IBM Tioli Monitoring Version 6.3 Fix Pack 2 Windows OS Agent Reference
IBM Tioli Monitoring Version 6.3 Fix Pack 2 Windows OS Agent Reference
Note Before using this information and the product it supports, read the information in Notices on page 409. This edition applies to ersion 6, release 3, fix pack 2 of IBM Tioli Monitoring (product number 5724-C04) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 1994, 2013. US Goernment Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.
Contents Tables............... ii Chapter 1. Workspaces........ 1 Predefined workspaces........... 1 Attribute groups used by predefined workspaces.. 5 Actie Serer Pages workspace........ 6 Agent Management Serices workspace..... 7 Agents' Management Log workspace...... 7 Cache workspace............. 8 Deices workspace............ 8 Deice Dependencies workspace........ 8 DHCP Serer workspace.......... 8 Disk workspace............. 9 DNS Dynamic Update workspace....... 9 DNS Memory workspace.......... 9 DNS Query workspace........... 9 DNS WINS workspace........... 9 DNS Zone Transfer workspace........ 9 Enterprise Serices workspace........ 10 Eent Log workspace........... 10 File Change workspace.......... 10 File Trend workspace........... 10 FTP Serer Statistics workspace........ 11 FTP Serice workspace.......... 11 Gopher Serice workspace......... 11 Historical Summarized Aailability workspace... 11 Historical Summarized Aailability Daily workspace 12 Historical Summarized Aailability Hourly workspace............... 12 Historical Summarized Aailability Weekly workspace............... 12 Historical Summarized Capacity workspace... 12 Historical Summarized Capacity Daily workspace 12 Historical Summarized Capacity Hourly workspace 13 Historical Summarized Capacity Weekly workspace 13 Historical Summarized Performance workspace.. 13 Historical Summarized Performance Daily workspace............... 14 Historical Summarized Performance Hourly workspace............... 14 Historical Summarized Performance Weekly workspace............... 14 HTTP Content Index workspace....... 14 HTTP Serice workspace.......... 15 ICMP Statistics workspace......... 15 IIS Statistics workspace.......... 15 Indexing Serice workspace......... 15 Indexing Serice Filter workspace....... 16 IP Statistics workspace........... 16 Job Object workspace........... 16 Job Object Details workspace........ 16 Logical Disk workspace.......... 17 Logical Disk I/O workspace......... 17 Memory workspace............ 17 Memory Allocation workspace........ 17 Monitored Logs workspace......... 18 Mount Point workspace.......... 18 MSMQ Information Store workspace...... 18 MSMQ Queue workspace......... 18 MSMQ Serice workspace......... 19 MSMQ Sessions workspace......... 19 Network workspace........... 19 Network Interface workspace........ 19 Network Ports workspace......... 20 Network Segment workspace........ 20 NNTP Commands workspace........ 20 NNTP Serer workspace.......... 20 Objects workspace............ 20 Paging workspace............ 21 Paging File workspace........... 21 Physical Disk workspace.......... 21 Print Job workspace........... 21 Print Queue workspace.......... 22 Printer workspace............ 22 Printer Oeriew workspace......... 22 Process workspace............ 22 Process I/O workspace.......... 23 Process Oeriew workspace........ 23 Process Storage workspace......... 23 Processor workspace........... 23 Processor Oeriew workspace........ 23 Processor Summary workspace........ 24 RAS Port workspace........... 24 RAS Total workspace........... 24 Redirector workspace........... 24 Serer Oeriew workspace......... 24 Serer Work Queues workspace....... 24 Serices workspace............ 25 Serice Dependencies workspace....... 25 SMTP Serer workspace.......... 25 System I/O workspace.......... 25 System workspace............ 26 System Information workspace........ 26 System Oeriew workspace........ 26 System Pools workspace.......... 26 System Timings workspace......... 27 TCP Statistics workspace.......... 27 Threads workspace............ 27 UDP Statistics workspace.......... 27 Web Serice workspace.......... 27 Windows OS workspace.......... 28 Windows OS Details workspace....... 28 Windows Systems workspace........ 28 Chapter 2. Attributes......... 29 Actie Serer Pages attributes........ 31 Agent Aailability Management Status attributes.. 35 Agent Actie Runtime Status attributes..... 36 Alerts Table attributes........... 37 BIOS Information attributes......... 38 Copyright IBM Corp. 1994, 2013 iii
Cache attributes............. 38 Computer Information attributes....... 42 Configuration Information attributes...... 43 Deice Dependencies attributes........ 44 Deices attributes............ 45 DHCP Serer attributes.......... 46 DNS Dynamic Update attributes....... 47 DNS Memory attributes.......... 49 DNS Query attributes........... 50 DNS WINS attributes........... 52 DNS Zone Transfer attributes........ 53 Eent Log attributes........... 55 File Change attributes........... 57 File Trend attributes........... 59 FTP Serer Statistics attributes........ 62 FTP Serice attributes........... 63 Gopher Serice attributes.......... 65 HTTP Content Index attributes........ 67 HTTP Serice attributes.......... 68 ICMP Statistics attributes.......... 71 IIS Statistics attributes........... 74 Indexing Serice attributes......... 76 Indexing Serice Filter attributes....... 77 IP Address attributes........... 78 IP Statistics attributes........... 78 Job Object attributes........... 80 Job Object Details Attributes......... 83 Job Object Details Attributes (32-bit - Superseded) 86 Logical Disk attributes........... 90 Memory attributes............ 93 Memory attributes (32-bit - Superseded)..... 97 Monitored Logs Report attributes....... 101 Mount Point attributes.......... 