTS_RATE or WSOCCOAR Websocket Connections Accepted (per sec) attribute The rate at which WebSocket connections are accepted. Chapter 4. Attributes reference 161

172 Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPWebSocketConnectionsA WEBSOCKET_CONNECTIONS_ACCEPTED_PER_SEC or WESOCOAC Websocket Connections Rejected (per sec) attribute The rate at which WebSocket connections are rejected. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_W3SVCW3WPCounterProvider_W3SVCW3WPWebSocketConnectionsRe WEBSOCKET_CONNECTIONS_REJECTED_PER_SEC or WEBSOCRR WAS W3WP attribute group This attribute group monitors a specific worker process. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the WAS W3WP attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP 162 Microsoft IIS agent User's Guide - Beta 1 Draft

173 Name attribute: This attribute is a key attribute. The name of application pool with worker process identifier (ID) for that worker process. The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPName. NAME Active Listener Channels attribute The number of currently active listener channels in the worker process. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPActiveListenerChannels. ACTIVE_LISTENER_CHANNELS or ACTIVELIST Active Protocol Handlers attribute The number of currently active protocol handlers in the worker process. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPActiveProtocolHandlers. ACTIVE_PROTOCOL_HANDLERS or ACTIVEPROT Health Ping Reply Latency attribute The time, in 100-nanosecond intervals, taken by worker process to reply to last health ping. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 163

174 The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPHealthPingReplyLatency. HEALTH_PING_REPLY_LATENCY or HEALTHPING Total Health Pings attribute The total number of health pings received by the process. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalHealthPings. TOTAL_HEALTH_PINGS or TOTALHEALT Health Ping Rate (per sec) attribute The rate of total number of health pings received by the process per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalHealthPings. HEALTH_PINGS_RATE or TOTHEALTR Total Messages Sent to WAS attribute The total number of messages sent to Web admin service by the worker process. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalMessagesSenttoWAS. 164 Microsoft IIS agent User's Guide - Beta 1 Draft

175 TOTAL_MESSAGES_SENT_TO_WAS or TOTALMESSA Messages Sent to WAS Rate (per sec) attribute The rate of total number of messages sent to Web admin service by the worker process per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalMessagesSenttoWAS. MESSAGES_SENT_TO_WAS_RATE or TOTMESSARR Total Requests Served attribute The total number of requests served by the worker process. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalRequestsServed. TOTAL_REQUESTS_SERVED or TOTALREQUE Requests Served Rate (per sec) attribute The rate of total number of requests served by the worker process per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalRequestsServed. REQUESTS_SERVED_RATE or TOTREQUERR Total Runtime Status Queries attribute Chapter 4. Attributes reference 165

176 The total number of runtime status queries received by the process. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalRuntimeStatusQueries. TOTAL_RUNTIME_STATUS_QUERIES or TOTALRUNTI Runtime Status Queries Rate (per sec) attribute The rate of total number of runtime status queries received by the process per second. Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalRuntimeStatusQueries. RUNTIME_STATUS_QUERIES_RATE or TOTRUNTIRR Total WAS Messages Received attribute The total number of messages received by the worker process from Web admin service. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalWASMessagesReceived. TOTAL_WAS_MESSAGES_RECEIVED or TOTALWASME WAS Messages Received Rate (per sec) attribute The rate of total number of messages received by the worker process from Web admin service per second. 166 Microsoft IIS agent User's Guide - Beta 1 Draft

177 Integer (rate of change between successive values) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is WMI - ROOT\CIMV2\ Win32_PerfFormattedData_WASW3WPCounterProvider_WASW3WPTotalWASMessagesReceived WAS_MESSAGES_RECEIVED_RATE or TOTWASMERR Web Service attribute group This attribute group monitors the web service. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Web Service attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Total KB Sent (Superseded) attribute The total KB of data that is sent by the World Wide Web service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Total_Bytes_Sent / Chapter 4. Attributes reference 167

178 TOTAL_KBYTES_SENT or TOTAL_KBST KB Sent Rate (per sec) attribute The rate, in seconds, at which KB are sent by the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Sent_Rate / KB_SENT_RATE or KB_SENT_RT Total KB Received (Superseded) attribute The total KB of data that is received by the World Wide Web service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Total_Bytes_Received / TOTAL_KBYTES_RECEIVED or TOTAL_KBRV KB Received Rate (per sec) attribute The rate in seconds, at which KB are received by the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Received_Rate / KB_RECEIVED_RATE or KB_RECE_RT Total KB Transferred (Superseded) attribute The total number of KB of data that are sent and received by the WWW service since the service started. 168 Microsoft IIS agent User's Guide - Beta 1 Draft

179 Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Total_Bytes_Transfered / TOTAL_KBYTES_TRANSFERED or TOTAL_KBT KB Total Rate (per sec) attribute The sum of KB sent per second and received per second. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Bytes_Total_Rate / KB_TOTAL_RATE or KB_TOTA_RT Total Files Sent attribute The number of user-mode files that are sent by the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Files Sent. TOTAL_FILES_SENT or TOTAL_FIL0 Files Sent Rate (per sec) attribute The rate, in seconds, at which files are sent. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 169

180 The source for this attribute is Perfmon - Web Service\*\Files Sent/sec. FILES_SENT_RATE or FILES_SENT Total Files Received attribute The number of files that are received by the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Files Received. TOTAL_FILES_RECEIVED or TOTAL_FILE Files Received Rate (per sec) attribute The rate, in seconds, at which files are received by the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Files Received/sec. FILES_RECEIVED_RATE or FILES_RECE Total Files Transferred attribute The sum of total files sent and received by the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Files Transferred. TOTAL_FILES_TRANSFERRED or TOTAL_FIL1 170 Microsoft IIS agent User's Guide - Beta 1 Draft

181 Files Rate (per sec) attribute The rate, in seconds, at which files are sent and received by the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Files/sec. FILES_RATE or FILES_SEC Current Anonymous Users attribute The number of users who currently have an anonymous request pending with the WWW service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Current Anonymous Users. CURRENT_ANONYMOUS_USERS or CURRENT_AN Current NonAnonymous Users attribute The number of users who currently have a nonanonymous request pending with the WWW service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Current NonAnonymous Users. CURRENT_NONANONYMOUS_USERS or CURRENT_NO Total Anonymous Users attribute Chapter 4. Attributes reference 171

182 The number of users who have established an anonymous request since the WWW service started.this attribute does not increment when files are served from the kernel cache. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Anonymous Users. TOTAL_ANONYMOUS_USERS or TOTAL_ANON Anonymous Users Rate (per sec) attribute The rate, in seconds, at which users made anonymous requests to the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Anonymous Users/sec. ANONYMOUS_USERS_RATE or ANONYMOUS_ Total NonAnonymous Users attribute The number of users who made nonanonymous requests to the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total NonAnonymous Users. TOTAL_NONANONYMOUS_USERS or TOTAL_NONA NonAnonymous Users Rate (per sec) attribute The rate, in seconds, at which users made nonanonymous requests to the WWW service. 172 Microsoft IIS agent User's Guide - Beta 1 Draft

183 Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\NonAnonymous Users/sec. NONANONYMOUS_USERS_RATE or NONANONYMO Maximum NonAnonymous Users attribute The maximum number of users who made concurrent nonanonymous requests to the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Maximum NonAnonymous Users. MAXIMUM_NONANONYMOUS_USERS or MAXIMUM_NO Maximum Anonymous Users attribute The maximum number of users who made concurrent anonymous requests to the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Maximum Anonymous Users. MAXIMUM_ANONYMOUS_USERS or MAXIMUM_AN % Current Anonymous Users attribute The percentage of users who currently have an anonymous request pending with the WWW service. Real number (32-bit gauge) with two decimal places of precision with Chapter 4. Attributes reference 173

184 enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Current_Anonymous_Users / (Current_Anonymous_Users + Current_NonAnonymous_Users)) * 100. PERCENT_CURRENT_ANONYMOUS_USERS or CURRAN_PR % Current NonAnonymous Users attribute The percentage of users who currently have a nonanonymous request pending with the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Current_NonAnonymous_Users / (Current_Anonymous_Users + Current_NonAnonymous_Users)) * 100. PERCENT_CURRENT_NONANONYMOUS_USERS or CURRNAU_PR % Total Anonymous Users attribute The percentage of users who established an anonymous request since the WWW service started.this attribute does not increment when files are served from the kernel cache. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Total_Anonymous_Users / (Total_Anonymous_Users + Total_NonAnonymous_Users)) * 100. PERCENT_TOTAL_ANONYMOUS_USERS or TOT_ANONPR % Total NonAnonymous Users attribute The percentage of users who made nonanonymous requests to the WWW service since the service started. 174 Microsoft IIS agent User's Guide - Beta 1 Draft

185 Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: (Total_NonAnonymous_Users / (Total_Anonymous_Users + Total_NonAnonymous_Users)) * 100. PERCENT_TOTAL_NONANONYMOUS_USERS or TOT_NONAPR Current Connections attribute The number of active connections to the WWW service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Current Connections. CURRENT_CONNECTIONS or CURRENT_CO Maximum Connections attribute The maximum number of simultaneous connections made to the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Maximum Connections. MAXIMUM_CONNECTIONS or MAXIMUM_CO Total Connection Attempts (all Instances) attribute The number of connections attempted to the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 175

186 The source for this attribute is Perfmon - Web Service\*\Total Connection Attempts (all instances). TOTAL_CONNECTION_ATTEMPTS or TOTAL_CONN Connection Attempts Rate (per sec) attribute The rate, in seconds, at which connections are attempted to the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Connection Attempts/sec. CONNECTION_ATTEMPTS_RATE or CONNECTION Total Logon Attempts attribute The number of attempts made to log on to the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Logon Attempts. TOTAL_LOGON_ATTEMPTS or TOTAL_LOGO Logon Attempts Rate (per sec) attribute The rate, in seconds, at which attempts were made to log on to the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 176 Microsoft IIS agent User's Guide - Beta 1 Draft

187 The source for this attribute is Perfmon - Web Service\*\Logon Attempts/sec. LOGON_ATTEMPTS_RATE or LOGON_ATTE Web Service Uptime (hrs) attribute The amount of time, in hours, that the WWW service is running. Real number (32-bit counter) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Service_Uptime / WEB_SERVICE_UPTIME_IN_HRS or SERV_UPHRS Total Method Requests attribute The number of HTTP requests that are made since the WWW service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Method Requests. TOTAL_METHOD_REQUESTS or TOTAL_METH Total Method Requests Rate (per sec) attribute The rate, in seconds, at which all HTTP requests are received. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Method Requests/sec. TOTAL_METHOD_REQUESTS_RATE or TOTAL_MET0 Total Other Request Methods attribute Chapter 4. Attributes reference 177

188 The number of HTTP requests that did not use the OPTIONS, GET, HEAD, POST, PUT, DELETE, TRACE, MOVE, COPY, MKCOL, PROPFIND, PROPPATCH, SEARCH, LOCK, or UNLOCK methods since the WWW service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Other Request Methods. TOTAL_OTHER_REQUEST_METHODS or TOTAL_OTHE Other Request Methods Rate (per sec) attribute The rate, in seconds, at which HTTP requests that do not use the methods listed for the Total Other Requests Methods attribute are made to the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Other Request Methods/sec. OTHER_REQUEST_METHODS_RATE or OTHER_REQU Total Requests Rate (per sec) attribute The rate, in seconds, at which all the HTTP requests are received. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Total_Method_Requests_Rate - Other_Request_Methods_Rate. TOTAL_REQUESTS_RATE or TOTAREQ_RT Total Not Found Errors attribute 178 Microsoft IIS agent User's Guide - Beta 1 Draft

189 The number of requests that are made since the service started, but not satisfied by the server because the requested document was not found.this is usually reported as HTTP error 404. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Not Found Errors. TOTAL_NOT_FOUND_ERRORS or TOTAL_NOT_ Not Found Error Rate (per sec) attribute The rate, in seconds, at which requests were not satisfied by the server because the requested document was not found. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Not Found Errors/sec. NOT_FOUND_ERRORS_RATE or NOT_FOUND_ Total Locked Errors attribute The number of requests that are made since the service started, but not satisfied by the server because the requested document was locked.this is usually reported as HTTP error 423. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total Locked Errors. TOTAL_LOCKED_ERRORS or TOTAL_LOCK Locked Error Rate (per sec) attribute The rate, in seconds, at which requests were not satisfied because the requested document was locked. Chapter 4. Attributes reference 179

190 Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Locked Errors/sec. LOCKED_ERRORS_RATE or LOCKED_ERR Current CGI Requests attribute The number of CGI requests that are processed simultaneously by the WWW service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Current CGI Requests. CURRENT_CGI_REQUESTS or CURRENT_CG Total CGI Requests attribute The number of all CGI requests that are made since the WWW service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Total CGI Requests. TOTAL_CGI_REQUESTS or TOTAL_CGI_ CGI Requests Rate (per sec) attribute The rate, in seconds, at which CGI requests are processed simultaneously by the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 180 Microsoft IIS agent User's Guide - Beta 1 Draft

191 The source for this attribute is Perfmon - Web Service\*\CGI Requests/sec. CGI_REQUESTS_RATE or CGI_REQUES Maximum CGI Requests attribute The maximum number of CGI requests that are processed simultaneously by the WWW service since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Maximum CGI Requests. MAXIMUM_CGI_REQUESTS or MAXIMUM_CG Current ISAPI Extension Requests attribute The number of ISAPI extension requests that are processed simultaneously by the WWW service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Current ISAPI Extension Requests. CURRENT_ISAPI_EXTENSION_REQUESTS or CURRENT_IS Total ISAPI Extension Requests attribute The number of ISAPI extension requests that are made since the WWW service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 181

192 The source for this attribute is Perfmon - Web Service\*\Total ISAPI Extension Requests. TOTAL_ISAPI_EXTENSION_REQUESTS or TOTAL_ISAP ISAPI Extension Requests Rate (per sec) attribute The rate, in seconds, at which ISAPI extension requests are processed by the WWW service. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\ISAPI Extension Requests/sec. ISAPI_EXTENSION_REQUESTS_RATE or ISAPI_EXTE Maximum ISAPI Extension Requests attribute The maximum number of ISAPI extension requests that were processed simultaneously by the WWW service. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service\*\Maximum ISAPI Extension Requests. MAXIMUM_ISAPI_EXTENSION_REQUESTS or MAXIMUM_IS Total KB Sent attribute This attribute is the 64-bit version of Total_KB\Sent (Superseded) which signifies the number of KB that are sent by the WWW service since the service started. Real number (64-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Value Exceeds Maximum ( ) v Value Exceeds Minimum ( ) The source for this attribute is derived: Total_Bytes_Sent_64 / Microsoft IIS agent User's Guide - Beta 1 Draft

193 TOTAL_KBYTES_SENT_64 or TOTAL_KS64 Total KB Received attribute This attribute is the 64-bit version of Total_KB\Received (Superseded) which signifies the total KB of data that are received by the WWW service since the service started. Real number (64-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Value Exceeds Maximum ( ) v Value Exceeds Minimum ( ) The source for this attribute is derived: Total_Bytes_Received_64 / TOTAL_KBYTES_RECEIVED_64 or TOTAL_KR64 Total KB Transferred attribute This attribute is the 64-bit version of Total_KB\Transferred (Superseded) which is the sum of total KB of data that are sent and received by the WWW service since the service started. Real number (64-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Value Exceeds Maximum ( ) v Value Exceeds Minimum ( ) The source for this attribute is derived: Total_KBytes_Sent_64 + Total_KBytes_Received_64. TOTAL_KBYTES_TRANSFERED_64 or TOTAL_KT64 Name attribute: This attribute is a key attribute. The name of the instance. The source for this attribute is PerfMon. NAME Web Service Cache attribute group This attribute group monitors web service cache. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Web Service Cache attribute group: Chapter 4. Attributes reference 183

194 Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Active Flushed Entries attribute The file handles cached in user-mode that will be closed when all current transfers complete. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Active Flushed Entries. ACTIVE_FLUSHED_ENTRIES or ACTIVE_FLU Current File Cache Memory Usage (KB) attribute The current number of KB that are used for the user-mode file cache. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is derived: Current_File_Cache_Memory_Usage / CURRENT_FILE_CACHE_MEMORY_USAGE_IN_KB or CURR_MUKB Current Files Cached attribute The current number of files that are in the user-mode cache. 184 Microsoft IIS agent User's Guide - Beta 1 Draft

195 Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Current Files Cached. CURRENT_FILES_CACHED or CURRENT_F0 Total Files Cached attribute The total number of files that are added to the user-mode cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Total Files Cached. TOTAL_FILES_CACHED or TOTAL_FILE File Cache Hits attribute The number of successful lookups in the user-mode file cache that occurred since the WWW service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\File Cache Hits. FILE_CACHE_HITS or FILE_CACH0 File Cache Hits % attribute The ratio of user-mode file cache hits to total cache requests since the service started. Real number (32-bit gauge) with two decimal places of precision with Chapter 4. Attributes reference 185

196 enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\File Cache Hits %. FILE_CACHE_HITS_PERCENT or FILE_CACH1 File Cache Misses attribute The total number of unsuccessful lookups in the user-mode file cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\File Cache Misses. FILE_CACHE_MISSES or FILE_CACH2 File Cache Flushes attribute The number of files that were removed from the user-mode cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\File Cache Flushes. FILE_CACHE_FLUSHES or FILE_CACHE Maximum File Cache Memory Usage (KB) attribute The maximum number of KB that are used for user-mode file cache since the service started. Real number (32-bit counter) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 186 Microsoft IIS agent User's Guide - Beta 1 Draft

197 The source for this attribute is derived: Maximum_File_Cache_Memory_Usage / MAXIMUM_FILE_CACHE_MEMORY_USAGE_IN_KB or MAXIMU_KB Total Flushed Files attribute The number of file handles that are removed from the user-mode cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Total Flushed Files. TOTAL_FLUSHED_FILES or TOTAL_FLUS Current Metadata Cached attribute The number of metadata information blocks that are currently in the user-mode cache. Integer (32-bit gauge) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Current Metadata Cached. CURRENT_METADATA_CACHED or CURRENT_ME Total Metadata Cached attribute The total number of metadata information blocks that are added to the user-mode cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: Chapter 4. Attributes reference 187

198 The source for this attribute is Perfmon - Web Service Cache\*\Total Metadata Cached. TOTAL_METADATA_CACHED or TOTAL_META Metadata Cache Hits attribute The number of successful lookups in the user-mode metadata cache that occurred since the WWW service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Metadata Cache Hits. METADATA_CACHE_HITS or METADATA_0 Metadata Cache Misses attribute The total number of unsuccessful lookups in the user-mode metadata cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Metadata Cache Misses. METADATA_CACHE_MISSES or METADATA_2 Metadata Cache Hits % attribute The ratio of user-mode metadata cache hits to total cache requests since the service started. Real number (32-bit gauge) with two decimal places of precision with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: 188 Microsoft IIS agent User's Guide - Beta 1 Draft

199 The source for this attribute is Perfmon - Web Service Cache\*\Metadata Cache Hits %. METADATA_CACHE_HITS_PERCENT or METADATA_1 Metadata Cache Flushes attribute The number of user-mode metadata cache flushes since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Metadata Cache Flushes. METADATA_CACHE_FLUSHES or METADATA_C Total Flushed Metadata attribute The number of metadata information blocks that are removed from the user-mode cache since the service started. Integer (32-bit counter) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Perfmon - Web Service Cache\*\Total Flushed Metadata. TOTAL_FLUSHED_METADATA or TOTAL_FLU0 Web Service Extensions Restricted List attribute group This attribute group displays information about all available web service extensions for Microsoft IIS. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Web Service Extensions Restricted List attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. Chapter 4. Attributes reference 189

200 NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Allow/Deny Flag attribute Status of web service extension. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v ALLOW (1) v DENY (0) The source for this attribute is Script data. ALLOW_DENY_FLAG or ENABLE Physical Path attribute: This attribute is a key attribute. The full path to the extension.if the last three characters of the physical path are DLL (case insensitive), then the extension is ISAPI, otherwise it is CGI. The source for this attribute is Script data. PHYSICAL_PATH or LIBPATH Removable attribute Indicates whether the server administrator is allowed to delete the extension from IIS Manager. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v CAN UNINSTALL IISMGR (1) v CANT UNINSTALL IISMGR (0) The source for this attribute is Script data. REMOVABLE or STATUS Group ID attribute Non-localizable string used to identify groups of extensions. 190 Microsoft IIS agent User's Guide - Beta 1 Draft

201 The source for this attribute is Script data. GROUP_ID or GID attribute Localizable description of the server extension. The source for this attribute is Script data. DESCRIPTION or DESCRIPTIO Website Certificate Details attribute group This attribute group displays the details of the website certificate that is installed for each Microsoft IIS website.this attribute group is applicable for IIS 7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Website Certificate Details attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP WebSite Name attribute: This attribute is a key attribute. The name of the website. The source for this attribute is Script data. WEBSITE_NAME or SITE_NAME Issued To attribute The users, organizations, or the servers to which the website certificate is issued. Chapter 4. Attributes reference 191

202 The source for this attribute is Script data. ISSUED_TO or ISSUE_TO Issued By attribute The name of the certification authority. The source for this attribute is Script data. ISSUED_BY or ISSUE_BY Expiry Date attribute The expiry date of a certificate. The source for this attribute is Script data. EXPIRY_DATE or EXP_DATE Days Remaining attribute The number of days remaining before the certificate expires. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Already Expired. (-1) The source for this attribute is Script data. DAYS_REMAINING or DAY_REM SSL Ports attribute Ports on which SSL certificate is applied. The source for this attribute is Script data. SSL_PORTS or PORTS SSL Certificate Friendly Name attribute Friendly name of SSL certificate. The source for this attribute is Script data. 192 Microsoft IIS agent User's Guide - Beta 1 Draft

203 SSL_CERTIFICATE_FRIENDLY_NAME or SSLFNAM Website Dynamic IP and Domain Restrictions attribute group This attribute group provides information about the IP and domain restrictions that are applied on a website.this attribute group is applicable for IIS 7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Website Dynamic IP and Domain Restrictions attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Website Name attribute: This attribute is a key attribute. The name of the website. The source for this attribute is Script data. WEBSITE_NAME or NAME Allowed Specific IP attribute The IP addresses that are allowed to access the website. The source for this attribute is Script data. ALLOWED_SPECIFIC_IP or ALLOWIP Allowed IP Range attribute The ranges of IP addresses that are allowed to access the website.the format of the value is IP address(subnet Mask). The source for this attribute is Script data. Chapter 4. Attributes reference 193

204 ALLOWED_IP_RANGE or ALLOWIPR Allowed Domain attribute The domain names that are allowed to access the website. The source for this attribute is Script data. ALLOWED_DOMAIN or ALLOWDOM Denied Specific IP attribute The IP addresses that are not allowed to access the website. The source for this attribute is Script data. DENIED_SPECIFIC_IP or DENYIP Denied IP Range attribute The ranges of IP addresses that are not allowed to access the website.the format of the value is IP address(subnet Mask). The source for this attribute is Script data. DENIED_IP_RANGE or DENYIPR Denied Domain attribute The domain names that are not allowed to access the website. The source for this attribute is Script data. DENIED_DOMAIN or DENYDOM Website Dynamic IP Restrictions Settings attribute group This attribute group provides information about the configuration of dynamic IP restrictions that are applied to a website.this attribute group is applicable for IIS 7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Website Dynamic IP Restrictions Settings attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. 194 Microsoft IIS agent User's Guide - Beta 1 Draft

205 NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Website Name attribute: This attribute is a key attribute. The name of the website. The source for this attribute is Script data. WEBSITE_NAME or NAME Deny IP Address (Number of Concurrent Reqs) attribute Indicates whether the website is configured to deny the requests that arrive after the number of concurrent requests has reached the maximum limit. The source for this attribute is Script data. DENY_IP_ADDRESS_NUMBER_OF_CONCURRENT_REQS or ACCUNCL Max Number of Concurrent Allowed Reqs attribute The maximum number of concurrent requests that are allowed from an IP address. Integer (32-bit numeric property) with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: The source for this attribute is Script data. MAX_NUMBER_OF_CONCURRENT_ALLOWED_REQS or ENDNRE Deny IP Address (Number of Reqs Over a Duration) attribute Indicates whether the website is configured to deny the requests that arrive after the number of requests over a duration (in milliseconds) exceeds the maximum limit. The source for this attribute is Script data. Chapter 4. Attributes reference 195

206 DENY_IP_ADDRESS_NUMBER_OF_REQS_OVER_A_DURATION or ENPRMO Max Number of Reqs Over a Duration (in ms) attribute The maximum number of requests that are allowed from an IP address over a specified duration. The source for this attribute is Script data. MAX_NUMBER_OF_REQS_OVER_A_DURATION_IN_MS or DEACTY Enable Logging Only Mode attribute Indicates that an event is logged if the number of requests from an IP address exceeds the maximum number of concurrent requests or the number of requests over a duration. The source for this attribute is Script data. ENABLE_LOGGING_ONLY_MODE or ENLOMO Website IP and Domain Restrictions Settings attribute group This attribute group provides information about the configuration of the IP and domain restrictions that are applied to a website.this attribute group is applicable for IIS 7.x and later. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Attribute descriptions The following list contains information about each attribute in the Website IP and Domain Restrictions Settings attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Website Name attribute: This attribute is a key attribute. The name of the website. 196 Microsoft IIS agent User's Guide - Beta 1 Draft

207 The source for this attribute is Script data. WEBSITE_NAME or NAME Access for Unspecified Clients attribute Indicates whether access is to be allowed or denied to the clients that are not specified by any rule. Integer with enumerated values. The strings are displayed in the Tivoli Enterprise The warehouse and queries return the values that are shown in parentheses. The following values are defined: v Allow (1) v Deny (2) The source for this attribute is Script data. ACCESS_FOR_UNSPECIFIED_CLIENTS or ACCUNCL Domain Name Restrictions attribute Indicates whether access for an incoming request is to be allowed or denied based on the domain name. The source for this attribute is Script data. DOMAIN_NAME_RESTRICTIONS or ENDNRE Proxy Mode attribute This attribute helps administrators to determine the client IP address and the requests that contain the X-Forwarded-For HTTP header to identify the requests that must be blocked. The source for this attribute is Script data. PROXY_MODE or ENPRMO Deny Action attribute This attribute specifies the action to be taken when a request is denied. The source for this attribute is Script data. DENY_ACTION_TYPE or DEACTY Website Virtual Dir Details attribute group This attribute group displays the details of the website virtual directory. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. Chapter 4. Attributes reference 197

208 Attribute descriptions The following list contains information about each attribute in the Website Virtual Dir Details attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Virtual Directory Name attribute: This attribute is a key attribute. The name of the website virtual directory. The source for this attribute is Script data. VIRTUAL_DIR_NAME or NAME Directory Path attribute The path of the directory that is available either on a local server or a remote server to which the virtual directory is mapped. The source for this attribute is Script data. DIR_PATH or VIRDIRPATH Application Pool Name attribute The name of the application pool. The source for this attribute is Script data. APP_POOL_NAME or APPPOOL Websites W3C Logs attribute group This attribute group shows information about incoming requests that are logged by http.sys kernel in u_ex{date}.log file in unicode W3C log format for each websites. Historical group This attribute group is eligible for use with Tivoli Data Warehouse. 198 Microsoft IIS agent User's Guide - Beta 1 Draft

209 Attribute descriptions The following list contains information about each attribute in the Websites W3C Logs attribute group: Node attribute: This attribute is a key attribute. The managed system name of the agent. The source for this attribute is the agent. NODE Timestamp attribute The local time at the agent when the data was collected. The source for this attribute is the agent. TIMESTAMP Date attribute The date on which the activity occurred. The source for this attribute is Log File Data. DATE Time attribute The time, in coordinated universal time (UTC), at which the activity occurred. The source for this attribute is Log File Data. TIME Service Name and Instance Number attribute The Internet service name and instance number that was running on the client. The source for this attribute is Log File Data. SERVICE_NAME_AND_INSTANCE_NUMBER or SRVINAME Server Name attribute The name of the server on which the log file entry was generated. The source for this attribute is Log File Data. Chapter 4. Attributes reference 199

210 SERVER_NAME or SRVRNAME Server IP Address attribute The IP address of the server on which the log file entry was generated. The source for this attribute is Log File Data. SERVER_IP_ADDRESS or SERVERIP Method attribute The requested action, for example, a GET method. The source for this attribute is Log File Data. METHOD URI Stem attribute The target of the action, for example, Default.htm. The source for this attribute is Log File Data. URI_STEM or URISTEM URI Query attribute The query, if any, that the client was trying to perform.a Universal Resource Identifier (URI) query is necessary only for dynamic pages. The source for this attribute is Log File Data. URI_QUERY or URIQUERY Server Port attribute The server port number that is configured for the service. The source for this attribute is Log File Data. SERVER_PORT or SRVRPORT User Name attribute The name of the authenticated user who accessed your server.anonymous users are indicated by a hyphen. The source for this attribute is Log File Data. 200 Microsoft IIS agent User's Guide - Beta 1 Draft

211 USER_NAME or USERNAM Client IP Address attribute The IP address of the client that made the request. The source for this attribute is Log File Data. CLIENT_IP_ADDRESS or CLIENTIP Protocol Version attribute The protocol version HTTP or FTP that the client used. The source for this attribute is Log File Data. PROTOCOL_VERSION or PROTOVER User Agent attribute The browser type that the client used. The source for this attribute is Log File Data. USER_AGENT or USERAGNT Cookie attribute The content of the cookie sent or received, if any. The source for this attribute is Log File Data. COOKIE Referrer attribute The site that the user last visited.this site provided a link to the current site. The source for this attribute is Log File Data. REFERRER or REFERR Host attribute The host header name, if any. The source for this attribute is Log File Data. HOST Chapter 4. Attributes reference 201

212 HTTP Status attribute The HTTP status code. The source for this attribute is Log File Data. HTTP_STATUS or HTTPSTAT Protocol Substatus attribute The substatus error code. The source for this attribute is Log File Data. PROTOCOL_SUBSTATUS or PROTOSTA Win32 Status attribute The Windows status code. The source for this attribute is Log File Data. WIN32_STATUS or WINSTAT Bytes Sent attribute The number of bytes that the server sent. The source for this attribute is Log File Data. BYTES_SENT or BYTESENT Bytes Received attribute The number of bytes that the server received. The source for this attribute is Log File Data. BYTES_RECEIVED or BYTERECE Time Taken attribute The length of time that the action took, in milliseconds. The source for this attribute is Log File Data. TIME_TAKEN or TIMETAKE 202 Microsoft IIS agent User's Guide - Beta 1 Draft

213 Disk capacity planning for historical data Disk capacity planning for a monitoring agent is a prediction of the amount of disk space to be consumed by the historical data in each attribute group that is collecting historical data. Required disk storage is an important factor when you are defining data collection rules and your strategy for historical data collection. The Capacity planning for historical data table provides the following information, which is required to calculate disk space for this monitoring agent: Table Table name as it is displayed in the warehouse database, if the attribute group is configured to be written to the warehouse. The table name listed here corresponds to the table name in Attribute groups for the monitoring agent on page 29. Attribute group Name of the attribute group that is used to create the table in the warehouse database if it is short enough to fit in the table naming constraints of the database that is being used for the warehouse. The attribute group name listed here corresponds to the Warehouse table name in Attribute groups for the monitoring agent on page 29. Bytes per row (agent) Estimate of the record length for each row or instance that is written to the agent disk for historical data collection. This estimate can be used for agent disk space planning purposes. Database bytes per row (warehouse) Estimate of the record length for detailed records that are written to the warehouse database, if the attribute group is configured to be written to the warehouse. Detailed records are records that have been uploaded from the agent for long-term historical data collection. This estimate can be used for warehouse disk-space planning purposes. Aggregate bytes per row (warehouse) Estimate of the record length for aggregate records that are written to the warehouse database, if the attribute group is configured to be written to the warehouse. Aggregate records are created by the Summarization agent for attribute groups that have been configured for summarization. This estimate can be used for warehouse disk-space planning purposes. In addition to the information in the tables, you must know the number of rows of data that you plan to collect. An attribute group can have single or multiple rows of data, depending on the application environment that is being monitored. For example, if your attribute group monitors each processor in your computer and you have a dual processor computer, the number of rows is two. Table 2. Capacity planning for historical data logged by the Microsoft IIS agent Database bytes per row (warehouse) Table Attribute group Bytes per row (agent) KQ7ACTIVES KQ7_ACTIVE_SERVER_PAGES KQ7APPLWAS KQ7_APPLICATION_POOL_WAS KQ7ASPNETA KQ7_ASP_NET KQ7ASPNETF KQ7_ASP_NET_APPS_FILTER KQ7ASPNET4 KQ7_ASP_NET_APPS_V KQ7AVAIL KQ7_AVAILABILITY KQ7CENCER KQ7_CENTRALIZED_CERTIFICATE_ DETAILS KQ7EVTLOG KQ7_EVENT_LOG Aggregate bytes per row (warehouse) Chapter 4. Attributes reference 203

214 Table 2. Capacity planning for historical data logged by the Microsoft IIS agent (continued) Database bytes per row (warehouse) Table Attribute group Bytes per row (agent) KQ7FARETR KQ7_FAILED_REQUEST_TRACING KQ7FAREQTR KQ7_FAILED_REQUEST_TRACING_RULES KQ7FTPLAR KQ7_FTP_LOGON_ATTEMPT_ RESTRICTIONS_SETTINGS KQ7IISFTPS KQ7_FTP_SERVER_SITE_STATUS KQ7FTPSERV KQ7_FTP_SERVICE KQ7FDYNIPD KQ7_FTP_SITE_DYNAMIC_IP_AND_ DOMAIN_RESTRICTIONS KQ7FIPDORS KQ7_FTP_SITE_IP_AND_DOMAIN_ RESTRICTIONS_SETTINGS KQ7IISFTPI KQ7_FTP_VERSION_INFORMATION KQ7HTTPCUS KQ7_HTTP_CUSTOM_ERROR_MESSAGES KQ7HTTPERR KQ7_HTTP_ERROR_LOG KQ7HTTPRES KQ7_HTTP_ERROR_RESPONSE KQ7HTTPSER KQ7_HTTP_SERVICE_REQUEST_QUEUES KQ7APPPOOL KQ7_IIS_APPLICATION_POOLS_DETAILS KQ7IISAPPL KQ7_IIS_APPLICATION_POOLS_SETTING KQ7IISCOMP KQ7_IIS_COMPONENTS KQ7FTPBIND KQ7_IIS_FTP_SERVER_BINDINGS KQ7IISFTPM KQ7_IIS_FTP_SERVER_STATUS KQ7FSITDTL KQ7_IIS_FTP_SITES_DETAIL KQ7IISNNT2 KQ7_IIS_NNTP_SERVER_STATUS KQ7IISSMM KQ7_IIS_SMTP_SERVER_STATUS KQ7IISWEBI KQ7_IIS_VERSION_INFORMATION KQ7WEBBIND KQ7_IIS_WEB_SERVER_BINDINGS KQ7IISWEBS KQ7_IIS_WEB_SERVER_SITE_STATUS KQ7IISWEB1 KQ7_IIS_WEB_SERVER_STATUS KQ7WSITDTL KQ7_IIS_WEB_SITES_DETAIL KQ7INTERNE KQ7_INTERNET_INFORMATION_SERVICES_ GL KQ7WIN32P1 KQ7_MICROSOFT_FTP_SERVICE KQ7MIMETYP KQ7_MIME_TYPES KQ7MQHTPIT KQ7_MSMQ_INCOMING_HTTP_TRAFFIC KQ7IISNNTP KQ7_NNTP_SERVER KQ7IISNNT0 KQ7_NNTP_VERSION_INFORMATION KQ7POBJST KQ7_PERFORMANCE_OBJECT_STATUS KQ7IISSMTP KQ7_SMTP_SERVER KQ7IISSMT0 KQ7_SMTP_VERSION_INFORMATION KQ7THPLST KQ7_THREAD_POOL_STATUS Aggregate bytes per row (warehouse) 204 Microsoft IIS agent User's Guide - Beta 1 Draft

215 Table 2. Capacity planning for historical data logged by the Microsoft IIS agent (continued) Database bytes per row (warehouse) Table Attribute group Bytes per row (agent) KQ7VIRDOSE KQ7_VIRTUAL_DOMAIN_SETTING KQ7WIN32PE KQ7_W3SVC_W3WP KQ7WIN32P0 KQ7_WAS_W3WP KQ7WW3CLOG KQ7_WEBSITES_W3C_LOGS KQ7SITECER KQ7_WEBSITE_CERTIFICATE_DETAILS KQ7DYNIPDO KQ7_WEBSITE_DYNAMIC_IP_AND_DOMAIN_ RESTRICTIONS KQ7DYIPRS KQ7_WEBSITE_DYNAMIC_IP_ RESTRICTIONS_SETTINGS KQ7IPDORS KQ7_WEBSITE_IP_AND_DOMAIN_ RESTRICTIONS_SETTINGS KQ7VIRDIR KQ7_WEBSITE_VIRTUAL_DIR_DETAILS KQ7WEBSERV KQ7_WEB_SERVICE KQ7WEBSER1 KQ7_WEB_SERVICE_CACHE KQ7RESTRIC KQ7_WEB_SERVICE_EXTENSIONS_ RESTRICTED_LIST Aggregate bytes per row (warehouse) For more information about historical data collection, see Managing historical data in the IBM Tivoli Monitoring Administrator's Guide. Chapter 4. Attributes reference 205

