CA Unified Infrastructure Management

Transcription

1 CA Unified Infrastructure Management Probe Guide for Exchange Server Monitor exchange_monitor v5.1 series

2 Copyright Notice This online help system (the "System") is for your informational purposes only and is subject to change or withdrawal by CA at any time. This System may not be copied, transferred, reproduced, disclosed, modified or duplicated, in whole or in part, without the prior written consent of CA. This System is confidential and proprietary information of CA and protected by the copyright laws of the United States and international treaties. This System may not be disclosed by you or used for any purpose other than as may be permitted in a separate agreement between you and CA governing your use of the CA software to which the System relates (the CA Software ). Such agreement is not modified in any way by the terms of this notice. Notwithstanding the foregoing, if you are a licensed user of the CA Software you may make one copy of the System for internal use by you and your employees, provided that all CA copyright notices and legends are affixed to the reproduced copy. The right to make a copy of the System is limited to the period during which the license for the CA Software remains in full force and effect. Should the license terminate for any reason, it shall be your responsibility to certify in writing to CA that all copies and partial copies of the System have been destroyed. TO THE EXTENT PERMITTED BY APPLICABLE LAW, CA PROVIDES THIS SYSTEM AS IS WITHOUT WARRANTY OF ANY KIND, INCLUDING WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NONINFRINGEMENT. IN NO EVENT WILL CA BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY LOSS OR DAMAGE, DIRECT OR INDIRECT, FROM THE USE OF THIS SYSTEM, INCLUDING WITHOUT LIMITATION, LOST PROFITS, LOST INVESTMENT, BUSINESS INTERRUPTION, GOODWILL, OR LOST DATA, EVEN IF CA IS EXPRESSLY ADVISED IN ADVANCE OF THE POSSIBILITY OF SUCH LOSS OR DAMAGE. The manufacturer of this System is CA. Provided with Restricted Rights. Use, duplication or disclosure by the United States Government is subject to the restrictions set forth in FAR Sections , , and (c)(1) - (2) and DFARS Section (b)(3), as applicable, or their successors. Copyright 2014 CA. All rights reserved. All trademarks, trade names, service marks, and logos referenced herein belong to their respective companies. Legal information on third-party and public domain software used in this product is documented in the Third-Party Licenses and Terms of Use (

3 Contact CA Contact CA Support For your convenience, CA Technologies provides one site where you can access the information that you need for your Home Office, Small Business, and Enterprise CA Technologies products. At you can access the following resources: Online and telephone contact information for technical assistance and customer services Information about user communities and forums Product and documentation downloads CA Support policies and guidelines Other helpful resources appropriate for your product Providing Feedback about Product Documentation Send comments or questions about CA Technologies product documentation to To provide feedback about general CA Technologies product documentation, complete our short customer survey which is available on the support website at

4

5 Contents Chapter 1: Exchange Server Monitor (exchange_monitor) Overview v5.1 7 About This Guide... 7 Related Documentation... 8 New Features... 8 Preconfiguration Requirements... 8 Supported Platforms... 8 Chapter 2: Exchange Server Monitor (exchange_monitor) Configuration Details v5.1 9 exchange_monitor Node... 9 File Monitoring Node Message Node <Profile Name> Node Setup Node Status Node Configure a Node How to Configure Alarm Thresholds Manage Profile Configure Exchange Server Path Chapter 3: Metrics 19 exchange_monitor QoS Metrics exchange_monitor Alert Metrics Default Settings Contents 5

6 Documentation Changes This table describes the version history for this document. Version Date What's New? 5.1 October 2014 Added the Configure Exchange Server Path topic. 5.1 September 2014 Added the New Features topic. 5.1 June 2014 Added the General Setup section in the exchange_monitor node. 5.1 September 2013 Initial Web-based GUI version of this probe. (Previous versions of this probe are configured using Infrastructure Manager). 6 Probe Guide for Exchange Server Monitor

7 Chapter 1: Exchange Server Monitor (exchange_monitor) Overview v5.1 The Exchange Server Monitor (exchange_monitor) probe monitors the performance of an Exchange server. Quality of service (QoS) and alarm messages are generated on a set of performance related statistics and parameters. This section contains the following topics: About This Guide (see page 7) Related Documentation (see page 8) New Features (see page 8) Preconfiguration Requirements (see page 8) About This Guide This guide is for the CA Nimsoft Monitor Administrator to help understand the configuration of the Exchange Server Monitor probe. This guide contains the following information: An overview of the Exchange Server Monitorprobe. The related documentation for previous probe versions, release notes, and so on. The configuration details of the probe including information for the fields that are required to configure the probe. The common procedures that can be used in the probe configuration. Field information for the fields, required to configure the probe in the first-time deployment of the probe. Important! The field description for intuitive terms in the GUI has not been included in the document. Chapter 1: Exchange Server Monitor (exchange_monitor) Overview v5.1 7

8 Related Documentation Related Documentation For related information that may be of interest, see the following material: Related Documentation Documentation for other versions of the exchange_monitor probe The Release Notes for the exchange_monitor probe User documentation for the Admin Console Monitor Metrics Reference Information for CA Unified Infrastructure Management Probes ( New Features From version 5.1 onwards, the probe supports monitoring of: Exchange Server 2013 SP1 on Windows Server 2012 and Windows Server 2012 R2. Exchange Server 2013 SP3 on Windows Server Preconfiguration Requirements This section contains the preconfiguration requirements for the Exchange Server Monitor probe. Supported Platforms Refer to the Nimsoft Compatibility Support Matrix for the latest information on supported platforms. See also the Support Matrix for Nimsoft Probes for specific information on the Exchange Server Monitor probe. 8 Probe Guide for Exchange Server Monitor

9 Chapter 2: Exchange Server Monitor (exchange_monitor) Configuration Details v5.1 The Exchange Server Monitor probe looks at a set of parameters on your Exchange Server to check its health. Alarm messages can be generated based on the values of the parameters being checked. Quality of service (QoS) messages are generated on a set of performance-related statistics. The probe is configured by defining one or more users. You can add profiles for each user. These monitoring profiles define how the test mail message is sent and returned. These profiles also specify the alarm and QoS properties. This section contains the following topics: exchange_monitor Node (see page 9) Configure a Node (see page 16) How to Configure Alarm Thresholds (see page 17) Manage Profile (see page 17) Configure Exchange Server Path (see page 18) exchange_monitor Node The exchange_monitor node allows you to view the probe information. Navigation: exchange_monitor Node Chapter 2: Exchange Server Monitor (exchange_monitor) Configuration Details v5.1 9

10 exchange_monitor Node Set or modify the following values that are based on your requirement: exchange_monitor > Probe Information This section provides information about the probe name, probe version, start time of the probe, and the vendor who created the probe. exchange_monitor > General Setup This section lets you configure the probe monitoring properties and enable the performance counters. Log Level: specifies the detail level of the log file. Perfmon Samples: specifies the number of samples for Perfmon counters. Performance Monitoring Enabled: enables the monitoring of the profiles that are available in the Perfmon probe. Performance Check Interval (Seconds): indicates the time interval (in seconds) between each profile monitoring process. Process Monitoring Enabled: enables the monitoring of the profiles that are available in the Processes probe. Service Monitoring Enabled: enables the monitoring of the profiles that are available in the NTServices probe. Event Monitoring Enabled: enables the monitoring of the profiles that are available in the NTevl probe. DAG Monitoring Enabled: enables the monitoring of the Database Availability Group (DAG) server. You must also enable the DAG checkpoints. Note: This feature is available only for Exchange server 2010 and higher. Browse DAG Script File: defines the path of the CheckDatabaseRedundancy.ps1 script. File/Dir Monitoring: enables the file or directory monitoring. User Name: defines the user name for accessing the files if they are present on another network. Check Interval (Seconds): specifies the time interval between each file monitoring process. 10 Probe Guide for Exchange Server Monitor

11 exchange_monitor Node File Monitoring Node This node lets you add a monitoring profile that works with the Exchange Server Monitor probe. Navigation: exchange_monitor Node > File Monitoring Node Set or modify the following values as required: File Monitoring > Options > Add This section allows you to create a profile for monitoring the profiles of the probes Perfmon, Processes, ntevl, and ntservices. Message Node This node lets you view the list of alarm message that are available on the Exchange Server Monitor probe. Navigation: exchange_monitor Node > File Monitoring Node > Message Node Set or modify the following values as required: Message > Message definitions This section allows you to view the details of alarm messages of the Exchange Server Monitor probe. Message Text: Identifies the alarm message text that is issued on the message alarm. Severity: Specifies the level of severity of the alarm. Message Token: Selects the alarm message that is issued if the specified threshold value is breached. Subsystem: Identifies the subsystem ID of the alarm that defines the source of the alarm. Chapter 2: Exchange Server Monitor (exchange_monitor) Configuration Details v5.1 11

12 exchange_monitor Node <Profile Name> Node This node allows you to view the list of all checkpoints that are defined on the profile. You can also configure the alarm messages that are generated. Note: The profile appearing as a child node, under the Message node is user-configurable. Hence, the profile is referred as the profile name node throughout this document. Navigation: exchange_monitor Node > profile name Node Set or modify the following values as required: profile name > Profile This section allows you to view and configure the checkpoints of the profile. Group: Defines the logical group to which the checkpoint belongs. Servers: Defines the version of the exchange server. Calculate Average based on: Indicates the calculation of average value of the threshold values of the checkpoint. Samples: Specifies a measured value which is compared to the threshold value that is defined on the checkpoint. Compare Type: Defines the type of comparison of the threshold value. Message on Alarm: Defines the message that is displayed when the alarm is issued. Message clear: Defines the message that is displayed when the alarm is cleared. 12 Probe Guide for Exchange Server Monitor

13 exchange_monitor Node <Probe-Monitor Name> Node This node represents the monitors for profiles of ntevl, perfmon, processes, and ntservices probe. You can activate various monitors of the profiles of each of these probes. Note: The monitors are different for different probes and the node is referred to as the probe-monitor name node in the document. Navigation: exchange_monitor Node > File Monitoring Node > Message Node > profile name Node > probe-monitor name Set or modify the following values as required: probe-monitor name > : 1 This section allows you to view and configure the QoS properties of the profile. QoS Name: Indicates the QoS name. Description: Indicates the name of the profile. Metric ID: Indicates a unique metric ID for Exchange Server Monitor profile. Profile Name: Defines the name of the profile. Note: You can configure the QoS properties of each profile same as the : 1 profile. Setup Node This node represents the monitoring properties such as, generating reports on the growth of your mail box and login to exchange server using LDAP, HTTP or WMI protocol. Navigation: exchange_monitor Node > Setup Node Chapter 2: Exchange Server Monitor (exchange_monitor) Configuration Details v5.1 13

14 exchange_monitor Node Mail Growth This node represents the properties of the probe for monitoring the growth of mail boxes on the exchange server. Note: The fields in this node are disabled as this functionality depends on group policies and user privileges. Navigation: exchange_monitor Node > Setup Node > Mail Growth Set or modify the following values as required: Mail Growth > Mail box size (KB) This section represents the threshold values that are set for monitoring the growth of mail box size. Check Mail Growth: indicates that the mail box growth on the exchange server is checked. Check Interval: indicates the time interval after which the probe checks the mail box growth on the exchange server. Growth limit on each iteration: indicates the maximum limit for mail box growth. Iterations of growth before size alarm is issued: indicates the number of times of the mail box growth exceeds the Check Interval value. After the specified limit, mailbox size alarm is issued. Check only mailboxes with size greater than: indicates a conditional value for checking the mail box size. Note: Similar field description applies to the Mailbox Items section. 14 Probe Guide for Exchange Server Monitor