102 MSMQ Information Store attributes...... 103 MSMQ Queue attributes.......... 104 MSMQ Serice attributes......... 104 MSMQ Sessions attributes......... 105 Network Interface attributes........ 107 Network Interface attributes (32-bit - Superseded) 109 Network Port attributes.......... 111 Network Segment attributes........ 112 NNTP Commands attributes........ 113 NNTP Serer attributes.......... 117 Objects attributes............ 121 Paging File attributes........... 122 Physical Disk attributes.......... 123 Print Job attributes........... 125 Print Queue attributes.......... 127 Printer attributes............ 129 Process attributes............ 130 Process attributes (32-bit - Superseded)..... 133 Process IO attributes........... 136 Processor attributes........... 137 Processor Information attributes....... 138 Processor Summary attributes........ 139 RAS Port attributes........... 141 RAS Total attributes........... 143 Redirector attributes........... 145 Registry attributes............ 151 Serer attributes............ 152 Serer Work Queue attributes........ 155 Serer Work Queue attributes (32-bit - Superseded) 157 Serice Dependencies attributes....... 160 Serices attributes............ 160 SMTP Serer attributes.......... 161 System attributes............ 166 TCP Statistics attributes.......... 170 Thread attributes............ 171 UDP Statistics attributes.......... 172 VMWare Memory attributes........ 173 VMWare Processor attributes........ 175 Web Serice attributes.......... 176 Disk capacity planning for historical data.... 181 Chapter 3. Situations........ 185 Predefined situations: actiated at startup.... 186 Predefined situations: not actiated at startup.. 188 Predefined situations: bottleneck analysis.... 190 Chapter 4. Take Action commands 193 AMS Recycle Agent Instance........ 193 AMS Reset Agent Daily Restart Count..... 194 AMS Start Agent action.......... 194 AMS Start Agent Instance action....... 195 AMS Stop Agent action.......... 196 AMS Start Management action....... 196 AMS Stop Management action....... 196 Start Serices action........... 197 Stop Serices action........... 197 Chapter 5. Policies......... 199 NT Disk Busy............. 199 NT Disk Full............. 199 NT Log Management........... 200 Process CPU.............. 200 Process Memory............ 200 Chapter 6. Tioli Common Reporting for the monitoring agent...... 203 Utilization Details for Single Resource report... 207 Utilization Details for Multiple Resources report 211 Utilization Comparison for Single Resource report 214 Utilization Comparison for Multiple Resources report................ 217 Utilization Heat Chart for Single Resource report 220 Memory Utilization for Single Resource report.. 223 Memory Utilization for Multiple Resources Comparison report........... 225 Top Resources Utilization report....... 228 Top Situations by Status report....... 231 Enterprise Resources List report....... 232 Enterprise Daily Utilization Heat Chart report.. 232 Enterprise Summary report......... 234 Top Resources by Aailability........ 236 Top Resources Utilization Summary Heat Chart report................ 238 Top Resources by Aailability (MTTR/MTBSI).. 240 Resource Aailability Comparison...... 242 Aailability Heat Chart for Single Resource... 243 CPU Utilization Comparison for Multiple Resources.............. 245 i IBM Tioli Monitoring: Windows OS Agent Reference
CPU Utilization for Single Resource...... 247 Disk Utilization for Single Resource...... 249 Disk Utilization Comparison for Multiple Resources.............. 252 Situations History report......... 255 Creating custom queries and reports..... 257 Appendix A. Upgrading for warehouse summarization........... 263 Tables in the warehouse.......... 263 Effects on summarized attributes....... 263 Upgrading your warehouse with limited user permissions.............. 264 Types of table changes.......... 265 Table summary............. 265 Upgrading your warehouse for primary key and tablespace changes........... 268 Affected attribute groups and supporting scripts 269 Procedures............. 269 Appendix B. Workspace requirements and usage scenarios........ 273 Disk group.............. 273 Enterprise Serices group......... 274 Memory group............. 279 Network group............. 279 Printer group............. 282 Process group............. 283 Processor group............ 284 System group............. 284 WindowsOperatingSystem class...... 391 ComputerSystem class......... 392 IpInterface class........... 393 IpV4Address class........... 393 IpV6Address class........... 393 Fqdn class............. 393 TMSAgent class........... 394 Appendix F. OSLC resources for the Windows OS agent......... 395 Documentation library....... 401 IBM Tioli Monitoring library........ 401 Documentation for the base agents..... 402 Related publications........... 403 Tioli Monitoring community on Serice Management Connect.......... 403 Other sources of documentation....... 403 Support information........ 405 Notices.............. 409 Index............... 413 Appendix C. IBM Tioli Enterprise Console eent mapping....... 289 Appendix D. Data collection..... 387 Appendix E. Discoery Library Adapter for the monitoring agent... 391 Windows data model class types represented in CDM................ 391 Contents
i IBM Tioli Monitoring: Windows OS Agent Reference
Tables 1. Attribute groups used by predefined workspaces............. 5 2. Capacity planning for historical data logged by component........... 182 3. Attribute groups supported by the data model.............. 257 4. Time periods and suffixes for summary tables and iews............. 263 5. Additional columns to report summarization information............ 264 6. Primary key and warehouse changes for the Monitoring Agent for Windows OS.... 265 7. Scripts for affected attribute groups and summary tables for the Monitoring Agent for Windows OS............ 269 8. Oeriew of Distributed Monitoring migrated situations............. 289 9. Oeriew of attribute groups to eent classes and slots............. 303 10. Mechanisms used to gather attributes 387 Copyright IBM Corp. 1994, 2013 ii
