3.0 AD Knowledge Scripts

To help you set up AppManager for Microsoft Active Directory monitoring in accordance with NetIQ recommended best practices guidelines, five Knowledge Script Groups are provided. For more information, see Section 3.50, AD Knowledge Script Groups.

From the Knowledge Script view of Control Center, you can access more information about any NetIQ-supported Knowledge Script by selecting it and clicking Help. Or in the Operator Console, click any Knowledge Script in the Knowledge Script pane and press F1.

Knowledge Script

What It Does

Authentications

Monitors the number of AD Kerberos and NT LAN Manager (NTLM) authentications per second.

BridgeheadChange

Monitors changes to the bridgehead roles in an Active Directory.

CacheHitRate

Monitors the Active Directory cache hit rate for name resolution.

ClientSessions

Monitors the total number of Active Directory client sessions: LDAP (Lightweight Directory Access Protocol), AB (address book), and XDS (external and foreign directory) connections.

ConnectivityObject

Verifies connectivity between the local target computer and the Active Directory object (domain, computer or user) you specify.

DatabaseSize

Monitors the Active Directory database logical disk space usage.

DCAdvertised

Checks whether the Active Directory domain controller is being advertised properly to Active Directory clients.

DCHealthMonitor

Monitors CPU and memory usage, disk space availability, and LSASS (the Windows Local Security Authority Server process) CPU and memory usage for an Active Directory domain controller.

DCInSiteConnectivity

Checks connectivity to domain controllers in the local site container.

DomainConnectivity

Monitors the connectivity between a domain controller and selected domains.

EnumerateSites

Monitors changes to sites in an Active Directory forest.

EventLog

Monitors the Windows Event Log for Active Directory entries that match your filtering criteria.

EventLog (NetLogon)

Monitors the Windows Event Log for Active Directory entries associated with the NetLogon service that match your filtering criteria.

EventLog (W32Time)

Monitors the Windows Event Log for Active Directory entries associated with the Windows Time service that match your filtering criteria.

FSMOChange

Monitors changes to Flexible Single Master Operations (FSMO) roles in an Active Directory forest.

FSMOHealth

Monitors access to the domain controllers that have been given any Flexible Single Master Operations (FSMO) role.

FSMOPlacement

Monitors the placement of a Flexible Single Master Operations (FSMO) role in accordance with Microsoft Best Practices.

GlobalCatalogChange

Monitors changes to the list of global catalog servers defined in the forest.

GlobalCatalogHealth

Monitors access to the global catalog servers defined in the forest.

InboundReplStat

Monitors the Inbound replication rate (inbound replication requests per second) in the Active Directory, and the percentage of applied and filtered requests.

InterReplTraffic

Monitors replication traffic from the DRA (Directory Replication Agent) between Active Directory sites (intersite traffic).

IntraReplTraffic

Monitors replication traffic from the DRA (Directory Replication Agent) within an Active Directory site (intrasite traffic).

KCCConnections

Monitors the number of KCC (Knowledge Consistency Checker) connections to and from a server within a site.

KCCDisabled

Checks whether the KCC is enabled or disabled for a site or server. You can set this script to automatically reenable the KCC if it is disabled.

KDCRequests

Monitors the number of Active Directory requests serviced by KDC per second.

NumberOfComputers

Monitors the number of computers in a domain or organizational unit.

NumberOfDCs

Monitors changes in the number of domain controllers in a domain, site, or forest.

NumberOfGCs

Monitors changes to the number of global catalog servers in a domain, site, or forest.

NumberOfGroups

Monitors the number of groups in a domain or organizational unit.

NumberOfObjects

Monitors the number of objects in a domain or organizational unit.

NumberOfPrintQueues

Monitors the number of printer queues in a domain or organizational unit.

NumberOfUsers

Monitors the number of users in a domain or organizational unit.

NumberOfUsersLocked

Monitors the number of locked user accounts in a domain or organizational unit.

OutboundReplStat

Monitors the outbound replication rate (outbound replication requests per second) in the Active Directory, and the percentage of Applied and Filtered requests.

PropertyWatch

Monitors changes to any property of any Active Directory object.

ReadStat

Monitors the number of Active Directory read operations per second.

ReplEventLog

Scans the System log for replication errors matching your criteria.

ReplicationCheckByUSN

Monitors replication of the Active Directory using USNs (Update Sequence Numbers).

ReplicationLatency

Injects changes to Active Directory partitions and monitors replication latency.

ReplQueueLen

Monitors the queue length for unprocessed Active Directory replication synchronization requests.

ReplSysVol

Monitors SysVol folder replication.

ResponseTime

Monitors the connection and read response times from the target computer to a specified Active Directory domain controller.

SearchStat

Monitors the number of Active Directory search operations per second.

ServerHealth

Monitors the health of an Active Directory domain controller.

SyncRequest

Monitors Active Directory synchronization requests and the percentage of replication synchronization requests that fail.

WriteStat

Monitors the number of Active Directory write operations per second.

AD Knowledge Script Groups

AD

Performs essential monitoring for Active Directory domain controllers using job delegation.

AD (all DCs)

Performs essential monitoring for all domain controllers.

AD (one DC per domain)

Performs essential monitoring for a single domain controller in each domain.

AD (one DC per forest)

Performs essential monitoring for a single domain controller in a forest.

AD (one DC per site)

Performs essential monitoring for a single domain controller per site.