15 exchange_monitor Node Report Information Protocol Name Node This node lets you to configure the probe for collecting the reports on the data stored in database of the exchange server. For enabling this section, you must login using HTTP, LDAP, or WMI protocol. Navigation: exchange_monitor Node > Setup Node > Report Information Set or modify the following values as required: Report Information > Report Information Config This section lets you define the properties for collecting exchange server reports. Note: The Actions drop down tests whether you have successfully logged in through LDAP, HTTP, or WMI protocol. Gather Report Information: makes all gathered data available for report generation. Filter stores and databases for servers: ensures that reports are generated for only the exchange server that the probe monitors. Database Size: specifies whether the summary is composed of either EDB, or SLV file, or both. This node represents the different protocols through which you can gather the data from the exchange server for report generation. The protocols can be LDAP, HTTP, and WMI. This section lets you enter your login credentials of any of these protocols for accessing the exchange server database. You can test the login attempt through Actions drop down. Note: This node is referred to as protocol name node as it represents 3 different protocols. Chapter 2: Exchange Server Monitor (exchange_monitor) Configuration Details v5.1 15

16 Configure a Node Status Node This node represents the status of all the check points for all active profiles. Navigation: exchange_monitor Node > Status Node Set or modify the following values as required: Status > Status Viewer This section displays the details of all the status type in a tabular form. Name: indicates the checkpoint name. Unit: indicates the unit of the measured value. Group: indicates the logical group to which this checkpoint belongs. A logical group defines the measurement type. Type: indicates the probe from which this checkpoint is retrieved. This can be perfmon, ntservices, processes, and ntevl. Value: indicates the latest measured value. At: indicates the time, day, and the month at which the value is measured. Compare Type: defines the operator for measuring the value. Message on Alarm: indicates the alarm message text. Configure a Node This procedure provides the information to configure a particular section within a node. Each section within the node allows you to configure the properties of the Exchange Server Monitor probe. Follow these steps: 1. Select the appropriate navigation path. 2. Update the field information and click Save. The specified section of the Exchange Server Monitor probe is configured. 16 Probe Guide for Exchange Server Monitor

17 How to Configure Alarm Thresholds How to Configure Alarm Thresholds Some Quality of Service measurement probes allow you to set different types of alarm thresholds. These threshold options allow you to more broadly control when alarm messages are sent for each QoS probe. For more information about the different alarm thresholds and their configuration requirements, refer to the General Probe Configuration section of the Admin Console Help. Manage Profile You can configure the probe to create a connection. Follow these steps: 1. Click the Options icon next to the File Monitoring node in the navigation pane. 2. Click the Add option. 3. Update the field information and click Submit. The new connection is saved under the Messages node in the navigation pane. Chapter 2: Exchange Server Monitor (exchange_monitor) Configuration Details v5.1 17

18 Configure Exchange Server Path Configure Exchange Server Path The Exchange Server Monitor probe access the Microsoft Exchange Server installation path for collecting values of certain monitoring parameters. If the path is not configured correctly, the QoS data of such parameters is NULL. The probe lets you configure a separate path for both Microsoft Exchange Server 2010 and Follow these steps: 1. Open the Raw Configure GUI of the probe and navigate to the dag section. 2. Define the Microsoft Exchange Server 2010 installation directory path as the exchange_2010_path key value. Note: Similarly, define the Microsoft Exchange Server 2013 installation directory path as the exchange_2013_path key value. 3. Click OK to save the configuration. 4. Restart the probe for applying the configuration changes. The Microsoft Exchange Server installation path is configured. Important: The installation path must end with a forward slash (/). 18 Probe Guide for Exchange Server Monitor

19 Chapter 3: Metrics This section contains the following topics: exchange_monitor QoS Metrics (see page 19) exchange_monitor Alert Metrics Default Settings (see page 36) exchange_monitor QoS Metrics The following table describes the checkpoint metrics that can be configured using the Microsoft Exchange Monitoring probe. Monitor Name Units Description QOS_EXCHANGE_MEMORY_AVAILABLE_MBYTES MB Available MBytes QOS_EXCHANGE_MEMORY_POOL_PAGED_BYTES MB Pool Paged bytes QOS_EXCHANGE_MEMORY_CACHE_BYTES MB Cache Bytes QOS_EXCHANGE_MEMORY_COMMITED_BYTES MB Committed Bytes QOS_EXCHANGE_MEMORY_COMMITED_BYTES_IN_USE Pct Committed Bytes in Use QOS_EXCHANGE_MEMORY_TRANSITION_PAGES_REPUR POSED_PER_SECOND Count Transition Pages Repurposed Per Second QOS_EXCHANGE_MEMORY_PAGE_READS_PER_SECOND Count Page Reads Per Second QOS_EXCHANGE_MEMORY_PAGES_INPUT_PER_SECOND Count QOS_EXCHANGE_MEMORY_PAGES_OUTPUT_PER_SECO ND Count Pages Input Per Second Pages Output Per Second QOS_EXCHANGE_MEMORY_PRIVATE_BYTES MB Private Bytes QOS_EXCHANGE_MEMORY_VIRTUAL_BYTES MB Virtual Bytes QOS_EXCHANGE_MEMORY_WORKING_SET MB Working Set QOS_EXCHANGE_MEMORY_HANDLE_COUNT Count Handle Count QOS_EXCHANGE_MEMORY_DOTNET-TIME_IN_GC Pct DOTNET-Time In GC QOS_EXCHANGE_MEMORY_DOTNET-EXCEPTION_THRO WN_PER_SEC QOS_EXCHANGE_MEMORY_DOTNET-BYTES_IN_ALL_HEA PS Count QOS_EXCHANGE_PROCESSOR_USER_TIME Pct User Time MB DOTNET-Exception Thrown Per Sec DOTNET-Bytes In All Heaps Chapter 3: Metrics 19

20 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_PROCESSOR_PRIVILEGED_TIME Pct Privileged Time QOS_EXCHANGE_PROCESSOR_PROCESSOR_TIME_INSTA NCE QOS_EXCHANGE_PROCESSOR_PROCESSOR_QUEUE_LEN GTH QOS_EXCHANGE_NETWORK_PACKETS_OUTBOUND_ERR ORS QOS_EXCHANGE_NETWORK_TCPV4_CONNECTIONS_EST ABLISHED QOS_EXCHANGE_NETWORK_TCPV6_CONNECTION_FAIL URES QOS_EXCHANGE_NETWORK_TCPV4_CONNECTIONS_RES ET QOS_EXCHANGE_NETWORK_TCPV6_CONNECTION_RESE T QOS_EXCHANGE_TRANS_ROLE_AVERAGE_DISK_SECOND S_PER_READ-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_AVERAGE_DISK_SECOND S_PER_WRITE-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_SUBMISSION_QUEUE_LE NGTH QOS_EXCHANGE_TRANS_ROLE_RETRY_NON-SMTP_DELI VERY_QUEUE_LENGTH QOS_EXCHANGE_TRANS_ROLE_RETRY_REMOTE_DELIVE RY_QUEUE_LENGTH QOS_EXCHANGE_TRANS_ROLE_LARGEST_DELIVERY_QU EUE_LENGTH QOS_EXCHANGE_TRANS_ROLE_POISON_QUEUE_LENGT H-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_INPUT-OUTPUT_LOG_W RITES_PER_SEC QOS_EXCHANGE_TRANS_ROLE_INPUT-OUTPUT_LOG_RE ADS_PER_SEC QOS_EXCHANGE_TRANS_ROLE_LOG_GENERATION_CHE CKPOINT_DEPTH-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_VERSION_BUCKETS_ALL OCATED Pct Count Count Count Count Count Count ms ms msgs msgs msgs msgs msgs logs/sec logs/sec cnt versions Processor Time Instance Processor Queue Length Packets Outbound Errors TCPv4 Connections Established TCPv6 Connection Failures TCPv4 Connections Reset TCPv6 Connections Reset Average Disk Seconds Per Read-Transport Average Disk Seconds Per Write-Transport Submission Queue Length Retry Non-Smtp Delivery Queue Length Retry Remote Delivery Queue Length Largest Delivery Queue Length Poison Queue Length-Transport Input-Output Log Writes Per Sec Input-Output Log Reads Per Sec Log Generation Checkpoint Depth-Transport Version Buckets Allocated 20 Probe Guide for Exchange Server Monitor

21 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_TRANS_ROLE_INPUT-OUTPUT_DATABA SE_READS_PER_SEC QOS_EXCHANGE_TRANS_ROLE_INPUT-OUTPUT_DATABA SE_WRITES_PER_SEC QOS_EXCHANGE_TRANS_ROLE_LOG_RECORD_STALLS_P ER_SEC-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_LOG_THREADS_WAITING -TRANSPORT QOS_EXCHANGE_TRANS_ROLE_TOTAL_AGENT_INVOCAT IONS QOS_EXCHANGE_TRANS_ROLE_MESSAGES_COMPLETED _DELIVERY_PER_SECOND QOS_EXCHANGE_TRANS_ROLE_INBOUND:_LOCALDELIVE RYCALLSPERSECOND QOS_EXCHANGE_TRANS_ROLE_OUTBOUND:_SUBMITTE D_MAIL_ITEMS_PER_SECOND QOS_EXCHANGE_TRANS_ROLE_AVERAGE_BYTES_PER_M ESSAGE QOS_EXCHANGE_TRANS_ROLE_MESSAGES_RECEIVED_P ER_SEC-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_MESSAGES_SENT_PER_S EC-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_INBOUND:_MESSAGEDE LIVERYATTEMPTSPERSECOND QOS_EXCHANGE_TRANS_ROLE_INBOUND:_RECIPIENTS_ DELIVERED_PER_SECOND QOS_EXCHANGE_TRANS_ROLE_AVERAGE_AGENT_PROC ESSING_TIME_IN_SECONDS QOS_EXCHANGE_TRANS_ROLE_ACTIVE_MAILBOX_DELIV ERY_QUEUE_LENGTH-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_ACTIVE_REMOTE_DELIV ERY_QUEUE_LENGTH-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_AGGREGATE_DELIVERY_ QUEUE_LENGTH_(ALL_QUEUES)-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_ACTIVE_NON-SMTP_DEL IVERY_QUEUE_LENGTH-TRANSPORT rds/sec wrts/sec logs/sec thrds invocations msgs/sec atmpts/sec Items/sec byts/msg msgs/sec msgs/sec atmpts/sec recipts/sec msg/s items items items items Input-Output Database Reads Per Sec Input-Output Database Writes Per Sec Log Record Stalls Per Sec-Transport Log Threads Waiting-Transport Total Agent Invocations Messages Completed Delivery Per Second Inbound: LocalDeliveryCallsPerSecond Outbound: Submitted Mail Items Per Second Average Bytes Per Message Messages Received Per Sec-Transport Messages Sent Per Sec-Transport Inbound: MessageDeliveryAttemptsPerSecond Inbound: Recipients Delivered Per Second Average Agent Processing Time In Seconds Active Mailbox Delivery Queue Length-Transport Active Remote Delivery Queue Length-Transport Aggregate Delivery Queue Length (All Queues)-Transport Active Non-Smtp Delivery Queue Length-Transport Chapter 3: Metrics 21