iii IBM Tioli Monitoring: Windows OS Agent Reference
Chapter 1. Workspaces A workspace is the working area of the Tioli Enterprise Portal application window. At the left of the workspace is a Naigator that you use to select the workspace you want to see. As you select items in the Naigator, the workspace presents iews pertinent to your selection. Each workspace has at least one iew. Some iews hae links to other workspaces. Eery workspace has a set of properties associated with it. Some predefined workspaces are not aailable from the Naigator tree item, but are accessed by selecting the link indicator next to a row of data in a iew. Left-clicking a link indicator selects the default workspace associated with that link. Right-clicking a link indicator displays all linked workspaces that can be selected. Note: The Eent Log workspace and the Print Job workspace are examples of linked workspaces. This monitoring agent proides predefined workspaces. You cannot modify or delete the predefined workspaces, but you can create new workspaces by editing them and saing the changes with a different name. For more information about creating, customizing, and working with workspaces, see the IBM Tioli Monitoring User's Guide. For additional information about workspaces for this monitoring agent, see Appendix B, Workspace requirements and usage scenarios, on page 273. Predefined workspaces The Monitoring Agent for Windows OS proides the following predefined workspaces, which are organized by Naigator item: Disk workspace on page 9 Logical Disk workspace on page 17 Logical Disk I/O workspace on page 17 Physical Disk workspace on page 21 Mount Point workspace on page 18 Enterprise Serices workspace on page 10 Actie Serer Pages workspace on page 6 FTP Serer Statistics workspace on page 11 FTP Serice workspace on page 11 Gopher Serice workspace on page 11 HTTP Content Index workspace on page 14 HTTP Serice workspace on page 15 IIS Statistics workspace on page 15 Indexing Serice workspace on page 15 Indexing Serice Filter workspace on page 16 MSMQ Information Store workspace on page 18 MSMQ Queue workspace on page 18 MSMQ Serice workspace on page 19 Copyright IBM Corp. 1994, 2013 1
MSMQ Sessions workspace on page 19 NNTP Commands workspace on page 20 NNTP Serer workspace on page 20 SMTP Serer workspace on page 25 Web Serice workspace on page 27 Memory workspace on page 17 Cache workspace on page 8 Memory Allocation workspace on page 17 Paging workspace on page 21 Paging File workspace on page 21 System Pools workspace on page 26 Network workspace on page 19 DHCP Serer workspace on page 8 DNS Dynamic Update workspace on page 9 DNS Memory workspace on page 9 DNS Query workspace on page 9 DNS WINS workspace on page 9 DNS Zone Transfer workspace on page 9 ICMP Statistics workspace on page 15 IP Statistics workspace on page 16 Network Interface workspace on page 19 Network Ports workspace on page 20 Network Segment workspace on page 20 TCP Statistics workspace on page 27 UDP Statistics workspace on page 27 Printer workspace on page 22 Print Job workspace on page 21 Print Queue workspace on page 22 Printer Oeriew workspace on page 22 Process workspace on page 22 Job Object workspace on page 16 Job Object Details workspace on page 16 Process I/O workspace on page 23 Process Oeriew workspace on page 23 Process Storage workspace on page 23 Threads workspace on page 27 Processor workspace on page 23 Processor Oeriew workspace on page 23 Processor Summary workspace on page 24 System workspace on page 26 Deices workspace on page 8 Deice Dependencies workspace on page 8 Eent Log workspace on page 10 File Change workspace on page 10 File Trend workspace on page 10 2 IBM Tioli Monitoring: Windows OS Agent Reference
Monitored Logs workspace on page 18 Objects workspace on page 20 RAS Port workspace on page 24 RAS Total workspace on page 24 Redirector workspace on page 24 Serer Oeriew workspace on page 24 Serer Work Queues workspace on page 24 Serices workspace on page 25 Serice Dependencies workspace on page 25 System I/O workspace on page 25 System Oeriew workspace on page 26 System Timings workspace on page 27 Agent Management Serices workspace on page 7 Agents' Management Log workspace on page 7 Windows OS workspace on page 28 Windows OS Details workspace on page 28 System Information workspace on page 26 Windows Systems workspace on page 28 This agent also includes the following historical workspaces: Historical Summarized Aailability Historical Summarized Aailability Daily Historical Summarized Aailability Hourly Historical Summarized Aailability Weekly Historical Summarized Capacity Historical Summarized Capacity Daily Historical Summarized Capacity Hourly Historical Summarized Capacity Weekly Historical Summarized Performance Historical Summarized Performance Daily Historical Summarized Performance Hourly Historical Summarized Performance Weekly The following workspaces hae a historical ersion: Actie Serer Pages Cache DHCP Serer DNS Dynamic Update DNS Memory DNS Query DNS WINS DNS Zone Transfer FTP Serer Statistics FTP Serice Gopher Serice HTTP Content Index Chapter 1. Workspaces 3
HTTP Serice ICMP Statistics IIS Statistics Indexing Serice Indexing Serice Filter IP Statistics Job Object Job Object Details Logical Disk Logical Disk I/O Memory Allocation MSMQ Information Store MSMQ Queue MSMQ Serice MSMQ Sessions Network Interface Network Segment NNTP Commands NNTP Serer Objects Paging Paging File Physical Disk Print Queue Process Oeriew Process Storage Processor Oeriew RAS Port RAS Total SMTP Serer System I/O System Oeriew System Pools System Timings TCP Statistics UDP Statistics Web Serice 4 IBM Tioli Monitoring: Windows OS Agent Reference