216 206 Microsoft IIS agent User's Guide - Beta 1 Draft

217 Chapter 5. Situations reference A situation is a logical expression involving one or more system conditions. Situations are used to monitor the condition of systems in your network. You can manage situations from the Tivoli Enterprise Portal by using the Situation Editor or from the command-line interface using the tacmd commands for situations. You can manage private situations in the private configuration XML file. About situations The monitoring agents that you use to monitor your system environment include a set of predefined situations that you can use as-is. You can also create new situations to meet your requirements. Predefined situations contain attributes that check for system conditions common to many enterprises. Using predefined situations can improve the speed with which you can begin using the IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. You can change the conditions or values being monitored by a predefined situation to the conditions or values best suited to your enterprise. You can display predefined situations and create your own situations using the Situation editor. The Situation editor initially lists the situations associated with the Navigator item that you selected. When you click a situation name or create a situation, a panel opens with the following tabs: Formula Formula describing the condition being tested. Distribution List of managed systems (operating systems, subsystems, or applications) to which the situation can be distributed. All the Microsoft IIS agent managed systems are assigned by default. Expert advice Comments and instructions to be read in the event workspace. Action Command to be sent to the system. EIF Until Customize forwarding of the event to an Event Integration Facility receiver. (Available when the Tivoli Enterprise Monitoring Server is configured to forward events.) Options to close the event after a period of time, or when another situation becomes true. Additional information about situations The Tivoli Enterprise Portal User's Guide contains more information about predefined and custom situations and how to use them to respond to alerts. For a list of the predefined situations and information about each individual situation for this monitoring agent, see Predefined situations. Predefined situations The monitoring agent contains predefined situations, which are organized by Navigator item. v Microsoft Internet Information Services Not applicable v Active Server Pages KQ7_ASP_Que_Size_Increased Copyright IBM Corp. 2008,

218 KQ7_ASP_Req_Dispatch_Slow KQ7_ASP_Req_Que_Size_Large KQ7_ASP_High_Error_Rate v ASP NET Not applicable v Availability KQ7_Web_Server_Down KQ7_IISADMIN_Service_Down KQ7_WAS_Service_Down KQ7_AppHostSvc_Service_Down KQ7_WMSvc_Service_Down KQ7_MSFtpsvc_Service_Down KQ7_SMTPSVC_Service_Down KQ7_NntpSvc_Service_Down KQ7_HTTPFilter_Service_Down KQ7_NetPipeAct_Service_Down KQ7_NetTcpAct_Service_Down KQ7_NetMsmqAct_Service_Down KQ7_NetTcpPShr_Service_Down KQ7_Ftpsvc_Service_Down v Event Log KQ7_WP_Start_Fail KQ7_App_Load_Fail KQ7_VirtualDir_CfgLost KQ7_W3_ETW_Tracing_Init_Failed KQ7_WP_Memory_Leak KQ7_W3SVC_App_Pool_Cmd_Err KQ7_W3SVC_Bind_Fail_Invald_URL KQ7_FTP_Pasport_MB_Access_Fail KQ7_W3SVC_Fail_2_Set_Queue_Len KQ7_WAS_Fail_To_Config_Job_Obj KQ7_FTP_Pasvport_Invalid_Value KQ7_IISWMSVC_Login_Unknown_Err KQ7_WMSVC_Auth_Read_Conf_Err KQ7_WMSVC_SvcHand_Unknown_Err KQ7_WMSVC_UNABLE_2_READ_SETGS KQ7_Process_Stop_Responding KQ7_WP_Terminated KQ7_AppHostSvc_SID_Config_Err KQ7_AppHostSvc_Hist_Config_Err KQ7_W3SVC_Binding_Fail KQ7_W3SVC_Listen_2_Many_Port KQ7_W3SVC_Filters_Load_Fail KQ7_W3SVC_Fail_2_Init KQ7_W3SVC_Perfmon_Init_Err 208 Microsoft IIS agent User's Guide - Beta 1 Draft

219 KQ7_W3_Out_Of_Memory KQ7_WPHOST_Failed_Init KQ7_WP_Module_DLL_Load_Fail KQ7_WAS_Process_Creation_Fail KQ7_W3_Fail_2_Create_FREB_Dir KQ7_WAS_Rapid_Fail_Protection KQ7_WAS_Fail_2_Reg_Protocol KQ7_FTP_System_Call_Failed KQ7_WAS_High_Load_Dynamic_Idle KQ7_WAS_Config_Request_Fail v FTP Server KQ7_FTP_Site_Down KQ7_FTP_Site_Down_2 v IIS Configuration KQ7_HTTP_Log_Serv_Unavailable v IIS Global Not applicable v NNTP Server Not applicable v SMTP Server Not applicable v Web Server KQ7_Web_TooMany_Requests KQ7_Web_TooMany_Connections KQ7_Web_TooMany_KB_Sent KQ7_Web_TooMany_KB_Received KQ7_IIS_Web_Site_Down KQ7_IIS_Web_Site_Down_2 KQ7_Website_Certificate_Expiry v Worker Process Not applicable Situation descriptions Each situation description provides information about the situation that you can use to monitor the condition of systems in your network. The situation descriptions provide the following information: Information about the conditions that the situation tests. Formula Syntax that contains one or more logical expressions that describe the conditions for the situation to monitor. Distribution Whether the situation is automatically distributed to instances of the agent or is available for manual distribution. Chapter 5. Situations reference 209

220 Run at startup Whether the situation starts monitoring when the agent starts. Sampling interval Number of seconds that elapse between one sample of data that the monitoring agent collects for the server and the next sample. Situation persistence Whether the conditions specified in the situation evaluate to "true" for the defined number of occurrences in a row before the situation is raised. The default of one means that no persistence-checking takes place. Severity Severity of the predefined events: Warning, Informational, or Critical. Clearing conditions Controls when a true situation closes: after a period, when another situation is true, or whichever occurs first if both are selected. Microsoft Internet Information Services Navigator item No predefined situations are included for this Navigator item. Active Server Pages Navigator item The situation descriptions are organized by the Navigator item to which the situations are relevant. KQ7_ASP_Que_Size_Increased situation The size of the Active Server Pages queue increased. The situation is evaluated for the table. Formula *IF *VALUE KQ7_ACTIVE_SERVER_PAGES.Requests_Queued_Delta *GT 0 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 15 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_ASP_Req_Dispatch_Slow situation The ASP requests are dispatched too slowly. The situation is evaluated for the table. Formula *IF *VALUE KQ7_ACTIVE_SERVER_PAGES.Request_Wait_GT_Execution_Time *GT 0 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. 210 Microsoft IIS agent User's Guide - Beta 1 Draft

221 Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_ASP_Req_Que_Size_Large situation The ASP requests queue size is too large. The situation is evaluated for the table. Formula *IF *VALUE KQ7_ACTIVE_SERVER_PAGES.Requests_Queued *GT 1000 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_ASP_High_Error_Rate situation ASP error rate is above the defined threshold. The situation is evaluated for the table. Formula *IF *VALUE KQ7_ACTIVE_SERVER_PAGES.Errors_Rate *GT 1 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. Chapter 5. Situations reference 211

222 ASP NET Navigator item No predefined situations are included for this Navigator item. Availability Navigator item The situation descriptions are organized by the Navigator item to which the situations are relevant. KQ7_Web_Server_Down situation Microsoft IIS web server is down. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ W3SVC *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is automatically distributed to instances of this agent. Run at startup Yes Sampling interval 5 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Critical Clearing conditions The situation clears when the condition becomes false. KQ7_IISADMIN_Service_Down situation IISADMIN service is down. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ IISADMIN *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is automatically distributed to instances of this agent. Run at startup Yes Sampling interval 5 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Critical Clearing conditions The situation clears when the condition becomes false. KQ7_WAS_Service_Down situation WAS service is down [MS IIS V7.x]. 212 Microsoft IIS agent User's Guide - Beta 1 Draft

223 The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ WAS *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is automatically distributed to instances of this agent. Run at startup Yes Sampling interval 5 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Critical Clearing conditions The situation clears when the condition becomes false. KQ7_AppHostSvc_Service_Down situation AppHostSvc service is down [MS IIS V7.x]. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ AppHostSvc *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is automatically distributed to instances of this agent. Run at startup Yes Sampling interval 15 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Critical Clearing conditions The situation clears when the condition becomes false. KQ7_WMSvc_Service_Down situation Web Management service (WMSvc)is down [MS IIS V7.x]. The situation is evaluated for each distinct value of Name. Formula *IF ( *VALUE KQ7_AVAILABILITY.Name *EQ WMSvc *OR *VALUE KQ7_AVAILABILITY.Name *EQ WMSVC ) *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Chapter 5. Situations reference 213

224 Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_MSFtpsvc_Service_Down situation FTP Publishing Service is down. The situation is evaluated for each distinct value of Name. Formula *IF ( *VALUE KQ7_AVAILABILITY.Name *EQ MSFtpsvc *OR *VALUE KQ7_AVAILABILITY.Name *EQ MSFTPSVC ) *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_SMTPSVC_Service_Down situation SMTP service is down. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ SMTPSVC *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning 214 Microsoft IIS agent User's Guide - Beta 1 Draft

225 Clearing conditions The situation clears when the condition becomes false. KQ7_NntpSvc_Service_Down situation NNTP service is down [MS IIS V6.0]. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ NntpSvc *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_HTTPFilter_Service_Down situation HTTP SSL service is down [MS IIS V6.0]. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ HTTPFilter *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_NetPipeAct_Service_Down situation NetPipeActivator service is down [MS IIS V7.x]. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ NetPipeActivator *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN Chapter 5. Situations reference 215

226 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 1 hour Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Informational Clearing conditions The situation clears when the condition becomes false. KQ7_NetTcpAct_Service_Down situation NetTcpActivator service is down [MS IIS V7.x]. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ NetTcpActivator *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 1 hour Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Informational Clearing conditions The situation clears when the condition becomes false. KQ7_NetMsmqAct_Service_Down situation NetMsmqActivator service is down [MS IIS V7.x]. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ NetMsmqActivator *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 1 hour 216 Microsoft IIS agent User's Guide - Beta 1 Draft

227 Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Informational Clearing conditions The situation clears when the condition becomes false. KQ7_NetTcpPShr_Service_Down situation Net.Tcp Port Sharing service is down. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ NetTcpPortSharing *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 1 hour Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Informational Clearing conditions The situation clears when the condition becomes false. KQ7_Ftpsvc_Service_Down situation Microsoft FTP service is down [MS IIS V7.x]. The situation is evaluated for each distinct value of Name. Formula *IF *VALUE KQ7_AVAILABILITY.Name *EQ ftpsvc *AND *VALUE KQ7_AVAILABILITY.Status *EQ DOWN See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. Chapter 5. Situations reference 217

228 Event Log Navigator item The situation descriptions are organized by the Navigator item to which the situations are relevant. KQ7_WP_Start_Fail situation Error found during W3WP process startup [MS IIS V6.0]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC-WP *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2269 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_App_Load_Fail situation Server failed to load application. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 36 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_VirtualDir_CfgLost situation Virtual directory configuration information is lost. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ IIS Config *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ Microsoft IIS agent User's Guide - Beta 1 Draft

229 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3_ETW_Tracing_Init_Failed situation ETW tracing failed to initialize [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC-WP *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2275 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WP_Memory_Leak situation IIS process consumed excessive memory. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1077 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Chapter 5. Situations reference 219

230 Clearing conditions The situation does not clear automatically. KQ7_W3SVC_App_Pool_Cmd_Err situation Application Pool configuration error [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1042 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Informational Clearing conditions The situation does not clear automatically. KQ7_W3SVC_Bind_Fail_Invald_URL situation W3SVC binding failed [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1003 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_FTP_Pasport_MB_Access_Fail situation FTP Pasvportrange MB access failed. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ MSFTPSVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 15 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ MSFtpsvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 15 ) 220 Microsoft IIS agent User's Guide - Beta 1 Draft

231 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3SVC_Fail_2_Set_Queue_Len situation Failed to configure AppPoolQueueLen [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1087 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WAS_Fail_To_Config_Job_Obj situation WAS failed to configure a job object [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ WAS *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 5088 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Chapter 5. Situations reference 221

232 Clearing conditions The situation does not clear automatically. KQ7_FTP_Pasvport_Invalid_Value situation Found invalid FTP configuration property. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ MSFTPSVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 16 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ MSFtpsvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 16 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_IISWMSVC_Login_Unknown_Err situation IISWMSVC login unexpected error [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ Microsoft-Windows-IIS-IISManager *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1100 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WMSVC_Auth_Read_Conf_Err situation WMSVC authentication read error [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ Microsoft-Windows-IIS-IISManager 222 Microsoft IIS agent User's Guide - Beta 1 Draft

233 *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1102 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ Microsoft-Windows-IIS-IISManager *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1106 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WMSVC_SvcHand_Unknown_Err situation Error occurred when processing a service request [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ Microsoft-Windows-IIS-IISManager *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1300 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WMSVC_UNABLE_2_READ_SETGS situation WMSVC is unable to read settings [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ Microsoft-Windows-IIS-IISManager *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1005 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Chapter 5. Situations reference 223

234 Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_Process_Stop_Responding situation W3WP process exceeded time limit during shut down. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ IISService *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1010 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ IISService *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1013 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WP_Terminated situation W3WP process terminated unexpectedly. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1009 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ DCOM *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_AppHostSvc_SID_Config_Err situation AppPool name data for SID mapping is incorrect [MS IIS V7.x]. 224 Microsoft IIS agent User's Guide - Beta 1 Draft

235 The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ AppHostSvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 9000 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_AppHostSvc_Hist_Config_Err situation Config history feature of AppHostSvc is disabled [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ AppHostSvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 9006 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ AppHostSvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 9012 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3SVC_Binding_Fail situation W3SVC did not configure bindings for an application in website. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1029 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Chapter 5. Situations reference 225

236 Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3SVC_Listen_2_Many_Port situation W3SVC did not register the URL prefix for the website. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1131 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3SVC_Filters_Load_Fail situation WP failed to load all ISAPI filters for the website or service. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC-WP *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2268 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3SVC_Fail_2_Init situation W3SVC failed to initialize the HTTP driver [MS IIS V7.x]. 226 Microsoft IIS agent User's Guide - Beta 1 Draft

237 The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1173 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Critical Clearing conditions The situation does not clear automatically. KQ7_W3SVC_Perfmon_Init_Err situation W3SVC has an inaccurate perfmon counter or no counter. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1018 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 1019 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3_Out_Of_Memory situation The HTTP Server failed to initialize. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WMSvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2204 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WMSVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2204 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC-WP *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2204 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Chapter 5. Situations reference 227

238 Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WPHOST_Failed_Init situation Error found during W3WP process initialization [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WMSvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2276 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WMSVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2276 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WP_Module_DLL_Load_Fail situation The Module DLL failed to load [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WMSvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2280 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WMSVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2280 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning 228 Microsoft IIS agent User's Guide - Beta 1 Draft

239 Clearing conditions The situation does not clear automatically. KQ7_WAS_Process_Creation_Fail situation WAS failed to create worker process for AppPool [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ WAS *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 5022 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_W3_Fail_2_Create_FREB_Dir situation FailedRequestTracing failed to create directory [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ W3SVC-WP *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 2283 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WAS_Rapid_Fail_Protection situation Application pool is automatically disabled [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WAS *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 5002 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ WAS *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 5059 ) Chapter 5. Situations reference 229

240 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WAS_Fail_2_Reg_Protocol situation WAS is unable to register protocol [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ WAS *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 5136 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_FTP_System_Call_Failed situation A call to a system service failed unexpectedly. The situation is evaluated for each distinct value of Event_. Formula *IF ( *VALUE KQ7_EVENT_LOG.Event_ *EQ MSFTPSVC *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 9 ) *OR ( *VALUE KQ7_EVENT_LOG.Event_ *EQ MSFtpsvc *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 9 ) See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable 230 Microsoft IIS agent User's Guide - Beta 1 Draft

241 Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WAS_High_Load_Dynamic_Idle situation The dynamic idle load is high [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ WAS *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 5193 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. KQ7_WAS_Config_Request_Fail situation WAS failed while requesting configuration changes [MS IIS V7.x]. The situation is evaluated for each distinct value of Event_. Formula *IF *VALUE KQ7_EVENT_LOG.Event_ *EQ WAS *AND *VALUE KQ7_EVENT_LOG.Event_ID *EQ 5064 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval None. Data is analyzed when it becomes available. Situation persistence Not Applicable Error conditions Warning Clearing conditions The situation does not clear automatically. FTP Server Navigator item The situation descriptions are organized by the Navigator item to which the situations are relevant. KQ7_FTP_Site_Down situation The FTP site is not available. The situation is evaluated for each distinct value of FTP_Site. Chapter 5. Situations reference 231

242 Formula *IF *VALUE KQ7_FTP_SERVER_SITE_STATUS.State *NE Started See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_FTP_Site_Down_2 situation The FTP site is not available. The situation is evaluated for each distinct value of FTP_Site_Name. Formula *IF *VALUE KQ7_IIS_FTP_SITES_DETAIL.State *NE Started See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. IIS Configuration Navigator item The situation descriptions are organized by the Navigator item to which the situations are relevant. KQ7_HTTP_Log_Serv_Unavailable situation Service Unavailable: Error while trying to access website. The situation is evaluated for each distinct value of Client_IP_Address. Formula *IF *VALUE KQ7_HTTP_ERROR_LOG.Error_Code *EQ See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No 232 Microsoft IIS agent User's Guide - Beta 1 Draft

243 Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. IIS Global Navigator item No predefined situations are included for this Navigator item. NNTP Server Navigator item No predefined situations are included for this Navigator item. SMTP Server Navigator item No predefined situations are included for this Navigator item. Web Server Navigator item The situation descriptions are organized by the Navigator item to which the situations are relevant. KQ7_Web_TooMany_Requests situation A website received too many requests per second. The situation is evaluated for each distinct value of the NAME attribute. Formula *IF *VALUE KQ7_WEB_SERVICE.Total_Requests_Rate *GT *AND *VALUE KQ7_WEB_SERVICE.Name *NE _Total See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 15 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_Web_TooMany_Connections situation The site currently has too many connections. The situation is evaluated for each distinct value of the NAME attribute. Formula *IF *VALUE KQ7_WEB_SERVICE.Current_Connections *GT 1000 *AND *VALUE KQ7_WEB_SERVICE.Name *NE _Total See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Chapter 5. Situations reference 233

244 Distribution This situation is available for distribution. Run at startup No Sampling interval 15 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_Web_TooMany_KB_Sent situation A website sent too many KB per second. The situation is evaluated for each distinct value of the NAME attribute. Formula *IF *VALUE KQ7_WEB_SERVICE.KB_Sent_Rate *GT *AND *VALUE KQ7_WEB_SERVICE.Name *NE _Total See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_Web_TooMany_KB_Received situation A website received too many KB per second. The situation is evaluated for each distinct value of the NAME attribute. Formula *IF *VALUE KQ7_WEB_SERVICE.KB_Received_Rate *GT *AND *VALUE KQ7_WEB_SERVICE.Name *NE _Total See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is Microsoft IIS agent User's Guide - Beta 1 Draft

245 Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_IIS_Web_Site_Down situation IIS website is not available. The situation is evaluated for each distinct value of Web_Site. Formula *IF *VALUE KQ7_IIS_WEB_SERVER_SITE_STATUS.State *NE Started See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_IIS_Web_Site_Down_2 situation IIS website is not available. The situation is evaluated for each distinct value of Web_Site_Name. Formula *IF *VALUE KQ7_IIS_WEB_SITES_DETAIL.State *NE Started See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is available for distribution. Run at startup No Sampling interval 30 minutes Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. KQ7_Website_Certificate_Expiry situation The website certificate is about to expire. The situation is evaluated for each distinct value of Website_Name. Formula *IF *VALUE KQ7_WEBSITE_CERTIFICATE_DETAILS.Days_Remaining *LT 16 Chapter 5. Situations reference 235

246 See Attributes in each attribute group on page 33 for descriptions of the attributes in this formula. Distribution This situation is automatically distributed to instances of this agent. Run at startup Yes Sampling interval 24 hours Situation persistence The number of times the conditions of the situation must occur for the situation to be true is 1. Error conditions Warning Clearing conditions The situation clears when the condition becomes false. Worker Process Navigator item No predefined situations are included for this Navigator item. 236 Microsoft IIS agent User's Guide - Beta 1 Draft

247 Chapter 6. Take Action commands reference Take Action commands can be run from the portal client or included in a situation or a policy. About Take Action commands When included in a situation, the command runs when the situation becomes true. A Take Action command in a situation is also referred to as reflex automation. When you enable a Take Action command in a situation, you automate a response to system conditions. For example, you can use a Take Action command to send a command to restart a process on the managed system or to send a text message to a cell phone. In advanced automation, policies are used to take actions, schedule work, and automate manual tasks. A policy comprises a series of automated steps called activities that are connected to create a workflow. After an activity is completed, the Tivoli Enterprise Portal receives return-code feedback, and advanced automation logic responds with subsequent activities that are prescribed by the feedback. A basic Take Action command shows the return code of the operation in a message box that is displayed after the action is completed or in a log file. After you close this window, no further information is available for this action. Additional information about Take Action commands For more information about working with Take Action commands, see Take Action commands in the Tivoli Enterprise Portal User's Guide. For a list of the Take Action commands for this monitoring agent and a description of each command, see Predefined Take Action commands and the information for each individual command. Predefined Take Action commands Not all agents have predefined Take Action commands. But you can create Take Action commands for any agent. This monitoring agent contains the following Take Action commands: v Start Application Host Helper Service v Start Application Pool v Start FTP Publishing Service v Start FTP Site v Start FTP Site by Name v Start HTTP SSL Service v Start IIS Admin Service v Start IIS web server v Start Microsoft FTP Service v Start Net.Msmq Listener Adapter Service v Start Net.Pipe Listener Adapter Service v Start Net.Tcp Listener Adapter Service v Start Net.Tcp Port Sharing Service v Start Network News Transfer Protocol Service Copyright IBM Corp. 2008,

248 v Start Simple Mail Transfer Protocol Service v Start Web Management Service v Start Website v Start Website by Name v Start Windows Process Activation Service v Stop Application Host Helper Service v Stop Application Pool v Stop FTP Publishing Service v Stop FTP Site v Stop FTP Site by Name v Stop HTTP SSL Service v Stop IIS Admin Service v Stop IIS web server v Stop Microsoft FTP Service v Stop Net.Msmq Listener Adapter Service v Stop Net.Pipe Listener Adapter Service v Stop Net.Tcp Listener Adapter Service v Stop Net.Tcp Port Sharing Service v Stop Network News Transfer Protocol Service v Stop Simple Mail Transfer Protocol Service v Stop Web Management Service v Stop Website v Stop Website by Name v Stop Windows Process Activation Service Take Action command descriptions Each Take Action command description provides information you can use to decide whether to run the Take Action command or whether to include the Take Action command in a situation or a policy. The descriptions of the Take Action commands provide the following information: Actions the command performs on the system to which it is sent, and the permissions required for the Take Action command to function. Return codes Information that the Take Action command returns. Start Application Host Helper Service action Starts the Application Host Helper Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70043I Message: The Application Host Helper service was started. 238 Microsoft IIS agent User's Guide - Beta 1 Draft

249 Usage v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70044I Message: The Application Host Helper service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70045E Message: Error starting the Application Host Helper service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Application Pool action Starts the application pool that is selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: START_APPLICATION_POOL \ [KQ7_IIS_Application_Pools_Setting.Application_Pool_Name] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: START_APPLICATION_POOL \ [&{KQ7_IIS_Application_Pools_Setting.Application_Pool_Name}] You can also use attribute substitution in a workflow policy though the format is slightly different: Chapter 6. Take Action commands reference 239

250 START_APPLICATION_POOL \ [&WaitOnSituation:KQ7_IIS_Application_Pools_Setting.Application_Pool_Name] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_Application_Pools_Setting.Application_Pool_Name : IIS Application Pool Default: &KQ7_IIS_Application_Pools_Setting.Application_Pool_Name Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 1 Return Code : WARNING Message ID: KQ70104I Message: The Application Pool is starting v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70105E Message: The Application Pool is already started. v Return Code: 99 Return Code : GENERAL_ERROR Message ID: KQ70106E Message: The Application Pool name might be invalid and cannot be started. v Return Code: 6 Return Code : OK Message ID: KQ70107I Message: The Application Pool was started. v Return Code: 3 Return Code : WARNING Message ID: KQ70108I Message: The Application Pool is stopping. v Return Code: 0 Return Code : OK Message ID: KQ71000 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Usage None Start FTP Publishing Service action Starts the FTP Publishing Service. 240 Microsoft IIS agent User's Guide - Beta 1 Draft

251 Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70013I Message: The FTP Publishing service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70014I Message: The FTP Publishing service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70015E Message: Error starting the FTP Publishing service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Usage None Start FTP Site action Starts FTP site selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: START_FTP_SITE \ [KQ7_FTP_SERVER_SITE_STATUS.FTP_Site] Chapter 6. Take Action commands reference 241

252 You can use attribute substitution to supply the Take Action command arguments from the situation, for example: START_FTP_SITE \ [&{KQ7_FTP_SERVER_SITE_STATUS.FTP_Site}] You can also use attribute substitution in a workflow policy though the format is slightly different: START_FTP_SITE \ [&WaitOnSituation:KQ7_FTP_SERVER_SITE_STATUS.FTP_Site] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_FTP_SERVER_SITE_STATUS.FTP_Site : FTP Site Default: &KQ7_FTP_SERVER_SITE_STATUS.FTP_Site Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70095I Message: The FTP site was started. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70096E Message: The FTP site name might be invalid and cannot be started. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Usage None Start FTP Site by Name action Starts the FTP site that is selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: START_FTP_SITE_BY_NAME \ [KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name] 242 Microsoft IIS agent User's Guide - Beta 1 Draft

253 You can use attribute substitution to supply the Take Action command arguments from the situation, for example: START_FTP_SITE_BY_NAME \ [&{KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name}] You can also use attribute substitution in a workflow policy though the format is slightly different: START_FTP_SITE_BY_NAME \ [&WaitOnSituation:KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name : FTP Site Default: &KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70095I Message: The FTP site was started. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70096E Message: The FTP site name might be invalid and cannot be started. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Usage None Start HTTP SSL Service action Starts the HTTP SSL Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Chapter 6. Take Action commands reference 243

254 Usage Message ID: KQ70031I Message: The HTTP SSL service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70032I Message: The HTTP SSL service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70033E Message: Error starting the HTTP SSL service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start IIS Admin Service action Starts the IIS Admin service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70001I Message: The IIS Admin service was started. v Return Code: 2 Return Code : ALREADY_RUNNING 244 Microsoft IIS agent User's Guide - Beta 1 Draft

255 Usage Message ID: KQ70002I Message: The IIS Admin service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70003E Message: Error starting the IIS Admin service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start IIS web server action Starts the IIS web server. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70007I Message: The IIS web server was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70008I Message: The IIS web server is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70009E Chapter 6. Take Action commands reference 245

256 Usage Message: Error starting the IIS web server. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Microsoft FTP Service action Starts the Microsoft FTP Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70085I Message: The Microsoft FTP service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70086I Message: The Microsoft FTP service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70087E Message: Error starting the Microsoft FTP service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. 246 Microsoft IIS agent User's Guide - Beta 1 Draft

257 Usage v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Net.Msmq Listener Adapter Service action Starts the Net.Msmq Listener Adapter Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70073I Message: The Net.Msmq Listener Adapter service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70074I Message: The Net.Msmq Listener Adapter service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70075E Message: Error starting the Net.Msmq Listener Adapter service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Chapter 6. Take Action commands reference 247

258 Usage Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Net.Pipe Listener Adapter Service action Starts Net.Pipe Listener Adapter Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70061I Message: The Net.Pipe Listener Adapter service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70062I Message: The Net.Pipe Listener Adapter service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70063E Message: Error starting the Net.Pipe Listener Adapter service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING 248 Microsoft IIS agent User's Guide - Beta 1 Draft

259 Usage Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Net.Tcp Listener Adapter Service action Starts the Net.Tcp Listener Adapter Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70067I Message: The Net.Tcp Listener Adapter service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70068I Message: The Net.Tcp Listener Adapter service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70069E Message: Error starting the Net.Tcp Listener Adapter service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Chapter 6. Take Action commands reference 249

260 Usage Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Net.Tcp Port Sharing Service action Starts the Net.Tcp Port Sharing Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70079I Message: The Net.Tcp Port Sharing service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70080I Message: The Net.Tcp Port Sharing service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70081E Message: Error starting the Net.Tcp Port Sharing service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Usage Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Network News Transfer Protocol Service action Starts the Network News Transfer Protocol Service. 250 Microsoft IIS agent User's Guide - Beta 1 Draft

261 Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70019I Message: The Network News Transfer Protocol service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70020I Message: The Network News Transfer Protocol service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70021E Message: Error starting the Network News Transfer Protocol service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Usage None Start Simple Mail Transfer Protocol Service action Starts the Simple Mail Transfer Protocol Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Chapter 6. Take Action commands reference 251

262 Usage Return Code : OK Message ID: KQ70025I Message: The Simple Mail Transfer Protocol service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70026I Message: The Simple Mail Transfer Protocol service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70027E Message: Error starting the Simple Mail Transfer Protocol service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Web Management Service action Starts the Web Management Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70049I Message: The Web Management service was started. v Return Code: 2 Return Code : ALREADY_RUNNING 252 Microsoft IIS agent User's Guide - Beta 1 Draft

263 Usage Message ID: KQ70050I Message: The Web Management service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70051E Message: Error starting the Web Management service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Start Website action Starts IIS website selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: START_WEBSITE \ [KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: START_WEBSITE \ [&{KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site}] You can also use attribute substitution in a workflow policy though the format is slightly different: START_WEBSITE \ [&WaitOnSituation:KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site] Chapter 6. Take Action commands reference 253

264 Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site : IIS website Default: &KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70091I Message: The website was started. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70092E Message: The website name might be invalid and cannot be started. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Usage None Start Website by Name action Starts the IIS website that is selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: START_WEBSITE_BY_NAME \ [KQ7_IIS_Web_Sites_Detail.Web_Site_Name] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: START_WEBSITE_BY_NAME \ [&{KQ7_IIS_Web_Sites_Detail.Web_Site_Name}] You can also use attribute substitution in a workflow policy though the format is slightly different: START_WEBSITE_BY_NAME \ [&WaitOnSituation:KQ7_IIS_Web_Sites_Detail.Web_Site_Name] 254 Microsoft IIS agent User's Guide - Beta 1 Draft

265 Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_Web_Sites_Detail.Web_Site_Name : IIS website Default: &KQ7_IIS_Web_Sites_Detail.Web_Site_Name Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70091I Message: The website was started. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70092E Message: The website name might be invalid and cannot be started. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Usage None Start Windows Process Activation Service action Starts the Windows Process Activation Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70037I Message: The Windows Process Activation service was started. v Return Code: 2 Return Code : ALREADY_RUNNING Message ID: KQ70038I Message: The Windows Process Activation service is already started. v Return Code: 1 Return Code : GENERAL_ERROR Chapter 6. Take Action commands reference 255

266 Usage Message ID: KQ70039E Message: Error starting the Windows Process Activation service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : DOESNT_EXIST Message ID: KQ70101I Message: The service is disabled and cannot be started. v Return Code: 7 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70102E Message: The dependency service or group failed to start. v Return Code: 6 Return Code : PREREQ_NOT_RUNNING Message ID: KQ70103E Message: The dependency service does not exist or has been marked for deletion. v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Application Host Helper Service action Stops the Application Host Helper Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70046I Message: The Application Host Helper service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70047I Message: The Application Host Helper service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70048E Message: Error stopping the Application Host Helper service. v Return Code: 9 Return Code : WARNING 256 Microsoft IIS agent User's Guide - Beta 1 Draft

267 Usage Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Application Pool action Stops the application pool that is selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: STOP_APPLICATION_POOL \ [KQ7_IIS_Application_Pools_Setting.Application_Pool_Name] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: STOP_APPLICATION_POOL \ [&{KQ7_IIS_Application_Pools_Setting.Application_Pool_Name}] You can also use attribute substitution in a workflow policy though the format is slightly different: STOP_APPLICATION_POOL \ [&WaitOnSituation:KQ7_IIS_Application_Pools_Setting.Application_Pool_Name] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_Application_Pools_Setting.Application_Pool_Name : IIS Application Pool Default: &KQ7_IIS_Application_Pools_Setting.Application_Pool_Name Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 99 Return Code : GENERAL_ERROR Message ID: KQ701010E Message: The Application Pool name might be invalid and cannot be stopped. v Return Code: 6 Return Code : OK Message ID: KQ701011I Message: The Application Pool was stopped. v Return Code: 1 Return Code : WARNING Chapter 6. Take Action commands reference 257

268 Usage Message ID: KQ70104I Message: The Application Pool is starting v Return Code: 3 Return Code : WARNING Message ID: KQ70108I Message: The Application Pool is stopping. v Return Code: 4 Return Code : ALREADY_RUNNING Message ID: KQ70109E Message: The Application Pool is already stopped. v Return Code: 0 Return Code : OK Message ID: KQ71000 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ71002 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop FTP Publishing Service action Stops the FTP Publishing Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70016I Message: The FTP Publishing service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70017I Message: The FTP Publishing service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70018E 258 Microsoft IIS agent User's Guide - Beta 1 Draft

269 Usage Message: Error stopping the FTP Publishing service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop FTP Site action Stops FTP site selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: STOP_FTP_SITE \ [KQ7_FTP_SERVER_SITE_STATUS.FTP_Site] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: STOP_FTP_SITE \ [&{KQ7_FTP_SERVER_SITE_STATUS.FTP_Site}] You can also use attribute substitution in a workflow policy though the format is slightly different: STOP_FTP_SITE \ [&WaitOnSituation:KQ7_FTP_SERVER_SITE_STATUS.FTP_Site] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_FTP_SERVER_SITE_STATUS.FTP_Site : FTP Site Default: &KQ7_FTP_SERVER_SITE_STATUS.FTP_Site Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70097I Message: The FTP site was stopped. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70098E Chapter 6. Take Action commands reference 259

270 Usage Message: The FTP site name might be invalid and cannot be stopped. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop FTP Site by Name action Stops the FTP site that is selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: STOP_FTP_SITE_BY_NAME \ [KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: STOP_FTP_SITE_BY_NAME \ [&{KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name}] You can also use attribute substitution in a workflow policy though the format is slightly different: STOP_FTP_SITE_BY_NAME \ [&WaitOnSituation:KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name : FTP Site Default: &KQ7_IIS_FTP_Sites_Detail.FTP_Site_Name Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70097I Message: The FTP site was stopped. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70098E 260 Microsoft IIS agent User's Guide - Beta 1 Draft

271 Usage Message: The FTP site name might be invalid and cannot be stopped. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop HTTP SSL Service action Stops the HTTP SSL Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70034I Message: The HTTP SSL service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70035I Message: The HTTP SSL service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70036E Message: Error stopping the HTTP SSL service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Chapter 6. Take Action commands reference 261

272 Usage None Stop IIS Admin Service action Stops the IIS Admin Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70004I Message: The IIS Admin service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70005I Message: The IIS Admin service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70006E Message: Error stopping the IIS Admin service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Usage Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop IIS web server action Stops the IIS web server. Authorization User must be a member of Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70010I Message: The IIS web server was stopped. v Return Code: 2 Return Code : NOT_RUNNING 262 Microsoft IIS agent User's Guide - Beta 1 Draft

273 Usage Message ID: KQ70011I Message: The IIS web server is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70012E Message: Error stopping the IIS web server. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None. Stop Microsoft FTP Service action Stops the Microsoft FTP Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70088I Message: The Microsoft FTP service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70089I Message: The Microsoft FTP service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70090E Message: Error stopping the Microsoft FTP service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Chapter 6. Take Action commands reference 263

274 Usage Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Net.Msmq Listener Adapter Service action Stops the Net.Msmq Listener Adapter Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70076I Message: The Net.Msmq Listener Adapter service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70077I Message: The Net.Msmq Listener Adapter service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70078E Message: Error stopping the Net.Msmq Listener Adapter service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Usage Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Net.Pipe Listener Adapter Service action Stops the Net.Pipe Listener Adapter Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes 264 Microsoft IIS agent User's Guide - Beta 1 Draft

275 Usage v Return Code: 0 Return Code : OK Message ID: KQ70064I Message: The Net.Pipe Listener Adapter service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70065I Message: The Net.Pipe Listener Adapter service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70066E Message: Error stopping the Net.Pipe Listener Adapter service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Net.Tcp Listener Adapter Service action Stops the Net.Tcp Listener Adapter Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70070I Message: The Net.Tcp Listener Adapter service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70071I Message: The Net.Tcp Listener Adapter service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70072E Message: Error stopping the Net.Tcp Listener Adapter service. v Return Code: 9 Chapter 6. Take Action commands reference 265

276 Usage Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Net.Tcp Port Sharing Service action Stops the Net.Tcp Port Sharing Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70082I Message: The Net.Tcp Port Sharing service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70083I Message: The Net.Tcp Port Sharing service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70084E Message: Error stopping the Net.Tcp Port Sharing service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Usage Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None 266 Microsoft IIS agent User's Guide - Beta 1 Draft

277 Stop Network News Transfer Protocol Service action Stops the Network News Transfer Protocol Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70022I Message: The Network News Transfer Protocol service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70023I Message: The Network News Transfer Protocol service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70024E Message: Error stopping the Network News Transfer Protocol service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Usage Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Simple Mail Transfer Protocol Service action Stops the Simple Mail Transfer Protocol Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70028I Message: The Simple Mail Transfer Protocol service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70029I Chapter 6. Take Action commands reference 267

278 Usage Message: The Simple Mail Transfer Protocol service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70030E Message: Error stopping the Simple Mail Transfer Protocol service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Web Management Service action Stops the Web Management Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70052I Message: The Web Management service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70053I Message: The Web Management service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70054E Message: Error stopping the Web Management service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! 268 Microsoft IIS agent User's Guide - Beta 1 Draft

279 Usage v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Website action Stops IIS website selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: STOP_WEBSITE \ [KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: STOP_WEBSITE \ [&{KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site}] You can also use attribute substitution in a workflow policy though the format is slightly different: STOP_WEBSITE \ [&WaitOnSituation:KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site : IIS website Default: &KQ7_IIS_WEB_SERVER_SITE_STATUS.Web_Site Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70093I Message: The website was stopped. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70094E Message: The website name might be invalid and cannot be stopped. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! Chapter 6. Take Action commands reference 269