22 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_TRANS_ROLE_RETRY_MAILBOX_DELIVE RY_QUEUE_LENGTH-TRANSPORT QOS_EXCHANGE_TRANS_ROLE_UNREACHABLE_QUEUE_ LENGTH-TRANSPORT QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_READS_(A TTACHED)_AVERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_WRITES_( ATTACHED)_AVERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_PAGE_FA ULT_STALLS_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_LOG_WRITES_AVERA GE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_LOG_RECORD_STALLS _PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_LOG_THREADS_WAITI NG QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_READS_(R ECOVERY)_AVERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_WRITES_( RECOVERY)_AVERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_LOG_READS_AVERAG E_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_RPC_REQUESTS_-_MA ILBOX QOS_EXCHANGE_MAILBOX_ROLE_RPC_AVERAGED_LATE NCY QOS_EXCHANGE_MAILBOX_ROLE_RPC_AVERAGE_LATEN CY_-_MAILBOX QOS_EXCHANGE_MAILBOX_ROLE_RPC_AVERAGE_LATEN CY_-_CLIENT QOS_EXCHANGE_MAILBOX_ROLE_CLIENT_REPORTED_F AILED_RPCS_FOR_SERVER_TOO_BUSY_ERROR_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_CLIENT_REPORTED_F AILED_RPCS_FOR_SERVER_TOO_BUSY_ERROR QOS_EXCHANGE_MAILBOX_ROLE_MESSAGES_QUEUED_ FOR_SUBMISSION_MAILBOX msgs msgs ms ms psg/s ms rcrds/s thrds ms ms ms reqs ms ms ms errs/s errs msgs Retry Mailbox Delivery Queue Length-Transport Unreachable Queue Length-Transport Database Reads (Attached) Average Latency Database Writes (Attached) Average Latency Database Page Fault Stalls Per Sec Log Writes Average Latency Log Record Stalls Per Sec Log Threads Waiting Database Reads (Recovery) Average Latency Database Writes (Recovery) Average Latency Log Reads Average Latency RPC Requests - Mailbox RPC Averaged Latency RPC Average Latency - Mailbox RPC Average Latency - Client Client Reported Failed RPCs For Server Too Busy Error Per Sec Client Reported Failed RPCs For Server Too Busy Error Messages Queued For Submission Mailbox 22 Probe Guide for Exchange Server Monitor

23 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_MAILBOX_ROLE_MESSAGES_QUEUED_ FOR_SUBMISSION_PUBLIC QOS_EXCHANGE_MAILBOX_ROLE_LOG_GENERATION_C HECKPOINT_DEPTH QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_PAGE_FA ULT_STALLS_PER_SEC_-_INFORMATION_STORE QOS_EXCHANGE_MAILBOX_ROLE_LOG_RECORD_STALLS _PER_SEC_-_INFORMATION_STORE QOS_EXCHANGE_MAILBOX_ROLE_LOG_THREADS_WAITI NG_-_INFORMATION_STORE QOS_EXCHANGE_MAILBOX_ROLE_VERSION_BUCKETS_A LLOCATED_-_INFORMATION_STORE QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_READS_A VERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_WRITES_A VERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_CACHE_SI ZE_-_INFORMATION_STORE QOS_EXCHANGE_MAILBOX_ROLE_DATABASE_CACHE_PE RCENTAGE_HIT QOS_EXCHANGE_MAILBOX_ROLE_LOG_BYTES_WRITE_P ER_SEC QOS_EXCHANGE_MAILBOX_ROLE_SLOW_FINDROW_RAT E msgs cnt Messages Queued For Submission Public Log Generation Checkpoint Depth pgs/s Database Page Fault Stalls Per Sec - Information Store rcrds/s thrds Log Record Stalls Per Sec - Information Store Log Threads Waiting - Information Store bukts Version Buckets Allocated - Information Store ms ms MB % bytes/s rate Database Reads Average Latency Database Writes Average Latency Database Cache Size - Information Store Database Cache Percentage Hit Log Bytes Write Per Sec Slow FindRow Rate QOS_EXCHANGE_MAILBOX_ROLE_SEARCH_TASK_RATE tasks/s Search Task Rate QOS_EXCHANGE_MAILBOX_ROLE_SLOW_QP_THREADS thrds Slow QP Threads QOS_EXCHANGE_MAILBOX_ROLE_SLOW_SEARCH_THRE ADS QOS_EXCHANGE_MAILBOX_ROLE_PROCESSOR_TIME_-_ MS_EXCHANGE_SEARCH_SERVICE QOS_EXCHANGE_MAILBOX_ROLE_PROCESSOR_TIME_-_ MSFTEFD_PROCESS QOS_EXCHANGE_MAILBOX_ROLE_RECENT_AVERAGE_LA TENCY_OF_RPCS_USED_TO_OBTAIN_CONTENT QOS_EXCHANGE_MAILBOX_ROLE_AVERAGE_DOCUMEN T_INDEXING_TIME thrds Slow Search Threads % Processor Time - MS Exchange Search Service % ms ms Processor Time - Msftefd Process Recent Average Latency of RPCs Used To Obtain Content Average Document Indexing Time Chapter 3: Metrics 23

24 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_MAILBOX_ROLE_FULL_CRAWL_MODE_ STATUS QOS_EXCHANGE_MAILBOX_ROLE_PROCESSOR_TIME_ _ MAILBOXASSISTANTS crawl Full Crawl Mode Status QOS_EXCHANGE_MAILBOX_ROLE_EVENTS_IN_QUEUE evnts Events In Queue QOS_EXCHANGE_MAILBOX_ROLE_AVERAGE_EVENT_PR OCESSING_TIME_IN_SECONDS QOS_EXCHANGE_MAILBOX_ROLE_AVERAGE_RESOURCE _BOOKING_PROCESSING_TIME QOS_EXCHANGE_MAILBOX_ROLE_REQUESTS_FAILED_- RESOURCE_BOOKING QOS_EXCHANGE_MAILBOX_ROLE_AVERAGE_CALENDAR _ATTENDANT_PROCESSING_TIME QOS_EXCHANGE_MAILBOX_ROLE_REQUESTS_FAILED_-_ CALENDAR_ATTENDANT QOS_EXCHANGE_MAILBOX_ROLE_RPC_LATENCY_AVERA GE_-_STORE_INTERFACE QOS_EXCHANGE_MAILBOX_ROLE_ROP_REQUESTS_OUT STANDING QOS_EXCHANGE_MAILBOX_ROLE_RPC_REQUESTS_OUTS TANDING QOS_EXCHANGE_MAILBOX_ROLE_RPC_REQUESTS_OUTS TANDING_INSTANCE QOS_EXCHANGE_MAILBOX_ROLE_RPC_REQUESTS_SENT _PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_RPC_SLOW_REQUEST S_LATENCY_AVERAGE QOS_EXCHANGE_MAILBOX_ROLE_RPC_REQUESTS_FAILE D_PERCENTAGE QOS_EXCHANGE_MAILBOX_ROLE_RPC_SLOW_REQUEST S_PERCENTAGE QOS_EXCHANGE_MAILBOX_ROLE_SUCCESSFUL_SUBMIS SIONS_PER_SECOND QOS_EXCHANGE_MAILBOX_ROLE_HUB_SERVERS_IN_RE TRY QOS_EXCHANGE_MAILBOX_ROLE_FAILED_SUBMISSIONS _PER_SECOND % s s reqs s reqs ms reqs reqs reqs reqs/s ms % % sbms/s srvrs sbms/s Processor Time MailboxAssistants Average Event Processing Time In Seconds Average Resource Booking Processing Time Requests Failed - Resource Booking Average Calendar Attendant Processing Time Requests Failed - Calendar Attendant RPC Latency Average - Store Interface ROP Requests Outstanding RPC Requests Outstanding RPC Requests Outstanding Instance RPC Requests Sent Per Sec RPC Slow Requests Latency Average RPC Requests Failed Percentage RPC Slow Requests Percentage Successful Submissions Per Second Hub Servers In Retry Failed Submissions Per Second 24 Probe Guide for Exchange Server Monitor

25 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_MAILBOX_ROLE_TEMPORARY_SUBMIS SION_FAILURES_PER_SEC sbms/s QOS_EXCHANGE_MAILBOX_ROLE_COPYQUEUELENGTH files CopyQueueLength QOS_EXCHANGE_MAILBOX_ROLE_REPLAYQUEUELENGT H QOS_EXCHANGE_MAILBOX_ROLE_SEEDING_FINISHED_P ERCENTAGE QOS_EXCHANGE_MAILBOX_ROLE_RPC_OPERATIONS_PE R_SEC QOS_EXCHANGE_MAILBOX_ROLE_RPC_CLIENT_BACKOF F_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_FAILED_CLIENT_RPCS _FOR_SERVER_TOO_BUSY_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_FAILED_CLIENT_RPCS _FOR_SERVER_TOO_BUSY QOS_EXCHANGE_MAILBOX_ROLE_RPC_OPERATIONS_PE R_SEC_-_MSEXCHANGEIS_CLIENT QOS_EXCHANGE_MAILBOX_ROLE_JET_LOG_RECORDS_P ER_SEC QOS_EXCHANGE_MAILBOX_ROLE_JET_PAGES_READ_PE R_SEC QOS_EXCHANGE_MAILBOX_ROLE_DIRECTORY_ACCESS_L DAP_READS_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_DIRECTORY_ACCESS_L DAP_SEARCHES_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_MESSAGES_DELIVERE D_PER_SEC_ _MAILBOX QOS_EXCHANGE_MAILBOX_ROLE_MESSAGES_SENT_PER _SEC_ _TOTAL QOS_EXCHANGE_MAILBOX_ROLE_MESSAGES_SUBMITT ED_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_REPLICATION_RECEIV E_QUEUE_SIZE QOS_EXCHANGE_MAILBOX_ROLE_MAILBOXES_PROCESS ED_PER_SEC QOS_EXCHANGE_MAILBOX_ROLE_EVENTS_POLLED_PER _SEC files % oper/s oper/s errs/s errs Temporary Submission Failures Per Sec ReplayQueueLength Seeding Finished Percentage RPC Operations Per Sec RPC Client Backoff Per Sec Failed Client RPCs For Server Too Busy Per Sec Failed Client RPCs For Server Too Busy oper/s RPC Operations Per Sec - MSExchangeIS Client recs/s pgs/s rd/s srch/s msg/s msg/s msg/s msg/s mlbox/s evnts/s JET Log Records Per Sec JET Pages Read Per Sec Directory Access LDAP Reads Per Sec Directory Access LDAP Searches Per Sec Messages Delivered Per Sec Mailbox Messages Sent Per Sec Total Messages Submitted Per Sec Replication Receive Queue Size Mailboxes Processed Per Sec Events Polled Per Sec Chapter 3: Metrics 25

26 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_CAS_ROLE_AVERAGE_SEARCH_TIME ms Average Search Time QOS_EXCHANGE_CAS_ROLE_APPLICATION_RESTARTS count Application Restarts QOS_EXCHANGE_CAS_ROLE_WORKER_PROCESS_RESTA RTS count Worker Process Restarts QOS_EXCHANGE_CAS_ROLE_REQUEST_WAIT_TIME count Request Wait Time QOS_EXCHANGE_CAS_ROLE_REQUESTS_IN_APPLICATIO N_QUEUE QOS_EXCHANGE_CAS_ROLE_AVERAGE_TIME_TO_PROCE SS_A_FREE_BUSY_REQUEST QOS_EXCHANGE_CAS_ROLE_SYNC_COMMANDS_PENDI NG requests sec commands Requests In Application Queue Average Time To Process A Free Busy Request Sync Commands Pending QOS_EXCHANGE_CAS_ROLE_REQUESTS_QUEUED requests Requests Queued QOS_EXCHANGE_CAS_ROLE_NUMBER_OF_FAILED_BACK -END_CONNECTION_ATTEMPTS_PER_SECOND QOS_EXCHANGE_CAS_ROLE_CURRENT_NUMBER_OF_IN COMING_RPC_OVER_HTTP_CONNECTIONS QOS_EXCHANGE_CAS_ROLE_CURRENT_NUMBER_OF_U NIQUE_USERS QOS_EXCHANGE_CAS_ROLE_RPC_-_HTTP_REQUESTS_PE R_SECOND QOS_EXCHANGE_CAS_ROLE_RPC_AVERAGED_LATENCY_ -_RPCCLIENTACCESS QOS_EXCHANGE_CAS_ROLE_RPC_OPERATIONS_PER_SE C_-_RPCCLIENTACCESS QOS_EXCHANGE_CAS_ROLE_RPC_REQUESTS_-_RPCCLIE NTACCESS QOS_EXCHANGE_CAS_ROLE_NSPI_RPC_BROWSE_REQUE STS_AVERAGE_LATENCY QOS_EXCHANGE_CAS_ROLE_NSPI_RPC_REQUESTS_AVER AGE_LATENCY QOS_EXCHANGE_CAS_ROLE_REFERRAL_RPC_REQUESTS _AVERAGE_LATENCY QOS_EXCHANGE_CAS_ROLE_OUTBOUND_PROXY_REQU ESTS_FOR_AVERAGE_RESPONSE_TIME QOS_EXCHANGE_CAS_ROLE_REQUESTS_AVERAGE_RESP ONSE_TIME conn/sec RPC users req/sec Number Of Failed Back-End Connection Attempts Per Second Current Number Of Incoming RPC Over HTTP Connections Current Number Of Unique Users RPC - HTTP Requests Per Second ms RPC Averaged Latency - RpcClientAccess /sec RPC Operations Per Sec - RpcClientAccess requests ms ms ms ms ms RPC Requests - RpcClientAccess NSPI RPC Browse Requests Average Latency NSPI RPC Requests Average Latency Referral RPC Requests Average Latency Outbound Proxy Requests For Average Response Time Requests Average Response Time 26 Probe Guide for Exchange Server Monitor