Attribute groups used by predefined workspaces In most cases, a workspace contains data or columns that hae similar attributes in an attribute group. The table shows the relationships between the predefined workspaces and the attribute groups. (The workspaces are listed in alphabetical order.) Table 1. Attribute groups used by predefined workspaces Workspace Related Attribute Group Actie Serer Pages workspace on page 6 Actie Serer Pages attributes on page 31 Cache workspace on page 8 Cache attributes on page 38 Deices workspace on page 8 Deices attributes on page 45 Deice Dependencies workspace on page 8 Deice Dependencies attributes on page 44 DHCP Serer workspace on page 8 DHCP Serer attributes on page 46 DNS Dynamic Update workspace on page 9 DNS Dynamic Update attributes on page 47 DNS Memory workspace on page 9 DNS Memory attributes on page 49 DNS Query workspace on page 9 DNS Query attributes on page 50 DNS WINS workspace on page 9 DNS WINS attributes on page 52 DNS Zone Transfer workspace on page 9 DNS Zone Transfer attributes on page 53 File Change workspace on page 10 File Change attributes on page 57 File Trend workspace on page 10 File Trend attributes on page 59 FTP Serer Statistics workspace on page 11 FTP Serer Statistics attributes on page 62 FTP Serice workspace on page 11 FTP Serice attributes on page 63 HTTP Content Index workspace on page 14 HTTP Content Index attributes on page 67 HTTP Serice workspace on page 15 HTTP Serice attributes on page 68 ICMP Statistics workspace on page 15 ICMP Statistics attributes on page 71 IIS Statistics workspace on page 15 IIS Statistics attributes on page 74 Indexing Serice workspace on page 15 Indexing Serice attributes on page 76 Indexing Serice Filter workspace on page 16 Indexing Serice Filter attributes on page 77 IP Statistics workspace on page 16 IP Statistics attributes on page 78 Job Object workspace on page 16 Job Object attributes on page 80 Job Object Details workspace on page 16 Job Object Details Attributes (32-bit - Superseded) on page 86 Logical Disk workspace on page 17 Logical Disk attributes on page 90 Logical Disk I/O workspace on page 17 Logical Disk attributes on page 90 Memory Allocation workspace on page 17 Memory attributes (32-bit - Superseded) on page 97 Monitored Logs workspace on page 18 Monitored Logs Report attributes on page 101 Eent Log attributes on page 55 MSMQ Information Store workspace on page 18 MSMQ Information Store attributes on page 103 MSMQ Queue workspace on page 18 MSMQ Queue attributes on page 104 MSMQ Serice workspace on page 19 MSMQ Serice attributes on page 104 MSMQ Sessions workspace on page 19 MSMQ Sessions attributes on page 105 Network Interface workspace on page 19 Network Interface attributes (32-bit - Superseded) on page 109 Network Segment workspace on page 20 Network Segment attributes on page 112 Chapter 1. Workspaces 5
Table 1. Attribute groups used by predefined workspaces (continued) Workspace Related Attribute Group NNTP Commands workspace on page 20 NNTP Commands attributes on page 113 NNTP Serer workspace on page 20 NNTP Serer attributes on page 117 Objects workspace on page 20 Objects attributes on page 121 Paging workspace on page 21 Paging File attributes on page 122 Paging File workspace on page 21 Paging File attributes on page 122 Physical Disk workspace on page 21 Physical Disk attributes on page 123 Print Queue workspace on page 22 Print Queue attributes on page 127 Printer Oeriew workspace on page 22 Printer attributes on page 129 Process Oeriew workspace on page 23 Process attributes (32-bit - Superseded) on page 133 Process Storage workspace on page 23 Process attributes (32-bit - Superseded) on page 133 Processor Oeriew workspace on page 23 Processor attributes on page 137 RAS Port workspace on page 24 RAS Port attributes on page 141 RAS Total workspace on page 24 RAS Total attributes on page 143 Serices workspace on page 25 Serices attributes on page 160 Serice Dependencies attributes on page 160 SMTP Serer workspace on page 25 SMTP Serer attributes on page 161 System I/O workspace on page 25 System attributes on page 166 System Oeriew workspace on page 26 System attributes on page 166 System Pools workspace on page 26 System attributes on page 166 System Timings workspace on page 27 System attributes on page 166 TCP Statistics workspace on page 27 TCP Statistics attributes on page 170 UDP Statistics workspace on page 27 UDP Statistics attributes on page 172 Web Serice workspace on page 27 Web Serice attributes on page 176 This agent also includes the following historical workspaces: Historical Summarized Aailability Historical Summarized Aailability Daily Historical Summarized Aailability Hourly Historical Summarized Aailability Weekly Historical Summarized Capacity Historical Summarized Capacity Daily Historical Summarized Capacity Hourly Historical Summarized Capacity Weekly Historical Summarized Performance Historical Summarized Performance Daily Historical Summarized Performance Hourly Historical Summarized Performance Weekly Actie Serer Pages workspace The Actie Serer Pages workspace displays information on Actie Serer Pages requests, session data, and memory usage. 6 IBM Tioli Monitoring: Windows OS Agent Reference