280 Usage v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Website by Name action Stops the IIS website that is selected by the user. System command To include the Take Action command in a situation or workflow policy, use the following syntax for the system command: STOP_WEBSITE_BY_NAME \ [KQ7_IIS_Web_Sites_Detail.Web_Site_Name] You can use attribute substitution to supply the Take Action command arguments from the situation, for example: STOP_WEBSITE_BY_NAME \ [&{KQ7_IIS_Web_Sites_Detail.Web_Site_Name}] You can also use attribute substitution in a workflow policy though the format is slightly different: STOP_WEBSITE_BY_NAME \ [&WaitOnSituation:KQ7_IIS_Web_Sites_Detail.Web_Site_Name] Authorization User must be a member of the Administrators group. Command arguments v Name: KQ7_IIS_Web_Sites_Detail.Web_Site_Name : IIS website Default: &KQ7_IIS_Web_Sites_Detail.Web_Site_Name Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70093I Message: The website was stopped. v Return Code: 2 Return Code : GENERAL_ERROR Message ID: KQ70094E Message: The website name might be invalid and cannot be stopped. v Return Code: 1 Return Code : NOT_APPLICABLE Message ID: KQ71001 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! 270 Microsoft IIS agent User's Guide - Beta 1 Draft

281 Usage v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Stop Windows Process Activation Service action Stops the Windows Process Activation Service. Authorization User must be a member of the Administrators group. Destination systems _EnDDESTINATIONS_NONE_OR_LIST_EnD Return codes v Return Code: 0 Return Code : OK Message ID: KQ70040I Message: The Windows Process Activation service was stopped. v Return Code: 2 Return Code : NOT_RUNNING Message ID: KQ70041I Message: The Windows Process Activation service is already stopped. v Return Code: 1 Return Code : GENERAL_ERROR Message ID: KQ70042E Message: Error stopping the Windows Process Activation service. v Return Code: 9 Return Code : WARNING Message ID: KQ70100W Message: The service does not exist as an installed service. v Return Code: 8 Return Code : TIMED_OUT Message ID: KQ71003 Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! v Return Code: 12 Return Code : INSUFFICIENT_USER_AUTHORITY Message ID: KQ71004 Usage Message: WARNING::NO MESSAGE FOUND FOR THIS RETURN CODE!!!!! None Chapter 6. Take Action commands reference 271

282 272 Microsoft IIS agent User's Guide - Beta 1 Draft

283 Chapter 7. Policies reference Policies are used as an advanced automation technique for implementing more complex workflow strategies than you can create through simple automation. All agents do not provide predefined policies, but you can create policies for any agent. A policy is a set of automated system processes that can take actions, schedule work for users, or automate manual tasks. You use the Workflow Editor to design policies. You control the order in which the policy executes a series of automated steps, which are also called activities. Policies are connected to create a workflow. After an activity is completed, the Tivoli Enterprise Portal receives return-code feedback, and advanced automation logic responds with subsequent activities prescribed by the feedback. For more information about working with policies, see Automation with policies in the Tivoli Enterprise Portal User's Guide. For information about using the Workflow Editor, see the IBM Tivoli Monitoring Administrator's Guide or the Tivoli Enterprise Portal online help. Predefined policies Not all agents have predefined policies. But you can create policies for any agent. The IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent does not provide predefined policies. Copyright IBM Corp. 2008,

284 274 Microsoft IIS agent User's Guide - Beta 1 Draft

285 Chapter 8. Tivoli Common Reporting for the monitoring agent You can use the Tivoli Common Reporting application to generate reports for the Microsoft IIS agent. For more information about Tivoli Common Reporting, such as prerequisites, importing reports, and running reports, see the IBM Tivoli Monitoring Administrator's Guide V IBM Tivoli Monitoring for Microsoft Applications reports are historical reports that include summarized data that is collected in the Tivoli Data Warehouse. These reports are built to run only against the IBM Tivoli Monitoring for Microsoft IIS agent. The reports can be administered and run on Tivoli Common Reporting V1.3, V2.1 and V2.1.1, Fix Pack 6, and V3.1. For more information about Tivoli Common Reporting, see developerworks website ( This version of Tivoli Common Reporting includes Cognos Business Intelligence and Reporting V8.4. Cognos-based report packages The Cognos-based Tivoli Common Reporting tool is used to create, view, and manage reports for the Tivoli group of products. You can use the Cognos reports to analyze resource information such as availability, utilization, performance, and so on. With Cognos reports, you can evaluate the key metrics of the computers that are on the managed environment of your organization. You can use the Tivoli Common Reporting tool to: v Create custom reports by using the drag-and-drop feature that is integrated with the web-based editor. v Schedule, share, secure, and administer reports in a single interface. v Save the report in HTML, PDF, Excel, XML, or CSV file formats. v Share reports by or save the reports in a file system for later use. The following databases are supported for all reports: v DB2 V9.5 and V9.7, Fix Pack 2 v Oracle 10g and 11g v SQL Server 2005 and 2008 You can use Tivoli Common Reporting V1.3, V2.1 and V2.1.1, Fix Pack 6, and V3.1 software that is shipped with IBM Tivoli Monitoring V6.2.3 Fix Pack1 or later to administer, run, and edit Cognos reports. For more information about Tivoli Common Reporting, see the Tivoli Common Reporting Information CenterTivoli Common Reporting Information Center ( tivihelp/v3r1/topic/com.ibm.tivoli.tcr.doc_211/ic-home.html). Prerequisites Before you run the Cognos-based reports, ensure that the prerequisites that are required for installing and running Tivoli Common Reporting packages are met. Procedure 1. Install Tivoli Common Reporting. Copyright IBM Corp. 2008,

286 For more information, see the documentation in the IBM Tivoli Common Reporting Information Center ( To ensure that Tivoli Common Reporting is running, go to: 2. Obtain the reports package from the product media and extract the package. The Cognos reports are available in the following package: Product Media root/reports/kq7/ ITCAMMA_IIS_V710_Cognos_Reports. Copy this package in any directory on the C drive of the same computer where the Tivoli Common Reporting Server is installed. 3. Copy this package in a directory on any drive of the same computer where the Tivoli Common Reporting Server is installed, and extract the package in the same directory. The directory contents include: v Database scripts required to prepare the Tivoli Data Warehouse for Cognos reports. v A report installer that imports the reports into Tivoli Common Reporting and sets up the database connection. 4. Open the setup.batch file, and verify that the specified drive is the same drive where the Tivoli Common Reporting Server is installed. If the specified drive is not correct, edit the setup.batch file to specify the correct drive. For example, change the TCR_DEFAULT_DIR=C:\IBM\tivoli\tip to TCR_DEFAULT_DIR=F:\IBM\tivoli\tip if the Tivoli Common Reporting Server is installed on the F drive. 5. Configure historical collection for Microsoft IIS agent and the IBM Tivoli Warehouse Summarization and Pruning Agent. After IBM Tivoli Monitoring V6.2.3 Fix Pack1 is installed and the Microsoft IIS agent is installed and configured, configure historical collection. Also, configure the Warehouse Summarization and Pruning agent with or without shifts enabled. For more information about how to enable historical collection and configure the Warehouse Summarization and Pruning agent in IBM Tivoli Monitoring, see the following documentation: v history_manage_intro.htm v history_manage_collection.htm Note: Historical collection and daily and hourly summarization must be enabled for all attribute groups of Microsoft IIS agent. To ensure that the required views are present, run the following query against the Tivoli Data Warehouse: v DB2: Select distinct "VIEWNAME" from SYSCAT.VIEWS where "VIEWNAME" like %V v Oracle: Select distinct "OBJECT_NAME" from OBJ where "OBJECT_TYPE" like %V v MS SQL Server: Select distinct "NAME" from SYS.OBJECTS where "TYPE_DESC" like %V 6. Prepare the Tivoli Data Warehouse to support Cognos dimensions. Preparing the Tivoli Data Warehouse for Tivoli Common Reporting includes creating the IBM_TRAM dimensions, which are required for running the Cognos reports and using the data models. See "Creating shared dimension tables and populating the time dimensions table" in the IBM Tivoli Monitoring Administrator's Guide at the IBM Tivoli Monitoring V6.2.3, Fix Pack 1 Information Center ( tcr_reports_dimensionsshared.htm). 7. Connect to the Tivoli Data Warehouse by using the database client over Open Database Connectivity (ODBC). Cognos uses ODBC to connect to the database. Install a database client on the Tivoli Common Reporting Server and connect it to the Tivoli Data Warehouse. 276 Microsoft IIS agent User's Guide - Beta 1 Draft

287 See "Connecting to the Tivoli Data Warehouse using the database client over ODBC" in the IBM Tivoli Monitoring Administrator's Guide at the IBM Tivoli Monitoring V6.2.3, Fix Pack 1 Information Center ( tcr_tdwconnect.htm). Important: All prerequisites described here must be met or the reports cannot run. Importing Cognos report packages You must import the Cognos report package that contains the Microsoft IIS agent data model and reports into Tivoli Common Reporting. Before you import the Cognos report package, ensure that all the prerequisites have been met. Otherwise, reports cannot run. For Tivoli Common Reporting V1.3, use one of the following options to import the Cognos report package: v Import by running the reports installer For information about running the reports installer to import the Cognos report package, see "Installing and running IBM Cognos reports" in the IBM Tivoli Monitoring Administrator's Guide at the IBM Tivoli Monitoring V6.2.2, Fix Pack 2 Information Center ( tcr_install_itm.htm). v Import manually For information about manually importing the reports package, see Importing report packages at the IBM Tivoli Systems Management Information Center ( infocenter/tivihelp/v3r1/topic/com.ibm.tivoli.tcr_cog.doc/ttcr_cog_import.html). For Tivoli Common Reporting V2.1, or later, see "Importing report packages" at the Tivoli Common Reporting Information Center ( com.ibm.tivoli.tcr.doc_211/ttcr_import.html). If you are using a schema other than ITMUSER, you must complete the following steps for the data model and reports to run: 1. Verify you have completed the following steps: a. Altered the schema name in the database scripts when you prepared the Tivoli Data Warehouse for Cognos dimensions in Step 6 on page 276 of Prerequisites on page 275. b. Installed the reports package by using the Reports installer as explained in "Importing reports by using the report installer" topic in the IBM Tivoli Monitoring Administrator's Guide. To verify that you have installed the reports package, go to Tivoli Common Reporting and make sure you can see "ITCAMMA IIS V710 Cognos Reports" in the Public Folders of IBM Cognos Connection. 2. Install and configure the Cognos Framework Manager, which is the data modeling tool. See the instructions at the Tivoli Common Reporting Information Center ( infocenter/tivihelp/v3r1/topic/com.ibm.tivoli.tcr.doc_211/ttcr_configure_frameworkmgr.html). 3. Open the Framework Manager. Select File > Open. Browse to the extracted ITCAMMA IIS V710 Cognos Reports package. Browse to the model folder and select the ITCAMMA IIS V710 Cognos Reports.cpf file. 4. If you are prompted to enter login credentials, enter your tipadmin user ID and password. 5. After the IBM Tivoli Monitoring for IIS data model in the Framework Manager opens, expand Data s under Tivoli Reporting and Analytics Model in the Project Viewer. 6. Select TDW under Data s. 7. When you select TDW, the Properties view is updated with information about the Tivoli Data Warehouse data source. By default, the Properties view is located at the bottom center of the screen. If the Properties view is not visible, select View > Properties. 8. In the Properties view, edit the Schema field. Change it from ITMUSER to your schema name. 9. Save the project. Chapter 8. Tivoli Common Reporting for the monitoring agent 277

288 10. In the Project Viewer, expand Packages. 11. Right-click ITCAMMA IIS V710 Cognos Reports. 12. Select Publish Packages. The Publish Wizard opens. 13. Keep the default selection and click Next. 14. Click Next on the next screen. 15. Clear the Verify the package before publishing check box. 16. Click Publish. A window is displayed that alerts you that A package with that name already exists and asks Do you want to publish this package? 17. Click Yes. 18. Go back to Tivoli Common Reporting and check whether the Modified field of "ITCAMMA IIS V710 Cognos Reports" in the Public Folders of IBM Cognos Connection shows the time of publishing. After completing these steps, you can run any report from the IBM Tivoli Monitoring for ITCAMMA IIS V710 Cognos Reports package. Cognos data models and reports When all the prerequisites are met, you can use the Tivoli Integrated Portal interface to create, modify, and manage Cognos reports. In Tivoli Common Reporting, the historical data that is collected by the agent is used to build ad hoc reports and queries. The package that you import into Tivoli Common Reporting contains a Cognos data model. All the reports that you create in Tivoli Common Reporting are based on the data model. Cognos data models are virtual star schema models that contain facts and dimensions. Facts are measurable quantities that can be aggregated, such as CPU utilization and number of processors. Dimensions are the main identifiers by which facts can be grouped, aggregated, and organized. For example, time and server are dimensions by which the fact CPU utilization can be grouped. The facts in the data model are organized into the folders by their summarization type, such as Daily and Hourly. The Daily and the Hourly folders contain attribute groups that correspond to tables or views in the data warehouse. Each attribute group contains a group of facts and measures. The data model is built on top of the data warehouse to organize data. The data model contains the Tivoli Reporting and Analytics Model (TRAM) Shared Dimensions, which are shared across Tivoli by products such as Time. To create reports in Tivoli Common Reporting tool, you can use one of the following report authoring tools: v Query Studio: A web-based product that is used mostly for ad hoc reporting. Users can create simple queries and reports, and apply basic formatting to the reports. v Report Studio: A web-based tool that is used by technical users and professional report writers for creating advanced reports. Users can retrieve data from multiple databases and create sophisticated reports that have multiple pages and multiple queries. Reports for the monitoring agent You can verify whether the reporting functionality is installed and configured correctly by running the reports for the Microsoft IIS agent. The Microsoft IIS agent reporting package that you imported into Tivoli Common Reporting includes seven reports and the Prerequisite Scanner report. By using these reports, you can monitor the reporting activity and see what a typical Cognos report includes. These reports are available in the Common Reporting panel in Tivoli Common Reporting. The following tables describe these reports. 278 Microsoft IIS agent User's Guide - Beta 1 Draft

289 Table 3. IIS Agent Reports Prerequisite Scanner report Name IIS Agent Reports Prerequisite Scanner report This report provides the availability status of tables and views in the Tivoli Data Warehouse for each predefined report. Purpose You can use this report to verify whether all the tables and views that are required for running the predefined reports are available in the Tivoli Data Warehouse. The report also contains links to the appropriate documentation for enabling historical collection and summarization and pruning, creating IBM_TRAM schema, populating time and other shared directions, and so on. Parameters Specify values for the following parameters: v Database type, such as DB2, Oracle, or SQL v Report type such as show falling sections only to view only those reports for which tables and views are not available in the Tivoli Data Warehouse or show all sections to view all reports v Summarization type, such as Hourly, Daily, Monthly, and All Output This report shows the availability status of all the tables and views in the Tivoli Data Warehouse according to reports. The report also shows other information, such as prerequisites for Tivoli Common Reporting shared dimensions and IBM Tivoli Monitoring shared dimensions. Note: Images are not displayed correctly when you run this report in the Tivoli Common Reporting server V3.1. To view images, extract the report package and copy all the images in the package to the following locations: v TCR Server Installation Drive\Program Files\IBM\JazzSM\profile\installedApps\ JazzSMNode01Cell\IBM Cognos.ear\p2pd.war\tivoli\tcr_common\images v TCR Server Installation Drive\Program Files\IBM\JazzSM\reporting\cognos\webcontent\ tivoli\tcr_common\images Usage The administrators can use this report to verify whether the tables and views that are required for running the reports are available in the Tivoli Data Warehouse. Sometimes, the reports cannot be run because of insufficient data in the Tivoli Data Warehouse. The report displays the useful links to the appropriate documentation that administrators can refer to for populating the tables with data, such as running the database scripts. Table 4. Web Service Data Transfer report Name Web Service Data Transfer report This report displays the total KB sent and received by the web service and the rate at which KB are sent and received by the web service. Purpose You can use this report to identify the web service data transfer for each website on a single server. Chapter 8. Tivoli Common Reporting for the monitoring agent 279

290 Table 4. Web Service Data Transfer report (continued) Parameters Date Range Report Period Select the report period from a predefined date range, such as Last Week, Current Month, Last 30 Days, and so on. Alternatively, you can enter a start date, an end date, and the time for the reporting period. Start Date Select a start date from the calendar and the start time from the time widget. You must select both date and time. End Date Select an end date from the calendar and an end time from the time widget. You must select both date and time. Summarization Selection Display Options Summarization Select the summarization type, such as Hourly, Daily, Weekly, Monthly, Quarterly, Yearly, or Default from the list. If you select the Default option, the summarization type is calculated according to the number of days in the date range. Shift Period If shift period is enabled, the hourly tables display the Shift Period as 1 (off-peak hours) or 2 (peak hours), depending on the peak and off-peak hours that are configured in the data warehouse. In the daily tables, the value 1 corresponds to peak hours, the value 2 corresponds to off-peak hours, and the value -1 corresponds to the summarized value for that day. If shifts are not enabled, the default value is -1. Vacation Period If Vacation Period is not enabled, the default value is -1 (All Days). You can enter the value 0 (Work Days) or 1 (Vacation Days), if Vacation Period is enabled. Server Name Select the name of the server from the Server Name list. Tables/Views Used Output KQ7_WEB_SERVICE_%V This report contains two bar charts and tables. The Total Kilo Bytes Sent And Received Details bar chart displays the total bytes that are sent and the total bytes that are received by the Web service. The Average KB Sent And Received Rate Details bar chart displays the KB sent rate and the KB received rate by the Web service. Usage The table that follows the charts, displays the same data. The IT administrator can use this report to determine the data traffic on a single server. Table 5. Active Server Pages Request and Error report Name Active Server Pages Request and Error report This report displays the rate of ASP request, execution time and wait time ASP request, error rate of ASP, and the total sessions and timed out sessions for ASP. Purpose You can use this report to determine the number of requests received and errors encountered for the active server pages. 280 Microsoft IIS agent User's Guide - Beta 1 Draft

291 Table 5. Active Server Pages Request and Error report (continued) Parameters Date Range Report Period Select the report period from a predefined date range, such as Last Week, Current Month, Last 30 Days, and so on. Alternatively, you can enter a start date, an end date, and the time for the reporting period. Start Date Select a start date from the calendar and the start time from the time widget. You must select both date and time. End Date Select an end date from the calendar and an end time from the time widget. You must select both date and time. Summarization Selection Display Options Summarization Select the summarization type, such as Hourly, Daily, Weekly, Monthly, Quarterly, Yearly, or Default from the list. If you select the Default option, the summarization type is calculated according to the number of days in the date range. Shift Period If shift period is enabled, the hourly tables display the Shift Period as 1 (off-peak hours) or 2 (peak hours), depending on the peak and off-peak hours that are configured in the data warehouse. In the daily tables, the value 1 corresponds to peak hours, the value 2 corresponds to off-peak hours, and the value -1 corresponds to the summarized value for that day. If shifts are not enabled, the default value is -1. Vacation Period If Vacation Period is not enabled, the default value is -1 (All Days). You can enter the value 0 (Work Days) or 1 (Vacation Days), if Vacation Period is enabled. Server Name Select the name of the server from the Server Name list. Tables/Views Used Output Usage KQ7_ACTIVE_SERVER_PAGES_%V The ASP Requests And Errors Rate Details chart displays the number of requests received and errors encountered for the active server pages. The Average ASP Request Execution Time And Request Wait Time In Milliseconds bar chart displays the request execution time and request wait time (in milliseconds) for the active server pages. The IT administrator can use this report to determine the data traffic on a single server. Table 6. Web Server Availability In Terms Of Hours report [Hourly Heat Map] Name Web Server Availability In Terms Of Hours report [Hourly Heat Map] This report displays the availability (in hours) of the Web server that is configured under IIS. Purpose You can use this report to determine the availability of the Web server configured under IIS. Chapter 8. Tivoli Common Reporting for the monitoring agent 281

292 Table 6. Web Server Availability In Terms Of Hours report [Hourly Heat Map] (continued) Parameters Date Range Report Period Select the report period from a predefined date range, such as Last Week, Current Month, Last 30 Days, and so on. Alternatively, you can enter a start date, an end date, and the time for the reporting period. Start Date Select a start date from the calendar and the start time from the time widget. You must select both date and time. End Date Select an end date from the calendar and an end time from the time widget. You must select both date and time. Tables/Views Used Output Usage Summarization Selection Display Options Summarization Select the summarization type, such as Hourly, Daily, Weekly, Monthly, Quarterly, Yearly, or Default from the list. If you select the Default option, the summarization type is calculated according to the number of days in the date range. Shift Period If shift period is enabled, the hourly tables display the Shift Period as 1 (off-peak hours) or 2 (peak hours), depending on the peak and off-peak hours that are configured in the data warehouse. In the daily tables, the value 1 corresponds to peak hours, the value 2 corresponds to off-peak hours, and the value -1 corresponds to the summarized value for that day. If shifts are not enabled, the default value is -1. Vacation Period If Vacation Period is not enabled, the default value is -1 (All Days). You can enter the value 0 (Work Days) or 1 (Vacation Days), if Vacation Period is enabled. Server Name Select the name of the server from the Server Name list. Specify thresholds for status icons You can enter the threshold specification for fair, warning, bad, and critical status. KQ7_WEB_SERVICE_%V This report displays the heat map for hourly views for the Web server availability. The IT administrator can use this report to determine the availability of the Web Server that is configured under IIS. Table 7. Web Service HTTP Request report Name Web Service HTTP Request report This report displays the number and the rate of HTTP requests received by the Web service. Purpose You can use this report to determine the numbers and types of requests made to the Web service and the rate of requests received by the Web service. 282 Microsoft IIS agent User's Guide - Beta 1 Draft

293 Table 7. Web Service HTTP Request report (continued) Parameters Date Range Report Period Select the report period from a predefined date range, such as Last Week, Current Month, Last 30 Days, and so on. Alternatively, you can enter a start date, an end date, and the time for the reporting period. Start Date Select a start date from the calendar and the start time from the time widget. You must select both date and time. End Date Select an end date from the calendar and an end time from the time widget. You must select both date and time. Summarization Selection Display Options Summarization Select the summarization type, such as Hourly, Daily, Weekly, Monthly, Quarterly, Yearly, or Default from the list. If you select the Default option, the summarization type is calculated according to the number of days in the date range. Shift Period If shift period is enabled, the hourly tables display the Shift Period as 1 (off-peak hours) or 2 (peak hours), depending on the peak and off-peak hours that are configured in the data warehouse. In the daily tables, the value 1 corresponds to peak hours, the value 2 corresponds to off-peak hours, and the value -1 corresponds to the summarized value for that day. If shifts are not enabled, the default value is -1. Vacation Period If Vacation Period is not enabled, the default value is -1 (All Days). You can enter the value 0 (Work Days) or 1 (Vacation Days), if Vacation Period is enabled. Server Name Select the name of the server from the Server Name list. Tables/Views Used KQ7_WEB_SERVICE_%V Chapter 8. Tivoli Common Reporting for the monitoring agent 283

294 Table 7. Web Service HTTP Request report (continued) Output This report contains bar charts and tables. The Total Method Requests Details chart displays the total method requests received by the Web service. The X and Y axes represent the following attributes: X-Axis: Web Site Y-Axis: Total Method Requests Received by the Web service. You can view the data for multiple Web sites on a single server. The Total Other Request Methods Details bar chart displays the other request methods received by the Web service. The X and Y axes represent the following attributes: X-Axis: Web Site Y-Axis: Total Other Request Methods Received by the Web service. You can view the data for multiple Web sites on a single server. The Average Method Requests Rate Details bar chart displays the average of total method requests rate for the Web service. The X and Y axes represent the following attributes: X-Axis: Web Site Y-Axis: Average Total Method Requests Rate. You can view the data for multiple Web sites on a single server. The Average Other Request Methods Details bar chart displays the average of total other request methods rate received by the Web service. The X and Y axes represent the following attributes: X-Axis: Web Site Y-Axis: Average Other Request Methods Rate. You can view the data for multiple Web sites. Usage The table that follows the charts, displays the same data. The IT administrator can use this report to monitor the request traffic on a single server. Table 8. Web Service Request Errors and Error Rate report Name Web Service Request Errors and Error Rate report This report displays the number of errors that were not found, locked errors that were encountered, and the rate of errors for the Web service while processing requests. Purpose You can use this report to determine the number of errors that were not found and the locked errors that were encountered. 284 Microsoft IIS agent User's Guide - Beta 1 Draft

295 Table 8. Web Service Request Errors and Error Rate report (continued) Parameters Date Range Report Period Select the report period from a predefined date range, such as Last Week, Current Month, Last 30 Days, and so on. Alternatively, you can enter a start date, an end date, and the time for the reporting period. Start Date Select a start date from the calendar and the start time from the time widget. You must select both date and time. End Date Select an end date from the calendar and an end time from the time widget. You must select both date and time. Summarization Selection Display Options Summarization Select the summarization type, such as Hourly, Daily, Weekly, Monthly, Quarterly, Yearly, or Default from the list. If you select the Default option, the summarization type is calculated according to the number of days in the date range. Shift Period If shift period is enabled, the hourly tables display the Shift Period as 1 (off-peak hours) or 2 (peak hours), depending on the peak and off-peak hours that are configured in the data warehouse. In the daily tables, the value 1 corresponds to peak hours, the value 2 corresponds to off-peak hours, and the value -1 corresponds to the summarized value for that day. If shifts are not enabled, the default value is -1. Vacation Period If Vacation Period is not enabled, the default value is -1 (All Days). You can enter the value 0 (Work Days) or 1 (Vacation Days), if Vacation Period is enabled. Server Name Select the name of the server from the Server Name list. Tables/Views Used KQ7_WEB_SERVICE_%V Chapter 8. Tivoli Common Reporting for the monitoring agent 285

296 Table 8. Web Service Request Errors and Error Rate report (continued) Output This report contains bar charts and tables. The Total Not Found Errors And Locked Errors Details bar chart displays the total errors not found and locked errors that are encountered by the Web service. The X and Y axes represent the following attributes: X-Axis: Web Site Y-Axis: Total Not Found Errors and Total Locked Errors. You can view the data for multiple Web sites. The Average Not Found Error Rate, Locked Error Rate Details bar chart displays the rate errors not found, the rate of locked error for the Web service. The X and Y axes represent the following attributes: X-Axis: Web Site Y-Axis: Not Found Error Rate and Locked Error Rate. You can view the data for multiple Web sites. Usage The table that follows the charts, displays the same data. The IT administrator can use this report to get the information about the errors and rate of errors for a single server. Table 9. Web Sites Availability report Name Web Sites Availability report This report displays the availability of each Web site that is configured under the IIS. Purpose You can use this report to determine the availability of Web sites configured under IIS. 286 Microsoft IIS agent User's Guide - Beta 1 Draft

297 Table 9. Web Sites Availability report (continued) Parameters Date Range Report Period Select the report period from a predefined date range, such as Last Week, Current Month, Last 30 Days, and so on. Alternatively, you can enter a start date, an end date, and the time for the reporting period. Start Date Select a start date from the calendar and the start time from the time widget. You must select both date and time. End Date Select an end date from the calendar and an end time from the time widget. You must select both date and time. Summarization Selection Display Options Summarization Select the summarization type, such as Hourly, Daily, Weekly, Monthly, Quarterly, Yearly, or Default from the list. If you select the Default option, the summarization type is calculated according to the number of days in the date range. Shift Period If shift period is enabled, the hourly tables display the Shift Period as 1 (off-peak hours) or 2 (peak hours), depending on the peak and off-peak hours that are configured in the data warehouse. In the daily tables, the value 1 corresponds to peak hours, the value 2 corresponds to off-peak hours, and the value -1 corresponds to the summarized value for that day. If shifts are not enabled, the default value is -1. Vacation Period If Vacation Period is not enabled, the default value is -1 (All Days). You can enter the value 0 (Work Days) or 1 (Vacation Days), if Vacation Period is enabled. Server Name Select the name of the server from the Server Name list. Tables/Views Used Output KQ7_IIS_WEB_SERVER_SITE_STATUS This report contains bar charts and tables. The Percent Status Details For Web Sites horizontal stacked bar chart displays the percentage of the availability of each Web site on a single server. The X and Y axes represent the following attributes: X-Axis: Percent availability (State) Y-Axis: Web Site You can view the data for multiple Web sites on a single server. The Web Site Name table contains mapping for actual Web site names and short name given to Web sites. Usage The Percent Status Details For Web Sites table that follows the chart, displays the same data. The IT administrator can use this report to determine the availability of Web sites configured under IIS on a single server. Chapter 8. Tivoli Common Reporting for the monitoring agent 287

298 Table 10. Web Server Availability report Name Web Server Availability report This report displays the availability of a Web server that is configured under IIS. Purpose You can use this report to determine the availability of a Web server that is configured under IIS. Parameters Date Range Report Period Select the report period from a predefined date range, such as Last Week, Current Month, Last 30 Days, and so on. Alternatively, you can enter a start date, an end date, and the time for the reporting period. Start Date Select a start date from the calendar and the start time from the time widget. You must select both date and time. End Date Select an end date from the calendar and an end time from the time widget. You must select both date and time. Summarization Selection Display Options Summarization Select the summarization type, such as Hourly, Daily, Weekly, Monthly, Quarterly, Yearly, or Default from the list. If you select the Default option, the summarization type is calculated according to the number of days in the date range. Shift Period If shift period is enabled, the hourly tables display the Shift Period as 1 (off-peak hours) or 2 (peak hours), depending on the peak and off-peak hours that are configured in the data warehouse. In the daily tables, the value 1 corresponds to peak hours, the value 2 corresponds to off-peak hours, and the value -1 corresponds to the summarized value for that day. If shifts are not enabled, the default value is -1. Vacation Period If Vacation Period is not enabled, the default value is -1 (All Days). You can enter the value 0 (Work Days) or 1 (Vacation Days), if Vacation Period is enabled. Server Name Select the name of the server from the Server Name list. Output This report contains bar charts and tables. The Percent Status Details For Web Server stacked bar chart displays the percent availability for multiple servers. The X and Y axes represent the following attributes: X-Axis: Node (Server Name) Y-Axis: Percent availability (State) Usage The Percent Status Details For Web Server table that follows the Percent Status Details For Web Server stacked bar chart, displays the same data The IT administrator can use this report to determine the availability of a Web server that is configured under IIS. 288 Microsoft IIS agent User's Guide - Beta 1 Draft

299 Chapter 9. Troubleshooting Problems can be related to IBM Tivoli Monitoring or the specific agent that you are using. For general troubleshooting information, see the IBM Tivoli Monitoring Troubleshooting Guide. For other problem-solving options, see Support information on page 318. You can resolve some problems by ensuring that your system matches the system requirements listed in the Internet Information Services agent prerequisites topic on the IBM Tivoli Monitoring for Microsoft Applications Information Center. The following activities can help you find a solution to the problem you are having: v Gathering product information for IBM Software Support v Using logging on page 290 v Consulting the lists of identified problems and workarounds on page 290 Gathering product information for IBM Software Support Before contacting IBM Software Support about a problem you are experiencing with this product, gather the information shown in Table 11. Table 11. Information to gather before contacting IBM Software Support Information type Log files Collect trace log files from failing systems. Most logs are located in a logs subdirectory on the host computer. See Principal trace log files on page 291 for lists of all trace log files and their locations. For general information about the IBM Tivoli Monitoring environment, see the Tivoli Enterprise Portal User's Guide. BegiN_APPLICATION_EnD information Operating system Messages Version numbers for IBM Tivoli Monitoring Screen captures Version number and patch level Operating system version number and patch level Messages and other information displayed on the screen Version number of the following members of the monitoring environment: v IBM Tivoli Monitoring. Also provide the patch level, if available. v IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent Screen captures of incorrect output, if any You can use the pdcollect tool to collect the most commonly used information from a system. This tool gathers log files, configuration information, version information, and other data. For more information about using this tool, see the "pdcollect tool" in the IBM Tivoli Monitoring Troubleshooting Guide. For information about working with IBM Software Support, see IBM Support Portal Service Requests and PMRs ( Software_support_(general)). Copyright IBM Corp. 2008,

300 Using logging Logging is the primary troubleshooting feature in the Microsoft IIS agent. Logging refers to the text messages and trace data that is generated by the Microsoft IIS agent. Messages and trace data are sent to a file. Trace data captures transient information about the current operating environment when a component or application fails to operate as designed. IBM Software Support personnel use the captured trace information to determine the source of an error or unexpected condition. See Trace logging for more information. Consulting the lists of identified problems and workarounds Known problems are organized into types such as those in the following list to make them easier to locate: v Installation and configuration v General usage and operation v Display of monitoring data v Take Action commands Information about symptoms and detailed workarounds for these types of problems is located in Problems and workarounds on page 300. For general troubleshooting information, see the IBM Tivoli Monitoring Troubleshooting Guide. Trace logging Trace logs are used to capture information about the operating environment when component software fails to operate as designed. The principal log type is the RAS (Reliability, Availability, and Serviceability) trace log. These logs are in the English language only. The RAS trace log mechanism is available for all components of IBM Tivoli Monitoring. Most logs are located in a logs subdirectory on the host computer. See the following information to learn how to configure and use trace logging: v Principal trace log files on page 291 v Examples: Using trace logs on page 293 v Setting RAS trace parameters by using the GUI on page 294 Note: The documentation refers to the RAS facility in IBM Tivoli Monitoring as "RAS1." IBM Software Support personnel use the information captured by trace logging to trace a problem to its source or to determine why an error occurred. All components in the IBM Tivoli Monitoring environment have a default tracing level. The tracing level can be changed on a per-component level to adjust the type of trace information collected, the degree of trace detail, the number of trace logs to be kept, and the amount of disk space used for tracing. Overview of log file management Knowing the naming conventions for log files helps you to find the files. Agent log file naming conventions Table 12 on page 291 provides the names, locations, and descriptions of IBM Tivoli Monitoring general RAS1 log files. The log file names for the Microsoft IIS agent adhere to the following naming convention: 290 Microsoft IIS agent User's Guide - Beta 1 Draft

301 Windows systems hostname_productcode_program_hextimestamp-nn.log Where: hostname Host name of the computer where the monitoring component is running. productcode Two-character product code. For IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent, the product code is kq7. program Name of the program being run. HEXtimestamp Hexadecimal time stamp representing the time at which the program started. nn Rolling log suffix. Principal trace log files Trace log files are located on various systems. Table 12 contains locations, file names, and descriptions of trace logs that can help determine the source of problems with agents. Table 12. Trace log files for troubleshooting agents System where log is located File name and path On the Tivoli Enterprise Monitoring Server On the computer that hosts the Warehouse Proxy agent v v Windows: The file in the install_dir\installitm path UNIX/Linux: The candle_installation.log file in the install_dir/logs path The configuration log file for the Warehouse Proxy agent is in the following path depending on the operating system that you are using: v v Windows: install_dir\ InstallITM\ Warehouse_Configuration.log UNIX: install_dir/logs/ KHDCFG.log Provides details about products that are installed. Note: Trace logging is enabled by default. A configuration step is not required to enable this tracing. Provides details about the configuration of data warehousing for historical reporting. Chapter 9. Troubleshooting 291

302 Table 12. Trace log files for troubleshooting agents (continued) System where log is located File name and path On the Tivoli Enterprise Monitoring Server The name of the RAS log file is as follows: v v Windows: install_dir\logs\ hostname_ms_timestamp-nn.log UNIX/Linux: install_dir/logs/ hostname_ms_timestamp-nn.log Note: File names for RAS1 logs include a hexadecimal time stamp. Traces activity on the monitoring server. On the Tivoli Enterprise Portal Server Also on UNIX systems, a log with a decimal time stamp is provided: hostname_productcode_timestamp.log and hostname_productcode_ timestamp.pid nnnnn in the install_dir/logs path, where nnnnn is the process ID. The name of the RAS log file is as follows: v v v Windows: install_dir\logs\ hostname_cq_hextimestamp-nn.log UNIX: install_dir /logs/hostname_cq_hextimestampnn.log Linux: install_dir /logs/hostname_cq_hextimestampnn.log Note: File names for RAS1 logs include a hexadecimal time stamp. Traces activity on the portal server. On the Tivoli Enterprise Portal Server On the computer that hosts the monitoring agent Also on UNIX systems, a log with a decimal time stamp is provided: hostname_productcode_timestamp.log and hostname_productcode_ timestamp.pidnnnnn in the install_dir/logs path, where nnnnn is the process ID number. The teps_odbc.log file is located in the following path: v Windows: install_dir\installitm The RAS1 log file for Windows is hostname_q7_kq7agent_hextimestampnn.log. On the Windows OS, the logs are in the following directories: v v For the 32-bit agent:install_dir\ tmaitm6\logs For the 64-bit agent:install_dir\ tmaitm6_x64\logs When you enable historical reporting, this log file traces the status of the warehouse proxy agent. Traces activity of the monitoring agent. 292 Microsoft IIS agent User's Guide - Beta 1 Draft