27 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_CAS_ROLE_DOWNLOAD_TASK_QUEUE D QOS_EXCHANGE_CAS_ROLE_DOWNLOAD_TASKS_COMP LETED QOS_EXCHANGE_CAS_ROLE_PING_COMMANDS_PENDI NG QOS_EXCHANGE_CAS_ROLE_AVAILABILITY_REQUESTS_I N_SECONDS tasks tasks commands reqs/sec Download Task Queued Download Tasks Completed Ping Commands Pending Availability Requests In Seconds QOS_EXCHANGE_CAS_ROLE_CURRENT_UNIQUE_USERS users Current Unique Users QOS_EXCHANGE_CAS_ROLE_AUTODISCOVER_SERVICE_R EQUESTS_PER_SEC reqs/sec Autodiscover Service Requests Per Sec QOS_EXCHANGE_CAS_ROLE_CURRENT_CONNECTIONS conn Current Connections QOS_EXCHANGE_CAS_ROLE_CONNECTION_ATTEMPTS_ PER_SEC QOS_EXCHANGE_CAS_ROLE_ISAPI_EXTENSION_REQUES TS_PER_SEC QOS_EXCHANGE_CAS_ROLE_OTHER_REQUEST_METHOD S_PER_SEC QOS_EXCHANGE_MSEXCHANGE_LDAP_SEARCHES_PER_ SECOND QOS_EXCHANGE_MSEXCHANGE_LDAP_READ_TIME_CO NTROLLERS QOS_EXCHANGE_MSEXCHANGE_LDAP_SEARCH_TIME_C ONTROLLERS QOS_EXCHANGE_MSEXCHANGE_LDAP_READ_TIME_PRO CESSES QOS_EXCHANGE_MSEXCHANGE_LDAP_SEARCH_TIME_P ROCESSES QOS_EXCHANGE_MSEXCHANGE_LDAP_SEARCHES_TIME D_OUT_PER_MINUTE QOS_EXCHANGE_MSEXCHANGE_LONG_RUNNING_LDAP _OPERATIONS_PER_MINUTE QOS_EXCHANGE_DAG_NUM_ACTIVE_DB QOS_EXCHANGE_DAG_NUM_PASSIVE_DB conn/sec reqs/sec reqs/sec count ms ms ms ms count count db db Connection Attempts Per Sec ISAPI Extension Requests Per Sec Other Request Methods Per Sec LDAP Searches Per Second LDAP Read Time Controllers LDAP Search Time Controllers LDAP Read Time Processes LDAP Search Time Processes LDAP Searches Timed Out Per Minute Long Running LDAP Operations Per Minute Number of active database copies on current exchange server. Number of passive database copies on current Mailbox server. Chapter 3: Metrics 27

28 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_DAG_NUM_MOUNTED_DB QOS_EXCHANGE_DAG_NUM_NON_MOUNTED_DB QOS_EXCHANGE_DAG_DB_COPY_QUEUE_LENGTH QOS_EXCHANGE_DAG_DB_REPLAY_QUEUE_LENGTH QOS_EXCHANGE_DAG_DB_COPY_STATUS_FAILED QOS_EXCHANGE_DAG_DB_COPY_STATUS_SEEDING QOS_EXCHANGE_DAG_DB_COPY_STATUS_SEEDING_SO URCE QOS_EXCHANGE_DAG_DB_COPY_STATUS_SUSPENDED db db files files bool bool bool bool Number of mounted database copies on current Mailbox server. Number of database copies whose state is not "mounted" on current Mailbox server Shows the number of transaction log files waiting to be copied to the passive copy log file folder. A copy isn't considered complete until it has been checked for corruption. Shows the number of transaction log files waiting to be replayed into the passive copy. The mailbox database copy is in a Failed state because it isn't suspended, and it isn't able to copy or replay log files. While in a Failed state and not suspended, the system will periodically check whether the problem that caused the copy status to change to Failed has been resolved. After the system has detected that the problem is resolved, and barring no other issues, the copy status will automatically change to Healthy. The mailbox database copy is being seeded, the content index for the mailbox database copy is being seeded, or both are being seeded. Upon successful completion of seeding, the copy status should change to Initializing. The mailbox database copy is being used as a source for a database copy seeding operation. The mailbox database copy is in a Suspended state as a result of an administrator manually suspending the database copy by running the Suspend-MailboxDatabaseCopy cmdlet. 28 Probe Guide for Exchange Server Monitor

29 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_DAG_DB_COPY_STATUS_HEALTHY QOS_EXCHANGE_DAG_DB_COPY_STATUS_SERVICE_DO WN QOS_EXCHANGE_DAG_DB_COPY_STATUS_INITIALIZING QOS_EXCHANGE_DAG_DB_COPY_STATUS_RESYNCHRON IZING QOS_EXCHANGE_DAG_DB_COPY_STATUS_MOUNTED QOS_EXCHANGE_DAG_DB_COPY_STATUS_DISMOUNTED bool bool bool bool bool bool The mailbox database copy is successfully copying and replaying log files, or it has successfully copied and replayed all available log files. The Microsoft Exchange Replication service isn't available or running on the server that hosts the mailbox database copy. The mailbox database copy will be in an Initializing state when a database copy has been created, when the Microsoft Exchange Replication service is starting or has just been started, and during transitions from Suspended, ServiceDown, Failed, Seeding, SinglePageRestore, LostWrite, or Disconnected to another state. While in this state, the system is verifying that the database and log stream are in a consistent state. In most cases, the copy status will remain in the Initializing state for about 15 seconds, but in all cases, it should generally not be in this state for longer than 30 seconds. The mailbox database copy and its log files are being compared with the active copy of the database to check for any divergence between the two copies. The copy status will remain in this state until any divergence is detected and resolved. The active copy is online and accepting client connections. Only the active copy of the mailbox database copy can have a copy status of Mounted. The active copy is offline and not accepting client connections. Only the active copy of the mailbox database copy can have a copy status of Dismounted. Chapter 3: Metrics 29

30 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_DAG_DB_COPY_STATUS_MOUNTING QOS_EXCHANGE_DAG_DB_COPY_STATUS_DISMOUNTIN G QOS_EXCHANGE_DAG_DB_COPY_STATUS_DISCONNECT ED_AND_HEALTHY QOS_EXCHANGE_DAG_DB_COPY_STATUS_DISCONNECT ED_AND_RESYNCHRONIZING bool bool bool bool The active copy is coming online and not yet accepting client connections. Only the active copy of the mailbox database copy can have a copy status of Mounting. The active copy is going offline and terminating client connections. Only the active copy of the mailbox database copy can have a copy status of Dismounting. The mailbox database copy is no longer connected to the active database copy, and it was in the Healthy state when the loss of connection occurred. This state represents the database copy with respect to connectivity to its source database copy. It may be reported during DAG network failures between the source copy and the target database copy. The mailbox database copy is no longer connected to the active database copy, and it was in the Resynchronizing state when the loss of connection occurred. This state represents the database copy with respect to connectivity to its source database copy. It may be reported during DAG network failures between the source copy and the target database copy. 30 Probe Guide for Exchange Server Monitor

31 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_DAG_DB_COPY_STATUS_FAILED_AND_ SUSPENDED QOS_EXCHANGE_DAG_DB_COPY_STATUS_SINGLE_PAGE _RESTORE QOS_EXCHANGE_DAG_DB_LAST_INSPECTED_LOG_TIME QOS_EXCHANGE_DAG_DB_CONTENT_INDEX_STATE QOS_EXCHANGE_DAG_DB_ACTIVATION_SUSPENDED bool bool timestamp state bool The Failed and Suspended states have been set simultaneously by the system because a failure was detected, and because resolution of the failure explicitly requires administrator intervention. An example is if the system detects unrecoverable divergence between the active mailbox database and a database copy. Unlike the Failed state, the system won't periodically check whether the problem has been resolved, and automatically recover. Instead, an administrator must intervene to resolve the underlying cause of the failure before the database copy can be transitioned to a healthy state. This state indicates that a single page restore operation is occurring on the mailbox database copy. The modification time of the last log that was successfully validated by the Mailbox server hosting the database copy. Indicates the current state of the content index for a database copy. Note: For QOS_EXCHANGE_DAG_DB_CONTENT_ INDEX_STATE, there are different states which are: CONTENT_INDEX_STATE_FAILED, = 0, CONTENT_INDEX_STATE_HEALTHY = 1, CONTENT_INDEX_STATE_CRAWLING =2, CONTENT_INDEX_STATE_OTHERS = 3. QoS value will be sent accordingly. Indicates whether activation of mailbox database copy is suspended. QOS_EXCHANGE_DAG_DB_COPY_SIZE GB Size of Database copy. QOS_EXCHANGE_DAG_DB_REDUNDANCY_COUNT Db Count of redundancy of replicated mailbox databases. Both active and passive copies are counted when determining redundancy. Chapter 3: Metrics 31

32 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_DAG_CLUSTER_SERVICE_HEALTH_STAT US QOS_EXCHANGE_DAG_REPLAY_SERVICE_HEALTH_STATU S QOS_EXCHANGE_DAG_ACTIVE_MANAGER_HEALTH_STA TUS QOS_EXCHANGE_DAG_TASKS_RPC_LISTENER_HEALTH_S TATUS QOS_EXCHANGE_DAG_TASKS_RPC_LISTENER_HEALTH_S TATUS QOS_EXCHANGE_DAG_DAG_MEMBERS_UP_HEALTH_ST ATUS QOS_EXCHANGE_DAG_CLUSTER_NETWORK_HEALTH_ST ATUS QOS_EXCHANGE_DAG_QUORUM_GROUP_HEALTH_STAT US QOS_EXCHANGE_DAG_FILE_SHARE_QUORUM_HEALTH_ STATUS QOS_EXCHANGE_DAG_DB_LOG_COPY_KEEPING_UP_HE ALTH_STATUS QOS_EXCHANGE_DAG_DB_LOG_REPLAY_KEEPING_UP_H EALTH_STATUS state state state state state state state state state state state Verifies that the Cluster service is running and reachable on the local exchange server. Verifies that the Replay service is running and reachable on the local exchange server. Verifies that the instance of Active Manager running on the local Exchange server is in a valid role (primary, secondary, or stand-alone). Verifies that the tasks remote procedure call (RPC) server is running and reachable on the local Exchange server. Verifies that the TCP log copy listener is running and reachable on the local Exchange server. Verifies that all DAG members are available, running, and reachable. Verifies that all cluster-managed networks on the local Exchange server are available. Verifies that the default cluster group (quorum group) is in a healthy and online state. Verifies that the witness server and witness directory and share configured for the DAG are reachable. Verifies that log copying and inspection by the passive copies of databases on the local exchange server are able to keep up with log generation activity on the active copy. Verifies that replay activity for the passive copies of databases on the local exchange server is able to keep up with log copying and inspection activity. 32 Probe Guide for Exchange Server Monitor