This workspace includes a Request Actiity iew, a Request Time Distribution iew, and the Actie Serer Pages iew. Use the iew to obtain data about allocated memory, browser requests executing, request execution time, allocated memory in free list, and sessions timed out. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Agent Management Serices workspace The Agent Management Serices workspace contains iews of data collected by the Agent Management Serices component of the Monitoring Agent for Windows. This workspace includes an Agents' Management Status iew, an Agents' Runtime Status iew, an Agents' Alerts iew, and an Agents' Management Definitions iew. Agents' Management Log workspace The Agents' Management Log workspace contains a list of monitoring agent log entries filtered on the Agent Management Serices component. Use this workspace to see the operations being executed by Agent Management Serices and to hae an audit trail of the operations that Agent Management Serices is performing. Log messages generated by the physical watchdog are displayed in the Agents' Management Log workspace iew. By using these log messages, you can track OS Agent restarts and aailability. The limitations of this function are that the physical watchdog must be running. Alerts that are seen in the Alerts iew in the default workspace are cached for 24 hours, by default. The time can be oerridden by changing the enironment ariable KCA_CACHE_LIMIT found in the kntcma.ini file. The ariable is specified in hours. This functionality is not aailable to preious ersions of the agents. The workspace includes the following operation messages: Agent added to system - CAP file found. Agent CAP file initialization completed. Agent daily restart count reset. Agent exceeded policy defined CPU threshold. Agent exceeded policy defined memory threshold. Agent exceeded restart tries. Agent initial start. Agent Management Serices watchdog not reliable. Agent manual start failed. Agent manual stop failed. Agent not configured. Agent not found. Agent now managed. Agent now unmanaged. Agent recycle command receied. Agent remoed from system - CAP file remoed. Agent restart disabled - disarm mode actie Agent restart failed. Chapter 1. Workspaces 7
Agent start command receied. Agent started successfully. Agent stop command receied. Agent stopped abnormally. Agent stopped successfully. Disarm completed successfully. Rearm completed successfully. This workspace includes an Agents' Management Log iew. Cache workspace The Cache workspace displays cache statistics. This helps you, along with the other Memory workspaces, to identify disk performance problems through slow rates of data transfer from disk to memory and high disk usage. This workspace includes an Actiity iew and the Cache iew. Use the iew to obtain information about the number of times data is read in to the cache prior to writing the data back to disk, the frequency of reads from cache pages using a Memory Descriptor List (MDL) to access the pages, and the number of pages the cache has flushed to disk. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Deices workspace The Deices workspace displays status and configuration information about each deice and file system drier installed on the serer. This workspace includes iews of Automatic Start Type and Deices. Use the Deices iew to obtain information about the name of the deice drier, the current state of the deice drier, and the name of the load ordering group to which this drier belongs. Use the Automatic Start Type iew to obtain information about the state of the deices and the binary path. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Deice Dependencies workspace This workspace includes Dependencies and Deices iews. The Dependencies iew reports the deice name and dependency type. The Deices iew displays the deice name, current state of deice and the binary path. DHCP Serer workspace The DHCP Serer workspace helps you monitor all types of Dynamic Host Configuration Protocol (DHCP) messages sent and receied by the serer, the aerage amount of processing time spent by the serer per message packet, and the number of message packets dropped because of internal delays at the serer. This workspace includes a Packet Traffic iew and the DHCP Serer iew. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. 8 IBM Tioli Monitoring: Windows OS Agent Reference
Disk workspace The Disk workspace information reflects the health of your storage components within your monitored systems. This workspace has a superseded ersion that displays queries with signed 32-bit maximum alue (2,147,483,647) and a ersion with the same name (minus "superseded") with queries that support alues up to signed 64-bit max (9,223,372,036,854,775,807). This workspace contains at a glance data associated with disk byte traffic, disk usage, and disk time distribution, including the following: Amount of disk byte traffic (reads and writes) expressed in bytes/second Percentage of disk space used and free Percentage of disk read time and disk write time DNS Dynamic Update workspace The DNS Dynamic Update workspace includes an Actiity iew and the DNS Dynamic Update iew. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. DNS Memory workspace The DNS Memory workspace includes an Allocation iew and the DNS Memory iew. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. DNS Query workspace The DNS Query workspace includes a TCP Traffic iew, a UDP Traffic iew, and the DNS Query iew. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. DNS WINS workspace The DNS WINS workspace includes a Lookup Traffic iew, a Reerse Lookup iew, and the DNS WINS iew. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. DNS Zone Transfer workspace The DNS Zone Transfer workspace includes a Successes/Failures iew and the DNS Zone Transfer iew. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Chapter 1. Workspaces 9