303 Table 12. Trace log files for troubleshooting agents (continued) System where log is located File name and path On the computer that hosts the monitoring agent The agent operations log files are as follows: instance_hostnamekq7.lg0 is the current log created when the agent was started. instance_hostname_kq7.lg1 is the backup of the previous log. On the Windows OS, the logs are in the following directories: v v For the 32-bit agent: install_dir\tmaitm6\logs For the 64-bit agent: install_dir\ tmaitm6_x64\logs Shows whether the agent could connect to the monitoring server. Shows which situations are started and stopped, and shows other events while the agent is running. A new version of this file is generated every time the agent is restarted. IBM Tivoli Monitoring generates one backup copy of the *.LG0 file with the tag.lg1. View the.lg1 tag to learn the following details regarding the previous monitoring session: v v v Status of connectivity with the monitoring server Situations that were running The success or failure status of Take Action commands Definitions of variables: v timestamp is a time stamp with a format that includes year (y), month (m), day (d), hour (h), and minute (m), as follows: yyyymmdd hhmm v HEXtimestamp is a hexadecimal representation of the time at which the process was started. v install_dir represents the directory path where you installed the IBM Tivoli Monitoring component. install_dir can represent a path on the computer that hosts the monitoring system, the monitoring agent, or the portal. v instance refers to the name of the database instance that you are monitoring. v instance_name refers to the name of the agent instance. v hostname refers to the name of the computer on which the IBM Tivoli Monitoringcomponent runs. v nn represents the circular sequence in which logs are rotated. this value includes a range from 1-5, bydefault. The first is always retained because it includes configuration parameters. v productcode specifies the product code, for example, um for Universal Agent or nt for Windows systems. For more information about the complete set of trace logs that are maintained on the monitoring server, see the IBM Tivoli Monitoring Installation and Setup Guide. Examples: Using trace logs You can open trace logs in a text editor to learn some basic facts about your IBM Tivoli Monitoring environment. IBM Software Support applies specialized knowledge to analyze trace logs to determine the source of problems. The following examples are from the Tivoli Enterprise Monitoring Server log. Example one This excerpt shows the typical log for a failed connection between a monitoring agent and a monitoring server with the host name server1a: (Thursday, August 11, 2005, 08:21:30-{94C}kdcl0cl.c,105,"KDCL0_ClientLookup") status=1c020006, "location server unavailable", ncs/kdc1_stc_server_unavailable (Thursday, August 11, 2005, 08:21:35-{94C}kraarreg.cpp,1157,"LookupProxy") Unable to connect to broker at ip.pipe:: status=0, "success", ncs/kdc1_stc_ok (Thursday, August 11, 2005, 08:21:35-{94C}kraarreg.cpp,1402,"FindProxyUsingLocalLookup") Unable to find running CMS on CT_CMSLIST <IP.PIPE:#server1a> Chapter 9. Troubleshooting 293

304 Example two The following excerpts from the trace log for the monitoring server show the status of an agent, identified here as "Remote node." The name of the computer where the agent is running is SERVER5B: (42C039F A4:kpxreqhb.cpp,649,"HeartbeatInserter") Remote node SERVER5B:Q7 is ON-LINE.... (42C3079B A4:kpxreqhb.cpp,644,"HeartbeatInserter") Remote node SERVER5B:Q7 is OFF-LINE. See the following key points about the preceding excerpts: v The monitoring server appends the KQ7 product code to the server name to form a unique name (SERVER5B:Q7 ) for this instance of the IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. By using this unique name, you can distinguish multiple monitoring products that might be running on SERVER5B. v The log shows when the agent started (ON-LINE) and later stopped (OFF-LINE) in the environment. v For the sake of brevity, an ellipsis (...) represents the series of trace log entries that were generated while the agent was running. v Between the ON-LINE and OFF-LINE log entries, the agent was communicating with the monitoring server. v The ON-LINE and OFF-LINE log entries are always available in the trace log. All trace levels that are described in Setting RAS trace parameters by using the GUI provide these entries. On Windows systems, you can use the following alternate method to view trace logs: 1. In the Windows Start menu, click Program Files > IBM Tivoli Monitoring > Manage Tivoli Enterprise Monitoring Services. The Manage Tivoli Enterprise Monitoring Services window is displayed. 2. Right-click a component and click Advanced > View Trace Log in the menu. For example, if you want to view the trace log of the IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent, right-click the name of that agent in the window. You can also use the viewer to access remote logs. Note: The viewer converts time stamps in the logs to a format that is easier to read. RAS trace parameters Pinpoint a problem by setting detailed tracing of individual components of the monitoring agent and modules See Overview of log file management on page 290 to ensure that you understand log rolling and can reference the correct log files when you manage log file generation. Setting RAS trace parameters by using the GUI On Windows systems, you can use the graphical user interface to set trace options. About this task The IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent uses RAS1 tracing and generates the logs described in Table 12 on page 291. The default RAS1 trace level is ERROR. Procedure 1. Open the Manage Tivoli Enterprise Monitoring Services window. 2. Select Advanced > Edit Trace Parms. The Tivoli Enterprise Monitoring Server Trace Parameters window is displayed. 294 Microsoft IIS agent User's Guide - Beta 1 Draft

305 3. Select a new trace setting in the pull-down menu in the Enter RAS1 Filters field or type a valid string. v General error tracing. KBB_RAS1=ERROR v Intensive error tracing. KBB_RAS1=ERROR (UNIT:kq7 ALL) v Maximum error tracing. KBB_RAS1=ERROR (UNIT:kq7 ALL) (UNIT:kra ALL) Note: As this example shows, you can set multiple RAS tracing options in a single statement. 4. Modify the value for Maximum Log Size Per File (MB) to change the log file size (changes LIMIT value). 5. Modify the value for Maximum Number of Log Files Per Session to change the number of log files per startup of a program (changes COUNT value). 6. Modify the value for Maximum Number of Log Files Total to change the number of log files for all startups of a program (changes MAXFILES value). 7. Optional: Click Y (Yes) in the KDC_DEBUG Setting menu to log information that can help you diagnose communications and connectivity problems between the monitoring agent and the monitoring server. The KDC_DEBUG setting and the Maximum error tracing setting can generate a large amount of trace logging. Use these settings only temporarily, while you are troubleshooting problems. Otherwise, the logs can occupy excessive amounts of hard disk space. 8. Click OK. You see a message reporting a restart of the monitoring agent so that your changes take effect. What to do next Monitor the size of the logs directory. Default behavior can generate a total of MB for each agent that is running on a computer. For example, each database instance that you monitor can generate MB of log data. See the "Procedure" section to learn how to adjust file size and numbers of log files to prevent logging activity from occupying too much disk space. Regularly prune log files other than the RAS1 log files in the logs directory. Unlike the RAS1 log files that are pruned automatically, other log types can grow indefinitely, for example, the logs in Table 12 on page 291 that include a process ID number (PID). Use collector trace logs as an additional source of troubleshooting information. Note: The KDC_DEBUG setting and the Maximum error tracing setting can generate a large amount of trace logging. Use these settings only temporarily while you are troubleshooting problems. Otherwise, the logs can occupy excessive amounts of hard disk space. Manually setting RAS trace parameters You can manually edit the RAS1 trace logging parameters. About this task The Microsoft IIS agent uses RAS1 tracing and generates the logs described in Table 12 on page 291. The default RAS1 trace level is ERROR. Procedure 1. Open the trace options file: v Windows systems: For the 32-bit agent:install_dir\tmaitm6\kq7env For the 64-bit agent:install_dir\tmaitm6_x64\kq7env Chapter 9. Troubleshooting 295

306 2. Edit the line that begins with KBB_RAS1= to set trace logging preferences. For example, if you want detailed trace logging, set the Maximum Tracing option: KBB_RAS1=ERROR (UNIT:kq7 ALL) (UNIT:kra ALL) 3. Edit the line that begins with KBB_RAS1_LOG= to manage the generation of log files: v MAXFILES: The total number of files that are to be kept for all startups of a specific program. When this value is exceeded, the oldest log files are discarded. The default value is 9. v LIMIT: The maximum size, in megabytes (MB) of a RAS1 log file. The default value is 5. v IBM Software Support might guide you to modify the following parameters: COUNT: The number of log files to keep in the rolling cycle of one program startup. The default is 3. PRESERVE: The number of files that are not to be reused in the rolling cycle of one program startup. The default value is 1. Note: The KBB_RAS1_LOG parameter also provides for the specification of the log file directory, log file name, and the inventory control file directory and name. Do not modify these values or log information can be lost. 4. Restart the monitoring agent so that your changes take effect. What to do next Monitor the size of the logs directory. Default behavior can generate a total of MB for each agent that is running on a computer. For example, each database instance that you monitor can generate MB of log data. See the "Procedure" section to learn how to adjust file size and numbers of log files to prevent logging activity from occupying too much disk space. Regularly prune log files other than the RAS1 log files in the logs directory. Unlike the RAS1 log files that are pruned automatically, other log types can grow indefinitely, for example, the logs in Table 12 on page 291 that include a process ID (PID). Use collector trace logs as an additional source of troubleshooting information. Note: The KDC_DEBUG setting and the Maximum error tracing setting can generate a large amount of trace logging. Use these settings only temporarily while you are troubleshooting problems. Otherwise, the logs can occupy excessive amounts of hard disk space. Dynamic modification of trace settings You can dynamically modify the trace settings for an IBM Tivoli Monitoring component, such as, Tivoli Enterprise Monitoring Server, Tivoli Enterprise Portal Server, most monitoring agents, and other components. You can access these components, except for a few monitoring agents, from the tracing utility. Dynamic modification of the trace settings is the most efficient method, because you can do it without restarting the component. Settings take effect immediately. Modifications by this method are not persistent. Note: When the component is restarted, the trace settings are read again from the.env file. Dynamically modifying these settings does not change the settings in the.env files. To modify these trace settings permanently, modify them in the.env files. ras1 Run this command to modify the trace settings for a Tivoli Monitoring component. The syntax is as follows: 296 Microsoft IIS agent User's Guide - Beta 1 Draft

307 ras1 set list (UNIT COMP: class_name ANY ALL Detail ERROR Flow INPUT Metrics OUTPUT STATE) {(UNIT COMP: class_name ANY ALL Detail ERROR Flow INPUT Metrics OUTPUT STATE)} You can specify more than one component class to which to apply the trace settings. Command options set Turns on or off tracing depending upon the value of its parameters. If the parameter is ANY, it turns it off. All other parameters turn on tracing based on the specified type or level. list Displays the default level and type of tracing that is set by default. Parameters The parameters that determine the component classes to which to apply the trace settings are as follows: COMP: class_name Modifies the trace setting for the name of the component class, as specified by class_name, for example, COMP:KDH. The output contains trace for the specified class. UNIT: class_name Modifies the trace setting for any unit that starts with the specified class_name value, for example, UNIT: kra. The output contains trace for any unit that begins with the specified filter pattern. The parameters that determine the trace level and type are as follows: ALL Displays all trace levels, including every trace point defined for the component. This setting might result in a large amount of trace, so specify other parameters to exclude unwanted trace. You might require the ALL parameter to isolate a problem, which is the equivalent to setting "Error Detail Flow State Input Output Metrics". ANY Turns off tracing. Detail Displays detailed information about each function. When entered with the list option, the trace is tagged with Det. ERROR Logs internal error conditions. When entered with the list option, the trace is tagged with ER. The output can also be tagged with EVERYE+EVERYU+ER. Flow Displays control flow data for each function entry and exit. When entered with the list option, the trace is tagged with Fl. INPUT Displays input data for each function. When entered with the list option, the trace is tagged with IN. Metrics Displays metrics on each function. When entered with the list option, the trace is tagged with ME. OUTPUT Displays output data for each function. Chapter 9. Troubleshooting 297

308 When entered with the list option, the trace is tagged with OUT. State Displays the status for each function. When entered with the list option, the trace is tagged with St. Example If you enter ras1 set (COMP:KDH ALL) (COMP:ACF1 ALL) (COMP:KDE ALL), the trace utility turns on all levels of tracing for all the files and functions for which KDH, ACF1, and KDE are the classes. kbbcre1.c, 400, May , 12:54:43, 1.1, * kbbcrn1.c, 400, May , 12:54:42, 1.1, * kdhb1de.c, 400, May , 12:59:34, 1.1, KDH kdh0med.c, 400, May , 12:59:24, 1.1, KDH kdhsrej.c, 400, May , 13:00:06, 1.5, KDH kdhb1fh.c, 400, May , 12:59:33, 1.1, KDH kdhb1oe.c, 400, May , 12:59:38, 1.2, KDH kdhs1ns.c, 400, May , 13:00:08, 1.3, KDH kbbacdl.c, 400, May , 12:54:27, 1.2, ACF1 kbbaclc.c, 400, May , 12:54:27, 1.4, ACF1 kbbac1i.c, 400, May , 12:54:28, 1.11, ACF1 vkdhsfcn.c, 400, May , 13:00:11, 1.1, KDH kdhserq.c, 400, May , 12:59:53, 1.1, KDH kdhb1pr.c, 400, May , 12:59:39, 1.1, KDH kdhsgnh.c, 400, May , 12:59:49, 1.1, KDH kdh0uts.c, 400, May , 12:59:23, 1.1, KDH kdhsrsp.c, 400, May , 13:00:13, 1.2, KDH kdhs1rp.c, 400, May , 13:00:12, 1.1, KDH kdhscsv.c, 400, May , 12:59:58, 1.9, KDH kdebbac.c, 400, May , 12:56:50, 1.10, KDE... Turning on tracing To use the tracing utility, you must use a local logon credential for the computer. This tracing method uses the IBM Tivoli Monitoring Service Console. Access the Service Console by using a web browser. About this task When you start the Service Console, information is displayed about the components that are currently running on that computer. For example, these components are listed as follows: v Tivoli Enterprise Portal Server: cnp v Monitoring Agent for Windows OS: nt v Tivoli Enterprise Monitoring Server: ms After you log on, you can type a question mark (?) to display a list of the supported commands. Use the ras1 command to modify trace settings. If you type this command in the field provided in the Service Console window and click Submit, the help for this command is displayed. Procedure 1. Open a web browser and enter the URL to access the Service Console. where hostname is the IP address or host name of the computer on which the IBM Tivoli Monitoring component is running. 2. Click the hyperlink associated with the component for which you want to modify its trace settings. Note: In the previous view, if you want to modify tracing for the Tivoli Enterprise Monitoring Server, select IBM Tivoli Monitoring Service Console under Service Point: system.your host name_ms. 298 Microsoft IIS agent User's Guide - Beta 1 Draft

309 3. Enter a user ID and password to access the system. This ID is any valid user that has access to the system. 4. Enter the command to turn on the required level of trace for the specified component classes or units. ras1 set (UNIT COMP: class_name ALL Flow ERROR Detail INPUT Metrics OUTPUT STATE) {(UNIT COMP: class_name ALL Flow ERROR Detail INPUT Metrics OUTPUT STATE)} For example, to turn on the control flow trace for the KDE, the command is: ras1 (COMP:KDE Flow) Turning off tracing You can use the IBM Tivoli Monitoring Service Console to run the ras1 command and dynamically turn off tracing. Procedure 1. Open a web browser and enter the URL to access the Service Console. where hostname is the IP address or host name of the computer on which the IBM Tivoli Monitoring component is running. 2. Click the hyperlink associated with the component for which you want to modify its trace settings. 3. Enter a user ID and password to access the system. This ID is any valid user that has access to the system. 4. Enter the command to turn off the required level of trace for the specified component classes or units. ras1 set (UNIT COMP: class_name ANY) {(UNIT COMP: class_name ANY)} For example, to turn off tracing for the kbbcrcd class of the Windows OS agent, the command is: ras1 set (UNIT:kbbcrcd ANY) Setting trace parameters for the Tivoli Enterprise Console server In addition to the trace information captured by IBM Tivoli Monitoring, you can also collect additional trace information for the Tivoli Enterprise Console components that gather event server metrics. About this task To collect this information, modify the.tec_diag_config file on the Tivoli Enterprise Console event server. Use the steps in the following procedure to modify the event server trace parameters. Procedure 1. Open the $BINDIR/TME/TEC/.tec_diag_config file in an ASCII editor. 2. Locate the entries that configure trace logging for the agent components on the event server. Two entries are included, one for tec_reception and one for tec_rule: # to debug Agent Utils tec_reception Agent_Utils error /tmp/tec_reception SP # to debug Agent Utils tec_rule Agent_Utils error /tmp/tec_rule 3. To gather additional trace information, modify these entries to specify a trace level of trace2: # to debug Agent Utils tec_reception Agent_Utils trace2 /tmp/tec_reception SP # to debug Agent Utils tec_rule Agent_Utils trace2 /tmp/tec_rule 4. In addition, modify the Highest_level entries for tec_rule and tec_reception: Chapter 9. Troubleshooting 299

310 tec_reception Highest_level trace2 SP tec_rule Highest_level trace2 Problems and workarounds The known problems and workarounds are organized into types of problems that might occur with the Microsoft IIS agent, for example installation and configuration problems and workspace problems. Note: You can resolve some problems by ensuring that your system matches the system requirements listed in the Prerequisites topic for the agent in the IBM Tivoli Composite Application Manager for Microsoft Applications Information Center. For general troubleshooting information, see the IBM Tivoli Monitoring Troubleshooting Guide. Installation and configuration troubleshooting Problems can occur during installation, configuration, and uninstallation of the agent. The problems and solutions in Table 13 can occur during installation, configuration, and uninstallation of the agent. Table 13. Problems and solutions for installation and configuration Problem Solution Diagnosing problems with product browse settings (Windows systems only). When you have problems with browse settings, complete the following steps: 1. Click Start > Programs > IBM Tivoli Monitoring > Manage Tivoli Enterprise Monitoring Services. The Manage Tivoli Enterprise Monitoring Services window is displayed. 2. Right-click the Windows agent and select Browse Settings. A text window is displayed. 3. Click Save As and save the information in the text file. A message similar to "Unable to find running CMS on CT_CMSLIST" in the log file is displayed. If requested, you can forward this file to IBM Software Support for analysis. If a message similar to "Unable to find running CMS on CT_CMSLIST" is displayed in the log file, the agent cannot connect to the monitoring server. Confirm the following points: v v Do multiple network interface cards (NICs) exist on the system? If multiple NICs exist on the system, find out which one is configured for the monitoring server. Ensure that you specify the correct host name and port settings for communication in the IBM Tivoli Monitoring environment. 300 Microsoft IIS agent User's Guide - Beta 1 Draft

311 Table 13. Problems and solutions for installation and configuration (continued) Problem Solution The system is experiencing high CPU usage. Agent process: View the memory usage of the KQ7CMA process. If CPU usage seems to be excessive, restart the monitoring agent. After you upgrade the IIS agent from V6.2.0 to V , the value of the custom variables in the KQ7ENV file is retained but the value of the default environment variables is not retained. When you install an ITCAM for Microsoft Applications 32-bit agent on a computer that has a preinstalled 64-bit version of the same agent, the following situations occur: Situation 1: The 32-bit agent is not installed. However, when you run the KinCinfo command, the 32-bit agent is displayed in the list of installed components. Network cards: The network card configurations can decrease the performance of a system. Each stream of packets that a network card receives (assuming that it is a broadcast or destined for the under-performing system) must generate a CPU interrupt and transfer the data through the I/O bus. If the network card in question is a bus-mastering card, work can be offloaded and a data transfer between memory and the network card can continue without using CPU processing power. Bus-mastering cards are 32-bit and are based on PCI or EISA bus architectures. During an upgrade process, a backup of the KQ7ENV file is created at this location: itm_install_dir\backup\ current_date_timestamp\tmaitm6 You can use the backup KQ7ENV file at this location to manually update any environment variable settings in the new KQ7ENV file if required. Situation 1: No solution is available for this problem. Situation 2: Restart the 64-bit agent. Situation 2: The preinstalled 64-bit agent stops running. You have installed two 32-bit Microsoft Application agents and the 32/64-bit Agent Compatibility Package (ACP) from the ITCAM for Microsoft Applications 64-bit agent. You cannot install additional 32-bit Microsoft application agents on the same managed system. Run the Windows OS agent V6.2.2, Fix Pack 2 setup.exe file to install the 32/64-bit Agent Compatibility Pack (ACP). You can also reinstall the ACP from the 64-bit agent ITCAM for Microsoft Applications V6.2.2 folder. Table 14. General problems and solutions for uninstallation Problem Solution The way to remove inactive managed systems (systems whose status is OFFLINE) from the Navigator tree in the portal is not obvious. Use the following steps to remove, but not uninstall, an offline managed system from the Navigator tree: 1. Click the Enterprise icon in the Navigator tree. 2. Right-click, and then click Workspace > Managed System Status. 3. Right-click the offline managed system, and select Clear offline entry. To uninstall the monitoring agent, use the procedure described in the IBM Tivoli Monitoring Installation and Setup Guide. Chapter 9. Troubleshooting 301

312 Table 14. General problems and solutions for uninstallation (continued) Problem Solution You have installed the Windows OS agent V6.2.2 or later on your computer. The Windows OS agent does not start if you uninstall a 32-bit agent for ITCAM for Microsoft Applications by using the following methods: v The silent_agent.txt file v The command: tacmd removesystem -t agentcode -n node For example, tacmd removesystem t qp n Primary:MachineName:NT v The Remove option on the Tivoli Enterprise The following error message is displayed: The service did not respond to the start or control request in a timely fashion. KCICF5100E: Unable to start, see Event Log for information. When the agent is installed using group deployment, deploygroup was run multiple times. The group deployment starts and completes successfully, but there were multiple entries in the Deploy Status Summary workspace on the Tivoli Enterprise When the command tried to install multiple times, the additional installations were queued and then were in failed state though the agent was deployed successfully. Note: v v v When the bundle group contains a single bundle and the deployment group contains more than one member (managed system of the same type as AIX or Linux), the deployment is successful on both systems. When the bundle group contains more than one bundle and the deploy group contains single or multiple members, the deployment will be executed on each group member (managed system) depending on the members present in the bundle group and deploy group. The command creates a transaction for each XX bundle for each target system; the bundle matching the operating system for the deployment member is processed successfully; and remaining transactions were in a queued or failed state. When you use the Installation Launch Pad to install a 32-bit agent on a 32-bit computer, the following message is displayed: The following components cannot be installed because the installation action failed. IBM Tivoli Composite Application Manager for Microsoft Applications V6.2.3 for Windows on 64-bit AMD and Intel systems (x64) Use the following steps to resolve this problem: 1. In the KGLWICMA.VER and KUIWICLI.VER files in the InstallITM/ver directory, lower the current VRMF values. For example, if the current value is , change this value to Run the setup.exe file for the Windows OS agent to install the Tivoli Enterprise Monitoring Agent framework. 3. Start the Windows OS agent. Note: If IBM Tivoli Monitoring is not displayed in the Add or Remove Programs window, run the setup.exe file for ITCAM for Microsoft Applications to install the Tivoli Enterprise Monitoring Agent Framework. You can find the setup.exe file in the Agent_64bit\WINDOWS directory. There is no solution at this time. No action is required. You can ignore this message and continue with the installation. 302 Microsoft IIS agent User's Guide - Beta 1 Draft

313 Remote deployment troubleshooting Problems can occur with remote deployment and removal of agent software using the Agent Remote Deploy process. Table 15 contains problems and solutions related to remote deployment. Table 15. Remote deployment problems and solutions Problem Solution While you are using the remote deployment feature to Do not close or modify this window. It is part of the install the IBM Tivoli Composite Application Manager installation process and is dismissed automatically. for Microsoft Applications: Microsoft Internet Information Services Agent, an empty command window is displayed on the target computer. This problem occurs when the target of remote deployment is a Windows computer. (For more information about the remote deployment feature, see the IBM Tivoli Monitoring Installation and Setup Guide.) The removal of a monitoring agent fails when you use the remote removal process in the Tivoli Enterprise Portal desktop or browser. Remote installation (CLI and GUI) of the Microsoft IIS agent fails on IPv6 network. The agent gets installed on a computer but fails to configure and start. The agent appears offline on the Tivoli Enterprise This problem might occur when you attempt the remote removal process immediately after you restart the Tivoli Enterprise Monitoring Server. You must allow time for the monitoring agent to refresh its connection with the Tivoli Enterprise Monitoring Server before you begin the remote removal process. You must reconfigure the Microsoft IIS agent to Tivoli Enterprise Monitoring Server. To reconfigure the Microsoft IIS agent, use the following steps: 1. Open the Manage Tivoli Enterprise Monitoring Services window. 2. Right-click Microsoft IIS agent that you want to configure with the IPv6 network and then, click Advanced. 3. Click Edit Variable. Following message appears: The service must be stopped before editing variables. Do you want to stop the service now? 4. Click Yes. The Edit Variable window appears. 5. Click Add. 6. Enter the following details in the respective fields: v Variable Name: CT_CMSLIST v Variable Value: IP6.PIPE:ITM-IPV6;IP6.PIPE:<IP of the TEMS machine>. For example: IP6.PIPE:ITM-IPV6;IP6.PIPE: FE80::215:5DFF:FE44: Click Ok. 8. Right-click Microsoft IIS agent and then click Start. Agent troubleshooting A problem can occur with the agent after it has been installed. Table 16 on page 304 contains problems and solutions that can occur with the agent after it is installed. Chapter 9. Troubleshooting 303

314 Table 16. Agent problems and solutions Problem Log data accumulates too rapidly. The HTTP error log view displays the data only for the latest HTTP error log file. The content of the previous error log files is not displayed. For example, if 10 HTTP errors are reported in an hour, then owing to the limitation in file size of error logs, four errors are logged in httperr1.log, and six errors are logged in a new file httperr2.log. The IIS agent scans the latest error log file and displays only six rows from the httperr2.log file. If you have installed the Microsoft FTP Service V6.0 with IIS V7.0, the information related to the Microsoft FTP Service attribute group is not displayed on Tivoli Enterprise Portal client. If you have installed the IIS version 6.0, the data for the following attribute groups is not displayed on the Tivoli Enterprise : v Website Certificate Details v Website Virtual Dir Details v Website Dynamic IP Restrictions Settings v Websites W3C Logs v FTP Site Dynamic IP and Domain Restrictions v FTP Site IP and Domain Restrictions Settings v FTP Logon Attempt Restrictions Settings v Centralized Certificate Details v Virtual Domain Setting v WAS W3WP v W3SVC-W3WP v Microsoft FTP Service v IIS Components If you have installed the IIS version 7.x, the data for the following attribute groups is not displayed on the Tivoli Enterprise : v Centralized Certificate Details v FTP Logon Attempt Restrictions Settings v NNTP Server v NNTP Version Information v IIS NNTP Server Status If you have installed the IIS version 8.0, the data for the following attribute groups is not displayed on the Tivoli Enterprise : v NNTP Server v NNTP Version Information v IIS NNTP Server Status Solution Check the RAS trace option settings, which are described in Setting RAS trace parameters by using the GUI on page 294. The trace option settings that you can set on the KBB_RAS1= and KDC_DEBUG= lines potentially generate large amounts of data. No solution is available for this problem at this time. No solution is available for this problem at this time. No solution is available for this problem at this time. 304 Microsoft IIS agent User's Guide - Beta 1 Draft

315 Table 16. Agent problems and solutions (continued) Problem The IIS agent does not collect data for performance counters that are added after starting the agent. Therefore, the Tivoli Enterprise Portal client shows a blank row for the newly added performance counters. For example, if FTP or SMTP or NNTP services are installed after installing the IIS agent, the IIS agent does not retrieve data for the FTP or SMTP or NNTP performance counters. The Microsoft Internet Information Services agent permits previous versions of an IBM Tivoli Monitoring for Microsoft Application V6.2.0 agent on an installed IBM Tivoli Monitoring for Microsoft Applications V agent. After using a previous version, there is a change in the version of the Microsoft Internet Information Services agent. The Microsoft Internet Information Services agent does not display the new functionalities. However, the entry for IBM Tivoli Monitoring for Microsoft Applications is not removed from Add or Remove Programs. Solution Recycle the agent so that the values of the newly added performance counters are retrieved and displayed on the portal client. No solution is available for this problem at this time. Chapter 9. Troubleshooting 305

316 Table 16. Agent problems and solutions (continued) Problem A configured and running instance of the monitoring agent is not displayed in the Tivoli Enterprise Portal, but other instances of the monitoring agent on the same system are displayed in the portal. Solution IBM Tivoli Monitoring products use Remote Procedure Call (RPC) to define and control product behavior. RPC is the mechanism that a client process uses to make a subroutine call (such as GetTimeOfDay or ShutdownServer) to a server process somewhere in the network. Tivoli processes can be configured to use TCP/UDP, TCP/IP, SNA, and SSL as the protocol (or delivery mechanism) for RPCs that you want. IP.PIPE is the name given to Tivoli TCP/IP protocol for RPCs. The RPCs are socket-based operations that use TCP/IP ports to form socket addresses. IP.PIPE implements virtual sockets and multiplexes all virtual socket traffic across a single physical TCP/IP port (visible from the netstat command). A Tivoli process derives the physical port for IP.PIPE communications based on the configured, well-known port for the hub Tivoli Enterprise Monitoring Server. (This well-known port or BASE_PORT is configured by using the 'PORT:' keyword on the KDC_FAMILIES / KDE_TRANSPORT environment variable and defaults to '1918'.) The physical port allocation method is defined as (BASE_PORT *N), where N=0 for a Tivoli Enterprise Monitoring Server process and N={1, 2,..., 15} for another type of monitoring server process. Two architectural limits result as a consequence of the physical port allocation method: v v No more than one Tivoli Enterprise Monitoring Server reporting to a specific Tivoli Enterprise Monitoring Server hub can be active on a system image. No more than 15 IP.PIPE processes can be active on a single system image. A single system image can support any number of Tivoli Enterprise Monitoring Server processes (address spaces) if each Tivoli Enterprise Monitoring Server on that image reports to a different hub. By definition, one Tivoli Enterprise Monitoring Server hub is available per monitoring enterprise, so this architecture limit has been reduced to one Tivoli Enterprise Monitoring Server per system image. No more than 15 IP.PIPE processes or address spaces can be active on a single system image. With the first limit expressed earlier, this second limitation refers specifically to Tivoli Enterprise Monitoring Agent processes: no more than 15 agents per system image. Continued on next row. 306 Microsoft IIS agent User's Guide - Beta 1 Draft

317 Table 16. Agent problems and solutions (continued) Problem Continued from previous row. You have installed a 32-bit Windows OS agent and a 64-bit agent of ITCAM for Microsoft Applications on a 64-bit managed system. If the 64-bit agent abruptly stops running, the Agent Management Service (AMS) fails to restart the agent. The status of the agent in the Agents' Management Status view changes to Unmanaged. Solution This limitation can be circumvented (at current maintenance levels, IBM Tivoli Monitoring V6.1, Fix Pack 4 and later) if the Tivoli Enterprise Monitoring Agent process is configured to use the EPHEMERAL IP.PIPE process. (This process is IP.PIPE configured with the 'EPHEMERAL:Y' keyword in the KDC_FAMILIES / KDE_TRANSPORT environment variable). The number of ephemeral IP.PIPE connections per system image has no limitation. If ephemeral endpoints are used, the Warehouse Proxy agent is accessible from the Tivoli Enterprise Monitoring Server associated with the agents using ephemeral connections either by running the Warehouse Proxy agent on the same computer or by using the Firewall Gateway feature. (The Firewall Gateway feature relays the Warehouse Proxy agent connection from the Tivoli Enterprise Monitoring Server computer to the Warehouse Proxy agent computer if the Warehouse Proxy agent cannot coexist on the same computer.) There are two possible solutions to this problem: Solution 1: Restart the 64-bit agent and then use the following steps to restart the AMS: 1. Right-click the agent, which is in the unmanaged state, and click Take Action > Select. 2. From the Name list in the Action panel, select AMS Start Management. 3. In the Destination Systems panel, select the managed system node for the agent management that you want to start. 4. Click OK. On the Tivoli Enterprise Portal, no data is displayed in the Website W3C Logs Summary view in the Website Requests and Errors Statistics workspace. This problem can occur because of one of the following reasons: v v The IIS Manager is configured to log the requests that are not in the W3C format. The path of the log file directory was incorrectly specified when the monitoring agent was configured. In the Tivoli Enterprise Portal, the Website W3C Logs Summary view in the Website Requests and Errors Statistics workspace displays incorrect or shuffled data for some attributes. This problem occurs because the IIS Manager is configured to log the data for some attributes in the log file. Solution 2: Install the Windows OS agent V6.2.2, Fix Pack 2. To resolve this problem, ensure that the following conditions exist: v v The IIS Manager is configured to log the requests that are in the W3C format. The path for the log file directory is specified correctly while configuring the Microsoft IIS agent. While configuring the IIS Manager, ensure that all the choices are selected in the W3C Logging Fields window. Chapter 9. Troubleshooting 307

318 Table 16. Agent problems and solutions (continued) Problem If you have installed the Microsoft IIS agent version 6.0, the data for the following workspaces is not displayed on the Tivoli Enterprise Portal: v Data and File Traffic Statistics v User and Connection Statistics v IIS Installed Components v WAS Worker Process Statistics v W3SVC Worker Process Statistics If you have installed the Microsoft IIS agent version 7.x, the data for the following workspaces is not displayed on the Tivoli Enterprise Portal: v NNTP Virtual Server Status If you have installed the Microsoft IIS agent version 8, the data for the following workspaces is not displayed on the Tivoli Enterprise Portal: v NNTP Virtual Server Status In the Edit IP and Domain Restrictions Settings window of the IIS Manager, if you select Abort from the Deny Action list, the Deny Action attribute value is displayed as AbortRequest in the Tivoli Enterprise This problem occurs because the IIS Manager stores the Deny Action value as AbortRequest in the applicationhost.config file. The IIS agent retrieves this value from the configuration file and displays it on the Tivoli Enterprise This limitation is applicable to IIS version 8. You have configured the monitoring agent version 6.3 on the Tivoli Enterprise Monitoring Server by using the self-describing agent feature. You are using IBM Tivoli Monitoring version or version Fix Pack 1. On the Tivoli Enterprise Portal, if you open a situation by using the Situation Editor and view the advance options for the situation, you can see <none selected> in the Display Item window. Solution No solution is available for this problem at this time. This is a known limitation. No solution exists for this problem. Recycle the Tivoli Enterprise Portal Server. Complete the following steps to recycle the Tivoli Enterprise Portal Server on Windows systems: 1. On the computer where the Tivoli Enterprise Portal Server is installed, click Start > Programs > Manage Tivoli Enterprise Monitoring Services. 2. Right-click the Tivoli Enterprise Portal Server service and click Recycle. To recycle the Tivoli Enterprise Portal Server on UNIX systems, use the following commands from the bin directory of /opt/ibm/itm (or where you have installed IBM Tivoli Monitoring) in the order shown below: v./itmcmd agent stop cq v./itmcmd agent start cq Workspace troubleshooting Problems can occur with general workspaces and agent-specific workspaces. Table 17 on page 309 contains problems and solutions related to workspaces. 308 Microsoft IIS agent User's Guide - Beta 1 Draft

319 Table 17. Workspace problems and solutions Problem The process application components are available, but the Availability status shows PROCESS_DATA_NOT_ AVAILABLE. Solution This problem occurs because the PerfProc performance object is disabled. When this condition exists, IBM Tivoli Monitoring cannot collect performance data for this process. Use the following steps to confirm that this problem exists and to resolve it: 1. In the Windows Start menu, click Run. 2. perfmon.exe in the Open field of the Run window. The Performance window is displayed. 3. Click the plus sign (+) in the toolbar. The Add Counters window is displayed. 4. Look for Process in the Performance object menu. 5. Complete one of the following actions: v If you see Process in the menu, the PerfProc performance object is enabled and the problem is coming from a different source. You might need to contact IBM Software Support. v If you do not see Process in the menu, use the Microsoft utility from the Microsoft.com Operations website to enable the PerfProc performance object. The Process performance object becomes visible in the Performance object menu of the Add Counters windows, and IBM Tivoli Monitoring is able to detect Availability data. 6. Restart the monitoring agent. Chapter 9. Troubleshooting 309

320 Table 17. Workspace problems and solutions (continued) Problem Event Log workspace events are unfiltered, are not collected more than every 60 seconds, and are removed from the Event Log Views after 1 hour of being received. The name of the attribute does not display in a bar chart or graph view. At the bottom of each view, you see the following Historical workspace KFWITM220E error: Request failed during execution. Solution All events currently in the Application Event Log are sent to the Tivoli Enterprise Monitoring Server when the agent starts. Environment variables that control the behavior of the Event Log Workspace are stored in the agent ENV file on the Tivoli Enterprise Monitoring Agent where the agent is running. These variables are stored: CDP_DP_CACHE_TTL This value is the minimum number of seconds before data (for a particular table) is collected again. By default this variable is present in the ENV file and the value is set to 60. CDP_NT_EVENT_LOG_GET_ALL_ENTRIES_FIRST_TIME This variable determines whether the agent sends all events currently in the Application Event Log to the Tivoli Enterprise Monitoring Server when the agent starts. Legal values are YES and NO. By default this variable is present in the ENV file and the value is set to NO. CDP_NT_EVENT_LOG_CACHE_TIMEOUT This variable determines how long in seconds that events are displayed in the Tivoli Enterprise Monitoring Server Event Log Views. By default, this variable is not present in the ENV file. A default value of 3600 (1 Hour) is used unless overridden by the presence of this variable in the agent ENV file. The minimum legal value is 300. To view or edit the agent ENV file on the Tivoli Enterprise Monitoring agent where the agent is installed, use Manage Tivoli Enterprise Monitoring Services to select the agent. Right-click and select Advanced - Edit ENV File. The agent must be restarted to implement changes. When a chart or graph view that includes the attribute is scaled to a small size, a blank space is displayed instead of a truncated name. To see the name of the attribute, expand the view of the chart until sufficient space is available to display all characters of the attribute name. Ensure that you configure all groups that supply data to the view. In the Historical Configuration view, ensure that data collection is started for all groups that supply data to the view. 310 Microsoft IIS agent User's Guide - Beta 1 Draft