33 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_MAILBOX_ROLE_INPUT-OUTPUT_LOG_ READ_AVERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_DATABASEMOUNTED QOS_EXCHANGE_MAILBOX_ROLE_AGE_OF_THE_LAST_N OTIFICATION_INDEXED QOS_EXCHANGE_MAILBOX_ROLE_INPUT_OUTPUT_LOG _WRITES_AVERAGE_LATENCY QOS_EXCHANGE_MAILBOX_ROLE_TIME_SINCE_LAST_N OTIFICATION_WAS_INDEXED QOS_EXCHANGE_MAILBOX_ROLE_EXCHANGE_SEARCH_ ZERO_RESULT_QUERY QOS_EXCHANGE_MAILBOX_ROLE_LOGICAL_DISK_PERCE NTAGE_FREE_SPACE QOS_EXCHANGE_TRANS_ROLE_INBOUND_LOCALDELIVE RYCALLSPERSECOND2013 QOS_EXCHANGE_TRANS_ROLE_INBOUND_MESSAGEDELI VERYATTEMPTSPERSECOND-2013 QOS_EXCHANGE_MAILBOX_ROLE_MESSAGES_DELIVERE D_PER_SEC_-_STORE QOS_EXCHANGE_MAILBOX_ROLE_MAILBOX_SEARCHES_ PER_SEC_._STORE QOS_EXCHANGE_CAS_ROLE_NUMBER_OF_FAILED_BACK -END_CONNECTION_ATTEMPTS_PER_SECOND-2013 QOS_EXCHANGE_ANTI_MALWARE_ANTI-MALWARE_AG ENT_MESSAGES_SCANNED ms bool sec ms sec bool percentage atmpts/sec recipts/sec msg/s msg/s conn/sec messages Indicates the average time, in ms, to read data from a log file. Specific to log replay and database recovery operations. Indicates whether database copy is mounted on local server. Indicates content indexing backlog in seconds. Indicates the average time, in ms, to write a log buffer to the active log file. Indicates the time in seconds since last notification was indexed for content indexing in passive Database. Indicates that more than one hundred search queries have returned zero results. This may indicate that a corruption or other problem affects the content indexing catalog. Indicates the free space of logical disk in Percentage. Shows the number of attempts for delivering transport mail items per second. Determines current load. Compare values to historical baselines. Shows the number of inbound recipients delivered per second. Determines current load. Compare values to historical baselines. Shows the rate that messages are delivered to all recipients. Indicates current message delivery rate to the store. Number of search queries/second received per database. Shows the rate at which the RPC proxy attempts are occurring but failing to establish a connection to a back-end server. Messages Scanned is the number of messages scanned in the past minute. Chapter 3: Metrics 33

34 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_ANTI_MALWARE_ANTI-MALWARE_AG ENT_MESSAGES_SCANNED_PER_SECOND QOS_EXCHANGE_ANTI_MALWARE_ANTI-MALWARE_AG ENT_MESSAGES_CONTAINING_MALWARE QOS_EXCHANGE_ANTI_MALWARE_ANTI-MALWARE_AG ENT_MESSAGE_BLOCKED QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_ALERAT ABLE_FAILURE_DSNS_WITHIN_THE_LAST_HOUR QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_HUB_SE LECTION_RESOLVER_FAILURES QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_HUB_SE LECTION_ORGANIZATION_MAILBOX_FAILURES QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_HUB_SE LECTION_ROUTING_FAILURES QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_PERCEN T_AVAILABILITY QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_PERCEN T_FAILURES_DUE_TO_MAXINBOUNDCONNECTIONLIMIT QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_PERCEN T_FAILURES_DUE_TO_WLID_DOWN QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_PERCEN T_FAILURES_DUE_TO_BACK_PRESSURE QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_FAILURE S_DUE_TO_MAXIMUM_LOCAL_LOOP_COUNT messages messages messages messages messages messages messages percent percent percent percent messages Messages Scanned per Second is the average number of messages scanned each second, calculated over the past minute. Messages Containing Malware is the number of messages in the past minute that contained malware. Messages Blocked is the number of messages in the past minute that contained malware and were blocked. Hub Selection Resolver Failures is the number of messages that encountered recipient. AD lookup errors in Hub selection. Hub Selection Organization Mailbox Failures is the number of messages that encountered organization mailbox lookup errors in Hub selection. Hub Selection Routing Failures is the number of messages that failed to be routed. Hub Selection Routing Failures is the number of messages that failed to be routed. The ratio of successful connections to total legitimate ones in the sliding window. Failure percentage of legitimate connections in the sliding window due to MaxInboundConnectionLimit. Failure percentage of legitimate connections in the sliding window due to WLID down. Failure percentage of legitimate connections in the sliding window due to back pressure. Total number of message delivery failures due to reaching maximum local loop count. 34 Probe Guide for Exchange Server Monitor

35 exchange_monitor QoS Metrics Monitor Name Units Description QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_CONNE CTIONS_CREATED_PER_SECOND QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_MESSA GES_RECEIVED_PER_SECOND QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_MESSA GES_BYTES_RECEIVED_PER_SECOND QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_MESSA GES_BYTES_RECEIVED_PER_SECOND QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_CONNE CTIONS_CREATED_PER_SECOND QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_MESSA GES_SENT_PER_SECOND QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_MESSA GE_BYTES_SENT_PER_SECOND QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_DNS_ER RORS QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_CONNE CTION_FAILURES QOS_EXCHANGE_TRANS_ROLE_MESSAGESFAILEDTOROU TE QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_HUB_SE LECTION_ RESOLVER_FAILURES QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_HUB_SE LECTION_ORGANIZATION_ MAILBOX_RESOLVER_FAILURES connections per second Messages Per Second Messages Per Second Messages Per Second Connections Per Second Messages Per Second messages per second DNS messages messages messages messages Connections Created per second is the number of new connections to the SMTP server that are established each second. Messages Received per second is the number of messages received by the SMTP server each second. Number of bytes received in messages per second. Number of bytes sent per second. Connections Created per second is the number of outbound connections established each second from the SMTPSend connector. Messages Sent per second is the number of messages sent by the SMTPSend connector each second. Number of bytes sent per second. DNS Errors is the number of DNS errors encountered by the SMTPSend connector. The total number of connection failures (during the sliding time window) while trying to set up a proxy session. Total number of messages failed to be routed. Hub Selection Resolver Failures is the number of messages that encountered recipient AD lookup errors in Hub selection. Hub Selection Organization Mailbox Failures is the number of messages that encountered organization mailbox lookup errors in Hub selection. Chapter 3: Metrics 35

36 exchange_monitor Alert Metrics Default Settings Monitor Name Units Description QOS_EXCHANGE_DELIVERY_HEALTH_MONITOR_HUB_SE LECTION_ROUTING_FAILURES QOS_EXCHANGE_TRANS_ROLE_PERCENTAGE_PROXY_SE TUP_FAILURES QOS_EXCHANGE_TRANS_ROLE_TOTAL_PROXY_USER_LO OKUP_FAILURES QOS_EXCHANGE_TRANS_ROLE_TOTAL_PROXY_DNS_LO OKUP_FAILURES QOS_EXCHANGE_TRANS_ROL E_TOTAL_PROXY_CONNECTIO N_FAILURES QOS_EXCHANGE_TRANS_ROLE_TOTAL_BYTES_ PROXIED QOS_EXCHANGE_TRANS_ROLE_ CONNECTIONS_CREATED_PER_SECOND QOS_EXCHANGE_TRANS_ROLE_RECIPIENTS_SENT messages percent messages messages messages messages connections per second messages Hub Selection Routing Failures is the number of messages that failed to be routed. The percentage of sessions (during the sliding time window) that could not be proxied due to failures. The total number of user lookup failures (during the sliding time window) while trying to set up a proxy session. The total number of dns lookup failures (during the sliding time window) while trying to set up a proxy session. The total number of connection failures (during the sliding time window) while trying to set up a proxy session. Total number of bytes proxied (after proxy session is set up. Connections Created/sec is the number of new connections to the SMTP server per second that are established. Recipients sent is the number of recipients sent by the SMTPSend Connector. exchange_monitor Alert Metrics Default Settings This section contains the QoS metric default settings for the Exchange Server Monitor probe. Alarm Metric Error Threshold Error Severity Description Monitoring profiles (Type=Performance) 36 Probe Guide for Exchange Server Monitor

37 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Available Mbytes 100 Major Available Mbytes shows the amount of physical memory, in megabytes (MB), immediately available for allocation to a process or for system use. It's equal to the sum of memory assigned to the standby (cached), free, and zero page lists. For a full explanation of the memory manager, refer to Microsoft Developer Network (MSDN) or "System Performance and Troubleshooting Guide" in the Windows Server 2003 Resource Kit. Available Megabytes 10 Major Available Megabytes is the amount of physical memory immediately available for allocation to a process or for system use. Average agent processing time in seconds per event ---- Major Average agent processing time in seconds per event. Average Delivery Time ---- Major Average Delivery Time is the average time in milliseconds between the submission of a message to the mailbox store and the delivery to all local recipients (recipients on the same server) for the last 10 messages. Average Disk Bytes per Transfer Major Average Disk Bytes per Transfer is the average number of bytes transferred to or from the disk during write or read operations. Average Disk Queue Length 2 Major Average Dis Queue Length is the average number of both read and write requests that were queued for the selected disk during the sample interval. Chapter 3: Metrics 37

38 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Average Disk Read Queue Length 2 Major Average Disk Read Queue Length is the average number of read requests that were queued for the selected disk during the sample interval. One instance of this profile will monitor each Physical Disk. Average Disk Seconds per Read 0.05 Major Average Disk Seconds per Read is the average time of a read of data from the disk. Average Disk Seconds per Write 0.05 Major Average Disk Seconds per Write is the average time of a write of data to the disk. Average Disk Write Queue Length 2 Major Average Disk Write Queue Length is the average number of write requests that were queued for the selected disk during the sample interval. One instance of this profile will monitor each Physical Disk. Average Queue Time ---- Major This is the average queue time calculated from the Work Queue Length and Messages per Second. Average Request Time (ActiveSync) ---- Major Average Request Time is the average time elapsed waiting for a request to complete. Average Response Time (OWA) ---- Major Average Response Time is the average time (in milliseconds) that elapsed between the beginning and end of an OEH or ASPX request. Average Response Time (WS) ---- Major Average Response Time is the average time (in milliseconds) that has elapsed between the beginning and end of requests. 38 Probe Guide for Exchange Server Monitor

39 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Cache Bytes ---- Major Cache bytes is the current size, in bytes, of the file system cache. By default, the cache uses up to 50% of available physical memory. The counter value is the sum of Memory\System Cache Resident Bytes, Memory\System Driver Resident Bytes, Memory\System Code Resident Bytes, and Memory\Pool Paged Resident Bytes. Categorization Count ---- Major Categorization Count is the number of categorizations that exist in the mailbox store. Categorizations are created when a user creates a filtered view or performs a search. When the information store must maintain an excessive number of categorizations, performance can be affected. Committed Bytes ---- Major Committed Bytes is the amount of committed virtual memory, in bytes. Committed memory is the physical memory that has space reserved on the disk paging files. There can be one or more paging files on each physical drive. This counter displays the last observed value only; it isn't an average. Chapter 3: Metrics 39