Enterprise Serices workspace The Enterprise Serices workspace contains information that reflects the health of your enterprise serices systems. This workspace has a superseded ersion that displays queries with signed 32-bit maximum alue (2,147,483,647) and a ersion with the same name (minus superseded ) with queries that support alues up to signed 64-bit max (9,223,372,036,854,775,807). This workspace contains at a glance traffic data associated with ASP requests, FTP data, MSMQ messages, NNTP data, and web requests, including the following: ASP requests executed per second Rate of data bytes (per second) sent and receied by the FTP serice Rate of incoming and outgoing MSMQ messages handled by the MSMQ Serice per second Rate of data bytes (per second) sent and receied by the NNTP Serer Rate of data bytes (per second) sent and receied by the Web serice Eent Log workspace The Eent Log workspace proides a summary of size and usage data for Windows eent logs. This workspace has a superseded ersion that displays queries with signed 32-bit maximum alue (2,147,483,647) and a ersion with the same name (minus superseded ) with queries that support alues up to signed 64-bit max (9,223,372,036,854,775,807). This predefined workspace is not aailable from the Naigator tree item, but is accessed by selecting the link indicator next to a row of data in a System workspace iew. Left-clicking a link indicator selects the default workspace associated with that link. Right-clicking a link indicator displays all linked workspaces that can be selected. This workspace includes the Monitored Logs iew and the Eent Log iew. When running ITM V6.2.3 Fix Pack 1 (or later), you hae the capability to display eents and eent data from any eent log you are monitoring. Howeer, the Log Name and Log Name (Unicode) attributes represent input fields, not output fields. Filtering on the eent log name is not supported. You must specify the exact name of the eent log you want to monitor. File Change workspace The File Change workspace proides information on modifications to your file systems and to your directories. This workspace has a superseded ersion that displays queries with signed 32-bit maximum alue (2,147,483,647) and a ersion with the same name (minus superseded ) with queries that support alues up to signed 64-bit max (9,223,372,036,854,775,807). This workspace includes the File Change iew. You can use this workspace to find out information such as when a file/directory was added, when a file/directory was remoed, when a file/directory changed (in size, in attribute, or in the security for the file/directory), and when a file/directory was renamed. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. File Trend workspace The File Trend workspace gies you a history of the recent actiity of your file system. This workspace has a superseded ersion that displays queries with signed 32-bit maximum alue (2,147,483,647) and a ersion with the same name (minus superseded ) with queries that support alues up to signed 64-bit max (9,223,372,036,854,775,807). This workspace includes the File Trend iew. Use the iew to obtain information about the percent change oer the last hour, percent change oer the last interal, date created, size change oer the last hour, and free space aailable. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. 10 IBM Tioli Monitoring: Windows OS Agent Reference
The File Trend iew monitors the discrete files only and not subdirectories. FTP Serer Statistics workspace The FTP Serer Statistics workspace displays traffic statistics, session data, and connection actiity for an FTP serer. This workspace includes a Connection Actiity iew, a File I/O iew, a Byte Traffic iew, and the FTP Serer Statistics iew. Use the iew to obtain information about the number of bytes sent per second, connection attempts since startup, current anonymous users, files sent per second, current connections, and logon attempts since startup. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. FTP Serice workspace The FTP Serice workspace display traffic statistics, session data, and connection actiity for an FTP serer. This workspace includes a Connection Actiity iew, a File I/O iew, a Byte Traffic iew, and the FTP Serice iew. Use the iew to obtain information about the number of bytes sent per second, connection attempts since startup, current anonymous users, files sent per second, current connections, and logon attempts since startup. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Gopher Serice workspace The Gopher Serice workspace proides traffic statistics, session data, and connection information for a Gopher serer. This workspace includes a Byte Traffic iew and the Gopher Serice iew. Use the iew to obtain information about total connection attempts, current connections, Kbytes receied per second, Kbytes sent per second, maximum connections, directory listings sent, and logon attempts. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Historical Summarized Aailability workspace The Historical Summarized Aailability workspace shows the managed resource aailability (up time) data for the number of months that you specify in the Time Span dialog. This workspace consists of the following two graphical iews: Aailability by O/S Type, which shows the percentage of time that managed resources were up and aailable, grouped by operating system Aailability by Serer, which shows the percentage of time that each managed resource was up and aailable Chapter 1. Workspaces 11