321 Table 17. Workspace problems and solutions (continued) Problem You start collection of historical data but the data cannot be seen. Historical data collection is unavailable because of incorrect queries in the Tivoli Enterprise Solution Use the following managing options for historical data collection: v v Basic historical data collection populates the Warehouse with raw data. This type of data collection is turned off by default. For information about managing this feature including how to set the interval at which data is collected, see Managing historical data in the IBM Tivoli Monitoring Administrator's Guide. By setting a more frequent interval for data collection, you reduce the load on the system incurred every time data is uploaded. Use the Summarization and Pruning agent to collect specific amounts and types of historical data. Historical data is not displayed until the Summarization and Pruning monitoring agent begins collecting the data. By default, this agent begins collection at 2 a.m. daily. At that point, data is visible in the workspace view. For information about how to modify the default collection settings, see Managing historical data in the IBM Tivoli Monitoring Administrator's Guide. The Sort By, Group By, and First/Last functions column are not compatible with the historical data collection feature. Use of these advanced functions makes a query ineligible for historical data collection. When you use a long process name in the situation, the process name is truncated. Regular (non-historical) monitoring data fails to be displayed. Navigator items and workspace titles are labeled with internal names such as Kxx:KXX0000 instead of the correct names (such as Disk), where XX and xx represent the two-character agent code. Even if data collection has started, you cannot use the time span feature if the query for the chart or table includes column functions or advanced query options (Sort By, Group By, First / Last). To ensure support of historical data collection, do not use the Sort By, Group By, or First/Last functions in your queries. For information about the historical data collection function, See Managing historical datain the IBM Tivoli Monitoring Administrator's Guide or the Tivoli Enterprise Portal online help. Truncation of process or service names for situations in the Availability table in the portal display is the expected behavior. The maximum name length is 100 bytes. Check the formation of the queries you use to gather data. For example, look for invalid SQL statements. Ensure that application support has been added on the monitoring server, portal server, and portal client. For more information about installing application support, see Installing and enabling application support in the IBM Tivoli Monitoring Installation and Setup Guide. Chapter 9. Troubleshooting 311

322 Table 17. Workspace problems and solutions (continued) Problem You have installed a 32-bit agent for ITCAM for Microsoft Applications on a computer where a 64-bit Windows OS agent V6.2.2, Fix Pack 1 is installed. On the Tivoli Enterprise Portal, when you expand the Windows OS node, and select the Agent Management Services navigator item, the installation path of the agent is not correctly displayed in the Agents' Management Definitions view. Also, no data is displayed for the agent version and the build number in the Agents' Management Status view. If the 32-bit OS agent and a 64-bit Microsoft Application agent are installed on the same managed system, Agent Management Services data is not displayed in the Agent's Runtime Status view of the agent. The Agent's Runtime Status view is available in the Agent Management Services workspace. You have installed the ITCAM for Microsoft Applications agent and the Windows OS agent in the IPV6 environment. In the Agent Management Services navigator, the IP address in the Agents' Runtime Status view is displayed in the IPV4 format instead of the IPV6 format. You have installed the Tivoli Enterprise Monitoring Server on z/os. In the Configuration panel of the History Collection Configuration window, if you have selected TEMS from the Collection Location list, the Tivoli Enterprise Portal does not display historical data for the following attribute groups: v ASP NET Applications v Availability v Event Log v Performance Object Status v Search Solution Upgrade the Windows OS agent from V6.2.2, Fix Pack 1 to V6.2.2, Fix Pack 2. No solution is available for this problem at this time. No solution is available for this problem at this time. Reconfigure the history collection, and set the collection location as TEMA for these attribute groups. Situation troubleshooting Problems can occur with situations and situation configuration. Table 18 contains problems and solutions for situations. Table 18. Situation problems and solutions Problem Monitoring activity requires too much disk space. Solution Check the RAS trace logging settings that are described in Setting RAS trace parameters by using the GUI on page 294. For example, trace logs grow rapidly when you apply the ALL logging option. Monitoring activity requires too many system resources. Disk capacity planning for historical data on page 203 describes the performance impact of specific attribute groups. If possible, decrease your use of the attribute groups that require greater system resources. 312 Microsoft IIS agent User's Guide - Beta 1 Draft

323 Table 18. Situation problems and solutions (continued) Problem A formula that uses mathematical operators appears to be incorrect. For example, if you were monitoring a Linux system, the formula that calculates when Free Memory falls under 10 percent of Total Memory does not work: LT # Linux_VM_Stats.Total_Memory / 10 You want to change the appearance of situations when they are displayed in the navigation tree. If the IIS agent V6.2 is installed on your computer with IIS agent V support, the Process_Data_Unavailable situation is not visible for the agent node on the Tivoli Enterprise Portal client. When a situation is triggered in the Event Log attribute group, it remains in the Situation Event Console as long as the event ID entry is present in the Event Log workspace. When this event ID entry is removed from the Event Log workspace on the Tivoli Enterprise Portal, the situation is also cleared even if the actual problem that caused the event is not resolved, and the event ID entry is also present in the Windows Event Viewer. If the Expert Advice for a situation contains a hyperlink to an external website (for example, a Microsoft TechNet website) and you click the hyperlink, the website opens in an external window. However, the external window stops responding. The situation for a specific agent is not visible in the Tivoli Enterprise The monitoring interval is too long. The situation did not activate at startup. The situation is not displayed. Solution This formula is incorrect because situation predicates support only logical operators. Your formulas cannot have mathematical operators. Note: The Situation Editor provides alternatives to math operators. In the example, you can select the % Memory Free attribute and avoid the need for math operators. 1. Right-click an item in the navigation tree. 2. Click Situations in the menu. The Situation Editor window is displayed. 3. Select the situation that you want to modify. 4. Use the State menu to set the status and appearance of the Situation when it triggers. Note: The State setting is not related to severity settings in the Tivoli Enterprise Console. No solution is available for this problem at this time. A timeout occurs on the cache of events for the NT Event Log group. Increase the cache time of Event Log collection to meet your requirements by adding the following variable and timeout value to the KpcENV file for the agent (where pc is the two-letter product code): CDP_NT_EVENT_LOG_CACHE_TIMEOUT=3600 This variable determines how long events from the NT Event Log are kept. The external window responds after you close the Preview window and Situation Editor window. Open the Situation Editor. Access the All managed servers view. If the situation is not displayed, confirm that the monitoring server has been seeded for the agent. If not, seed the server, as described in the IBM Tivoli Monitoring Installation and Setup Guide. Access the Situation Editor view for the situation that you want to modify. Check the Sampling interval area in the Formula tab. Adjust the time interval as required. Manually recycle the situation as follows: 1. Right-click the situation and select Stop Situation. 2. Right-click the situation and select Start Situation. Note: You can permanently avoid this problem by selecting the Run at Startup check box of the Situation Editor view for a specific situation. Click the Action tab and check whether the situation has an automated corrective action. This action can occur directly or through a policy. The situation might be resolving so quickly that you do not see the event or the update in the graphical user interface. Chapter 9. Troubleshooting 313

324 Table 18. Situation problems and solutions (continued) Problem An Alert event did not occur even though the predicate was correctly specified. A situation fires on an unexpected managed object. The product did not distribute the situation to a managed system. The situation does not fire. Solution Check the logs, reports, and workspaces. Confirm that you distributed and started the situation on the correct managed system. Click the Distribution tab and check the distribution settings for the situation. This problem can be caused when incorrect predicates are present in the formula that defines the situation. For example, the managed object shows a state that normally triggers a monitoring event, but the situation is not true because the wrong attribute is specified in the formula. In the Formula tab, analyze predicates as follows: 1. Click the fx icon in the Formula area. The Show formula window is displayed. a. Confirm the following details in the Formula area of the window: v The attributes that you intend to monitor are specified in the formula. v The situations that you intend to monitor are specified in the formula. v The logical operators in the formula match your monitoring goal. v The numeric values in the formula match your monitoring goal. b. (Optional) Select the Show detailed formula check box to see the original names of attributes in the application or operating system that you are monitoring. c. Click OK to dismiss the Show formula window. 2. (Optional) In the Formula area of the Formula tab, temporarily assign numeric values that immediately trigger a monitoring event. The triggering of the event confirms that other predicates in the formula are valid. Note: After you complete this test, you must restore the numeric values to valid levels so that you do not generate excessive monitoring data based on your temporary settings. Situation events are not displayed in the Events Console view of the workspace. For additional information about situations that do not fire, see Situations are not firing in the IBM Tivoli Monitoring Troubleshooting Guide. Associate the situation with a Navigator item. Note: The situation does not need to be displayed in the workspace. It is sufficient that the situation is associated with any Navigator item. 314 Microsoft IIS agent User's Guide - Beta 1 Draft

325 Table 18. Situation problems and solutions (continued) Problem You do not have access to a situation. A managed system seems to be offline. Associations of custom situations with navigator items break after upgrading the agent support. Solution Note: You must have administrator privileges to complete these steps. 1. Click Edit > Administer Users to access the Administer Users window. 2. In the Users area, select the user whose privileges you want to modify. 3. In the Permissions tab, Applications tab, and Navigator Views tab, select the permissions or privileges that correspond to the user role. 4. Click OK. 1. Select Physical View and click the Enterprise Level of the navigator tree. 2. Click View > Workspace > Managed System Status to see a list of managed systems and their status. 3. If a system is offline, check network connectivity and the status of the specific system or application. Create the associations again by completing the following steps: 1. Right-click the navigator item, and then click Situations. A list of situations that are associated with the navigator item is displayed. Note: If the custom situation that you want to associate is available in the list, ignore remaining steps. 2. Click the Set Situation filter criteria icon. 3. Select the Eligible for Association check box, and then click OK. A list of situations is displayed. 4. Right-click the situation that you want to associate with the navigator item, and then click Associate. The situation is associated with the navigator item. Take Action commands troubleshooting Problems can occur with Take Action commands. Table 19 contains problems and solutions that can occur with Take Action commands. When each Take Action command runs, it generates a log file listed in Table 12 on page 291. Table 19. Take Action commands problems and solutions Problem Take Action commands often require several minutes to complete. Situations fail to trigger Take Action commands. Solution Allow several minutes. If you do not see a message advising you of completion, try to run the command manually. Attempt to manually run the Take Action command in the Tivoli Enterprise If the Take Action command works, look for configuration problems in the situation. See Situation troubleshooting on page 312. If the Take Action command fails, for general information about troubleshooting Take Action commands, see the IBM Tivoli Monitoring Troubleshooting Guide. Chapter 9. Troubleshooting 315

326 Table 19. Take Action commands problems and solutions (continued) Problem Solution If you have installed the Microsoft FTP Service V7.5 with No solution is available for this problem at this time. IIS 8.0, the following Take Action commands do not work: v Start FTP Site. v Stop FTP Site. v Start FTP Site by Name. v Stop FTP Site by Name. If you try to start or stop a started or stopped website or FTP site, the following message displays in the Tivoli Enterprise Portal window: v For website: The Web site was started. OR The Web site was stopped. v For FTP site: The FTP site was started. OR The FTP site was stopped. If you apply the IIS FTP Sites Detail query to a view on the Tivoli Enterprise Portal client, the following Take Action commands do not retrieve the value of the FTP Site attribute for the default argument: v Start FTP Site v Stop FTP Site If you apply the IIS FTP Server Site Status query to a view on the Tivoli Enterprise Portal client, the following Take Action commands do not retrieve the value of the FTP Site Name attribute for the default argument: v Start FTP Site by Name. v Stop FTP Site by Name. If you apply the IIS Web Sites Detail default query to a view on the Tivoli Enterprise Portal client, the following Take Action commands do not retrieve the value of the Web Site attribute for the default argument: v Start Website. v Stop Website. If you apply the IIS Web Server Site Status default query to a view on the Tivoli Enterprise Portal client, the following Take Action commands do not retrieve the value of the Web Site Name attribute for the default argument: v Start Website by Name. v Stop Website by Name. If you have installed IIS agent V6.2 with IIS agent V support on your computer, the Take Action commands for start services display an incorrect message under the following conditions: v The parent service does not exist. v The parent service is disabled and stopped. No solution is available for this problem at this time. Run the following Take Action commands to automatically select the default argument: v Start FTP Site by Name. v Stop FTP Site by Name. Run the following Take Action commands to automatically select the value of the FTP Site attribute for the default argument: v Start FTP Site. v Stop FTP Site. Run the following Take Action commands to automatically select the value of the Web Site attribute for the default argument: v Start Website by Name. v Stop Website by Name. Run the following Take Action commands to automatically select the value of the Web Site attribute for the default argument: v Start Website. v Stop Website. No solution is available for this problem at this time. 316 Microsoft IIS agent User's Guide - Beta 1 Draft

327 Table 19. Take Action commands problems and solutions (continued) Problem Solution If the name of an application pool contains special characters, the following Take Action commands display incorrect messages when you run them on the Tivoli Enterprise Portal: v Start application pool v Stop application pool The following list displays some of the incorrect messages: v The application pool is starting v The application pool is stopping v The Application Pool name might be invalid and cannot be started Do not use special characters in the application pool names. Tivoli Common Reporting troubleshooting Problems can occur with the Tivoli Common Reporting predefined reports for the Microsoft IIS agent. Table 20 contains problems and solutions that can occur with the Tivoli Common Reporting predefined reports for IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. See the Tivoli Common Reporting Information Center ( publib.boulder.ibm.com/infocenter/tivihelp/v3r1/topic/com.ibm.tivoli.tcr.doc/tcr_welcome.html) for more information about troubleshooting for the Tivoli Common Reporting tool. Table 20. Tivoli Common Reporting for Microsoft IIS agent problems and solutions Problem Solution When you simultaneously query two tables in the Query Studio interface, no data is displayed. However, when you query the two tables separately, data is displayed. When you create an ad hoc query by dragging some columns in the Query Studio interface, the following error message is displayed: RQP-DEF-0177 An error occurred while performing operation sqlpreparewithoptions status= If a view or a table for the selected summarization type does not exist in the database for a report, the report does not open and the following error message is displayed: RQP-DEF-0177 An error occurred while performing operation sqlpreparewithoptions status= -56. When you run a report, the report is not displayed in the correct format and the following error message is displayed: RQP-DEF-0177 An error occurred while performing operation sqlpreparewithoptions status= -16. This problem occurs when a relationship between the tables is not defined. To resolve this problem, ensure that all the ad hoc queries have at least one identifier. This is an SQL error related to arithmetic flow. This error is generated because the average or the sum for certain columns is more than the threshold size that is defined in the database. To resolve this error, use the limited columns and add a standard timestamp while creating an ad hoc query. To resolve this problem, complete the following tasks: v Verify that the summarization and pruning agent is working correctly. v Generate data for all the summarization types. v Verify that the warehouse is collecting historical data. This problem occurs due to incorrect data source. To resolve this problem, complete the following tasks: v v Verify that the datasource configuration parameters are configured correctly. Verify that the specified values for the parameters of the summarization and pruning agent such as database URL, driver user, and password match with the values of these parameters on the database. Chapter 9. Troubleshooting 317

328 Table 20. Tivoli Common Reporting for Microsoft IIS agent problems and solutions (continued) Problem Solution If data is not available in the database for the selected parameters, the following error message is displayed after querying these parameters: Empty data set No data returned by query. Try another set of parameters. Reports are not generated correctly in the Microsoft Excel format. When you view a report spanning multiple pages in the PDF format, the report parameters section is displayed at the top of each page. Charts are not displayed correctly in Microsoft Excel Labels for some charts are displayed in the HTML output, but are not displayed in the PDF output. To resolve this error, complete the following tasks: v Configure the summarization and pruning agent and verify that it is working correctly. v Generate data for all the summarization types in the database. There are some limitations to generate reports in the Microsoft Excel format. To view these limitations, see the IBM Cognos Business Intelligence Information Center ( v10r1m0/topic/ com.ibm.swg.im.cognos.ug_cr_rptstd doc/ ug_cr_rptstd_id32474excel_limitations.html). No solution is available for this problem at this time. No solution is available for this problem at this time. The font size is rendered differently in the HTML and the PDF output. In the PDF output, some fonts are not displayed because of the large font size. To resolve this issue, reduce the font size by completing the following steps: 1. Open the report in Report Studio. 2. Click the chart. 3. In the chart properties, select Font. 4. Modify the font properties, such as family, size, weight, and style. 5. Save the settings, and run the report in the PDF format. Support information If you have a problem with your IBM software, you want to resolve it quickly. IBM provides the following ways for you to obtain the support you need: Online The following websites contain troubleshooting information: v Go to the IBM Software Support website ( software) and follow the instructions. v Go to the Application Performance Management Wiki ( servicemanagement/apm/index.html). Feel free to contribute to this wiki. IBM Support Assistant The IBM Support Assistant (ISA) is a free local software serviceability workbench that helps you resolve questions and problems with IBM software products. The ISA provides quick access to support-related information and serviceability tools for problem determination. To install the ISA software, go to the IBM Support Assistant website ( 318 Microsoft IIS agent User's Guide - Beta 1 Draft

329 Informational, warning, and error messages overview Messages relay information about how the system or application is performing and can alert you to exceptional conditions when they occur. Messages are sent to an output destination, such as a file, database, or console screen. If you receive a warning or error message, you can do one of the following actions: v Follow the instructions listed in the Detail window of the message if this information is included there. v Consult the message details listed in this topic to see what action you can take to correct the problem. v Consult the message log for message ID, text, time, and date of the message, as well as other data you can use to diagnose the problem. Message format The message format contains a message ID and text, an explanation, and an operator response. IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent messages have the following format: Message ID and text Explanation Operator Response The message ID has the following format: CCC####severity where: CCC Prefix that indicates the component to which the message applies. The following components are used: KQ7 General Microsoft IIS agent messages #### Number of the message severity Severity of the message. Three levels of severity are used: I W E Informational messages provide feedback about something that happened in the product or system that might be important. These messages can provide guidance when you are requesting a specific action from the product. Warning messages call your attention to an exception condition. The condition might not be an error but can cause problems if not resolved. Error messages indicate that an action cannot be completed because of a user or system error. These messages require user response. The Text of the message provides a general statement regarding the problem or condition that occurred. The Explanation provides additional information about the message and the possible cause for the condition. The Operator Response provides actions to take in response to the condition, particularly for error messages (messages with the "E" suffix). Note: Many message texts and explanations contain variables, such as the specific name of a server or application. Those variables are represented in this topic as symbols, such as "&1." Actual messages contain values for these variables. Chapter 9. Troubleshooting 319

330 Agent messages The following messages apply to IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. KQ70001I The IIS Admin service was started. Explanation: The IIS Admin service was started. Operator response: None. KQ70002I The IIS Admin service is already started. Explanation: The IIS Admin service is already started. Operator response: None. KQ70003E Error starting the IIS Admin service. Explanation: Error starting the IIS Admin service. Operator response: Check the event log for more information. KQ70004I The IIS Admin service was stopped. Explanation: The IIS Admin service was stopped. Operator response: None. KQ70005I The IIS Admin service is already stopped. Explanation: The IIS Admin service is already stopped. Operator response: None. KQ70006E Error stopping the IIS Admin service. Explanation: Error stopping the IIS Admin service. Operator response: Check the event log for more information. KQ70007I The IIS web server was started. Explanation: The IIS web server was started. Operator response: None. 320 Microsoft IIS agent User's Guide - Beta 1 Draft

331 KQ70008I The IIS web server is already started. Explanation: The IIS web server is already started. Operator response: None. KQ70009E Error starting the IIS web server. Explanation: Error starting the IIS web server. Operator response: Check the event log for more information. KQ70010I The IIS web server was stopped. Explanation: The IIS web server was stopped. Operator response: None. KQ70011I The IIS web server is already stopped. Explanation: The IIS web server is already stopped. Operator response: None. KQ70012E Error stopping the IIS web server. Explanation: Error stopping the IIS web server. Operator response: Check the event log for more information. KQ70013I The FTP Publishing service was started. Explanation: The FTP Publishing service was started. Operator response: None. KQ70014I The FTP Publishing service is already started. Explanation: The FTP Publishing service is already started. Operator response: None. KQ70015E Error starting the FTP Publishing service. Chapter 9. Troubleshooting 321

332 Explanation: Error starting the FTP Publishing service. Operator response: Check the event log for more information. KQ70016I The FTP Publishing service was stopped. Explanation: The FTP Publishing service was stopped. Operator response: None. KQ70017I The FTP Publishing service is already stopped. Explanation: The FTP Publishing service is already stopped. Operator response: None. KQ70018E Error stopping the FTP Publishing service. Explanation: Error stopping the FTP Publishing service. Operator response: Check the event log for more information. KQ70019I The Network News Transfer Protocol service was started. Explanation: The Network News Transfer Protocol service was started. Operator response: None. KQ70020I The Network News Transfer Protocol service is already started. Explanation: The Network News Transfer Protocol service is already started. Operator response: None. KQ70021E Error starting the Network News Transfer Protocol service. Explanation: Error starting the Network News Transfer Protocol service. Operator response: Check the event log for more information. KQ70022I The Network News Transfer Protocol service was stopped. Explanation: The Network News Transfer Protocol service was stopped. 322 Microsoft IIS agent User's Guide - Beta 1 Draft

333 Operator response: None. KQ70023I The Network News Transfer Protocol service is already stopped. Explanation: The Network News Transfer Protocol service is already stopped. Operator response: None. KQ70024E Error stopping the Network News Transfer Protocol service. Explanation: Error stopping the Network News Transfer Protocol service. Operator response: Check the event log for more information. KQ70025I The Simple Mail Transfer Protocol service was started. Explanation: The Simple Mail Transfer Protocol service was started. Operator response: None. KQ70026I The Simple Mail Transfer Protocol service is already started. Explanation: The Simple Mail Transfer Protocol service is already started. Operator response: None. KQ70027E Error starting the Simple Mail Transfer Protocol service. Explanation: Error starting the Simple Mail Transfer Protocol service. Operator response: Check the event log for more information. KQ70028I The Simple Mail Transfer Protocol service was stopped. Explanation: The Simple Mail Transfer Protocol service was stopped. Operator response: None. KQ70029I The Simple Mail Transfer Protocol service is already stopped. Explanation: The Simple Mail Transfer Protocol service is already stopped. Operator response: None. Chapter 9. Troubleshooting 323

334 KQ70030E Error stopping the Simple Mail Transfer Protocol service. Explanation: Error stopping the Simple Mail Transfer Protocol service. Operator response: Check the event log for more information. KQ70031I The HTTP SSL service was started. Explanation: The HTTP SSL service was started. Operator response: None. KQ70032I The HTTP SSL service is already started. Explanation: The HTTP SSL service is already started. Operator response: None. KQ70033E Error starting the HTTP SSL service. Explanation: Error starting the HTTP SSL service. Operator response: Check the event log for more information. KQ70034I The HTTP SSL service was stopped. Explanation: The HTTP SSL service was stopped. Operator response: None. KQ70035I The HTTP SSL service is already stopped. Explanation: The HTTP SSL service is already stopped. Operator response: None. KQ70036E Error stopping the HTTP SSL service. Explanation: Error stopping the HTTP SSL service. Operator response: Check the event log for more information. KQ70037I The Windows Process Activation service was started. 324 Microsoft IIS agent User's Guide - Beta 1 Draft

335 Explanation: The Windows Process Activation service was started. Operator response: None. KQ70038I The Windows Process Activation service is already started. Explanation: The Windows Process Activation service is already started. Operator response: None. KQ70039E Error starting the Windows Process Activation service. Explanation: Error starting the Windows Process Activation service. Operator response: Check the event log for more information. KQ70040I The Windows Process Activation service was stopped. Explanation: The Windows Process Activation service was stopped. Operator response: None. KQ70041I The Windows Process Activation service is already stopped. Explanation: The Windows Process Activation service is already stopped. Operator response: None. KQ70042E Error stopping the Windows Process Activation service. Explanation: Error stopping the Windows Process Activation service. Operator response: Check the event log for more information. KQ70043I The Application Host Helper service was started. Explanation: The Application Host Helper service was started. Operator response: None. KQ70044I The Application Host Helper service is already started. Explanation: The Application Host Helper Service is already started. Chapter 9. Troubleshooting 325

336 Operator response: None. KQ70045E Error starting the Application Host Helper service. Explanation: Error starting the Application Host Helper service. Operator response: Check the event log for more information. KQ70046I The Application Host Helper service was stopped. Explanation: The Application Host Helper service was stopped. Operator response: None. KQ70047I The Application Host Helper service is already stopped. Explanation: The Application Host Helper service is already stopped. Operator response: None. KQ70048E Error stopping the Application Host Helper service. Explanation: Error stopping the Application Host Helper service. Operator response: Check the event log for more information. KQ70049I The Web Management service was started. Explanation: The Web Management service was started. Operator response: None. KQ70050I The Web Management service is already started. Explanation: The Web Management service is already started. Operator response: None. KQ70051E Error starting the Web Management service. Explanation: Error starting the Web Management service. Operator response: Check the event log for more information. 326 Microsoft IIS agent User's Guide - Beta 1 Draft

337 KQ70052I The Web Management service was stopped. Explanation: The Web Management service was stopped. Operator response: None. KQ70053I The Web Management service is already stopped. Explanation: The Web Management service is already stopped. Operator response: None. KQ70054E Error stopping the Web Management service. Explanation: Error stopping the Web Management service. Operator response: Check the event log for more information. KQ70061I The Net.Pipe Listener Adapter service was started. Explanation: The Net.Pipe Listener Adapter service was started. Operator response: None. KQ70062I The Net.Pipe Listener Adapter service is already started. Explanation: The Net.Pipe Listener Adapter service is already started. Operator response: None. KQ70063E Error starting the Net.Pipe Listener Adapter service. Explanation: Error starting the Net.Pipe Listener Adapter service. Operator response: Check the event log for more information. KQ70064I The Net.Pipe Listener Adapter service was stopped. Explanation: The Net.Pipe Listener Adapter service was stopped. Operator response: None. KQ70065I The Net.Pipe Listener Adapter service is already stopped. Chapter 9. Troubleshooting 327

338 Explanation: The Net.Pipe Listener Adapter service is already stopped. Operator response: None. KQ70066E Error stopping the Net.Pipe Listener Adapter service. Explanation: Error stopping the Net.Pipe Listener Adapter service. Operator response: Check the event log for more information. KQ70067I The Net.Tcp Listener Adapter service was started. Explanation: The Net.Tcp Listener Adapter service was started. Operator response: None. KQ70068I The Net.Tcp Listener Adapter service is already started. Explanation: The Net.Tcp Listener Adapter service is already started. Operator response: None. KQ70069E Error starting the Net.Tcp Listener Adapter service. Explanation: Error starting the Net.Tcp Listener Adapter service. Operator response: Check the event log for more information. KQ70070I The Net.Tcp Listener Adapter service was stopped. Explanation: The Net.Tcp Listener Adapter service was stopped. Operator response: None. KQ70071I The Net.Tcp Listener Adapter service is already stopped. Explanation: The Net.Tcp Listener Adapter service is already stopped. Operator response: None. KQ70072E Error stopping the Net.Tcp Listener Adapter service. Explanation: Error stopping the Net.Tcp Listener Adapter service. 328 Microsoft IIS agent User's Guide - Beta 1 Draft

339 Operator response: Check the event log for more information. KQ70073I The Net.Msmq Listener Adapter service was started. Explanation: The Net.Msmq Listener Adapter service was started. Operator response: None. KQ70074I The Net.Msmq Listener Adapter service is already started. Explanation: The Net.Msmq Listener Adapter service is already started. Operator response: None. KQ70075E Error starting the Net.Msmq Listener Adapter service. Explanation: Error starting the Net.Msmq Listener Adapter service. Operator response: Check the event log for more information. KQ70076I The Net.Msmq Listener Adapter service was stopped. Explanation: The Net.Msmq Listener Adapter service was stopped. Operator response: None. KQ70077I The Net.Msmq Listener Adapter service is already stopped. Explanation: The Net.Msmq Listener Adapter service is already stopped. Operator response: None. KQ70078E Error stopping the Net.Msmq Listener Adapter service. Explanation: Error stopping the Net.Msmq Listener Adapter service. Operator response: Check the event log for more information. KQ70079I The Net.Tcp Port Sharing service was started. Explanation: The Net.Tcp Port Sharing service was started. Operator response: None. Chapter 9. Troubleshooting 329

340 KQ70080I The Net.Tcp Port Sharing service is already started. Explanation: The Net.Tcp Port Sharing service is already started. Operator response: None. KQ70081E Error starting the Net.Tcp Port Sharing service. Explanation: Error starting the Net.Tcp Port Sharing service. Operator response: Check the event log for more information. KQ70082I The Net.Tcp Port Sharing service was stopped. Explanation: The Net.Tcp Port Sharing service was stopped. Operator response: None. KQ70083I The Net.Tcp Port Sharing service is already stopped. Explanation: The Net.Tcp Port Sharing service is already stopped. Operator response: None. KQ70084E Error stopping the Net.Tcp Port Sharing service. Explanation: Error stopping the Net.Tcp Port Sharing service. Operator response: Check the event log for more information. KQ70085I The Microsoft FTP service was started. Explanation: The Microsoft FTP service was started. Operator response: None. KQ70086I The Microsoft FTP service is already started. Explanation: The Microsoft FTP service is already started. Operator response: None. KQ70087E Error starting the Microsoft FTP service. 330 Microsoft IIS agent User's Guide - Beta 1 Draft

341 Explanation: Error starting the Microsoft FTP service. Operator response: Check the event log for more information. KQ70088I The Microsoft FTP service was stopped. Explanation: The Microsoft FTP service was stopped. Operator response: None. KQ70089I The Microsoft FTP service is already stopped. Explanation: The Microsoft FTP service is already stopped. Operator response: None. KQ70090E Error stopping the Microsoft FTP service. Explanation: Error stopping the Microsoft FTP service. Operator response: Check the event log for more information. KQ70091I The website was started. Explanation: The website was started. Operator response: None. KQ70092E The website name might be invalid and cannot be started. Explanation: The website name might be invalid and cannot be started. Operator response: Check the event log for more information. KQ70093I The website was stopped. Explanation: The website was stopped. Operator response: None. KQ70094E The website name might be invalid and cannot be stopped. Explanation: The website name might be invalid and cannot be stopped. Chapter 9. Troubleshooting 331

342 Operator response: Check the event log for more information. KQ70095I The FTP site was started. Explanation: The FTP site was started. Operator response: None. KQ70096E The FTP site name might be invalid and cannot be started. Explanation: The FTP site name might be invalid and cannot be started. Operator response: None. KQ70097I The FTP site was stopped. Explanation: The FTP site was stopped. Operator response: None. KQ70098E The FTP site name might be invalid and cannot be stopped. Explanation: The FTP site name might be invalid and cannot be stopped. Operator response: None. KQ70100W The service does not exist as an installed service. Explanation: The service does not exist as an installed service. Operator response: None. KQ70101I The service is disabled and cannot be started. Explanation: The service is disabled and cannot be started. Operator response: None. KQ70102E The dependency service or group failed to start. Explanation: The dependency service or group failed to start. Operator response: None. 332 Microsoft IIS agent User's Guide - Beta 1 Draft

343 KQ70103E The dependency service does not exist or has been marked for deletion. Explanation: The dependency service does not exist or has been marked for deletion. Operator response: None. KQ70104I The Application Pool is starting Explanation: The Application Pool is starting. Operator response: None. KQ70105E The Application Pool is already started. Explanation: The Application Pool is already started. Operator response: None. KQ70106E The Application Pool name might be invalid and cannot be started. Explanation: The Application Pool name might be invalid and cannot be started. Operator response: None. KQ70107I The Application Pool was started. Explanation: The Application Pool was started. Operator response: None. KQ70108I The Application Pool is stopping. Explanation: The Application Pool is stopping. Operator response: None. KQ70109E The Application Pool is already stopped. Explanation: The Application Pool is already stopped. Operator response: None. KQ701010E The Application Pool name might be invalid and cannot be stopped. Chapter 9. Troubleshooting 333

344 Explanation: The Application Pool name might be invalid and cannot be stopped. Operator response: None. KQ701011I The Application Pool was stopped. Explanation: The Application Pool was stopped. Operator response: None. 334 Microsoft IIS agent User's Guide - Beta 1 Draft

345 Appendix A. Event mapping The Tivoli Event Integration Facility (EIF) interface is used to forward situation events to Tivoli Netcool/OMNIbus or Tivoli Enterprise Console. EIF events specify an event class, and the event data is specified as name-value pairs that identify the name of an event slot and the value for the slot. An event class can have subclasses. IBM Tivoli Monitoring provides the base event class definitions and a set of base slots that are included in all monitoring events. Agents extend the base event classes to define subclasses that include agent-specific slots. For Microsoft IIS agent events, the event classes correspond to the agent attribute groups, and the agent-specific slots correspond to the attributes in the attribute group. The situation editor in the Tivoli Enterprise Portal can be used to perform custom mapping of data to EIF slots instead of using the default mapping described in this topic. For more information about EIF slot customization, see the Tivoli Enterprise Portal User's Guide. Tivoli Enterprise Console requires that event classes and their slots are defined in Basic Recorder of Objects in C (BAROC) files. Each agent provides a BAROC file that contains event class definitions for the agent and is installed on the Tivoli Enterprise Monitoring Server in the TECLIB directory (install_dir/cms/teclib for Windows systems and install_dir/tables/tems_hostname/teclib for UNIX systems) when application support for the agent is installed. The BAROC file for the agent and the base BAROC files provided with Tivoli Monitoring must also be installed onto the Tivoli Enterprise Console. For details, see "Setting up event forwarding to Tivoli Enterprise Console" in the IBM Tivoli Monitoring Installation and Setup Guide. Each of the event classes is a child of KQ7_Base and is defined in the kq7.baroc (version vnext) file. The KQ7_Base event class can be used for generic rules processing for any event from the IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. For events that are generated by situations in the Active Server Pages attribute group, events are sent by using the ITM_KQ7_ACTIVE_SERVER_PAGES event class. This event class contains the following slots: v node: STRING v timestamp: STRING v errors_rate: REAL v errors_rate_enum: STRING v errors_during_script_runtime: INTEGER v errors_during_script_runtime_enum: STRING v errors_from_asp_preprocessor: INTEGER v errors_from_asp_preprocessor_enum: STRING v errors_from_script_compilers: INTEGER v errors_from_script_compilers_enum: STRING v request_kbytes_in_total: INTEGER v request_kbytes_in_total_enum: STRING v request_kbytes_out_total: INTEGER v request_kbytes_out_total_enum: STRING v request_execution_time: INTEGER v request_execution_time_enum: STRING v request_wait_time: INTEGER Copyright IBM Corp. 2008,

346 v request_wait_time_enum: STRING v request_wait_gt_execution_time: INTEGER v request_wait_gt_execution_time_enum: STRING v requests_disconnected: INTEGER v requests_disconnected_enum: STRING v requests_executing: INTEGER v requests_executing_enum: STRING v requests_failed_total: INTEGER v requests_failed_total_enum: STRING v requests_not_authorized: INTEGER v requests_not_authorized_enum: STRING v requests_not_found: INTEGER v requests_not_found_enum: STRING v requests_queued: INTEGER v requests_queued_enum: STRING v requests_queued_delta: INTEGER v requests_queued_delta_enum: STRING v requests_rejected: INTEGER v requests_rejected_enum: STRING v requests_succeeded: INTEGER v requests_succeeded_enum: STRING v requests_timed_out: INTEGER v requests_timed_out_enum: STRING v requests_total: INTEGER v requests_total_enum: STRING v requests_rate: REAL v requests_rate_enum: STRING v sessions_current: INTEGER v sessions_current_enum: STRING v sessions_timed_out: INTEGER v sessions_timed_out_enum: STRING v sessions_total: INTEGER v sessions_total_enum: STRING v transactions_rate: REAL v transactions_rate_enum: STRING v transactions_aborted: INTEGER v transactions_aborted_enum: STRING v transactions_committed: INTEGER v transactions_committed_enum: STRING v transactions_pending_count: INTEGER v transactions_pending_count_enum: STRING v transactions_total: INTEGER v transactions_total_enum: STRING 336 Microsoft IIS agent User's Guide - Beta 1 Draft

347 For events that are generated by situations in the Application Pool WAS attribute group, events are sent by using the ITM_KQ7_APPLICATION_POOL_WAS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v name: STRING v current_apppool_state: INTEGER v current_apppool_state_enum: STRING v current_application_pool_uptime_in_hrs: REAL v current_application_pool_uptime_in_hrs_enum: STRING v current_worker_processes: INTEGER v current_worker_processes_enum: STRING v maximum_worker_processes: INTEGER v maximum_worker_processes_enum: STRING v recent_worker_process_failures: INTEGER v recent_worker_process_failures_enum: STRING v time_since_last_worker_process_failure_in_hrs: REAL v time_since_last_worker_process_failure_in_hrs_enum: STRING v total_application_pool_recycles: INTEGER v total_application_pool_recycles_enum: STRING v total_application_pool_uptime_in_hrs: REAL v total_application_pool_uptime_in_hrs_enum: STRING v total_worker_process_failures: INTEGER v total_worker_process_failures_enum: STRING v total_worker_process_ping_failures: INTEGER v total_worker_process_ping_failures_enum: STRING v total_worker_process_shutdown_failures: INTEGER v total_worker_process_shutdown_failures_enum: STRING v total_worker_process_startup_failures: INTEGER v total_worker_process_startup_failures_enum: STRING v total_worker_processes_created: INTEGER v total_worker_processes_created_enum: STRING v app_pool_name: STRING For events that are generated by situations in the ASP NET attribute group, events are sent by using the ITM_KQ7_ASP_NET event class. This event class contains the following slots: v node: STRING v timestamp: STRING v name: STRING v cache_percent_machine_memory_limit_used: REAL v cache_percent_machine_memory_limit_used_enum: STRING v cache_percent_process_memory_limit_used: REAL v cache_percent_process_memory_limit_used_enum: STRING v infrastructure_error_events_raised_rate: REAL v infrastructure_error_events_raised_rate_enum: STRING v membership_authentication_failure: INTEGER Appendix A. Event mapping 337