40 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Committed Bytes in Use ---- Major Committed Bytes in Use is the ratio of Memory\Committed Bytes to the Memory\Commit Limit. Committed memory is the physical memory in use for which space has been reserved in the paging file should it need to be written to disk. The commit limit is determined by the size of the paging file. If the paging file is enlarged, the commit limit increases, and the ratio is reduced. This counter displays the current percentage value only; it isn't an average. Connection Queue Length ---- Major This counter takes the MTA Work Queue Length counter to a lower level and breaks it out into all the different work queues within the MTA. If a large queue is building in the MTA this will pinpoint the exact connection that is responsible.informational for drill down. One instance of this profile will monitor each Message Transfer Agent Connection. Connections Current (inbound) ---- Major Connections Current is the number of inbound connections to the SMTP server. Connections Current (outbound) ---- Major Connections Current is the number of outbound connections from the SMTPSend connector. Connections on IP Allow List Providers per second Connections on IP Block List per second ---- Major Connections on IP Allow List Providers per second is the number of connections on the IP Allow List providers per second Major Connections on IP Block List per second is the number of connections on the IP Block List per second. 40 Probe Guide for Exchange Server Monitor

41 exchange_monitor Alert Metrics Default Settings Alarm Metric Connections on IP Block List Providers per second Connections on the IP Allow List per second Error Threshold Error Severity Description ---- Major Connections on IP Block List Providers per second is the number of connections on the IP Block List providers per second Major Connections on the IP Allow List per second is the number of connections on the IP Allow List per second. Current Bandwidth ---- Major Shows an estimate of the current bandwidth of the network interface in bits per second (bps). For interfaces that do not vary in bandwidth, or for those where no accurate estimation can be made, this value is the nominal bandwidth. One instance of this profile will monitor each Network Interface. Current Connections (IMAP4) ---- Major Current Connections is the number of connections that are currently open on the IMAP service. Current Connections (POP3) ---- Major Current Connections is the number of connections that are currently open on the POP service. Current User Count ---- Major Current User Count is the number of users who are currently logged on to Outlook Web Access. This value monitors the number of active user sessions, so that users are only removed from this count after they log off or their session times out. DNS Queries per second ---- Major DNS Queries per second is the number of DNS queries per second performed by the Sender Id agent. DOTNET - Bytes In All Heaps ---- Major Bytes in all Heaps is the sum of four other counters: Gen 0 Heap Size, Gen 1 Heap Size, Gen 2 Heap Size, and Large Object Heap Size. This counter indicates the current memory allocated in bytes on the GC Heaps. Chapter 3: Metrics 41

42 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description DOTNET - Exception Thrown Per Sec ---- Major Exception Thrown per sec is the number of exceptions thrown per second. These include both.net Framework exceptions and unmanaged exceptions that get converted into.net Framework exceptions. For example, the null pointer reference exception in unmanaged code would get thrown again in managed code as a.net Framework System.NullReferenceException. This counter includes both handled and un-handled exceptions. DOTNET - Time In GC ---- Major Time in GC shows when garbage collection has occurred. When the counter exceeds the threshold, it indicates that CPU is cleaning up and isn't being used efficiently for load. Adding memory to the server would improve this situation. Dumpster delete per sec ---- Major Delete Rate is the rate at which items are deleted from the Transport Dumpster on this server. Dumpster insert per sec ---- Major Insert Rate is the rate at which items are inserted into the Transport Dumpster on this server. Dumpster Item Count ---- Major Item Count is the total number of mail items that are currently in the Transport Dumpster on this server. Dumpster size ---- Major Item Size is the total size (in bytes) of mail items that are currently in the Transport Dumpster on this server. Edge Servers total ---- Major Edge Servers total is the total number of Edge Transport servers found by EdgeSync. Elapsed Time - emsmta ---- Major The total elapsed time that this process has been running. 42 Probe Guide for Exchange Server Monitor

43 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Elapsed Time - mad ---- Major The total elapsed time that this process has been running. Elapsed Time - store ---- Major The total elapsed time that this process has been running. Errors per Second ---- Major Network Errors per Second is the rate at which serious unexpected errors are occurring. Such errors generally indicate that the Redirector and one or more Servers are having serious communication difficulties. Exchange Servers total ---- Major Exchange Servers total is the total number of Exchange Servers found by EdgeSync. Folder Opens per Second - Mailboxes ---- Major Indicates user activity. Folder Opens per Second - MBX ---- Major Indicates user activity. One instance of this profile will monitor each Mailbox Store. Folder Opens per Second - PF ---- Major Indicates user activity. One instance of this profile will monitor each Public Folder Store. Folder Opens per Second - Public Folders ---- Major Indicates user activity. Hub Transport Servers total ---- Major Hub Transport Servers total is the total number of Hub Transport servers found by EdgeSync. Items queued for delivery ---- Major Items queued for delivery per second. Kilobytes Received per Second ---- Major Shows the rate, in incidents per second, at which bytes were received over each network adapter. The counted bytes include framing characters. Bytes Received/sec is a subset of Bytes Total/sec. One instance of this profile will monitor each Network Interface. Chapter 3: Metrics 43

44 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Kilobytes Sent per Second ---- Major Shows the rate, in incidents per second, at which bytes were sent over each network adapter. The counted bytes include framing characters. Bytes Sent/sec is a subset of Bytes Total/sec. One instance of this profile will monitor each Network Interface. Kilobytes Total per Second ---- Major Shows the rate, in incidents per second, at which bytes were sent and received on the network interface, including framing characters. Bytes Total/sec is the sum of the values of Bytes Received/sec and Bytes Sent/sec. One instance of this profile will monitor each Network Interface. Kilobytes Total per Second - Redirector ---- Major Kilobytes Total per Second is the rate the Redirector is processing data. This includes all application and file data in addition to protocol information such as packet headers. Local Queue Length 4 Major The number of messages in the local SMTP queue. Logon Operations per sec ---- Major Logon Operations/sec is the rate of Logon requests in the mailbox store. Message Opens per Second - Mailboxes ---- Major This will show how often your users are opening messages. Peak load may show this coinciding with other system behavior. Message Opens per Second - MBX ---- Major This will show how often your users are opening messages. Peak load may show this coinciding with other system behavior. One instance of this profile will monitor each Mailbox Store. 44 Probe Guide for Exchange Server Monitor

45 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Message Opens per Second - PF ---- Major This will show how often your users are opening messages. Peak load may show this coinciding with other system behavior. One instance of this profile will monitor each Public Folder Store. Message Opens per Second - Public Folders ---- Major This will show how often your users are opening messages. Peak load may show this coinciding with other system behavior. Message Recipients Delivered per sec ---- Major Messages Delivered/sec is the rate that messages are delivered to all recipients. Messages Delivered per Second ---- Major The rate that messages are delivered to local mailboxes. Messages Evaluated by Sender Filter per second Messages Filtered by Sender Filter per second Messages Missing Originating IP per second (Agent_ID) ---- Major Messages Evaluated by Sender Filter per second is the number of messages evaluated by the Sender Filter agent per second Major Messages Filtered by Sender Filter per second is the number of messages filtered by the Sender Filter agent per second Major Messages Missing Originating IP per second is the number of messages per second for which the originating IP could not be determined. Chapter 3: Metrics 45

46 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Messages per Second ---- Major This is the count of messages per second that the MTA is processing inbound and outbound. Using this counter with the Work Queue Length counter will give an indication of how long on average messages are queued before delivery. Divide the average Work Queue Length amount by the average Messages/Sec amount to calculate how long a message can expect to remain in the queue before being delivered.informational for drill down. Messages Queued For Delivery ---- Major Messages Queued For Delivery is the number of messages currently queued in one or more queues. Messages queued for delivery per second ---- Major Messages queued for delivery per second. Messages Queued For Submission ---- Major Messages Queued For Submission is the current number of submitted messages which are not yet processed by transport. Messages Received per Second ---- Major The rate that inbound messages are being received. Messages Received per second (inbound) Messages Scanned per second (content filter agent) Messages Sent per second (outbound) ---- Major Messages Received per second is the number of messages received by the SMTP server each second Major The number of messages scanned per second ---- Major Messages Sent per second is the number of messages sent by the SMTPSend connector each second. Messages Sent per sec ---- Major Messages Sent/sec is the rate that messages are sent to the transport. Messages Submitted Per Second ---- Major Messages Submitted Per Second is the number of messages enqueued in the submission queue per second. 46 Probe Guide for Exchange Server Monitor

47 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Messages Validated per second ---- Major Messages Validated per second is the number of messages validated per second. Messages With No PRA per second ---- Major Messages With No PRA per second is the number of messages per second that do not have a valid PRA. Messages with Originating IP on IP Allow List per second Messages with Originating IP on IP Allow List Providers per second Messages with Originating IP on IP Block List per second ---- Major Messages with Originating IP on IP Allow List per second is the number of messages with originating IP on the IP Allow List per second Major Messages with Originating IP on IP Allow List Providers per second is the number of messages with originating IP on the IP Allow List providers per second Major Messages with Originating IP on IP Block List per second is the number of messages with originating IP on the IP Block List per second. Open connections to Global Catalogs ---- Major Open connections to Global Catalogs in this process Page Faults per Second ---- Major The page faults/sec counter should not show a consistently high single figure amount. If Page faults/sec is high and if Memory- pages/second counter is less than 10, it is not a concern. Pages per Second 50 Major Pages per Second is the rate at which pages are read from or written to disk to resolve hard page faults. This counter is a primary indicator of the kinds of faults that cause system-wide delays. Paging File Usage ---- Major The amount of the Page File instance in use in percent. Chapter 3: Metrics 47

48 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Percent Disk Time 60 Major % Disk Time is the percentage of elapsed time that the selected disk drive was busy servicing read or write requests. Poison Queue Length ---- Major Poison Queue Length is the number of items in the poison queue. Pool Nonpaged Megabytes 100 Major Pool Nonpaged Megabytes is the size of the nonpaged pool, an area of system memory for objects that cannot be written to disk, but must be in physical memory as long as they are allocated. Processor Time 80 Major % Processor Time is the percentage of elapsed time that the processor spends to execute a non-idle thread. Processor Time - emsmta 75 Major % Processor Time is the percentage of elapsed time that the processor spends to execute a non-idle thread of the process. Processor Time - inetinfo 75 Major % Processor Time is the percentage of elapsed time that the processor spends to execute a non-idle thread of the process. Processor Time - lsass 75 Major % Processor Time is the percentage of elapsed time that the processor spends to execute a non-idle thread of the process. Processor Time - mad 75 Major % Processor Time is the percentage of elapsed time that the processor spends to execute a non-idle thread of the process. Processor Time - store 75 Major % Processor Time is the percentage of elapsed time that the processor spends to execute a non-idle thread of the process. Processor Time - System 75 Major % Processor Time is the percentage of elapsed time that the processor spends to execute a non-idle thread of the process. 48 Probe Guide for Exchange Server Monitor