Historical Summarized Aailability Daily workspace The Historical Summarized Aailability Daily workspace shows the aailability (up time) data by day, the sessions summary by day, and the system summary for a managed resource. This workspace consists of the following three graphical iews: Aailability (daily), which shows the aerage system up time, summarized by day Session Summary (daily), which shows session details such as the number sessions logged off and sessions timed out, summarized by day System Summary (daily), which shows system data such as the operating system type Historical Summarized Aailability Hourly workspace The Historical Summarized Aailability Hourly workspace shows the aailability (up time) data by hour, the sessions summary by hour, and the system summary for a managed resource. This workspace consists of the following three graphical iews: Aailability (hourly), which shows the aerage system up time, summarized by hour Session Summary (hourly), which shows session details such as the number sessions logged off and sessions timed out, summarized by hour System Summary (hourly), which shows system data such as operating system type Historical Summarized Aailability Weekly workspace The Historical Summarized Aailability Weekly workspace shows the aailability (up time) data by month, the sessions summary by week, and the system summary for a managed resource. This workspace consists of the following four graphical iews: Aailability (monthly), which shows the aerage system up time, summarized by month for the number of months that you specify in the Time Span dialog Aailability (weekly), which shows the aerage managed resource up time, summarized by week Session Summary (weekly), which shows session details such as the number sessions logged off and sessions timed out, summarized by week System Summary (weekly), which shows system data such as the operating system type Historical Summarized Capacity workspace The Historical Summarized Capacity workspace shows the percentage of system resources used for the time span that you specify in the Time Span dialog. This workspace consists of the following four graphical iews: Network Interface Actiity (maximum oer months), which shows the maximum percentage of network usage for the system during the time span that you specify in the Time Span dialog Processor Utilization (aerage oer months), which shows the aerage processor utilization percentage during the specified time period Memory Utilization (aerage oer months), which shows the aerage percentage of memory used during the specified time period Disk Capacity (aerage oer months), which shows the maximum percentage of space used on all the system's logical disks during the specified time period Historical Summarized Capacity Daily workspace The Historical Summarized Capacity Daily workspace shows the percentage of system resources used for the time span that you specify in the Time Span dialog, summarized by day. This workspace consists of the following four graphical iews: 12 IBM Tioli Monitoring: Windows OS Agent Reference
Network Interface Actiity (daily), which shows the maximum percentage of network usage for the system during the time span that you specify in the Time Span dialog, summarized by day Processor Utilization (daily), which shows the aerage processor utilization percentage during the specified time period, summarized by day Memory Utilization (daily), which shows the aerage percentage of memory used during the specified time period, summarized by day Disk Capacity (daily), which shows the maximum percentage of space used on all the system's logical disks during the specified time period, summarized by day Historical Summarized Capacity Hourly workspace The Historical Summarized Capacity Hourly workspace shows the percentage of system resources used for the time span that you specify in the Time Span dialog, summarized by hour. This workspace consists of the following four graphical iews: Network Interface Actiity (hourly), which shows the maximum percentage of network usage for the system during the time span that you specify in the Time Span dialog, summarized by hour Processor Utilization (hourly), which shows the aerage processor utilization percentage during the specified time period, summarized by hour Memory Utilization (hourly), which shows the aerage percentage of memory used during the specified time period, summarized by hour Disk Capacity (hourly), which shows the maximum percentage of space used on all the system's logical disks during the specified time period, summarized by hour Historical Summarized Capacity Weekly workspace The Historical Summarized Capacity Weekly workspace shows the percentage of system resources used for the time span that you specify in the Time Span dialog, summarized by week. This workspace consists of the following four graphical iews: Network Interface Actiity (weekly), which shows the maximum percentage of network usage for the system during the time span that you specify in the Time Span dialog, summarized by week Processor Utilization (weekly), which shows the aerage processor utilization percentage during the specified time period, summarized by week Memory Utilization (weekly), which shows the aerage percentage of memory used during the specified time period, summarized by week Disk Capacity (weekly), which shows the maximum percentage of space used on all the system's logical disks during the specified time period, summarized by week Historical Summarized Performance workspace The Historical Summarized Performance workspace shows the aerage performance of system resources for the time span that you specify in the Time Span dialog. This workspace consists of the following four graphical iews: Network Interface Performance (aerage oer months), which shows the aerage rate of bytes transferred for the system during the time span that you specify in the Time Span dialog Processor Performance (aerage oer months), which shows the aerage rate of interrupts for the system during the specified time period Memory Performance (aerage oer months), which shows the aerage rate of page faults for the system during the specified time period Disk Performance (aerage oer months), which shows the aerage percentage of disk time that the system used during the specified time period Chapter 1. Workspaces 13