348 v membership_authentication_failure_enum: STRING v version: INTEGER v version_enum: STRING v asp_site_name: STRING For events that are generated by situations in the ASP NET Apps Filter attribute group, events are sent by using the ITM_KQ7_ASP_NET_APPS_FILTER event class. This event class contains the following slots: v node: STRING v timestamp: STRING v name: STRING v cache_percent_machine_memory_limit_used: REAL v cache_percent_machine_memory_limit_used_enum: STRING v cache_percent_process_memory_limit_used: REAL v cache_percent_process_memory_limit_used_enum: STRING v infrastructure_error_events_raised_rate: REAL v infrastructure_error_events_raised_rate_enum: STRING v membership_authentication_failure: INTEGER v membership_authentication_failure_enum: STRING v version: INTEGER v version_enum: STRING v asp_site_name: STRING For events that are generated by situations in the ASP NET Apps V4 attribute group, events are sent by using the ITM_KQ7_ASP_NET_APPS_V4 event class. This event class contains the following slots: v node: STRING v timestamp: STRING v name: STRING v cache_percent_machine_memory_limit_used: REAL v cache_percent_machine_memory_limit_used_enum: STRING v cache_percent_process_memory_limit_used: REAL v cache_percent_process_memory_limit_used_enum: STRING v infrastructure_error_events_raised_rate: REAL v infrastructure_error_events_raised_rate_enum: STRING v membership_authentication_failure: INTEGER v membership_authentication_failure_enum: STRING v version: INTEGER v version_enum: STRING v asp_site_name: STRING For events that are generated by situations in the Availability attribute group, events are sent by using the ITM_KQ7_AVAILABILITY event class. This event class contains the following slots: v node: STRING v timestamp: STRING v application_component: STRING v name: STRING v name_enum: STRING v kq7_status: INTEGER 338 Microsoft IIS agent User's Guide - Beta 1 Draft

349 v kq7_status_enum: STRING v full_name: STRING v full_name_enum: STRING v type: INTEGER v type_enum: STRING v virtual_size: INTEGER v page_faults_per_sec: INTEGER v working_set_size: INTEGER v thread_count: INTEGER v pid: INTEGER v percent_privileged_time: INTEGER v percent_user_mode_time: INTEGER v percent_processor_time: INTEGER v command_line: STRING v command_line_enum: STRING v functionality_test_status: INTEGER v functionality_test_status_enum: STRING v functionality_test_message: STRING v functionality_test_message_enum: STRING For events that are generated by situations in the Centralized Certificate Details attribute group, events are sent by using the ITM_KQ7_CENTRALIZED_CERTIFICATE_DETAILS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v use_centralized_certificate: INTEGER v use_centralized_certificate_enum: STRING v centralized_certificate_location: STRING v username: STRING For events that are generated by situations in the Event Log attribute group, events are sent by using the ITM_KQ7_EVENT_LOG event class. This event class contains the following slots: v node: STRING v log_name: STRING v event_source: STRING v event_type: INTEGER v event_type_enum: STRING v event_id: INTEGER v event_category: STRING v event_category_enum: STRING v message: STRING v time_generated: STRING v event_level: STRING v event_level_enum: STRING v event_keywords: STRING v event_keywords_enum: STRING Appendix A. Event mapping 339

350 v event_api_version: INTEGER v event_api_version_enum: STRING For events that are generated by situations in the FTP Logon Attempt Restrictions Settings attribute group, events are sent by using the ITM_KQ7_FTP_LOGON_ATTEMPT_RESTRICTIONS_SETTINGS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v ftp_logon_attempt_restrictions: STRING v max_number_of_failed_login_attempts: INTEGER v max_number_of_failed_login_attempts_enum: STRING v time_duration_in_sec: STRING v time_duration_in_days_hh_mm_ss: STRING v action: STRING For events that are generated by situations in the FTP Server Site Status attribute group, events are sent by using the ITM_KQ7_FTP_SERVER_SITE_STATUS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v ftp_site: STRING v state: INTEGER v state_enum: STRING v ftpsitename: STRING For events that are generated by situations in the FTP Service attribute group, events are sent by using the ITM_KQ7_FTP_SERVICE event class. This event class contains the following slots: v node: STRING v timestamp: STRING v kbytes_sent_rate: REAL v kbytes_sent_rate_enum: STRING v kbytes_received_rate: REAL v kbytes_received_rate_enum: STRING v kbytes_total_rate: REAL v kbytes_total_rate_enum: STRING v total_files_sent: INTEGER v total_files_sent_enum: STRING v total_files_received: INTEGER v total_files_received_enum: STRING v total_files_transferred: INTEGER v total_files_transferred_enum: STRING v files_sent_rate: REAL v files_sent_rate_enum: STRING v files_received_rate: REAL v files_received_rate_enum: STRING v files_transferred_rate: REAL v files_transferred_rate_enum: STRING 340 Microsoft IIS agent User's Guide - Beta 1 Draft

351 v current_anonymous_users: INTEGER v current_anonymous_users_enum: STRING v percent_current_anonymous_users: REAL v percent_current_anonymous_users_enum: STRING v current_nonanonymous_users: INTEGER v current_nonanonymous_users_enum: STRING v percent_current_nonanonymous_users: REAL v percent_current_nonanonymous_users_enum: STRING v total_anonymous_users: INTEGER v total_anonymous_users_enum: STRING v percent_total_anonymous_users: REAL v percent_total_anonymous_users_enum: STRING v total_nonanonymous_users: INTEGER v total_nonanonymous_users_enum: STRING v percent_total_nonanonymous_users: REAL v percent_total_nonanonymous_users_enum: STRING v maximum_anonymous_users: INTEGER v maximum_anonymous_users_enum: STRING v maximum_nonanonymous_users: INTEGER v maximum_nonanonymous_users_enum: STRING v current_connections: INTEGER v current_connections_enum: STRING v maximum_connections: INTEGER v maximum_connections_enum: STRING v total_connection_attempts_all_instances: INTEGER v total_connection_attempts_all_instances_enum: STRING v total_logon_attempts: INTEGER v total_logon_attempts_enum: STRING v logon_attempts_rate: REAL v logon_attempts_rate_enum: STRING v ftp_service_uptime_in_hrs: REAL v ftp_service_uptime_in_hrs_enum: STRING v name: STRING For events that are generated by situations in the FTP Site Dynamic IP and Domain Restrictions attribute group, events are sent by using the ITM_KQ7_FTP_SITE_DYNAMIC_IP_AND_DOMAIN_RESTRICTIONS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v ftp_site_name: STRING v allowed_specific_ip: STRING v allowed_ip_range: STRING v allowed_domain: STRING v denied_specific_ip: STRING v denied_ip_range: STRING Appendix A. Event mapping 341

352 v denied_domain: STRING For events that are generated by situations in the FTP Site IP and Domain Restrictions Settings attribute group, events are sent by using the ITM_KQ7_FTP_SITE_IP_AND_DOMAIN_RESTRICTIONS_SETTINGS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v ftp_site_name: STRING v access_for_unspecified_clients: INTEGER v access_for_unspecified_clients_enum: STRING v domain_name_restrictions: STRING For events that are generated by situations in the FTP Version Information attribute group, events are sent by using the ITM_KQ7_FTP_VERSION_INFORMATION event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v major_ftp_version_number: INTEGER v major_ftp_version_number_enum: STRING v minor_ftp_version_number: INTEGER v minor_ftp_version_number_enum: STRING For events that are generated by situations in the HTTP Custom Error Messages attribute group, events are sent by using the ITM_KQ7_HTTP_CUSTOM_ERROR_MESSAGES event class. This event class contains the following slots: v node: STRING v timestamp: STRING v http_status: STRING v error_sub_code: STRING v error_code: STRING v message_source: STRING v message_location: STRING For events that are generated by situations in the Http Error Log attribute group, events are sent by using the ITM_KQ7_HTTP_ERROR_LOG event class. This event class contains the following slots: v node: STRING v timestamp: STRING v kq7_date: STRING v time: STRING v client_ip_address: STRING v client_port: STRING v server_ip_address: STRING v server_port: STRING v protocol_version: STRING v method: STRING v url: STRING v http_status: STRING 342 Microsoft IIS agent User's Guide - Beta 1 Draft

353 v protocol_sub_status: STRING v error_code: STRING v error_description: STRING For events that are generated by situations in the IIS Application Pools Details attribute group, events are sent by using the ITM_KQ7_IIS_APPLICATION_POOLS_DETAILS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v application_pool_name: STRING v apppool_state: INTEGER v apppool_state_enum: STRING v apppool_auto_start: STRING v enable32bitapponwin64: INTEGER v enable32bitapponwin64_enum: STRING v managed_pipeline_mode: INTEGER v managed_pipeline_mode_enum: STRING v managed_run_time_version: STRING v apppool_queue_length: INTEGER v apppool_queue_length_enum: STRING For events that are generated by situations in the IIS Application Pools Setting attribute group, events are sent by using the ITM_KQ7_IIS_APPLICATION_POOLS_SETTING event class. This event class contains the following slots: v node: STRING v timestamp: STRING v apppool_auto_start: INTEGER v apppool_auto_start_enum: STRING v application_pool_name: STRING v apppool_command: INTEGER v apppool_command_enum: STRING v apppool_identity_type: INTEGER v apppool_identity_type_enum: STRING v apppool_queue_length: INTEGER v apppool_queue_length_enum: STRING v apppool_recycle_config_change: INTEGER v apppool_recycle_config_change_enum: STRING v apppool_recycle_isapi_unhealthy: INTEGER v apppool_recycle_isapi_unhealthy_enum: STRING v apppool_recycle_memory: INTEGER v apppool_recycle_memory_enum: STRING v apppool_recycle_ondemand: INTEGER v apppool_recycle_ondemand_enum: STRING v apppool_recycle_private_memory: INTEGER v apppool_recycle_private_memory_enum: STRING v apppool_recycle_requests: INTEGER Appendix A. Event mapping 343

354 v apppool_recycle_requests_enum: STRING v apppool_recycle_schedule: INTEGER v apppool_recycle_schedule_enum: STRING v apppool_recycle_time: INTEGER v apppool_recycle_time_enum: STRING v apppool_state: INTEGER v apppool_state_enum: STRING v auto_shutdown_apppool_exe: STRING v auto_shutdown_apppool_params: STRING v cpu_action: INTEGER v cpu_action_enum: STRING v cpu_limit_percent: REAL v cpu_limit_percent_enum: STRING v cpu_reset_interval: INTEGER v cpu_reset_interval_enum: STRING v disallow_overlapping_rotation: INTEGER v disallow_overlapping_rotation_enum: STRING v disallow_rotation_on_config_change: INTEGER v disallow_rotation_on_config_change_enum: STRING v idle_timeout: INTEGER v idle_timeout_enum: STRING v load_balancer_capabilities: INTEGER v load_balancer_capabilities_enum: STRING v logon_method: INTEGER v logon_method_enum: STRING v max_processes: INTEGER v max_processes_enum: STRING v orphan_action_exe: STRING v orphan_action_params: STRING v orphan_worker_process: INTEGER v orphan_worker_process_enum: STRING v periodic_restart_memory: INTEGER v periodic_restart_memory_enum: STRING v periodic_restart_private_memory: INTEGER v periodic_restart_private_memory_enum: STRING v periodic_restart_requests: INTEGER v periodic_restart_requests_enum: STRING v periodic_restart_time: INTEGER v periodic_restart_time_enum: STRING v pinging_enabled: INTEGER v pinging_enabled_enum: STRING v ping_interval: INTEGER v ping_interval_enum: STRING v ping_response_time: INTEGER v ping_response_time_enum: STRING 344 Microsoft IIS agent User's Guide - Beta 1 Draft

355 v rapid_fail_protection: INTEGER v rapid_fail_protection_enum: STRING v rapid_fail_protection_interval: INTEGER v rapid_fail_protection_interval_enum: STRING v rapid_fail_protection_max_crashes: INTEGER v rapid_fail_protection_max_crashes_enum: STRING v shutdown_time_limit: INTEGER v shutdown_time_limit_enum: STRING v smp_affinitized: INTEGER v smp_affinitized_enum: STRING v smp_processor_affinity_mask: INTEGER v smp_processor_affinity_mask_enum: STRING v startup_time_limit: INTEGER v startup_time_limit_enum: STRING v wam_user_name: STRING v win32_error: INTEGER v win32_error_enum: STRING v apppool_cpu_action: INTEGER v apppool_cpu_action_enum: STRING For events that are generated by situations in the IIS Components attribute group, events are sent by using the ITM_KQ7_IIS_COMPONENTS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v module_name: STRING v kq7_status: INTEGER v kq7_status_enum: STRING For events that are generated by situations in the IIS FTP Server Bindings attribute group, events are sent by using the ITM_KQ7_IIS_FTP_SERVER_BINDINGS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v ftp_site_id: STRING v ftp_site_name: STRING v ftp_port: STRING For events that are generated by situations in the IIS FTP Server Status attribute group, events are sent by using the ITM_KQ7_IIS_FTP_SERVER_STATUS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v path_name: STRING v process_id: INTEGER v process_id_enum: STRING v state: STRING v kq7_status: STRING Appendix A. Event mapping 345

356 For events that generated by situations in the IIS FTP Sites Detail attribute group, events are sent by using the ITM_KQ7_IIS_FTP_SITES_DETAIL event class. This event class contains the following slots: v node: STRING v timestamp: STRING v ftp_site: STRING v state: INTEGER v state_enum: STRING v ftp_site_id: STRING v ftp_site_name: STRING v ftp_port: STRING v ftpsitename: STRING For events that are generated by situations in the IIS NNTP Server Status attribute group, events are by sent using the ITM_KQ7_IIS_NNTP_SERVER_STATUS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v path_name: STRING v process_id: INTEGER v process_id_enum: STRING v state: STRING v kq7_status: STRING For events that are generated by situations in the IIS SMTP Server Status attribute group, events are sent by using the ITM_KQ7_IIS_SMTP_SERVER_STATUS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v path_name: STRING v process_id: INTEGER v process_id_enum: STRING v state: STRING v kq7_status: STRING For events that are generated by situations in the IIS Version Information attribute group, events are sent by using the ITM_KQ7_IIS_VERSION_INFORMATION event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v major_iis_version_number: INTEGER v major_iis_version_number_enum: STRING v minor_iis_version_number: INTEGER v minor_iis_version_number_enum: STRING 346 Microsoft IIS agent User's Guide - Beta 1 Draft

357 For events that are generated by situations in the IIS Web Server Bindings attribute group, events are sent by using the ITM_KQ7_IIS_WEB_SERVER_BINDINGS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v site_id: STRING v web_site_name: STRING v http_port: STRING v ssl_port: STRING For events that are generated by situations in the IIS Web Server Site Status attribute group, events are sent by using the ITM_KQ7_IIS_WEB_SERVER_SITE_STATUS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v web_site: STRING v state: INTEGER v state_enum: STRING v websitename: STRING For events that are generated by situations in the IIS Web Server Status attribute group, events are sent by using the ITM_KQ7_IIS_WEB_SERVER_STATUS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v path_name: STRING v process_id: INTEGER v process_id_enum: STRING v state: STRING v kq7_status: STRING For events that are generated by situations in the IIS Web Sites Detail attribute group, events are sent by using the ITM_KQ7_IIS_WEB_SITES_DETAIL event class. This event class contains the following slots: v node: STRING v timestamp: STRING v web_site: STRING v state: INTEGER v state_enum: STRING v site_id: STRING v web_site_name: STRING v http_port: STRING v ssl_port: STRING v websitename: STRING For events that are generated by situations in the Internet Information Services Gl attribute group, events are sent by using the ITM_KQ7_INTERNET_INFORMATION_SERVICES_GL event class. This event class contains the following slots: Appendix A. Event mapping 347

358 v node: STRING v timestamp: STRING v current_files_cached: INTEGER v current_files_cached_enum: STRING v total_files_cached: INTEGER v total_files_cached_enum: STRING v file_cache_hits: INTEGER v file_cache_hits_enum: STRING v file_cache_misses: INTEGER v file_cache_misses_enum: STRING v file_cache_hits_percent: REAL v file_cache_hits_percent_enum: STRING v file_cache_flushes: INTEGER v file_cache_flushes_enum: STRING v current_file_cache_memory_usage_in_kb: REAL v current_file_cache_memory_usage_in_kb_enum: STRING v maximum_file_cache_memory_usage_in_kb: REAL v maximum_file_cache_memory_usage_in_kb_enum: STRING v active_flushed_entries: INTEGER v active_flushed_entries_enum: STRING v total_flushed_files: INTEGER v total_flushed_files_enum: STRING v current_blobs_cached: INTEGER v current_blobs_cached_enum: STRING v total_blobs_cached: INTEGER v total_blobs_cached_enum: STRING v blob_cache_hits: INTEGER v blob_cache_hits_enum: STRING v blob_cache_misses: INTEGER v blob_cache_misses_enum: STRING v blob_cache_hits_percent: REAL v blob_cache_hits_percent_enum: STRING v blob_cache_flushes: INTEGER v blob_cache_flushes_enum: STRING v total_flushed_blobs: INTEGER v total_flushed_blobs_enum: STRING For events that are generated by situations in the Microsoft FTP Service attribute group, events are sent by using the ITM_KQ7_MICROSOFT_FTP_SERVICE event class. This event class contains the following slots: v node: STRING v timestamp: STRING v name: STRING v kbytes_sent_rate: INTEGER v kbytes_sent_rate_enum: STRING v kbytes_received_rate: INTEGER 348 Microsoft IIS agent User's Guide - Beta 1 Draft

359 v kbytes_received_rate_enum: STRING v kbytes_total_rate: INTEGER v kbytes_total_rate_enum: STRING v total_files_sent: INTEGER v total_files_sent_enum: STRING v total_files_received: INTEGER v total_files_received_enum: STRING v total_files_transferred: INTEGER v total_files_transferred_enum: STRING v files_sent_rate: INTEGER v files_sent_rate_enum: STRING v files_received_rate: INTEGER v files_received_rate_enum: STRING v files_transferred_rate: INTEGER v files_transferred_rate_enum: STRING v current_anonymous_users: INTEGER v current_anonymous_users_enum: STRING v current_nonanonymous_users: INTEGER v current_nonanonymous_users_enum: STRING v total_anonymous_users: INTEGER v total_anonymous_users_enum: STRING v total_nonanonymous_users: INTEGER v total_nonanonymous_users_enum: STRING v maximum_anonymous_users: INTEGER v maximum_anonymous_users_enum: STRING v maximum_nonanonymous_users: INTEGER v maximum_nonanonymous_users_enum: STRING v percent_current_anonymous_users: INTEGER v percent_current_anonymous_users_enum: STRING v percent_current_nonanonymous_users: INTEGER v percent_current_nonanonymous_users_enum: STRING v percent_total_anonymous_users: INTEGER v percent_total_anonymous_users_enum: STRING v percent_total_nonanonymous_users: INTEGER v percent_total_nonanonymous_users_enum: STRING v current_connections: INTEGER v current_connections_enum: STRING v maximum_connections: INTEGER v maximum_connections_enum: STRING v total_connection_attempts: INTEGER v total_connection_attempts_enum: STRING v total_logon_attempts: INTEGER v total_logon_attempts_enum: STRING v logon_attempts_rate: INTEGER v logon_attempts_rate_enum: STRING Appendix A. Event mapping 349

360 v microsoft_ftp_service_uptime_in_hrs: REAL v microsoft_ftp_service_uptime_in_hrs_enum: STRING For events that are generated by situations in the Mime s attribute group, events are sent by using the ITM_KQ7_MIME_TYPES event class. This event class contains the following slots: v node: STRING v timestamp: STRING v file_extension: STRING v mime_type: STRING For events that are generated by situations in the MSMQ Incoming HTTP Traffic attribute group, events are sent by using the ITM_KQ7_MSMQ_INCOMING_HTTP_TRAFFIC event class. This event class contains the following slots: v node: STRING v timestamp: STRING v incoming_http_bytes: INTEGER v incoming_http_bytes_enum: STRING v incoming_http_bytes_per_sec: INTEGER v incoming_http_bytes_per_sec_enum: STRING v incoming_http_messages: INTEGER v incoming_http_messages_enum: STRING v incoming_http_messages_per_sec: INTEGER v incoming_http_messages_per_sec_enum: STRING v name: STRING For events that are generated by situations in the NNTP Server attribute group, events are sent by using the ITM_KQ7_NNTP_SERVER event class. This event class contains the following slots: v node: STRING v timestamp: STRING v nntp_virtual_server: STRING v state: INTEGER v state_enum: STRING For events that are generated by situations in the NNTP Version Information attribute group, events are sent by using the ITM_KQ7_NNTP_VERSION_INFORMATION event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v major_nntp_version_number: INTEGER v major_nntp_version_number_enum: STRING v minor_nntp_version_number: INTEGER v minor_nntp_version_number_enum: STRING For events that are generated by situations in the Performance Object Status attribute group, events are sent by using the ITM_KQ7_PERFORMANCE_OBJECT_STATUS event class. This event class contains the following slots: v node: STRING 350 Microsoft IIS agent User's Guide - Beta 1 Draft

361 v timestamp: STRING v query_name: STRING v object_name: STRING v object_type: INTEGER v object_type_enum: STRING v object_status: INTEGER v object_status_enum: STRING v error_code: INTEGER v error_code_enum: STRING v last_collection_start: STRING v last_collection_start_enum: STRING v last_collection_finished: STRING v last_collection_finished_enum: STRING v last_collection_duration: REAL v average_collection_duration: REAL v average_collection_duration_enum: STRING v refresh_interval: INTEGER v number_of_collections: INTEGER v cache_hits: INTEGER v cache_misses: INTEGER v cache_hit_percent: REAL v intervals_skipped: INTEGER For events that are generated by situations in the SMTP Server attribute group, events are sent by using the ITM_KQ7_SMTP_SERVER event class. This event class contains the following slots: v node: STRING v timestamp: STRING v smtp_virtual_server: STRING v state: INTEGER v state_enum: STRING For events that are generated by situations in the SMTP Version Information attribute group, events are sent by using the ITM_KQ7_SMTP_VERSION_INFORMATION event class. This event class contains the following slots: v node: STRING v timestamp: STRING v server_name: STRING v major_smtp_version_number: INTEGER v major_smtp_version_number_enum: STRING v minor_smtp_version_number: INTEGER v minor_smtp_version_number_enum: STRING For events that are generated by situations in the Thread Pool Status attribute group, events are sent by using the ITM_KQ7_THREAD_POOL_STATUS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v thread_pool_size: INTEGER Appendix A. Event mapping 351

362 v thread_pool_size_enum: STRING v thread_pool_max_size: INTEGER v thread_pool_max_size_enum: STRING v thread_pool_active_threads: INTEGER v thread_pool_active_threads_enum: STRING v thread_pool_avg_active_threads: REAL v thread_pool_avg_active_threads_enum: STRING v thread_pool_min_active_threads: INTEGER v thread_pool_min_active_threads_enum: STRING v thread_pool_max_active_threads: INTEGER v thread_pool_max_active_threads_enum: STRING v thread_pool_queue_length: INTEGER v thread_pool_queue_length_enum: STRING v thread_pool_avg_queue_length: REAL v thread_pool_avg_queue_length_enum: STRING v thread_pool_min_queue_length: INTEGER v thread_pool_min_queue_length_enum: STRING v thread_pool_max_queue_length: INTEGER v thread_pool_max_queue_length_enum: STRING v thread_pool_avg_job_wait: REAL v thread_pool_avg_job_wait_enum: STRING v thread_pool_total_jobs: INTEGER v thread_pool_total_jobs_enum: STRING For events that are generated by situations in the Virtual Domain Setting attribute group, events are sent by using the ITM_KQ7_VIRTUAL_DOMAIN_SETTING event class. This event class contains the following slots: v node: STRING v timestamp: STRING v website_name: STRING v server_name_indication_enabled: INTEGER v server_name_indication_enabled_enum: STRING v virtual_domain_name: STRING v ssl_port: INTEGER v ssl_port_enum: STRING For events that are generated by situations in the W3SVC W3WP attribute group, events are sent by using the ITM_KQ7_W3SVC_W3WP event class. This event class contains the following slots: v node: STRING v timestamp: STRING v name: STRING v total_http_requests_served: INTEGER v total_http_requests_served_enum: STRING v http_requests_served_rate: INTEGER v http_requests_served_rate_enum: STRING v requests_rate: INTEGER 352 Microsoft IIS agent User's Guide - Beta 1 Draft

363 v requests_rate_enum: STRING v active_requests: INTEGER v active_requests_enum: STRING v total_threads: INTEGER v total_threads_enum: STRING v threads_rate: INTEGER v threads_rate_enum: STRING v active_threads_count: INTEGER v active_threads_count_enum: STRING v current_file_cache_memory_usage_in_kb: INTEGER v current_file_cache_memory_usage_in_kb_enum: STRING v maximum_file_cache_memory_usage_in_kb: INTEGER v maximum_file_cache_memory_usage_in_kb_enum: STRING v output_cache_current_memory_usage_in_kb: INTEGER v output_cache_current_memory_usage_in_kb_enum: STRING v current_files_cached: INTEGER v current_files_cached_enum: STRING v total_files_cached: INTEGER v total_files_cached_enum: STRING v files_cached_rate: INTEGER v files_cached_rate_enum: STRING v file_cache_hits: INTEGER v file_cache_hits_enum: STRING v file_cache_misses: INTEGER v file_cache_misses_enum: STRING v file_cache_flushes: INTEGER v file_cache_flushes_enum: STRING v active_flushed_entries: INTEGER v active_flushed_entries_enum: STRING v total_flushed_files: INTEGER v total_flushed_files_enum: STRING v flushed_files_rate: INTEGER v flushed_files_rate_enum: STRING v current_metadata_cached: INTEGER v current_metadata_cached_enum: STRING v total_metadata_cached: INTEGER v total_metadata_cached_enum: STRING v metadata_cached_rate: INTEGER v metadata_cached_rate_enum: STRING v metadata_cache_hits: INTEGER v metadata_cache_hits_enum: STRING v metadata_cache_misses: INTEGER v metadata_cache_misses_enum: STRING v metadata_cache_flushes: INTEGER v metadata_cache_flushes_enum: STRING Appendix A. Event mapping 353

364 v total_flushed_metadata: INTEGER v total_flushed_metadata_enum: STRING v flushed_metadata_rate: INTEGER v flushed_metadata_rate_enum: STRING v output_cache_current_items: INTEGER v output_cache_current_items_enum: STRING v output_cache_total_hits: INTEGER v output_cache_total_hits_enum: STRING v output_cache_total_misses: INTEGER v output_cache_total_misses_enum: STRING v output_cache_total_flushes: INTEGER v output_cache_total_flushes_enum: STRING v output_cache_flushes_rate: INTEGER v output_cache_flushes_rate_enum: STRING v output_cache_total_flushed_items: INTEGER v output_cache_total_flushed_items_enum: STRING v output_cache_flushed_items_rate: INTEGER v output_cache_flushed_items_rate_enum: STRING v file_cache_hits_rate: INTEGER v file_cache_hits_rate_enum: STRING v metadata_cache_hits_rate: INTEGER v metadata_cache_hits_rate_enum: STRING v file_cache_misses_rate: INTEGER v file_cache_misses_rate_enum: STRING v metadata_cache_misses_rate: INTEGER v metadata_cache_misses_rate_enum: STRING v output_cache_misses_rate: INTEGER v output_cache_misses_rate_enum: STRING v maximum_threads_count: INTEGER v maximum_threads_count_enum: STRING v output_cache_current_flushed_items: INTEGER v output_cache_current_flushed_items_enum: STRING v output_cache_hits_rate: INTEGER v output_cache_hits_rate_enum: STRING v websocket_active_reqs: INTEGER v websocket_active_reqs_enum: STRING v websocket_connection_attempts_rate: INTEGER v websocket_connection_attempts_rate_enum: STRING v websocket_connections_accepted_per_sec: INTEGER v websocket_connections_accepted_per_sec_enum: STRING v websocket_connections_rejected_per_sec: INTEGER v websocket_connections_rejected_per_sec_enum: STRING For events that are generated by situations in the WAS W3WP attribute group, events are sent by using the ITM_KQ7_WAS_W3WP event class. This event class contains the following slots: 354 Microsoft IIS agent User's Guide - Beta 1 Draft

365 v node: STRING v timestamp: STRING v name: STRING v active_listener_channels: INTEGER v active_listener_channels_enum: STRING v active_protocol_handlers: INTEGER v active_protocol_handlers_enum: STRING v health_ping_reply_latency: INTEGER v health_ping_reply_latency_enum: STRING v total_health_pings: INTEGER v total_health_pings_enum: STRING v health_pings_rate: INTEGER v health_pings_rate_enum: STRING v total_messages_sent_to_was: INTEGER v total_messages_sent_to_was_enum: STRING v messages_sent_to_was_rate: INTEGER v messages_sent_to_was_rate_enum: STRING v total_requests_served: INTEGER v total_requests_served_enum: STRING v requests_served_rate: INTEGER v requests_served_rate_enum: STRING v total_runtime_status_queries: INTEGER v total_runtime_status_queries_enum: STRING v runtime_status_queries_rate: INTEGER v runtime_status_queries_rate_enum: STRING v total_was_messages_received: INTEGER v total_was_messages_received_enum: STRING v was_messages_received_rate: INTEGER v was_messages_received_rate_enum: STRING For events that are generated by situations in the Web Service attribute group, events are sent by using the ITM_KQ7_WEB_SERVICE event class. This event class contains the following slots: v node: STRING v timestamp: STRING v total_kbytes_sent: INTEGER v total_kbytes_sent_enum: STRING v kb_sent_rate: REAL v kb_sent_rate_enum: STRING v total_kbytes_received: INTEGER v total_kbytes_received_enum: STRING v kb_received_rate: REAL v kb_received_rate_enum: STRING v total_kbytes_transfered: INTEGER v total_kbytes_transfered_enum: STRING v kb_total_rate: REAL Appendix A. Event mapping 355

366 v kb_total_rate_enum: STRING v total_files_sent: INTEGER v total_files_sent_enum: STRING v files_sent_rate: REAL v files_sent_rate_enum: STRING v total_files_received: INTEGER v total_files_received_enum: STRING v files_received_rate: REAL v files_received_rate_enum: STRING v total_files_transferred: INTEGER v total_files_transferred_enum: STRING v files_rate: REAL v files_rate_enum: STRING v current_anonymous_users: INTEGER v current_anonymous_users_enum: STRING v current_nonanonymous_users: INTEGER v current_nonanonymous_users_enum: STRING v total_anonymous_users: INTEGER v total_anonymous_users_enum: STRING v anonymous_users_rate: REAL v anonymous_users_rate_enum: STRING v total_nonanonymous_users: INTEGER v total_nonanonymous_users_enum: STRING v nonanonymous_users_rate: REAL v nonanonymous_users_rate_enum: STRING v maximum_nonanonymous_users: INTEGER v maximum_nonanonymous_users_enum: STRING v maximum_anonymous_users: INTEGER v maximum_anonymous_users_enum: STRING v percent_current_anonymous_users: REAL v percent_current_anonymous_users_enum: STRING v percent_current_nonanonymous_users: REAL v percent_current_nonanonymous_users_enum: STRING v percent_total_anonymous_users: REAL v percent_total_anonymous_users_enum: STRING v percent_total_nonanonymous_users: REAL v percent_total_nonanonymous_users_enum: STRING v current_connections: INTEGER v current_connections_enum: STRING v maximum_connections: INTEGER v maximum_connections_enum: STRING v total_connection_attempts: INTEGER v total_connection_attempts_enum: STRING v connection_attempts_rate: REAL v connection_attempts_rate_enum: STRING 356 Microsoft IIS agent User's Guide - Beta 1 Draft

367 v total_logon_attempts: INTEGER v total_logon_attempts_enum: STRING v logon_attempts_rate: REAL v logon_attempts_rate_enum: STRING v web_service_uptime_in_hrs: REAL v web_service_uptime_in_hrs_enum: STRING v total_method_requests: INTEGER v total_method_requests_enum: STRING v total_method_requests_rate: REAL v total_method_requests_rate_enum: STRING v total_other_request_methods: INTEGER v total_other_request_methods_enum: STRING v other_request_methods_rate: REAL v other_request_methods_rate_enum: STRING v total_requests_rate: REAL v total_requests_rate_enum: STRING v total_not_found_errors: INTEGER v total_not_found_errors_enum: STRING v not_found_errors_rate: REAL v not_found_errors_rate_enum: STRING v total_locked_errors: INTEGER v total_locked_errors_enum: STRING v locked_errors_rate: REAL v locked_errors_rate_enum: STRING v current_cgi_requests: INTEGER v current_cgi_requests_enum: STRING v total_cgi_requests: INTEGER v total_cgi_requests_enum: STRING v cgi_requests_rate: REAL v cgi_requests_rate_enum: STRING v maximum_cgi_requests: INTEGER v maximum_cgi_requests_enum: STRING v current_isapi_extension_requests: INTEGER v current_isapi_extension_requests_enum: STRING v total_isapi_extension_requests: INTEGER v total_isapi_extension_requests_enum: STRING v isapi_extension_requests_rate: REAL v isapi_extension_requests_rate_enum: STRING v maximum_isapi_extension_requests: INTEGER v maximum_isapi_extension_requests_enum: STRING v total_kbytes_sent_64: REAL v total_kbytes_sent_64_enum: STRING v total_kbytes_received_64: REAL v total_kbytes_received_64_enum: STRING v total_kbytes_transfered_64: REAL Appendix A. Event mapping 357

368 v total_kbytes_transfered_64_enum: STRING v name: STRING For events that are generated by situations in the Web Service Cache attribute group, events are sent by using the ITM_KQ7_WEB_SERVICE_CACHE event class. This event class contains the following slots: v node: STRING v timestamp: STRING v active_flushed_entries: INTEGER v active_flushed_entries_enum: STRING v current_file_cache_memory_usage_in_kb: REAL v current_file_cache_memory_usage_in_kb_enum: STRING v current_files_cached: INTEGER v current_files_cached_enum: STRING v total_files_cached: INTEGER v total_files_cached_enum: STRING v file_cache_hits: INTEGER v file_cache_hits_enum: STRING v file_cache_hits_percent: REAL v file_cache_hits_percent_enum: STRING v file_cache_misses: INTEGER v file_cache_misses_enum: STRING v file_cache_flushes: INTEGER v file_cache_flushes_enum: STRING v maximum_file_cache_memory_usage_in_kb: REAL v maximum_file_cache_memory_usage_in_kb_enum: STRING v total_flushed_files: INTEGER v total_flushed_files_enum: STRING v current_metadata_cached: INTEGER v current_metadata_cached_enum: STRING v total_metadata_cached: INTEGER v total_metadata_cached_enum: STRING v metadata_cache_hits: INTEGER v metadata_cache_hits_enum: STRING v metadata_cache_misses: INTEGER v metadata_cache_misses_enum: STRING v metadata_cache_hits_percent: REAL v metadata_cache_hits_percent_enum: STRING v metadata_cache_flushes: INTEGER v metadata_cache_flushes_enum: STRING v total_flushed_metadata: INTEGER v total_flushed_metadata_enum: STRING For events that are generated by situations in the Web Service Extensions Restricted List attribute group, events are sent by using the ITM_KQ7_WEB_SERVICE_EXTENSIONS_RESTRICTED_LIST event class. This event class contains the following slots: v node: STRING 358 Microsoft IIS agent User's Guide - Beta 1 Draft

369 v timestamp: STRING v allow_deny_flag: INTEGER v allow_deny_flag_enum: STRING v physical_path: STRING v removable: INTEGER v removable_enum: STRING v group_id: STRING v description: STRING For events that are generated by situations in the Website Certificate Details attribute group, events are sent by using the ITM_KQ7_WEBSITE_CERTIFICATE_DETAILS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v website_name: STRING v issued_to: STRING v issued_by: STRING v expiry_date: STRING v days_remaining: INTEGER v days_remaining_enum: STRING v ssl_ports: STRING v ssl_certificate_friendly_name: STRING For events that are generated by situations in the Website Dynamic IP and Domain Restrictions attribute group, events are sent by using the ITM_KQ7_WEBSITE_DYNAMIC_IP_AND_DOMAIN_RESTRICTIONS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v website_name: STRING v allowed_specific_ip: STRING v allowed_ip_range: STRING v allowed_domain: STRING v denied_specific_ip: STRING v denied_ip_range: STRING v denied_domain: STRING For events that are generated by situations in the Website Dynamic IP Restrictions Settings attribute group, events are sent by using the ITM_KQ7_WEBSITE_DYNAMIC_IP_RESTRICTIONS_SETTINGS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v website_name: STRING v deny_ip_address_number_of_concurrent_reqs: STRING v max_number_of_concurrent_allowed_reqs: INTEGER v max_number_of_concurrent_allowed_reqs_enum: STRING v deny_ip_address_number_of_reqs_over_a_duration: STRING v max_number_of_reqs_over_a_duration_in_ms: STRING Appendix A. Event mapping 359

370 v enable_logging_only_mode: STRING For events that are generated by situations in the Website IP and Domain Restrictions Settings attribute group, events are sent by using the ITM_KQ7_WEBSITE_IP_AND_DOMAIN_RESTRICTIONS_SETTINGS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v website_name: STRING v access_for_unspecified_clients: INTEGER v access_for_unspecified_clients_enum: STRING v domain_name_restrictions: STRING v proxy_mode: STRING v deny_action_type: STRING For events that are generated by situations in the Website Virtual Dir Details attribute group, events are sent by using the ITM_KQ7_WEBSITE_VIRTUAL_DIR_DETAILS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v virtual_dir_name: STRING v dir_path: STRING v app_pool_name: STRING For events that are generated by situations in the Websites W3C Logs attribute group, events are sent by using the ITM_KQ7_WEBSITES_W3C_LOGS event class. This event class contains the following slots: v node: STRING v timestamp: STRING v kq7_date: STRING v time: STRING v service_name_and_instance_number: STRING v server_name: STRING v server_ip_address: STRING v method: STRING v uri_stem: STRING v uri_query: STRING v server_port: STRING v user_name: STRING v client_ip_address: STRING v protocol_version: STRING v user_agent: STRING v cookie: STRING v referrer: STRING v host: STRING v http_status: STRING v protocol_substatus: STRING v win32_status: STRING v bytes_sent: STRING 360 Microsoft IIS agent User's Guide - Beta 1 Draft