49 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Proxy User Requests per sec ---- Major Proxy User Requests/sec is the number of proxy requests made per second. Queued Conversion Requests ---- Major Queued Conversion Requests is the number of requests for conversion that are currently waiting to be processed. Receive Queue Size - Mailboxes 2 Major This is the queue of all messages destined inbound for the IS. As with the Send Queue this should also stay at non-zero during normal operating conditions. Receive Queue Size - MBX 2 Major This is the queue of all messages destined inbound for the IS. As with the Send Queue this should also stay at non-zero during normal operating conditions. One instance of this profile will monitor each Mailbox Store. Receive Queue Size - PF 2 Major This is the queue of all messages destined inbound for the IS. As with the Send Queue this should also stay at non-zero during normal operating conditions. One instance of this profile will monitor each Public Folder Store. Receive Queue Size - Public Folders 2 Major This is the queue of all messages destined inbound for the IS. As with the Send Queue this should also stay at non-zero during normal operating conditions. Recipients Rejected by Block List per second Recipients Rejected by Recipient Validation per second ---- Major Recipients Rejected by Block List per second is the number of recipients rejected by block list per second Major Recipients Rejected by Recipient Validation per second is the number of recipients rejected by recipient validation per second. Remote Queue Length 1000 Major The number of messages in the remote SMTP queue. Chapter 3: Metrics 49

50 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Requests per sec ---- Major Requests/sec is the number of requests handled by Outlook Web Access per second. Requests per sec (ActiveSync) ---- Major Requests/sec is the number of HTTP requests that are received from the client via ASP.NET per second. Requests per sec Failed ---- Major Requests/sec Failed is the number of Outlook Web Access requests that failed, per second. Requests per second (WS) ---- Major Requests per second is the number of requests processed each second. Retry Mailbox Delivery Queue Length ---- Major Retry Mailbox Delivery Queue Length is the number of items in retry in the retry mailbox queues. Send Queue Size - Mailboxes 2 Major This counter displays the queue of messages outbound from the IS to the MTA. In the case where the MTA is down or reduced in performance there will be a non-zero value for this queue. In normal operating conditions this queue should rarely stay at a non-zero value for any significant duration. Send Queue Size - MBX 2 Major This counter displays the queue of messages outbound from the IS to the MTA. In the case where the MTA is down or reduced in performance there will be a non-zero value for this queue. In normal operating conditions this queue should rarely stay at a non-zero value for any significant duration. One instance of this profile will monitor each Mailbox Store. 50 Probe Guide for Exchange Server Monitor

51 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Send Queue Size - PF 2 Major This counter displays the queue of messages outbound from the IS to the MTA. In the case where the MTA is down or reduced in performance there will be a non-zero value for this queue. In normal operating conditions this queue should rarely stay at a non-zero value for any significant duration. One instance of this profile will monitor each Public Folder Store. Send Queue Size - Public Folders 2 Major This counter displays the queue of messages outbound from the IS to the MTA. In the case where the MTA is down or reduced in performance there will be a non-zero value for this queue. In normal operating conditions this queue should rarely stay at a non-zero value for any significant duration. Sync Commands per sec (ActiveSync) ---- Major Sync Commands/sec is the number of Sync commands that are processed per second. Clients use this command to synchronize items within a folder. Unreachable Queue Length ---- Major Unreachable Queue Length is the number of items in the unreachable queues. User Count ---- Major This is the actual count of people (Not connections) that are currently using the IS. Virtual Megabytes used by Information Store ---- Major Virtual Megabytes is the current size of the virtual address space the Information Store is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries. Chapter 3: Metrics 51

52 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description VM Largest Block Size - Information Store 150 Major Size of the larges free virtual memory block. VM Total 16MB Free Blocks 3 Major Less than 3 indicates a problem. VM Total Large Free Block Megabytes 32 Major Less then 32 MB. Suggest restart Node on Cluster. Failover first. Work Queue Length 2 Major This is the most important counter because it gives the total of all queues. This single counter can tell an administrator at a glance the overall MTA health. This is the queue length for the whole of the MTA. It covers both inbound and outbound messages for the Information Store, the Directory and any connectors that route through the MTA. If this counter is above zero for a sustained amount of time it may indicate a communications problem with one of the Exchange components, a connector or a remote Exchange MTA. Input-Output Log Read Average Latency 200 Major Indicates the average time, in ms, to read data from a log file. Specific to log replay and database recovery operations. Note: This counter will work for DAG also. DatabaseMounted 1 Major Indicates whether database copy is mounted on local server. Note: This counter will work for DAG also. Age of the Last Notification Indexed Major Indicates content indexing backlog in seconds. Note: This counter will work for DAG also. Input-Output Log Writes Average Latency 10 Major Indicates the average time, in ms, to write a log buffer to the active log file. Note: This counter will work for DAG also. 52 Probe Guide for Exchange Server Monitor

53 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Time Since Last Notification Was Indexed 3600 Major Indicates the time in seconds since last notification was indexed for content indexing in passive Database. Note: This counter will work for DAG also. Exchange search zero result query 0 Major Indicates that more than one hundred search queries have returned zero results. This may indicate that a corruption or other problem affects the content indexing catalog. Note: This counter will work for DAG also. Logical Disk Percentage Free Space 35 Major Indicates the free space of logical disk in Percentage. Note: This counter will work for DAG also. Anti-Malware Agent Messages Blocked Anti-Malware Agent Messages Containing Malware Anti-Malware Agent Messages Scanned Per Second Anti-Malware Agent Messages Scanned ---- Major Messages Blocked is the number of messages in the past minute that contained malware and were blocked Major Messages Containing Malware is the number of messages in the past minute that contained malware Major Messages Scanned per Second is the average numbero of messages scanned each second, calculated over the past minute Major Messages Scanned is the number of messages scanned in the past minute. OAB Request Handling Average Time Major Average Time(in seconds) of handling a file download request during the sampling period. Messages Delivered Per Sec - Store Major Shows the rate that messages are delivered to all recipients. Indicates current message delivery rate to the store. Chapter 3: Metrics 53

54 exchange_monitor Alert Metrics Default Settings Alarm Metric Messages Submitted Per Second - Information Store Inbound: Recipients Delivered Per Second-2013 Inbound: MessageDeliveryAttemptsPerSecond Error Threshold Error Severity Inbound: Major LocalDeliveryCallsPerSecond Description Major Messages Submitted Per Second is the number of messages enqueued in the submission queue per second Major Shows the number of inbound recipients delivered per second. Determines current load. Compare values to historical baselines Major Shows the number of attempts for delivering transport mail items per second. Determines current load. Compare values to historical baselines. Shows the number of local delivery attempts per second. Determines current load. Compare values to historical baselines. Monitoring profiles (Type=Process) EdgeSync ---- Major Belongs to Microsoft Exchange EdgeSync Service. EdgeTransport ---- Major Child process of the Microsoft Exchange Transport Service. File Distribution ---- Major Belongs to Microsoft Exchange File Distribution Service. Inetinfo ---- Major Belongs to Microsoft Internet Information Services (IIS). Information Store ---- Major Process of the Microsoft Exchange Information Store. Lsass ---- Major Process of the Local Security Authority Subsystem Service. Mail Submission ---- Major Belongs to Microsoft Exchange Mail Submission Service. Mailbox Assistants ---- Major Belongs to Microsoft Exchange Mailbox Assistants Service. 54 Probe Guide for Exchange Server Monitor

55 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Message Transfer Agent ---- Major Process of the Microsoft Exchange Message Transfer Agent. Replication ---- Major Belongs to Microsoft Exchange Replication Service. Search Indexer ---- Major Belongs to Microsoft Search Indexer service. Service Host ---- Major Belongs to Microsoft Exchange Service Host Service. System Attendant ---- Major Process of the Microsoft Exchange System Attendant. LDAP Searches timed out per minute 10 Major LDAP Searche s timed out per minute shows the number of LDAP searche s that returne d LDAP_Ti meout during the last minute. LDAP Read Time Processes 50 Major LDAP Read Time shows the time (in ms) to send an LDAP read request to the specified domain controller and receive a response. LDAP Search Time Processes 50 Major LDAP Search Time shows the time (in ms) to send an LDAP search request and receive a response. Long Running LDAP Operations Per Minute 50 Major Long running LDAP operations/min shows the number of LDAP operations on this domain controller that took longer than the specified threshold per minute. (Default threshold is 15 seconds.) Chapter 3: Metrics 55

56 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Average Search Time ---- Major Shows the average time that elapsed while waiting for a search to complete. NSPI RPC Requests Average Latency 1000 Major Shows the average time, in ms, that NSPI requests took to complete during the sampling period. NSPI RPC Browse Requests Average Latency Unreachable Queue Length - Transport 1000 Major Shows the average time, in ms, that Name Service Provider Interface (NSPI) browse requests took to complete during the sampling period. 100 Major Unreachable Queue Length is the number of items in the unreachable queues. Mailbox Searches Per Sec Store 10 Major Number of search queries/second received per database. Transport ---- Major Belongs to Microsoft Exchange Transport Service. Transport Log Search ---- Major Belongs to Microsoft Exchange Transport Log Search Service. Monitoring profiles (Type=Service) HTTP SSL ---- Major This service implements the secure hypertext transfer protocol (HTTPS) for the HTTP service, using the Secure Socket Layer (SSL). If this service is disabled, any services that explicitly depend on it will fail to start. IIS Admin Service ---- Major Enables this server to administer Web and FTP services. If this service is stopped, the server will be unable to run Web, FTP, NNTP, or SMTP sites or configure IIS. If this service is disabled, any services that explicitly depend on it will fail to start. Microsoft Exchange Active Directory Topology Service ---- Major Provides Active Directory topology information to Exchange services. 56 Probe Guide for Exchange Server Monitor

57 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Microsoft Exchange ADAM ---- Major Microsoft Exchange ADAM (Active Directory Application Mode). Microsoft Exchange Address Book ---- Major Manages client address book connections. This service is dependent upon the Microsoft Exchange Active Directory Topology service. Microsoft Exchange Anti-spam Update ---- Major The Microsoft Forefront Security for Exchange Server anti-spam update service. Microsoft Exchange Credential Service ---- Major The Microsoft Exchange Credential Service. Microsoft Exchange EdgeSync ---- Major The Microsoft EdgeSync service. Microsoft Exchange File Distribution ---- Major The Microsoft File Distribution service. Microsoft Exchange Forms-Based Authentication ---- Major Provides forms-based authentication to Microsoft Office Outlook Web App and the Exchange Control Panel. If this service is stopped, Outlook Web App and the Exchange Control Panel won't authenticate users. Microsoft Exchange IMAP Major Provides Internet Message Access Protocol (IMAP4) Services to clients. Microsoft Exchange Information Store ---- Major Manages the Microsoft Exchange Information Store. This includes mailbox stores and public folder stores. Microsoft Exchange Mail Submission ---- Major Submits messages from the Mailbox server to the Hub Transport servers. Microsoft Exchange Mailbox Assistants ---- Major Performs background processing of mailboxes in the Exchange store. Chapter 3: Metrics 57

58 exchange_monitor Alert Metrics Default Settings Alarm Metric Microsoft Exchange Mailbox Replication Service Error Threshold Error Severity Description ---- Major Processes mailbox moves and move requests. This service is dependent upon the Microsoft Exchange Active Directory Topology and Net.Tcp Port Sharing service. Microsoft Exchange Monitoring ---- Major Allows applications to call the Exchange diagnostic cmdlets. Microsoft Exchange MTA Stacks ---- Major The Microsoft Exchange Exchange MTA Stacks service. Microsoft Exchange POP Major Provides Post Office Protocol version 3 (POP3) Services to clients. Microsoft Exchange Protected Service Host Microsoft Exchange Replication Service ---- Major Provides a host for several Exchange services that must be protected from other services. This service is dependent upon the Microsoft Exchange Active Directory Topology service Major The Microsoft Exchange Replication Service provides replication functionality for Mailbox server role databases and is used by local continuous replication and cluster continuous replication. Microsoft Exchange Routing Engine ---- Major The Microsoft Exchange Routing Engine service. Microsoft Exchange RPC Client Access ---- Major Manages client RPC connections for Exchange. Microsoft Exchange Search Indexer ---- Major The Microsoft Exchange Replication Service provides replication functionality for Mailbox server role databases and is used by local continuous replication and cluster continuous replication. Microsoft Exchange Server Extension for Windows Server Backup ---- Major Enables Windows Server Backup users to back up and recover application data for Microsoft Exchange Server. 58 Probe Guide for Exchange Server Monitor