Historical Summarized Performance Daily workspace The Historical Summarized Performance Daily workspace shows the aerage performance of system resources for the time span that you specify in the Time Span dialog, summarized by day. This workspace consists of the following four graphical iews: Network Interface Performance (daily), which shows the aerage rate of bytes transferred for the system during the time span that you specify in the Time Span dialog, summarized by day Processor Performance (daily), which shows the aerage rate of interrupts for the system during the specified time period, summarized by day Memory Performance (daily), which shows the aerage rate of page faults for the system during the specified time period, summarized by day Disk Performance (daily), which shows the aerage percentage of disk time that the system used during the specified time period, summarized by day Historical Summarized Performance Hourly workspace The Historical Summarized Performance Hourly workspace shows the aerage performance of system resources for the time span that you specify in the Time Span dialog, summarized by hour. This workspace consists of the following four graphical iews: Network Interface Performance (hourly), which shows the aerage rate of bytes transferred for the system during the time span you specify in the Time Span dialog, summarized by hour Processor Performance (hourly), which shows the aerage rate of interrupts for the system during the specified time period, summarized by hour Memory Performance (hourly), which shows the aerage rate of page faults for the system during the specified time period, summarized by hour Disk Performance (hourly), which shows the aerage percentage of disk time that the system used during the specified time period, summarized by hour Historical Summarized Performance Weekly workspace The Historical Summarized Performance Weekly workspace shows the aerage performance of system resources for the time span that you specify in the Time Span dialog, summarized by week. This workspace consists of the following four graphical iews: Network Interface Performance (weekly), which shows the aerage rate of bytes transferred for the system during the time span that you specify in the Time Span dialog, summarized by week Processor Performance (weekly), which shows the aerage rate of interrupts for the system during the specified time period, summarized by week Memory Performance (weekly), which shows the aerage rate of page faults for the system during the specified time period, summarized by week Disk Performance (weekly), which shows the aerage percentage of disk time that the system used during the specified time period, summarized by week HTTP Content Index workspace The HTTP Content Index workspace proides statistics for queries made to an HTTP serer. This workspace includes a Query Actiity iew and the HTTP Content Index iew. Use the iew to obtain information about the number of actie queries, queries per minute, total requests rejected, and total queries. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. 14 IBM Tioli Monitoring: Windows OS Agent Reference
HTTP Serice workspace The HTTP Serice workspace proides traffic data, connection statistics, and session data for an HTTP serer. This workspace includes a File I/O iew, a Connection Actiity iew, and the HTTP Serice iew. Use the iew to obtain information about the number of bytes receied per second, bytes sent per second, current anonymous users, current connections, files receied per second, files sent per second, and CGI requests. Additionally, IBM Tioli Monitoring: Windows Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. ICMP Statistics workspace The ICMP Statistics workspace proides message traffic information. This workspace includes a Message Traffic iew, a Message Errors iew, and the ICMP Statistics iew. Use the iew to obtain information about the number of messages per second, messages receied per second, receied destination unreachable, messages sent per second, receied time exceeded, and sent time exceeded. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. IIS Statistics workspace The IIS Statistics workspace displays memory usage and connection data for the Internet Information Serer. This workspace includes a Request Actiity iew and the IIS Statistics iew. Use the iew to obtain information about the number of cache flushes, cache hits, cache misses, cache used, cached directory listings, total rejected asynchronous requests, and measured asynchronous I/O bandwidth usage. Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Indexing Serice workspace The Indexing Serice workspace collects statistics pertaining to the creation of indices and the merging of indices by the indexing serice. A subordinate workspace, the Indexing Serice Filter workspace, contains indexing speed and binding time information. The Indexing Serice workspace includes an Index Actiity iew, an Index Size iew, and the Indexing Serice iew. Use the iews to obtain information about the number of files indexed, the size of the content index, the number of actie query client connections, the total number of documents in the index, the aerage time spent binding to indexing filters (Indexing Serice Filter iew), and the speed of indexing contents of files (Indexing Serice Filter iew). Additionally, IBM Tioli Monitoring: Windows OS Agent proides a historical ersion of this workspace. You can request to iew up to 24 hours of historical data for each component of this workspace. Based on the information that this workspace proides, you can recommend changes, set up situations, and erify that changes are improing performance. Chapter 1. Workspaces 15