371 v bytes_received: STRING v time_taken: STRING Appendix A. Event mapping 361

372 362 Microsoft IIS agent User's Guide - Beta 1 Draft

373 Appendix B. Discovery Library Adapter for the Microsoft IIS agent The Tivoli Management Services Discovery Library Adapter (DLA) discovers resources and relationships, and creates a Discovery Library Book file for the agent. About the DLA The Book file follows the Discovery Library IdML schema and is used to populate the Configuration Management Database (CMDB) and Tivoli Business Service Manager products. The Tivoli Management Services DLA discovers Microsoft Internet Information Services resources. For all Microsoft IIS systems that are active and online at the Tivoli Enterprise Portal Server, information is included in the discovery book for those resources. The Tivoli Management Services DLA discovers active resources. It is run on demand and can be run periodically to discover resources that were not active during previous discoveries. The DLA discovers Microsoft Internet Information Services components. More information about DLAs The following sources contain additional information about using the DLA program with all monitoring agents: v The IBM Tivoli Monitoring Administrator's Guide contains information about using the Tivoli Management Services Discovery Library Adapter. v For information about using a DLA with Tivoli Application Dependency Discovery Manager (TADDM), see the TADDM Information Center ( com.ibm.taddm.doc_7.2/welcome_page/welcome.html). DLA data model class types represented in CDM The source application data objects map to classes in the Common Data Model (CDM) for the Microsoft IIS agent. The following information is provided for each class: CDM class name Class name for which the agent is providing information Relationships CDM relationships (hierarchical) between currently identified model objects CDM attributes, agent attributes, descriptions, and examples CDM and agent attributes that are required to create an instance of a resource, descriptions of the attributes, and examples of the attributes DLA data model classes for Microsoft IIS agent Each agent that uses the Discovery Library Adapter has DLA data model classes defined for the agent. The Microsoft IIS agent agent has the following Discovery Library Adapter data model classes: v IIsWebServer class v IISWebServices class v TMSAgent class Copyright IBM Corp. 2008,

374 IIsWebServer class The IIsWebServerclass represents the instance of Microsoft IIS Server. CDM class name app.web.iis.iiswebserver Relationships There are no relationships defined for this class. CDM attributes, agent attributes, descriptions, and examples v CDM attribute: Id (IdML) Agent attribute: KQ7IISWEB1.SERVER_NAM : The name of the IIS web server. Example: W3SVC-IIsWebServer v CDM attribute: ServerBindings Agent attribute: KQ7IISWEB1.HTTP_PORT : The HTTP port number of the website. Example: 80 v CDM attribute: SecureBindings Agent attribute: KQ7IISWEB1.SSL_PORT : The SSL port number of the website. Example: 443 v CDM attribute: Label Agent attribute: KQ7IISWEB1.SERVER_NAM : A user-specified string that is used when displaying a managed element. Example: W3SVC-IIs Web Server IISWebServices class The IISWebServices class represents IIS Web Services in IIS Server. CDM class name app.web.iis.iiswebservice Relationships runson v : app.web.iis.iiswebservice v Target: sys.computersystem v Example: <Managed System Name>:Q7-dllhost.exe-IIsWebService runson OperatingSystem runson v : app.web.iis.iiswebservice v Target: sys.windows.windowsoperatingsystem v Example: <Managed System Name>:Q7-dllhost.exe-IIsWebService runson OperatingSystem contains v : app.web.iis.iiswebservice v Target: app.web.iis.iiswebserver v Example: <Managed System Name>:Q7-dllhost.exe-IIsWebService contains <Managed System Name>:Q7-W3SVC-IIsWebServer monitors v : app.tmsagent v Target: app.web.iis.iiswebservice 364 Microsoft IIS agent User's Guide - Beta 1 Draft

375 v Example: <Managed System Name>:Q7-TMSAgent monitors <Managed System Name>:Q7-dllhost.exe-IIsWebService accessedvia v : app.web.iis.iiswebservice v Target: net.bindaddress v Example: BindAddress accessedvia IpAddress CDM attributes, agent attributes, descriptions, and examples v CDM attribute: Id (IdML) Agent attribute: KQ7AVAIL.NAME : The IIS service name. Example: <Managed System Name>:Q7-W3SVC-IIsWebService v CDM attribute: ManagedSystemName Agent attribute: INODESTS.NODE : The name of the component of the IBM Tivoli Monitoring (ITM) product that corresponds to (commonly provides data for) the management of this instance. Example: <Managed System Name>WIN2K3:Q7 v CDM attribute: Name Agent attribute: KQ7AVAIL.NAME : The IIS service name. Example: W3SVC v CDM attribute: Label Agent attribute: None : The fully qualified host name of the managed system. Example: SP-IISDEV-2k8R2:80 v CDM attribute: VendorName Agent attribute: None : The name of the vendor. Example: Microsoft v CDM attribute: Status Agent attribute: KQ7AVAIL.SERVICE_STATUS : The status of the service. Example: Running or Stopped v CDM attribute: ExecutableName Agent attribute: KQ7AVAIL.FULLNAME : The executable (.exe) file name. Example: C:\WINDOWS\System32\svchost.exe v CDM attribute: KeyName Agent attribute: None : The key name of the application server. Example: AppServer TMSAgent class The TMSAgent represents the Tivoli Monitoring Services agent. CDM class name CDM class name Relationships installedon v : app.tmsagent v Target: sys.windows.windowsoperatingsystem Appendix B. Discovery Library Adapter for the Microsoft IIS agent 365

376 v Example: <Managed System Name>:Q7-ITMAgent installedon OperatingSystem monitors v : app.tmsagent v Target: app.web.iis.iiswebservice v Example: <Managed System Name>:Q7-TMSAgent monitors <Managed System Name>:Q7-dllhost.exe-IIsWebService CDM attributes, agent attributes, descriptions, and examples v CDM attribute: Id (IdML) Agent attribute: INODESTS.NODE : The name of the component of the IBM Tivoli Monitoring (ITM) product that corresponds to (commonly provides data for) the management of this instance. Example: <Managed System Name>:Q7-ITMAgent v CDM attribute: ManagedSystemName Agent attribute: INODESTS.NODE : The name of the component of the IBM Tivoli Monitoring (ITM) product that corresponds to (commonly provides data for) the management of this instance. Example: <Managed System Name>:Q7 v CDM attribute: ManagedObjectName Agent attribute: INODESTS.NODE : The name of the component of the IBM Tivoli Monitoring (ITM) product that corresponds to (commonly provides data for) the management of this instance. Example: p@<managed System Name>:Q7 v CDM attribute: SoftwareVersion Agent attribute: INODESTS.VERSION : The version of the Microsoft IIS agent. Example: v CDM attribute: Product Code Agent attribute: INODESTS.PRODUCT : The product code of the Microsoft IIS agent. Example: Q7 v CDM attribute: Affinity Agent attribute: INODESTS.AFFINITIES : The affinity of the Microsoft IIS Agent. Example: IBM.IIS w0a7 v CDM attribute: Label Agent attribute: INODESTS.NODE : A user-specified string that is used when displaying a managed element. Example: <Managed System Name>:Q7-IIs Server 366 Microsoft IIS agent User's Guide - Beta 1 Draft

377 Appendix C. Integration with Tivoli Business Service Manager Microsoft IIS agent provides data to create, update the status of, and view IBM Tivoli Business Service Manager services. The Tivoli Management Services Discovery Library Adapter (DLA) and Discovery Library Toolkit provides data for the Tivoli Business Service Manager service models. The Tivoli Event Integration Facility (EIF) probe updates the status of these services, and you use the Tivoli Enterprise Portal to view the data for the services. To implement the integration of the agent with Tivoli Business Service Manager, perform the integration tasks. Components for integrating with Tivoli Business Service Manager The data for integrating with Tivoli Business Service Manager is supplied through the following components: Tivoli Management Services Discovery Library Adapter (DLA) and Discovery Library Toolkit, Tivoli Event Integration Facility (EIF) probe, and Tivoli Enterprise Tivoli Management Services Discovery Library Adapter (DLA) and Discovery Library Toolkit By using data from the Tivoli Management Services Discovery Library Adapter, you can build Tivoli Business Service Manager service models that include resources monitored by the Microsoft IIS agent. The DLA files can be imported directly into Tivoli Business Service Manager using the Discovery Library Toolkit or they can be loaded into IBM Tivoli Application Dependency Discovery Manager (TADDM) and then fed into Tivoli Business Service Manager using the Discovery Library Toolkit. See the following sources for more information about the DLA and Discovery Library Toolkit: v Resources and relationships that are discovered by the Microsoft IIS agent and included in Tivoli Management Services DLA files: Appendix B, Discovery Library Adapter for the Microsoft IIS agent, on page 363 v Using the Tivoli Management Services DLA: IBM Tivoli Monitoring Administrator's Guide v Using the Discovery Library Toolkit: Tivoli Business Service Manager Customization Guide Tivoli Event Integration Facility (EIF) probe Situation events detected by the Microsoft IIS agent can update the status of services in Tivoli Business Service Manager. The situation events are forwarded from IBM Tivoli Monitoring to the Netcool/OMNIbus Probe for the Tivoli Event Integration Facility. The Microsoft IIS agent provides a probe rules file that updates its events with information to identify the affected service in Tivoli Business Service Manager. The EIF probe then forwards the events to the Netcool/OMNIbus ObjectServer. Tivoli Business Service Manager monitors the Netcool/OMNIbus ObjectServer for new events and updates the status of affected services. See the following sources for more information about event integration: v Installation (using an existing EIF probe and Netcool/OMNIbus ObjectServer installation or using Tivoli Business Service Manager to install these components): Netcool/OMNIbus Information Center or the Tivoli Business Service Manager Installation Guide. v Setting up event integration between IBM Tivoli Monitoring, the EIF probe, and the Netcool/OMNIbus ObjectServer: IBM Tivoli Monitoring Installation and Setup Guide. Copyright IBM Corp. 2008,

378 v Configuring the EIF probe to use the Microsoft IIS agent rules file after the EIF probe has been installed and configured for event integration with IBM Tivoli Monitoring: Configuring the Tivoli Event Integration Facility (EIF) probe to enrich events Tivoli Enterprise Portal You can use the integration of the Tivoli Enterprise Portal with Tivoli Business Service Manager to view the services in the Tivoli Business Service Manager console. For more detailed examination and analysis, you can easily link from the Tivoli Business Service Manager console to the Tivoli Enterprise Portal to view the data within the Microsoft IIS agent. Tasks to integrate the agent with Tivoli Business Service Manager To integrate the Microsoft IIS agent with Tivoli Business Service Manager, you must install and configure the required components. Then, you can view the data in the Tivoli Integrated Portal To integrate the Microsoft IIS agent with Tivoli Business Service Manager and view the data, complete the following tasks: v Install the Discovery Library Toolkit on the Tivoli Business Service Manager server. v Configure the Tivoli Event Integration Facility (EIF) probe to enrich Microsoft IIS agent events. v Create a service in the Tivoli Business Service Manager console that you want to monitor. v Create a data source mapping for each data source that you want to access within the Tivoli Business Service Manager. v Configure an additional IBM Tivoli Monitoring web service for each Tivoli Enterprise Portal Server. v View data in the Tivoli Enterprise Portal for the services that you have created to monitor through Tivoli Business Service Manager. Installing the Discovery Library Toolkit on the Tivoli Business Service Manager You must install the Discovery Library Toolkit on the Tivoli Business Service Manager server. The Discovery Library Toolkit imports data from the DLA files and TADDM, which includes information about the hardware and the applications that are discovered by the source. See "Installing the Discovery Library Toolkit" in the Tivoli Business Service Manager Installation Guide. Configuring the Tivoli Event Integration Facility (EIF) probe to enrich events The Netcool/OMNIbus Probe for Tivoli Event Integration Facility (EIF) forwards the Microsoft IIS agent events that are received from IBM Tivoli Monitoring to the Netcool/OMNIbus ObjectServer. Tivoli Business Service Manager monitors the Netcool/OMNIbus ObjectServer for new events, and updates the status of affected services. The Microsoft IIS agent provides a probe rules include file that updates its events with information to identify the affected service in Tivoli Business Service Manager. Before you begin Install and configure the Netcool/OMNIbus ObjectServer and EIF probe and set up event integration between IBM Tivoli Monitoring and Netcool/OMNIbus. About this task To enable event enrichment, configure the EIF probe to use the rules file for the agent. 368 Microsoft IIS agent User's Guide - Beta 1 Draft

379 Procedure 1. Locate the Microsoft IIS agent rules file (kq7_tbsm.rules) on a computer system where the Microsoft IIS agent, Tivoli Enterprise Monitoring Server, or Tivoli Enterprise Portal Server is installed. The file is in the following locations: v On Windows systems The file is in the installdir\cms\teclib directory of the monitoring server, in the installdir\cnps\teclib directory of the portal server, the installdir\tmaitm6\eiflib directory of the agent, or the installdir\tmaitm6_x64\eiflib directory of the agent, where installdir is the IBM Tivoli Monitoring or ITCAM for Microsoft Applications installation directory. v On Linux and UNIX systems The file is in the installdir/tables/cicatrsq/teclib directory of the monitoring server or in the installdir/platform/xx/teclib directory of the agent, where installdir is the IBM Tivoli Monitoring or ITCAM for Microsoft Applications directory, platform is the architecture directory for the agent, and xx is the product code for the agent. 2. Copy the kq7_tbsm.rules file to the following directory on the computer system where the EIF probe is installed: v On Windows systems %OMNIHOME%\probes\arch v On UNIX systems $OMNIHOME/probes/arch Where: OMNIHOME System-defined variable defining the installation location of Netcool/OMNIbus arch Operating system directory where the probe is installed; for example, solaris2 when running on a Solaris system, and win32 for a Windows system. 3. Edit the tivoli_eif.rules file and uncomment the include statement for kq7_tbsm.rules. (The tivoli_eif.rules file is located in the same directory as the kq7_tbsm.rules file.) If you are using a version of the tivoli_eif.rules file without an include statement for kq7_tbsm.rules, add the following line after the include statement for itm_event.rules: include "kq7_tbsm.rules" 4. Restart the EIF probe. Creating a service in Tivoli Business Service Manager You must create a service in the Tivoli Business Service Manager console for each service that you want to monitor. To create the services that you want to monitor in the Tivoli Business Service Manager console, see "Configuring services" in the IBM Tivoli Business Service Manager Service Configuration Guide. Creating a data source mapping for each data source You can create a data source mapping for each data source that you want to access within Tivoli Business Service Manager. Also, you can create the data fetchers and use the data to create incoming status rules that are populated in your service templates. For more information, see "Data sources" and "Data fetchers" in the IBM Tivoli Business Service Manager Service Configuration Guide. Appendix C. Integration with Tivoli Business Service Manager 369

380 Configuring additional IBM Tivoli Monitoring web services You can configure additional IBM Tivoli Monitoring web services for each Tivoli Enterprise Portal Server. To configure an additional IBM Tivoli Monitoring web service for each Tivoli Enterprise Portal server, see "Configure TBSM charts" in the IBM Tivoli Business Service Manager Scenarios Guide. Viewing data in the Tivoli Enterprise Portal From Tivoli Business Service Manager, you can open the Tivoli Enterprise Portal and view the Microsoft IIS agent. You can also launch Tivoli Business Service Manager from the Tivoli Enterprise For more information about launching applications, see "Launching to and from applications" in the Tivoli Business Service Manager Customization Guide. 370 Microsoft IIS agent User's Guide - Beta 1 Draft

381 Appendix D. Documentation library A variety of publications are relevant to the use of the IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent. The IBM Tivoli Monitoring, OMEGAMON XE, and Composite Application Manager products: Documentation Guide contains information about accessing and using publications. You can find the Documentation Guide in the following information centers: v IBM Tivoli Monitoring and OMEGAMON XE ( v15r1/index.jsp) v IBM Tivoli Composite Application Manager ( v24r1/index.jsp) To open the Documentation Guide in the information center, select Using the publications in the Contents pane. To find a list of new and changed publications, click What's new in the information center on the Welcome page of the IBM Tivoli Monitoring and OMEGAMON XE Information Center. To find publications from the previous version of a product, click Previous versions under the name of the product in the Contents pane. IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent library The documentation for this agent and other product components is located in the IBM Tivoli Composite Application Manager for Microsoft Applications Information Center ( infocenter/tivihelp/v24r1/topic/com.ibm.itcamms.doc_6.3/welcome_msapps63.html). One document is specific to the Microsoft IIS agent. The IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent User s Guide provides agent-specific information for configuring, using, and troubleshooting the Microsoft IIS agent. The Offering Guide also provides information about installing and configuring the component products in the offering. The Prerequisites topic in the information center contains information about the prerequisites for each component. Use the information in the user's guide for the agent with the Tivoli Enterprise Portal User's Guide to monitor Microsoft Internet Information Services resources. Prerequisite publications To use the information in this publication effectively, you must have some prerequisite knowledge. See the following publications to gain the required prerequisite knowledge: v IBM Tivoli Monitoring Administrator's Guide v IBM Tivoli Monitoring Agent Builder User's Guide v IBM Tivoli Monitoring Command Reference v IBM Tivoli Management Services on z/os: Configuring the Tivoli Enterprise Monitoring Server on z/os Copyright IBM Corp. 2008,

382 v IBM Tivoli Monitoring Installation and Setup Guide v IBM Tivoli Monitoring High Availability Guide for Distributed Systems v IBM Tivoli Monitoring: Messages v IBM Tivoli Monitoring Troubleshooting Guide v IBM Tivoli Monitoring Universal Agent User's Guide v IBM Tivoli Universal Agent API and Command Programming Reference Guide v IBM Tivoli Monitoring: i5/os Agent User's Guide v IBM Tivoli Monitoring: Linux OS Agent User's Guide v IBM Tivoli Monitoring: UNIX OS Agent User's Guide v IBM Tivoli Monitoring: UNIX Logs OS Agent User's v IBM Tivoli Monitoring: Windows OS Agent User's Guide v Tivoli Enterprise Portal User's Guide v IBM Tivoli Performance Analyzer User's Guide v IBMTivoli Warehouse Proxy Agent User's Guide v IBMTivoli Warehouse Summarization and Pruning Agent User's Guide Related publications The publications in related information centers provide useful information. See the following information centers, which you can find by accessing Tivoli Documentation Central ( v IBM Tivoli Monitoring v IBM Tivoli Netcool/OMNIbus v IBM Tivoli Application Dependency Discovery Manager v IBM Tivoli Enterprise Console Other sources of documentation You can obtain additional technical documentation about monitoring products from other sources. See the following sources of technical documentation about monitoring products: v Service Management Connect (SMC) See the introductory information about SMC ( servicemanagement/). For information about Tivoli products, see the Application Performance Management community on SMC ( Connect, learn, and share with Service Management professionals. Get access to developers and product support technical experts who provide their perspectives and expertise. You can use SMC for these purposes: Become involved with transparent development, an ongoing, open engagement between external users and developers of Tivoli products where you can access early designs, sprint demos, product roadmaps, and pre-release code. Connect one-on-one with the experts to collaborate and network about Tivoli and Integrated Service Management. Benefit from the expertise and experience of others using blogs. Collaborate with the broader user community using wikis and forums. 372 Microsoft IIS agent User's Guide - Beta 1 Draft

383 v IBM Integrated Service Management Library ( ismlibrary/) is an online catalog that contains integration documentation as well as other downloadable product extensions. v IBM Redbook publications ( include Redbooks publications, Redpapers, and Redbooks technotes that provide information about products from platform and solution perspectives. v Technotes ( which are found through the IBM Software Support website, provide the latest information about known product limitations and workarounds. v Tivoli wikis Tivoli Wiki Central ( is the home for interactive wikis that offer best practices and scenarios for using Tivoli products. The wikis contain white papers contributed by IBM employees, and content created by customers and business partners. Two of these wikis are of particular relevance to IBM Tivoli Monitoring: Tivoli Distributed Monitoring and Application Management Wiki ( tivmonitorwiki.nsf) provides information about IBM Tivoli Monitoring and related distributed products, including IBM Tivoli Composite Application Manager products. Tivoli System z Monitoring and Application Management Wiki ( developerworks/wikis/display/tivoliomegamon/home) provides information about the OMEGAMON XE products, Tivoli NetView for z/os, Tivoli Monitoring Agent for z/tpf, and other System z monitoring and application management products. Appendix D. Documentation library 373

384 374 Microsoft IIS agent User's Guide - Beta 1 Draft

385 Accessibility Accessibility features help users with physical disabilities, such as restricted mobility or limited vision, to use software products successfully. The major accessibility features in this product enable users in the following ways: v Use assistive technologies, such as screen-reader software and digital speech synthesizer, to hear what is displayed on the screen. Consult the product documentation of the assistive technology for details on using those technologies with this product. v Operate specific or equivalent features using only the keyboard. v Magnify what is displayed on the screen. In addition, the product documentation was modified to include the following features to aid accessibility: v All documentation is available in both HTML and convertible PDF formats to give the maximum opportunity for users to apply screen-reader software. v All images in the documentation are provided with alternative text so that users with vision impairments can understand the contents of the images. Navigating the interface using the keyboard Standard shortcut and accelerator keys are used by the product and are documented by the operating system. See the documentation provided by your operating system for more information. Magnifying what is displayed on the screen You can enlarge information in the product windows using facilities provided by the operating systems on which the product is run. For example, in a Microsoft Windows environment, you can reduce the resolution of the screen to enlarge the font sizes of the text on the screen. See the documentation provided by your operating system for more information. Copyright IBM Corp. 2008,

386 376 Microsoft IIS agent User's Guide - Beta 1 Draft

387 Notices This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-ibm product, program, or service. IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not give you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY U.S.A. For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: Intellectual Property Licensing Legal and Intellectual Property Law IBM Japan, Ltd , Nihonbashi-Hakozakicho, Chuo-ku Tokyo , Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement might not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Any references in this information to non-ibm Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk. IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Copyright IBM Corp. 2008,

388 Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM Corporation 2Z4A/ Burnet Road Austin, TX U.S.A. Such information may be available, subject to appropriate terms and conditions, including in some cases payment of a fee. The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us. Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurement may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Information concerning non-ibm products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-ibm products. Questions on the capabilities of non-ibm products should be addressed to the suppliers of those products. All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only. All IBM prices shown are IBM's suggested retail prices, are current and are subject to change without notice. Dealer prices may vary. This information is for planning purposes only. The information herein is subject to change before the products described become available. This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental. COPYRIGHT LICENSE: This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. You may copy, modify, and distribute these sample programs in any form without payment to IBM for the purposes of developing, using, marketing, or distributing application programs conforming to IBM s application programming interfaces. 378 Microsoft IIS agent User's Guide - Beta 1 Draft

389 Each copy or any portion of these sample programs or any derivative work, must include a copyright notice as follows: IBM Portions of this code are derived from IBM Corp. Sample Programs. Copyright IBM Corp All rights reserved. If you are viewing this information in softcopy form, the photographs and color illustrations might not be displayed. Trademarks IBM, the IBM logo, and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates. Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Microsoft and Windows are trademarks of Microsoft Corporation in the United States, other countries, or both. UNIX is a registered trademark of The Open Group in the United States and other countries. Intel is a trademark or registered trademark of Intel Corporation or its subsidiaries in the United States and other countries. Notices 379

390 380 Microsoft IIS agent User's Guide - Beta 1 Draft

391 Index Special characters % Current Anonymous Users attribute 72, 127, 173 % Current NonAnonymous Users attribute 72, 127, 174 % Total Anonymous Users attribute 73, 127, 174 % Total NonAnonymous Users attribute 74, 128, 174 A Access for Unspecified Clients attribute 79, 197 accessibility 375 Action attribute 67 Active Flushed Entries attribute 119, 153, 184 Active Listener Channels attribute 163 Active Protocol Handlers attribute 163 Active Requests attribute 149 Active Server Pages situations 210 workspaces descriptions 19 Active Server Pages attribute group 33 Active Server Pages workspace 19 Active Thread Count attribute 150 activities 273 additional information attributes 29 situations 207 Take Action commands 237 Workspaces 17 agent functions 1 problems and workarounds 303 Agent Management Services 5 Allow/Deny Flag attribute 190 Allowed Domain attribute 78, 194 Allowed IP Range attribute 77, 193 Allowed Specific IP attribute 77, 193 Anonymous Users Rate (per sec) attribute 172 Application Component attribute 55 Application Pool Name attribute 47, 85, 88, 198 Application Pool WAS attribute group 43 AppPool AutoStart attribute 86, 87 AppPool Command attribute 88 AppPool CPU Action attribute 101 AppPool Identity attribute 88 AppPool Queue Length attribute 87, 88 AppPool Recycle Config Change attribute 89 AppPool Recycle Isapi Unhealthy attribute 89 AppPool Recycle Memory attribute 89 AppPool Recycle OnDemand attribute 90 AppPool Recycle Private Memory attribute 90 AppPool Recycle Requests attribute 90 AppPool Recycle Schedule attribute 91 AppPool Recycle Time attribute 91 AppPool State attribute 85, 91 ASP NET situations 212 workspaces descriptions 19 ASP NET Apps Filter attribute group 50 ASP NET Apps V4 attribute group 52 ASP NET attribute group 47 ASP NET workspace 19 ASP Site Name attribute 50, 52, 54 Associated Providers attribute 65 attribute group 33 attribute groups Active Server Pages 33 Application Pool WAS 43 ASP NET 47 ASP NET Apps Filter 50 ASP NET Apps V4 52 Availability 54 Centralized Certificate Details 59 Event Log 60 Failed Request Tracing 63 Failed Request Tracing Rules 64 FTP Logon Attempt Restrictions Settings 66 FTP Server Site Status 67 FTP Service 68 FTP Site Dynamic IP and Domain Restrictions 77 FTP Site IP and Domain Restrictions Settings 78 FTP Version Information 79 HTTP Custom Error Messages 81 Http Error Log 82 IIS Application Pools Details 85 IIS Application Pools Setting 87 IIS Components 101 IIS FTP Server Bindings 102 IIS FTP Server Status 103 IIS FTP Sites Detail 104 IIS NNTP Server Status 106 IIS SMTP Server Status 108 IIS Version Information 109 IIS Web Server Bindings 110 IIS Web Server Site Status 111 IIS Web Server Status 113 IIS Web Sites Detail 114 Internet Information Services Gl 116 list of all 29 Microsoft FTP Service 122 Mime s 130 MSMQ Incoming HTTP Traffic 131 NNTP Server 133 NNTP Version Information 134 overview 29 Performance Object Status 135 SMTP Server 140 SMTP Version Information 141 Thread Pool Status 142 Virtual Domain Setting 146 W3SVC W3WP 147 WAS W3WP 162 Web Service 167 Web Service Cache 183 Web Service Extensions Restricted List 189 Website Certificate Details 191 Website Dynamic IP and Domain Restrictions 193 Website Dynamic IP Restrictions Settings 194 Website IP and Domain Restrictions Settings 196 Website Virtual Dir Details 197 Websites W3C Logs 198 Copyright IBM Corp. 2008,

392 attributes 33 % Current Anonymous Users 72, 127, 173 % Current NonAnonymous Users 72, 127, 174 % Total Anonymous Users 73, 127, 174 % Total NonAnonymous Users 74, 128, 174 Access for Unspecified Clients 79, 197 Action 67 Active Flushed Entries 119, 153, 184 Active Listener Channels 163 Active Protocol Handlers 163 Active Requests 149 Active Server Pages 33 Active Thread Count 150 additional information 29 Allow/Deny Flag 190 Allowed Domain 78, 194 Allowed IP Range 77, 193 Allowed Specific IP 77, 193 Anonymous Users Rate (per sec) 172 Application Component 55 Application Pool Name 47, 85, 88, 198 Application Pool WAS 43 AppPool AutoStart 86, 87 AppPool Command 88 AppPool CPU Action 101 AppPool Identity 88 AppPool Queue Length 87, 88 AppPool Recycle Config Change 89 AppPool Recycle Isapi Unhealthy 89 AppPool Recycle Memory 89 AppPool Recycle OnDemand 90 AppPool Recycle Private Memory 90 AppPool Recycle Requests 90 AppPool Recycle Schedule 91 AppPool Recycle Time 91 AppPool State 85, 91 ASP NET 48 ASP NET Apps Filter 50 ASP NET Apps V4 52 ASP Site Name 50, 52, 54 Associated Providers 65 Auto Shutdown AppPool Exe 92 Auto Shutdown AppPool Params 92 Availability 54 Average Collection Duration 139 BLOB Cache Flushes 121 BLOB Cache Hits 120 BLOB Cache Hits % 121 BLOB Cache Misses 120 Bytes Received 202 Bytes Sent 202 Cache % Machine Memory Limit Used 48, 50, 53 Cache % Process Memory Limit Used 48, 51, 53 Cache Hit Percent 140 Cache Hits 139 Cache Misses 140 Centralized Certificate Details 59 Centralized Certificate Location 60 CGI Requests Rate (per sec) 180 Client IP Address 83, 201 Client Port 83 Command Line 58 Connection Attempts Rate (per sec) 176 Cookie 201 CPU Action 92 CPU Limit % 92 CPU Reset Interval 93 attributes (continued) Current Anonymous Users 71, 125, 171 Current Application Pool Uptime (hrs) 44 Current AppPool State 43 Current BLOBs Cached 119 Current CGI Requests 180 Current Connections 75, 128, 175 Current File Cache Memory Usage (KB) 118, 150, 184 Current Files Cached 116, 151, 184 Current ISAPI Extension Requests 181 Current Metadata Cached 154, 187 Current NonAnonymous Users 72, 125, 171 Current Sessions 40 Current Worker Processes 44 Date 82, 199 Days Remaining 192 Denied Domain 78, 194 Denied IP Range 78, 194 Denied Specific IP 78, 194 Deny Action 197 Deny IP Address (Number of Concurrent Reqs) 195 Deny IP Address (Number of Reqs Over a Duration) Directory Path 63, 198 Disallow Overlapping Rotation 93 Disallow Rotation On Config Change 93 Domain Name Restrictions 79, 197 Enable Logging Only Mode 196 Enable32BitApp On Win64 86 Error Code 81, 84, 137 Error 84 Error Rate (per sec) 34 Error Sub Code 81 Errors During Script Runtime 34 Errors From ASP Preprocessor 34 Errors From Script Compilers 35 Event API Version 62 Event Category 61 Event ID 61 Event Keywords 62 Event Level 62 Event Log 60 Event 61 Event 61 Expiry Date 192 Failed Request Tracing 63 Failed Request Tracing Rules 64 File Cache Flushes 118, 152, 186 File Cache Hits 117, 152, 185 File Cache Hits % 117, 185 File Cache Hits Rate (per sec) 158 File Cache Misses 117, 152, 186 File Cache Misses Rate (per sec) 159 File Extension 131 File Sent Rate (per sec) 71, 124 Files Cached Rate (per sec) 152 Files Rate (per sec) 171 Files Received Rate (per sec) 71, 124, 170 Files Sent Rate (per sec) 169 Files Transferred Rate (per sec) 71, 125 Flushed Files Rate (per sec) 153 Flushed Metadata Rate (per sec) 156 FTP Logon Attempt Restrictions 66 FTP Logon Attempt Restrictions Settings 66 FTP Port 103, 106 FTP Server Site Status 67 FTP Service Microsoft IIS agent User's Guide - Beta 1 Draft

393 attributes (continued) FTP Service Uptime (hrs) 76 FTP Site 68, 105 FTP Site Dynamic IP and Domain Restrictions 77 FTP Site ID 102, 105 FTP Site IP and Domain Restrictions Settings 78 FTP Site Name 77, 79, 102, 105 FTP Version Information 80 FTPSiteName 68, 106 Full Name 56 Functionality Test Message 59 Functionality Test Status 58 Group ID 190 Health Ping Rate (per sec) 164 Health Ping Reply Latency 163 Host 201 HTTP Custom Error Messages 81 Http Error Log 82 HTTP Port 111, 115 HTTP Requests Served Rate (per sec) 148 HTTP Status 81, 84, 202 Idle Timeout 94 IIS Application Pools Details 85 IIS Application Pools Setting 87 IIS Components 101 IIS FTP Server Bindings 102 IIS FTP Server Status 103 IIS FTP Sites Detail 104 IIS NNTP Server Status 106 IIS SMTP Server Status 108 IIS Version Information 109 IIS Web Server Bindings 110 IIS Web Server Site Status 111 IIS Web Server Status 113 IIS Web Sites Detail 114 Incoming HTTP Bytes 131 Incoming HTTP Bytes (per sec) 132 Incoming HTTP Messages 132 Incoming HTTP Messages (per sec) 132 Infrastructure Error Event Raised Rate (per sec) 49, 51, 53 Internet Information Services Gl 116 Intervals Skipped 140 ISAPI Extension Requests Rate (per sec) 182 Issued By 192 Issued To 191 KB Received Rate (per sec) 69, 122, 168 KB Sent Rate (per sec) 69, 122, 168 KB Total Rate (per sec) 69, 123, 169 Last Collection Duration 139 Last Collection Finished 138 Last Collection Start 138 Load Balancer Capabilities 94 Locked Error Rate (per sec) 179 Log Name 61 Logon Attempt Rate (per sec) 76, 129 Logon Attempts Rate (per sec) 176 Logon Method 94 Major FTP Version Number 80 Major IIS Version Number 110 Major NNTP Version Number 134 Major SMTP Version Number 142 Managed Pipeline Mode 86 Managed Runtime Version 86 Max Log File Size 64 Max Number of Concurrent Allowed Reqs 195 Max Number of Failed Login Attempts 66 Max Number of Log Files 64 attributes (continued) Max Number of Reqs Over a Duration (in ms) 196 Max Processes 95 Maximum Anonymous Users 74, 126, 173 Maximum CGI Requests 181 Maximum Connections 75, 128, 175 Maximum File Cache Memory Usage (KB) 118, 150, 186 Maximum ISAPI Extension Requests 182 Maximum NonAnonymous Users 74, 127, 173 Maximum Thread Count 160 Maximum Worker Processes 44 Membership Authentication Failures 49, 51, 54 Message 62 Message Location 82 Message 82 Messages Sent to WAS Rate (per sec) 165 Metadata Cache Flushes 155, 189 Metadata Cache Hits 155, 188 Metadata Cache Hits % 188 Metadata Cache Hits Rate (per sec) 159 Metadata Cache Misses 155, 188 Metadata Cache Misses Rate (per sec) 159 Metadata Cached Rate (per sec) 154 Method 84, 200 Microsoft FTP Service 122 Microsoft FTP Service Uptime (hrs) 130 MIME 131 Mime s 130 Minor FTP Version Number 80 Minor IIS Version Number 110 Minor NNTP Version Number 135 Minor SMTP Version Number 142 Module Name 101 MSMQ Incoming HTTP Traffic 131 Name 43, 48, 50, 53, 55, 76, 122, 133, 148, 163, 183 NNTP Server 133 NNTP Version Information 134 NNTP Virtual Server 133 Node 33, 43, 48, 50, 52, 55, 59, 60, 63, 64, 66, 67, 68, 77, 78, 80, 81, 82, 85, 87, 101, 102, 103, 104, 106, 108, 109, 110, 111, 113, 114, 116, 122, 130, 131, 133, 134, 135, 140, 141, 142, 146, 147, 162, 167, 184, 189, 191, 193, 194, 196, 198, 199 NonAnonymous Users Rate (per sec) 172 Not Found Error Rate (per sec) 179 Number of Collections 139 Object Name 136 Object Status 137 Object 136 Orphan Action Exe 95 Orphan Action Params 95 Orphan Worker Process 95 Other Request Methods Rate (per sec) 178 Output Cache Current Flushed Items 160 Output Cache Current Items 156 Output Cache Current Memory Usage (KB) 151 Output Cache Flushed Items Rate (per sec) 158 Output Cache Flushes Rate (per sec) 158 Output Cache Hits Rate (per sec) 161 Output Cache Misses Rate (per sec) 160 Output Cache Total Flushed Items 158 Output Cache Total Flushes 157 Output Cache Total Hits 157 Output Cache Total Misses 157 overview 29 Page Faults per Sec 57 Path 65 Path Name 103, 107, 108, 113 Index 383

394 attributes (continued) Percent Privileged Time 57 Percent Processor Time 58 Percent User Mode Time 58 Performance Object Status 135 Periodic Restart Memory 96 Periodic Restart Private Memory 96 Periodic Restart Requests 96 Periodic Restart Time 97 Physical Path 190 PID 57 Ping Interval 97 Ping Response Time 98 Pinging Enabled 97 Process ID 104, 107, 108, 113 Protocol Sub Status 84 Protocol Substatus 202 Protocol Version 83, 201 Proxy Mode 197 Query Name 136 Rapid Fail Protection 98 Rapid Fail Protection Interval 98 Rapid Fail Protection Max Crashes 98 Recent Worker Process Failures 44 Referrer 201 Refresh Interval 139 Removable 190 Request Execution Time (ms) 36 Request KBytes In Total 35 Request KBytes Out Total 35 Request Rate (per sec) 40, 148 Request Wait GT Execution Time (ms) 36 Request Wait Time (ms) 36 Requests Disconnected Count 36 Requests Executing Count 37 Requests Failed Total 37 Requests Not Authorized Count 37 Requests Not Found Count 38 Requests Queued Count 38 Requests Queued Delta 38 Requests Rejected Count 39 Requests Served Rate (per sec) 165 Requests Succeeded Count 39 Requests Timed Out Count 39 Requests Total 40 Runtime Status Queries Rate (per sec) 166 Server IP Address 83, 200 Server Name 80, 103, 106, 108, 109, 113, 134, 141, 199 Server Name Indication Enabled 146 Server Port 83, 200 Service Name and Instance Number 199 Shutdown Time Limit 99 Site ID 111, 115 SMP Affinitized 99 SMP Processor Affinity Mask 99 SMTP Server 140 SMTP Version Information 141 SMTP Virtual Server 140 SSL Certificate Friendly Name 192 SSL Port 111, 115, 147 SSL Ports 192 Startup Time Limit 100 State 68, 104, 105, 107, 109, 112, 114, 115, 133, 141 Status 55, 102, 104, 107, 109, 114 Status Codes 65 Thread Count 57 Thread Pool Active Threads 143 attributes (continued) Thread Pool Avg Active Threads 143 Thread Pool Avg Job Wait 145 Thread Pool Avg Queue Length 144 Thread Pool Max Active Threads 144 Thread Pool Max Queue Length 145 Thread Pool Max Size 143 Thread Pool Min Active Threads 144 Thread Pool Min Queue Length 145 Thread Pool Queue Length 144 Thread Pool Size 143 Thread Pool Status 142 Thread Pool Total Jobs 145 Threads Rate (per sec) 149 Time 83, 199 Time Duration (in Days.hh:mm:ss) 67 Time Duration (in sec) 66 Time Generated 62 Time Since Last Worker Process Failure (hrs) 45 Time Taken 65, 202 Timed Out Sessions 40 Timestamp 34, 43, 48, 50, 52, 55, 59, 63, 64, 66, 67, 69, 77, 79, 80, 81, 82, 85, 87, 101, 102, 103, 105, 106, 108, 109, 110, 112, 113, 114, 116, 122, 130, 131, 133, 134, 136, 140, 141, 143, 146, 147, 162, 167, 184, 190, 191, 193, 195, 196, 198, 199 Total Anonymous Users 73, 126, 172 Total Application Pool Recycles 45 Total Application Pool Uptime (hrs) 45 Total BLOBs Cached 120 Total CGI Requests 180 Total Connection Attempts 129 Total Connection Attempts (all instances) 75 Total Connection Attempts (all Instances) 175 Total Files Cached 117, 151, 185 Total Files Received 70, 123, 170 Total Files Sent 70, 123, 169 Total Files Transferred 70, 124, 170 Total Flushed BLOBs 121 Total Flushed Files 119, 153, 187 Total Flushed Metadata 156, 189 Total Health Pings 164 Total HTTP Requests Served 148 Total ISAPI Extension Requests 181 Total KB Received 183 Total KB Received (Superseded) 168 Total KB Sent 182 Total KB Sent (Superseded) 167 Total KB Transferred 183 Total KB Transferred (Superseded) 168 Total Locked Errors 179 Total Logon Attempts 76, 129, 176 Total Messages Sent to WAS 164 Total Metadata Cached 154, 187 Total Method Requests 177 Total Method Requests Rate (per sec) 177 Total NonAnonymous Users 73, 126, 172 Total Not Found Errors 179 Total Other Request Methods 178 Total Requests Rate (per sec) 178 Total Requests Served 165 Total Runtime Status Queries 166 Total Sessions 41 Total Threads 149 Total Transactions 42 Total WAS Messages Received 166 Total Worker Process Failures Microsoft IIS agent User's Guide - Beta 1 Draft