59 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Microsoft Exchange Service Host ---- Major Provides a host for several Microsoft Exchange services. Microsoft Exchange System Attendant ---- Major Provides monitoring, maintenance, and Active Directory lookup services, for example, monitors services and connectors, defragments the Exchange store, and forwards Active Directory lookups to a Global Catalog server. Microsoft Exchange Throttling ---- Major Limits the rate of user operations. Microsoft Exchange Transport ---- Major The Microsoft Exchange Transport Service. Microsoft Exchange Transport Log Search ---- Major Provides remote search capability for Microsoft Exchange Transport log files. Microsoft Search (Exchange) ---- Major Quickly creates full-text indexes on content and properties of structured and semi-structured data to allow fast linguistic searches on this data. SMTP ---- Major The Exchange Simple Mail Transfer Protocol server World Wide Web Publishing Service ---- Major Provides Web connectivity and administration through the Internet Information Services Manager. Monitoring profiles (Type=ntevl) MSExchange event ---- From Event Event log messages with source containing 'MSExchange'. DAG Number of Active Database copies Number of active database copies on current exchange server. Number of passive Database copies Number of passive database copies on current Mailbox server. Chapter 3: Metrics 59

60 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Number of mounted Database copies Number of mounted database copies on current Mailbox server. Number of Non Mounted Database copies Number of database copies whose state is not "mounted" on current Mailbox server CopyQueueLength-DAG 1 Minor Shows the number of transaction log files waiting to be copied to the passive copy log file folder. A copy isn't considered complete until it has been checked for corruption. ReplayQueueLength-DAG 1 Minor Shows the number of transaction log files waiting to be replayed into the passive copy. Database copies status-failed 1 Minor The mailbox database copy is in a Failed state because it isn't suspended, and it isn't able to copy or replay log files. While in a Failed state and not suspended, the system will periodically check whether the problem that caused the copy status to change to Failed has been resolved. After the system has detected that the problem is resolved, and barring no other issues, the copy status will automatically change to Healthy. Database copies status-seeding 1 Minor The mailbox database copy is being seeded, the content index for the mailbox database copy is being seeded, or both are being seeded. Upon successful completion of seeding, the copy status should change to Initializing. Database copies status-seedingsource 1 Minor The mailbox database copy is being used as a source for a database copy seeding operation. 60 Probe Guide for Exchange Server Monitor

61 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Database copies status-suspended 1 Minor The mailbox database copy is in a Suspended state as a result of an administrator manually suspending the database copy by running the Suspend-MailboxDatabaseCopy cmdlet. Database copies status-healthy 1 Minor The mailbox database copy is successfully copying and replaying log files, or it has successfully copied and replayed all available log files. Database copies status-servicedown 1 Minor The Microsoft Exchange Replication service isn't available or running on the server that hosts the mailbox database copy. Database copies status-initializing 1 Minor The mailbox database copy will be in an Initializing state when a database copy has been created, when the Microsoft Exchange Replication service is starting or has just been started, and during transitions from Suspended, ServiceDown, Failed, Seeding, SinglePageRestore, LostWrite, or Disconnected to another state. While in this state, the system is verifying that the database and log stream are in a consistent state. In most cases, the copy status will remain in the Initializing state for about 15 seconds, but in all cases, it should generally not be in this state for longer than 30 seconds. Chapter 3: Metrics 61

62 exchange_monitor Alert Metrics Default Settings Alarm Metric Database copies status-resynchronizing Error Threshold Error Severity Description 1 Minor The mailbox database copy and its log files are being compared with the active copy of the database to check for any divergence between the two copies. The copy status will remain in this state until any divergence is detected and resolved. Database copies status-mounted 1 Minor The active copy is online and accepting client connections. Only the active copy of the mailbox database copy can have a copy status of Mounted. Database copies status-dismounted 1 Minor The active copy is offline and not accepting client connections. Only the active copy of the mailbox database copy can have a copy status of Dismounted. Database copies status-mounting 1 Minor The active copy is coming online and not yet accepting client connections. Only the active copy of the mailbox database copy can have a copy status of Mounting. Database copies status-dismounting 1 Minor The active copy is going offline and terminating client connections. Only the active copy of the mailbox database copy can have a copy status of Dismounting. Database copies status-disconnectedandhealthy 1 Minor The mailbox database copy is no longer connected to the active database copy, and it was in the Healthy state when the loss of connection occurred. This state represents the database copy with respect to connectivity to its source database copy. It may be reported during DAG network failures between the source copy and the target database copy. 62 Probe Guide for Exchange Server Monitor

63 exchange_monitor Alert Metrics Default Settings Alarm Metric Database copies status-disconnectedandresynchronizi ng Database copies status-failedandsuspended Database copies status-singlepagerestore Error Threshold Error Severity Description 1 Minor The mailbox database copy is no longer connected to the active database copy, and it was in the Resynchronizing state when the loss of connection occurred. This state represents the database copy with respect to connectivity to its source database copy. It may be reported during DAG network failures between the source copy and the target database copy. 1 Minor Failed and Suspended states have been set simultaneously by the system because a failure was detected, and because resolution of the failure explicitly requires administrator intervention. An example is if the system detects unrecoverable divergence between the active mailbox database and a database copy. Unlike the Failed state, the system won't periodically check whether the problem has been resolved, and automatically recover. Instead, an administrator must intervene to resolve the underlying cause of the failure before the database copy can be transitioned to a healthy state. 1 Minor This state indicates that a single page restore operation is occurring on the mailbox database copy. Last Inspected Log Time 30 Minor The modification time of the last log that was successfully validated by the Mailbox server hosting the database copy. ContentIndexState failed Minor Indicates the current state of the content index for a database copy. Chapter 3: Metrics 63

64 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description ActivationSuspended 1 Minor Indicates whether activation of mailbox database copy is suspended. DatabaseSize 10 Minor Size of Database copy. DatabaseRedundancyCount 2 Minor Count of redundancy of replicated mailbox databases. Both active and passive copies are counted when determining redundancy. Clusterservice failed Critical Verifies that the Cluster service is running and reachable on the local exchange server. ReplayService failed Critical Verifies that the Replay service is running and reachable on the local exchange server. ActiveManager failed Critical Verifies that the instance of Active Manager running on the local Exchange server is in a valid role (primary, secondary, or stand-alone). TasksRpcListener failed Critical Verifies that the tasks remote procedure call (RPC) server is running and reachable on the local Exchange server. TcpListener failed Critical Verifies that the TCP log copy listener is running and reachable on the local Exchange server. DagMembersUp failed Critical Verifies that all DAG members are available, running, and reachable. Cluster Network failed Critical Verifies that all cluster-managed networks on the local Exchange server are available. QuorumGroup failed Critical Verifies that the default cluster group (quorum group) is in a healthy and online state. 64 Probe Guide for Exchange Server Monitor

65 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description FileShareQuorum failed Critical Verifies that the witness server and witness directory and share configured for the DAG are reachable. DBLogCopyKeepingUp failed Critical Verifies that log copying and inspection by the passive copies of databases on the local exchange server are able to keep up with log generation activity on the active copy. DBLogReplayKeepingUp failed Critical Verifies that replay activity for the passive copies of databases on the local exchange server is able to keep up with log copying and inspection activity. Stale security information -Quorum Group Stale security information -Cluster File Share Witness The database availability group is experiencing problems that may cause it to fail due to stale security information The database availability group is experiencing problems that may cause it to eventually fail due to stale security information. DAG Network Down One or more networks supporting the database availability group are not operating properly on this server. Alertable failure DSNs within the last hour 1 Major Alertable failure DSNs within the last hour is the number of alertable failure delivery status notifications (DSNs) that have been generated within the last hour. Some DSNs, such as Recipient Not Found, are filtered out because they are expected to occur. Thus, we do not want to generate an alert. Hub Selection Resolver Failures 1 Major Hub Selection Resolver Failures is the number of messages that encountered recipient AD lookup errors in Hub selection. Chapter 3: Metrics 65

66 exchange_monitor Alert Metrics Default Settings Alarm Metric Hub Selection Organization Mailbox Failures Error Threshold Error Severity Description 1 Major Hub Selection Organization Mailbox Failures is the number of messages that encountered organization mailbox lookup errors in Hub selection. Hub Selection Routing Failures 1 Major Hub Selection Routing Failures is the number of messages that failed to be routed. Percent Availability 1 Major The ratio of successful connections to total legitimate ones in the sliding window. Percent Failures Due To MaxInboundConnectionLimit 1 Major Failure percentage of legitimate connections in the sliding window due to MaxInboundConnectionLimit. Percent Failures Due To WLID Down 1 Major Failure percentage of legitimate connections in the sliding window due to WLID down. Percent Failures Due to back pressure 1 Major Failure percentage of legitimate connections in the sliding window due to back pressure. Failures Due to Maximum Local Loop Count 1 Major Total number of message delivery failures due to reaching maximum local loop count. Connections Created per second 1 Major Connections Created per second is the number of new connections to the SMTP server that are established each second. Message Bytes Received per second 1 Major Number of bytes received in messages per second. Connection created per second 1 Major Connections Created per second is the number of new connections to the SMTP server that are established each second. Message Bytes Received per second 1 Major Number of bytes received in messages per second. Message Bytes Sent per second 1 Major Number of bytes sent per second. 66 Probe Guide for Exchange Server Monitor

67 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description DNS Errors 1 Major DNS Errors is the number of DNS errors encountered by the SMTPSend connector. Connection Failures 1 Major Connection Failures is the number of connection failures encountered by the SMTPSend connector. Protocol Errors 1 Major Protocol Errors is the number of protocol errors encountered by the SMTPSend connector. Inbound_LocalDeliveryCallsPerSecond 1 Major Inbound: LocalDeliveryCallsPerSecond is the number of local delivery calls per second. Inbound_MessageDeliveryAttemptsPe rsecond Inbound_Recipients_Delivered_Per_S econd 1 Major Inbound: MessageDeliveryAttemptsPerSec ond is the number of attempts that are made per second to deliver a message. 1 Major Inbound: Recipients Delivered Per Second is the number of recipients to whom the message was delivered per second. MessagesFailedToRoute 1 Major Total number of messages failed to be routed. Hub Selection Resolver Failures 1 Major Hub Selection Resolver Failures is the number of messages that encountered recipient AD lookup errors in Hub selection. Hub Selection Organization Mailbox Failures 1 Major Hub Selection Organization Mailbox Failures is the number of messages that encountered organization mailbox lookup errors in Hub selection. Percentage Proxy Setup Failures 1 Major The percentage of sessions (during the sliding time window) that could not be proxied due to failures. Chapter 3: Metrics 67

68 exchange_monitor Alert Metrics Default Settings Alarm Metric Error Threshold Error Severity Description Total Proxy User Lookup Failures 1 Major The total number of user lookup failures (during the sliding time window) while trying to set up a proxy session. Total Proxy Dns Lookup Failures 1 Major The total number of dns lookup failures (during the sliding time window) while trying to set up a proxy session. Total Proxy Connection Failures 1 Major The total number of connection failures (during the sliding time window) while trying to set up a proxy session. Total Bytes Proxied 1 Major Total number of bytes proxied (after proxy session is set up. Percentage Availability 1 Major The ratio of successful connections to total legitimate ones in the sliding window. Connections Created/sec 1 Major Connections Created per second is the number of new connections to the SMTP server that are established each second. Message Bytes Sent/sec 1 Major Number of bytes sent per second. Connection Failures 1 Major Connection Failures is the number of connection failures encountered by the SMTPSend connector. 68 Probe Guide for Exchange Server Monitor