395 attributes (continued) Total Worker Process Ping Failures 46 Total Worker Process Shutdown Failures 46 Total Worker Process Startup Failures 47 Total Worker Processes Created 47 Tracing 63 Transaction Rate (per sec) 41 Transactions Aborted 41 Transactions Committed 42 Transactions Pending Count URI Query 200 URI Stem 200 URL 84 Use Centralized Certificate 60 User Agent 201 User Name 200 Username 60 Version 49, 52, 54 Virtual Directory Name 198 Virtual Domain Name 147 Virtual Domain Setting 146 Virtual Size 56 W3SVC W3WP 147 WAM User Name 100 WAS Messages Received Rate (per sec) 166 WAS W3WP 162 Web Service 167 Web Service Cache 183 Web Service Extensions Restricted List 189 Web Service Uptime (hrs) 177 Web Site 112, 114 Web Site Name 111, 115 Website Certificate Details 191 Website Dynamic IP and Domain Restrictions 193 Website Dynamic IP Restrictions Settings 194 Website IP and Domain Restrictions Settings 196 Website Name 63, 65, 146, 193, 195, 196 WebSite Name 191 Website Virtual Dir Details 198 WebSiteName 112, 116 Websites W3C Logs 199 Websocket Active Reqs 161 Websocket Connection Attempts Rate (per sec) 161 Websocket Connections Accepted (per sec) 161 Websocket Connections Rejected (per sec) 162 Win32 Error 100 Win32 Status 202 Working Set Size 57 Auto Shutdown AppPool Exe attribute 92 Auto Shutdown AppPool Params attribute 92 Availability situations 212 workspaces descriptions 20 Availability attribute group 54 Availability workspace 20 Average Collection Duration attribute 139 B BLOB Cache Flushes attribute 121 BLOB Cache Hits % attribute 121 BLOB Cache Hits attribute 120 BLOB Cache Misses attribute 120 Bytes Received attribute 202 Bytes Sent attribute 202 C Cache % Machine Memory Limit Used attribute 48, 50, 53 Cache % Process Memory Limit Used attribute 48, 51, 53 Cache Hit Percent attribute 140 Cache Hits attribute 139 Cache Misses attribute 140 calculate historical data disk space 203 capacity planning for historical data 203 Centralized Certificate Details attribute group 59 Centralized Certificate Location attribute 60 CGI and ISAPI Extension Request Statistics workspace 24 CGI Requests Rate (per sec) attribute 180 Client IP Address attribute 83, 201 Client Port attribute 83 Command Line attribute 58 commands tacmd addsystem 14 Take Action 237 components 4 IBM Tivoli Monitoring 4 configuration 14 agent 9 fields 14 problems and workarounds 300 remote 14 values 14 configuring the monitoring agent 9 Connection Attempts Rate (per sec) attribute 176 Cookie attribute 201 CPU Action attribute 92 CPU Limit % attribute 92 CPU Reset Interval attribute 93 Current Anonymous Users attribute 71, 125, 171 Current Application Pool Uptime (hrs) attribute 44 Current AppPool State attribute 43 Current BLOBs Cached attribute 119 Current CGI Requests attribute 180 Current Connections attribute 75, 128, 175 Current File Cache Memory Usage (KB) attribute 118, 150, 184 Current Files Cached attribute 116, 151, 184 Current ISAPI Extension Requests attribute 181 Current Metadata Cached attribute 154, 187 Current NonAnonymous Users attribute 72, 125, 171 Current Sessions attribute 40 Current Worker Processes attribute 44 D Data and File Traffic Statistics workspace 21 Data and File Transfer Statistics workspace 24 data collection 6 data sources 6 Date attribute 82, 199 Days Remaining attribute 192 Denied Domain attribute 78, 194 Denied IP Range attribute 78, 194 Denied Specific IP attribute 78, 194 Deny Action attribute 197 Deny IP Address (Number of Concurrent Reqs) attribute 195 Deny IP Address (Number of Reqs Over a Duration) attribute 195 attribute 191 descriptions 209 detailed 294 developerworks website 372 Index 385

396 Directory Path attribute 63, 198 Disallow Overlapping Rotation attribute 93 Disallow Rotation On Config Change attribute 93 Discovery Library Adapter 367 See DLA Discovery Library Toolkit 367 installing 368 disk capacity planning for historical data 203 DLA 363, 367 data model 363 classes 363 documentation See publications Domain Name Restrictions attribute 79, 197 E Enable Logging Only Mode attribute 196 Enable32BitApp On Win64 attribute 86 enhancements 4 Error Code attribute 81, 84, 137 Error attribute 84 Error Rate (per sec) attribute 34 Error Statistics workspace 25 Error Sub Code attribute 81 Errors During Script Runtime attribute 34 Errors From ASP Preprocessor attribute 34 Errors From Script Compilers attribute 35 event mapping 335 Event API Version attribute 62 Event Category attribute 61 Event ID attribute 61 Event Keywords attribute 62 Event Level attribute 62 Event Log situations 218 workspaces descriptions 21 Event Log attribute group 60 Event Log workspace 21 Event attribute 61 Event attribute 61 Expiry Date attribute 192 F Failed Request Tracing attribute group 63 Failed Request Tracing Rules attribute group 64 File Cache Flushes attribute 118, 152, 186 File Cache Hits % attribute 117, 185 File Cache Hits attribute 117, 152, 185 File Cache Hits Rate (per sec) attribute 158 File Cache Misses attribute 117, 152, 186 File Cache Misses Rate (per sec) attribute 159 File Extension attribute 131 File Sent Rate (per sec) attribute 71, 124 Files Cached Rate (per sec) attribute 152 Files Rate (per sec) attribute 171 Files Received Rate (per sec) attribute 71, 124, 170 Files Sent Rate (per sec) attribute 169 Files Transferred Rate (per sec) attribute 71, 125 Flushed Files Rate (per sec) attribute 153 Flushed Metadata Rate (per sec) attribute 156 FTP Logon Attempt Restrictions attribute 66 FTP Logon Attempt Restrictions Settings attribute group 66 FTP Port attribute 103, 106 FTP Server situations 231 workspaces descriptions 21 FTP Server Site Status attribute group 67 FTP Server workspace 21 FTP Service attribute group 68 FTP Service Uptime (hrs) attribute 76 FTP Site attribute 68, 105 FTP Site Dynamic IP and Domain Restrictions attribute group 77 FTP Site Dynamic IP and Domain Restrictions Statistics workspace 21 FTP Site ID attribute 102, 105 FTP Site IP and Domain Restrictions Settings attribute group 78 FTP Site Name attribute 77, 79, 102, 105 FTP Version Information attribute group 79 FTPSiteName attribute 68, 106 Full Name attribute 56 Functionality Test Message attribute 59 Functionality Test Status attribute 58 G Group ID attribute 190 H Health Ping Rate (per sec) attribute 164 Health Ping Reply Latency attribute 163 historical data calculate disk space 203 disk capacity planning 203 Host attribute 201 HTTP Custom Error Messages attribute group 81 Http Error Log attribute group 82 HTTP Port attribute 111, 115 HTTP Requests Served Rate (per sec) attribute 148 HTTP Status attribute 81, 84, 202 I IBM Tivoli Monitoring 4 overview 1 Identity and Recycling Application Pool Setting workspace 22 Idle Timeout attribute 94 IIS Application Pools Details attribute group 85 IIS Application Pools Setting attribute group 87 IIS Components attribute group 101 IIS Configuration situations 232 workspaces descriptions 22 IIS Configuration workspace 22 IIS FTP Server Bindings attribute group 102 IIS FTP Server Status attribute group 103 IIS FTP Sites Detail attribute group 104 IIS Global situations 233 workspaces descriptions 23 IIS Global workspace 23 IIS Installed Components workspace Microsoft IIS agent User's Guide - Beta 1 Draft

397 IIS NNTP Server Status attribute group 106 IIS SMTP Server Status attribute group 108 IIS Version Information attribute group 109 IIS Web Server Bindings attribute group 110 IIS Web Server Site Status attribute group 111 IIS Web Server Status attribute group 113 IIS Web Sites Detail attribute group 114 include file 368 Incoming HTTP Bytes (per sec) attribute 132 Incoming HTTP Bytes attribute 131 Incoming HTTP Messages (per sec) attribute 132 Incoming HTTP Messages attribute 132 Infrastructure Error Event Raised Rate (per sec) attribute 49, 51, 53 installation 14 agent 9 problems and workarounds 300 remote 14 installing language packs 9 installing the monitoring agent 9 Integrated Service Management Library documentation 372 interface user 5 Internet Information Services Gl attribute group 116 Intervals Skipped attribute 140 ISAPI Extension Requests Rate (per sec) attribute 182 Issued By attribute 192 Issued To attribute 191 K KB Received Rate (per sec) attribute 69, 122, 168 KB Sent Rate (per sec) attribute 69, 122, 168 KB Total Rate (per sec) attribute 69, 123, 169 KQ7_App_Load_Fail situation 218 KQ7_AppHostSvc_Hist_Config_Err situation 225 KQ7_AppHostSvc_Service_Down situation 213 KQ7_AppHostSvc_SID_Config_Err situation 224 KQ7_ASP_High_Error_Rate situation 211 KQ7_ASP_Que_Size_Increased situation 210 KQ7_ASP_Req_Dispatch_Slow situation 210 KQ7_ASP_Req_Que_Size_Large situation 211 KQ7_FTP_Pasport_MB_Access_Fail situation 220 KQ7_FTP_Pasvport_Invalid_Value situation 222 KQ7_FTP_Site_Down situation 231 KQ7_FTP_Site_Down_2 situation 232 KQ7_FTP_System_Call_Failed situation 230 KQ7_Ftpsvc_Service_Down situation 217 KQ7_HTTP_Log_Serv_Unavailable situation 232 KQ7_HTTPFilter_Service_Down situation 215 KQ7_IIS_Web_Site_Down situation 235 KQ7_IIS_Web_Site_Down_2 situation 235 KQ7_IISADMIN_Service_Down situation 212 KQ7_IISWMSVC_Login_Unknown_Err situation 222 KQ7_MSFtpsvc_Service_Down situation 214 KQ7_NetMsmqAct_Service_Down situation 216 KQ7_NetPipeAct_Service_Down situation 215 KQ7_NetTcpAct_Service_Down situation 216 KQ7_NetTcpPShr_Service_Down situation 217 KQ7_NntpSvc_Service_Down situation 215 KQ7_Process_Stop_Responding situation 224 KQ7_SMTPSVC_Service_Down situation 214 KQ7_VirtualDir_CfgLost situation 218 KQ7_W3_ETW_Tracing_Init_Failed situation 219 KQ7_W3_Fail_2_Create_FREB_Dir situation 229 KQ7_W3_Out_Of_Memory situation 227 KQ7_W3SVC_App_Pool_Cmd_Err situation 220 KQ7_W3SVC_Bind_Fail_Invald_URL situation 220 KQ7_W3SVC_Binding_Fail situation 225 KQ7_W3SVC_Fail_2_Init situation 226 KQ7_W3SVC_Fail_2_Set_Queue_Len situation 221 KQ7_W3SVC_Filters_Load_Fail situation 226 KQ7_W3SVC_Listen_2_Many_Port situation 226 KQ7_W3SVC_Perfmon_Init_Err situation 227 KQ7_WAS_Config_Request_Fail situation 231 KQ7_WAS_Fail_2_Reg_Protocol situation 230 KQ7_WAS_Fail_To_Config_Job_Obj situation 221 KQ7_WAS_High_Load_Dynamic_Idle situation 231 KQ7_WAS_Process_Creation_Fail situation 229 KQ7_WAS_Rapid_Fail_Protection situation 229 KQ7_WAS_Service_Down situation 212 KQ7_Web_Server_Down situation 212 KQ7_Web_TooMany_Connections situation 233 KQ7_Web_TooMany_KB_Received situation 234 KQ7_Web_TooMany_KB_Sent situation 234 KQ7_Web_TooMany_Requests situation 233 KQ7_Website_Certificate_Expiry situation 235 KQ7_WMSVC_Auth_Read_Conf_Err situation 222 KQ7_WMSvc_Service_Down situation 213 KQ7_WMSVC_SvcHand_Unknown_Err situation 223 KQ7_WMSVC_UNABLE_2_READ_SETGS situation 223 KQ7_WP_Memory_Leak situation 219 KQ7_WP_Module_DLL_Load_Fail situation 228 KQ7_WP_Start_Fail situation 218 KQ7_WP_Terminated situation 224 KQ7_WPHOST_Failed_Init situation 228 L language packs 9 installing 9 silent installation 9 Last Collection Duration attribute 139 Last Collection Finished attribute 138 Last Collection Start attribute 138 list of messages 320 Load Balancer Capabilities attribute 94 Locked Error Rate (per sec) attribute 179 Log Name attribute 61 Logon Attempt Rate (per sec) attribute 76, 129 Logon Attempts Rate (per sec) attribute 176 Logon Method attribute 94 M Major FTP Version Number attribute 80 Major IIS Version Number attribute 110 Major NNTP Version Number attribute 134 Major SMTP Version Number attribute 142 Managed Pipeline Mode attribute 86 Managed Runtime Version attribute 86 Max Log File Size attribute 64 Max Number of Concurrent Allowed Reqs attribute 195 Max Number of Failed Login Attempts attribute 66 Max Number of Log Files attribute 64 Max Number of Reqs Over a Duration (in ms) attribute 196 Max Processes attribute 95 Maximum Anonymous Users attribute 74, 126, 173 Maximum CGI Requests attribute 181 Maximum Connections attribute 75, 128, 175 Maximum File Cache Memory Usage (KB) attribute 118, 150, 186 Maximum ISAPI Extension Requests attribute 182 Index 387

398 Maximum NonAnonymous Users attribute 74, 127, 173 Maximum Thread Count attribute 160 Maximum Worker Processes attribute 44 Membership Authentication Failures attribute 49, 51, 54 Message attribute 62 Message Location attribute 82 Message attribute 82 messages contents 319 for IBM Tivoli Composite Application Manager for Microsoft Applications: Microsoft Internet Information Services Agent 320 format 319 Messages Sent to WAS Rate (per sec) attribute 165 Metadata Cache Flushes attribute 155, 189 Metadata Cache Hits % attribute 188 Metadata Cache Hits attribute 155, 188 Metadata Cache Hits Rate (per sec) attribute 159 Metadata Cache Misses attribute 155, 188 Metadata Cache Misses Rate (per sec) attribute 159 Metadata Cached Rate (per sec) attribute 154 Method attribute 84, 200 Microsoft FTP Service attribute group 122 Microsoft FTP Service Uptime (hrs) attribute 130 Microsoft IIS agent performance considerations 312 Microsoft Internet Information Services situations 210 workspaces descriptions 19 Microsoft Internet Information Services workspace 19 MIME attribute 131 Mime s and Extension Restriction List workspace 23 Mime s attribute group 130 Minor FTP Version Number attribute 80 Minor IIS Version Number attribute 110 Minor NNTP Version Number attribute 135 Minor SMTP Version Number attribute 142 Module Name attribute 101 MSMQ Incoming HTTP Traffic attribute group 131 N Name attribute 43, 48, 50, 53, 55, 76, 122, 133, 148, 163, 183 new in this release 4 NNTP Server situations 233 workspaces descriptions 24 NNTP Server attribute group 133 NNTP Server workspace 24 NNTP Version Information attribute group 134 NNTP Virtual Server attribute 133 Node attribute 33, 43, 48, 50, 52, 55, 59, 60, 63, 64, 66, 67, 68, 77, 78, 80, 81, 82, 85, 87, 101, 102, 103, 104, 106, 108, 109, 110, 111, 113, 114, 116, 122, 130, 131, 133, 134, 135, 140, 141, 142, 146, 147, 162, 167, 184, 189, 191, 193, 194, 196, 198, 199 NonAnonymous Users Rate (per sec) attribute 172 Not Found Error Rate (per sec) attribute 179 Number of Collections attribute 139 O Object Name attribute 136 Object Status attribute 137 Object attribute 136 operating systems 9 Orphan Action Exe attribute 95 Orphan Action Params attribute 95 Orphan Worker Process attribute 95 Other Request Methods Rate (per sec) attribute 178 Output Cache Current Flushed Items attribute 160 Output Cache Current Items attribute 156 Output Cache Current Memory Usage (KB) attribute 151 Output Cache Flushed Items Rate (per sec) attribute 158 Output Cache Flushes Rate (per sec) attribute 158 Output Cache Hits Rate (per sec) attribute 161 Output Cache Misses Rate (per sec) attribute 160 Output Cache Total Flushed Items attribute 158 Output Cache Total Flushes attribute 157 Output Cache Total Hits attribute 157 Output Cache Total Misses attribute 157 overview IBM Tivoli Monitoring 1 P Page Faults per Sec attribute 57 Path attribute 65 Path Name attribute 103, 107, 108, 113 Percent Privileged Time attribute 57 Percent Processor Time attribute 58 Percent User Mode Time attribute 58 Performance and Health Application Pool Setting workspace 23 performance considerations 312 Performance Object Status attribute group 135 Performance Object Status workspace 20 Periodic Restart Memory attribute 96 Periodic Restart Private Memory attribute 96 Periodic Restart Requests attribute 96 Periodic Restart Time attribute 97 Physical Path attribute 190 PID attribute 57 Ping Interval attribute 97 Ping Response Time attribute 98 Pinging Enabled attribute 97 policies 273 prerequisite checker 13 prerequisite publications 371 prerequisites 13 probe rules file include 368 problems and workarounds 300 agent-specific 303 agent-specific workspaces 308 configuration 300 install 300 remote deployment 303 situations 312 Take Action commands 315 Tivoli Common Reporting 317 workspaces 308 Process ID attribute 104, 107, 108, 113 Protocol Sub Status attribute 84 Protocol Substatus attribute 202 Protocol Version attribute 83, 201 Proxy Mode attribute 197 publications 371, 372 developerworks website 372 IBM Tivoli Monitoring 371 Integrated Service Management Library 372 prerequisite Microsoft IIS agent User's Guide - Beta 1 Draft

399 publications (continued) Redbooks 372 related 372 Technotes 372 wikis 372 Q queries, using attributes 29 Query Name attribute 136 R Rapid Fail Protection attribute 98 Rapid Fail Protection Interval attribute 98 Rapid Fail Protection Max Crashes attribute 98 ras1 296 Recent Worker Process Failures attribute 44 Redbooks 372 Referrer attribute 201 Refresh Interval attribute 139 remote installation and configuration 14 remote deployment problems and workarounds 303 Removable attribute 190 Request Execution Time (ms) attribute 36 Request KBytes In Total attribute 35 Request KBytes Out Total attribute 35 Request Rate (per sec) attribute 40, 148 Request Wait GT Execution Time (ms) attribute 36 Request Wait Time (ms) attribute 36 Requests Disconnected Count attribute 36 Requests Executing Count attribute 37 Requests Failed Total attribute 37 Requests Not Authorized Count attribute 37 Requests Not Found Count attribute 38 Requests Queued Count attribute 38 Requests Queued Delta attribute 38 Requests Rejected Count attribute 39 Requests Served Rate (per sec) attribute 165 Requests Succeeded Count attribute 39 Requests Timed Out Count attribute 39 Requests Total attribute 40 requirements 9 response file template 9 Runtime Status Queries Rate (per sec) attribute 166 S Server IP Address attribute 83, 200 Server Name attribute 80, 103, 106, 108, 109, 113, 134, 141, 199 Server Name Indication Enabled attribute 146 Server Port attribute 83, 200 Server Status workspace 23 Service Name and Instance Number attribute 199 Session and Transaction Statistics workspace 19 Shutdown Time Limit attribute 99 silent installation 9 silent installation of language packs 9 Site ID attribute 111, 115 situations 209 additional information predefined, defined 207 KQ7_App_Load_Fail 218 situations (continued) KQ7_AppHostSvc_Hist_Config_Err 225 KQ7_AppHostSvc_Service_Down 213 KQ7_AppHostSvc_SID_Config_Err 224 KQ7_ASP_High_Error_Rate 211 KQ7_ASP_Que_Size_Increased 210 KQ7_ASP_Req_Dispatch_Slow 210 KQ7_ASP_Req_Que_Size_Large 211 KQ7_FTP_Pasport_MB_Access_Fail 220 KQ7_FTP_Pasvport_Invalid_Value 222 KQ7_FTP_Site_Down 231 KQ7_FTP_Site_Down_2 232 KQ7_FTP_System_Call_Failed 230 KQ7_Ftpsvc_Service_Down 217 KQ7_HTTP_Log_Serv_Unavailable 232 KQ7_HTTPFilter_Service_Down 215 KQ7_IIS_Web_Site_Down 235 KQ7_IIS_Web_Site_Down_2 235 KQ7_IISADMIN_Service_Down 212 KQ7_IISWMSVC_Login_Unknown_Err 222 KQ7_MSFtpsvc_Service_Down 214 KQ7_NetMsmqAct_Service_Down 216 KQ7_NetPipeAct_Service_Down 215 KQ7_NetTcpAct_Service_Down 216 KQ7_NetTcpPShr_Service_Down 217 KQ7_NntpSvc_Service_Down 215 KQ7_Process_Stop_Responding 224 KQ7_SMTPSVC_Service_Down 214 KQ7_VirtualDir_CfgLost 218 KQ7_W3_ETW_Tracing_Init_Failed 219 KQ7_W3_Fail_2_Create_FREB_Dir 229 KQ7_W3_Out_Of_Memory 227 KQ7_W3SVC_App_Pool_Cmd_Err 220 KQ7_W3SVC_Bind_Fail_Invald_URL 220 KQ7_W3SVC_Binding_Fail 225 KQ7_W3SVC_Fail_2_Init 226 KQ7_W3SVC_Fail_2_Set_Queue_Len 221 KQ7_W3SVC_Filters_Load_Fail 226 KQ7_W3SVC_Listen_2_Many_Port 226 KQ7_W3SVC_Perfmon_Init_Err 227 KQ7_WAS_Config_Request_Fail 231 KQ7_WAS_Fail_2_Reg_Protocol 230 KQ7_WAS_Fail_To_Config_Job_Obj 221 KQ7_WAS_High_Load_Dynamic_Idle 231 KQ7_WAS_Process_Creation_Fail 229 KQ7_WAS_Rapid_Fail_Protection 229 KQ7_WAS_Service_Down 212 KQ7_Web_Server_Down 212 KQ7_Web_TooMany_Connections 233 KQ7_Web_TooMany_KB_Received 234 KQ7_Web_TooMany_KB_Sent 234 KQ7_Web_TooMany_Requests 233 KQ7_Website_Certificate_Expiry 235 KQ7_WMSVC_Auth_Read_Conf_Err 222 KQ7_WMSvc_Service_Down 213 KQ7_WMSVC_SvcHand_Unknown_Err 223 KQ7_WMSVC_UNABLE_2_READ_SETGS 223 KQ7_WP_Memory_Leak 219 KQ7_WP_Module_DLL_Load_Fail 228 KQ7_WP_Start_Fail 218 KQ7_WP_Terminated 224 KQ7_WPHOST_Failed_Init 228 overview 207 predefined 207 problems and workarounds 312 Situation Editor 207 situations, using attributes 29 Index 389

400 SMP Affinitized attribute 99 SMP Processor Affinity Mask attribute 99 SMTP Server situations 233 workspaces descriptions 24 SMTP Server attribute group 140 SMTP Server workspace 24 SMTP Version Information attribute group 141 SMTP Virtual Server attribute 140 SSL Certificate Friendly Name attribute 192 SSL Port attribute 111, 115, 147 SSL Ports attribute 192 Start Application Host Helper Service action 238 Start Application Pool action 239 Start FTP Publishing Service action 241 Start FTP Site action 241 Start FTP Site by Name action 242 Start HTTP SSL Service action 243 Start IIS Admin Service action 244 Start IIS web server action 245 Start Microsoft FTP Service action 246 Start Net.Msmq Listener Adapter Service action 247 Start Net.Pipe Listener Adapter Service action 248 Start Net.Tcp Listener Adapter Service action 249 Start Net.Tcp Port Sharing Service action 250 Start Network News Transfer Protocol Service action 251 Start Simple Mail Transfer Protocol Service action 251 Start Web Management Service action 252 Start Website action 253 Start Website by Name action 254 Start Windows Process Activation Service action 255 Startup Time Limit attribute 100 State attribute 68, 104, 105, 107, 109, 112, 114, 115, 133, 141 Status attribute 55, 102, 104, 107, 109, 114 Status Codes attribute 65 Stop Application Host Helper Service action 256 Stop Application Pool action 257 Stop FTP Publishing Service action 258 Stop FTP Site action 259 Stop FTP Site by Name action 260 Stop HTTP SSL Service action 261 Stop IIS Admin Service action 262 Stop IIS web server action 262 Stop Microsoft FTP Service action 263 Stop Net.Msmq Listener Adapter Service action 264 Stop Net.Pipe Listener Adapter Service action 264 Stop Net.Tcp Listener Adapter Service action 265 Stop Net.Tcp Port Sharing Service action 266 Stop Network News Transfer Protocol Service action 267 Stop Simple Mail Transfer Protocol Service action 267 Stop Web Management Service action 268 Stop Website action 269 Stop Website by Name action 270 Stop Windows Process Activation Service action 271 support list of messages 320 T tacmd addsystem command 14 Take Action commands additional information 237 overview 237 predefined 237, 273 problems and workarounds 315 Start Application Host Helper Service 238 Take Action commands (continued) Start Application Pool 239 Start FTP Publishing Service 241 Start FTP Site 241 Start FTP Site by Name 242 Start HTTP SSL Service 243 Start IIS Admin Service 244 Start IIS web server 245 Start Microsoft FTP Service 246 Start Net.Msmq Listener Adapter Service 247 Start Net.Pipe Listener Adapter Service 248 Start Net.Tcp Listener Adapter Service 249 Start Net.Tcp Port Sharing Service 250 Start Network News Transfer Protocol Service 251 Start Simple Mail Transfer Protocol Service 251 Start Web Management Service 252 Start Website 253 Start Website by Name 254 Start Windows Process Activation Service 255 Stop Application Host Helper Service 256 Stop Application Pool 257 Stop FTP Publishing Service 258 Stop FTP Site 259 Stop FTP Site by Name 260 Stop HTTP SSL Service 261 Stop IIS Admin Service 262 Stop IIS web server 262 Stop Microsoft FTP Service 263 Stop Net.Msmq Listener Adapter Service 264 Stop Net.Pipe Listener Adapter Service 264 Stop Net.Tcp Listener Adapter Service 265 Stop Net.Tcp Port Sharing Service 266 Stop Network News Transfer Protocol Service 267 Stop Simple Mail Transfer Protocol Service 267 Stop Web Management Service 268 Stop Website 269 Stop Website by Name 270 Stop Windows Process Activation Service 271 take actions descriptions 238 Technotes 372 Thread Count attribute 57 Thread Pool Active Threads attribute 143 Thread Pool Avg Active Threads attribute 143 Thread Pool Avg Job Wait attribute 145 Thread Pool Avg Queue Length attribute 144 Thread Pool Max Active Threads attribute 144 Thread Pool Max Queue Length attribute 145 Thread Pool Max Size attribute 143 Thread Pool Min Active Threads attribute 144 Thread Pool Min Queue Length attribute 145 Thread Pool Queue Length attribute 144 Thread Pool Size attribute 143 Thread Pool Status attribute group 142 Thread Pool Status workspace 20 Thread Pool Total Jobs attribute 145 Threads Rate (per sec) attribute 149 Time attribute 83, 199 Time Duration (in Days.hh:mm:ss) attribute 67 Time Duration (in sec) attribute 66 Time Generated attribute 62 Time Since Last Worker Process Failure (hrs) attribute 45 Time Taken attribute 65, 202 Timed Out Sessions attribute Microsoft IIS agent User's Guide - Beta 1 Draft

401 Timestamp attribute 34, 43, 48, 50, 52, 55, 59, 63, 64, 66, 67, 69, 77, 79, 80, 81, 82, 85, 87, 101, 102, 103, 105, 106, 108, 109, 110, 112, 113, 114, 116, 122, 130, 131, 133, 134, 136, 140, 141, 143, 146, 147, 162, 167, 184, 190, 191, 193, 195, 196, 198, 199 Tivoli Business Service Manager components for integrating with 367 configuring additional IBM Tivoli Monitoring web services 370 creating a service 369 creating data source mapping 369 installing Discovery Library Toolkit 368 integration 367 launching from Tivoli Enterprise Portal 370 Tivoli Enterprise Portal Tivoli Event Integration Facility (EIF) probe 367 viewing data in Tivoli Enterprise Portal 370 Tivoli Business Service Managerintegration tasks 368 Tivoli Common Reporting problems and workarounds 317 Tivoli Enterprise Console event mapping 335 Tivoli Event Integration Facility (EIF) probe configuring 368 Total Anonymous Users attribute 73, 126, 172 Total Application Pool Recycles attribute 45 Total Application Pool Uptime (hrs) attribute 45 Total BLOBs Cached attribute 120 Total CGI Requests attribute 180 Total Connection Attempts (all instances) attribute 75 Total Connection Attempts (all Instances) attribute 175 Total Connection Attempts attribute 129 Total Files Cached attribute 117, 151, 185 Total Files Received attribute 70, 123, 170 Total Files Sent attribute 70, 123, 169 Total Files Transferred attribute 70, 124, 170 Total Flushed BLOBs attribute 121 Total Flushed Files attribute 119, 153, 187 Total Flushed Metadata attribute 156, 189 Total Health Pings attribute 164 Total HTTP Requests Served attribute 148 Total ISAPI Extension Requests attribute 181 Total KB Received (Superseded) attribute 168 Total KB Received attribute 183 Total KB Sent (Superseded) attribute 167 Total KB Sent attribute 182 Total KB Transferred (Superseded) attribute 168 Total KB Transferred attribute 183 Total Locked Errors attribute 179 Total Logon Attempts attribute 76, 129, 176 Total Messages Sent to WAS attribute 164 Total Metadata Cached attribute 154, 187 Total Method Requests attribute 177 Total Method Requests Rate (per sec) attribute 177 Total NonAnonymous Users attribute 73, 126, 172 Total Not Found Errors attribute 179 Total Other Request Methods attribute 178 Total Requests Rate (per sec) attribute 178 Total Requests Served attribute 165 Total Runtime Status Queries attribute 166 Total Sessions attribute 41 Total Threads attribute 149 Total Transactions attribute 42 Total WAS Messages Received attribute 166 Total Worker Process Failures attribute 46 Total Worker Process Ping Failures attribute 46 Total Worker Process Shutdown Failures attribute 46 Total Worker Process Startup Failures attribute 47 Total Worker Processes Created attribute 47 trace turn off 299 turn on 298 trace settings 296 tracing 294 Tracing attribute 63 Transaction Rate (per sec) attribute 41 Transactions Aborted attribute 41 Transactions Committed attribute 42 Transactions Pending Count attribute 42 troubleshooting 289 agent-specific 303 agent-specific workspaces 308 installation 300 problems and workarounds 300 remote deployment 303 situations 312 Take Action commands 315 Tivoli Common Reporting 317 turn off trace 299 turn on trace 298 uninstallation 300 workspaces 308 attribute 56 U URI Query attribute 200 URI Stem attribute 200 URL attribute 84 Use Centralized Certificate attribute 60 User Agent attribute 201 User and Connection Statistics for Microsoft FTP V6 workspace 22 User and Connection Statistics workspace 21 user interface options 5 User Name attribute 200 User Request Statistics workspace 25 Username attribute 60 V Version attribute 49, 52, 54 views Active Server Pages workspace 19 ASP NET workspace 19 Availability workspace 20 CGI and ISAPI Extension Request Statistics workspace 24 Data and File Traffic Statistics workspace 21 Data and File Transfer Statistics workspace 24 Error Statistics workspace 25 Event Log workspace 21 FTP Server workspace 21 FTP Site Dynamic IP and Domain Restrictions Statistics workspace 21 Identity and Recycling Application Pool Setting workspace 22 IIS Configuration workspace 22 IIS Global workspace 23 IIS Installed Components workspace 23 Microsoft Internet Information Services workspace 19 Mime s and Extension Restriction List workspace 23 NNTP Server workspace 24 Performance and Health Application Pool Setting workspace 23 Index 391

402 views (continued) Performance Object Status workspace 20 Server Status workspace 23 Session and Transaction Statistics workspace 19 SMTP Server workspace 24 Thread Pool Status workspace 20 User and Connection Statistics for Microsoft FTP V6 workspace 22 User and Connection Statistics workspace 21 User Request Statistics workspace 25 WAS Application Pool Statistics workspace 26 WAS Worker Process Statistics workspace 26 Web Server Cache Statistics workspace 25 Web Server workspace 25 Website Dynamic IP and Domain Restrictions Statistics workspace 26 Website Requests and Errors Statistics workspace 23 Worker Process workspace 26 Virtual Directory Name attribute 198 Virtual Domain Name attribute 147 Virtual Domain Setting attribute group 146 Virtual Size attribute 56 W W3SVC W3WP attribute group 147 WAM User Name attribute 100 WAS Application Pool Statistics workspace 26 WAS Messages Received Rate (per sec) attribute 166 WAS W3WP attribute group 162 WAS Worker Process Statistics workspace 26 Web Server situations 233 workspaces descriptions 24 Web Server Cache Statistics workspace 25 Web Server workspace 25 Web Service attribute group 167 Web Service Cache attribute group 183 Web Service Extensions Restricted List attribute group 189 Web Service Uptime (hrs) attribute 177 Web Site attribute 112, 114 Web Site Name attribute 111, 115 Website Certificate Details attribute group 191 Website Dynamic IP and Domain Restrictions attribute group 193 Website Dynamic IP and Domain Restrictions Statistics workspace 26 Website Dynamic IP Restrictions Settings attribute group 194 Website IP and Domain Restrictions Settings attribute group 196 Website Name attribute 63, 65, 146, 193, 195, 196 WebSite Name attribute 191 Website Requests and Errors Statistics workspace 23 Website Virtual Dir Details attribute group 197 WebSiteName attribute 112, 116 Websites W3C Logs attribute group 198 Websocket Active Reqs attribute 161 Websocket Connection Attempts Rate (per sec) attribute 161 Websocket Connections Accepted (per sec) attribute 161 Websocket Connections Rejected (per sec) attribute 162 wikis 372 Win32 Error attribute 100 Win32 Status attribute 202 workarounds 300 Worker Process situations 237 Worker Process (continued) workspaces descriptions 26 Worker Process workspace 26 Workflow Editor 273 Working Set Size attribute 57 workspaces Active Server Pages 19 ASP NET 19 Availability 20 CGI and ISAPI Extension Request Statistics 24 Data and File Traffic Statistics 21 Data and File Transfer Statistics 24 descriptions 18 Error Statistics 25 Event Log 21 FTP Server 21 FTP Site Dynamic IP and Domain Restrictions Statistics 21 Identity and Recycling Application Pool Setting 22 IIS Configuration 22 IIS Global 23 IIS Installed Components 23 Microsoft Internet Information Services 19 Mime s and Extension Restriction List 23 NNTP Server 24 Performance and Health Application Pool Setting 23 Performance Object Status 20 predefined 17 problems and workarounds 308 Server Status 23 Session and Transaction Statistics 19 SMTP Server 24 Thread Pool Status 20 User and Connection Statistics 21 User and Connection Statistics for Microsoft FTP V6 22 User Request Statistics 25 WAS Application Pool Statistics 26 WAS Worker Process Statistics 26 Web Server 24, 25 Web Server Cache Statistics 25 Website Dynamic IP and Domain Restrictions Statistics 26 Website Requests and Errors Statistics 23 Worker Process 26 Workspaces additional information 17 overview Microsoft IIS agent User's Guide - Beta 1 Draft

403

404 Printed in USA SC