3.37 ReadStat

Use this Knowledge Script to monitor the Active Directory read rate — the number of Active Directory reads per second. This script raises an event if the read rate exceeds the threshold you set.

If you use this script to collect data, you have three options for what is included in the data stream and data detail message:

One data stream that records the total read rate. The data detail message describes the percentage of Active Directory reads that are being performed by various services, such as DRA, KCC, LSA, NSPI, SAM, XDS, and NTDSAPI.
One data stream that records the total read rate, but without the detail message breakdown.
Separate data streams that track the total number of reads per second and the number of reads per second for various services such as DRA, KCC, LSA, NSPI, SAM, XDS, and NTDSAPI.

If you collect data, keep in mind that the more data streams and details you collect, the greater the impact on your database management system and overall system performance. For example, if you choose the third data collection option, consider adjusting your archive policies or check the size of data tables in the AppManager repository more frequently.

This script gathers the following Windows performance counter values for use in data collection and threshold monitoring:

Performance Objects	Counters
NTDS DirectoryServices	For monitoring, only the following counter is used to determine whether the threshold has been crossed and an event should be raised: DS Directory Reads/sec If data collection is enabled and data collection mode 1 or 3 is specified, values for the following counters are included in the data detail message: DS % Reads from DRA DS % Reads from KCC DS % Reads from LSA DS % Reads from NSPI DS % Reads from SAM DS % Reads from NTDSAPI (Windows Server 2003 and Windows Server 2008)

Performance Objects

Counters

NTDS

DirectoryServices

For monitoring, only the following counter is used to determine whether the threshold has been crossed and an event should be raised:

DS Directory Reads/sec

If data collection is enabled and data collection mode 1 or 3 is specified, values for the following counters are included in the data detail message:

DS % Reads from DRA
DS % Reads from KCC
DS % Reads from LSA
DS % Reads from NSPI
DS % Reads from SAM
DS % Reads from NTDSAPI (Windows Server 2003 and Windows Server 2008)

3.37.1 Resource Objects

Active Directory domain controller

3.37.2 Default Schedule

The default interval for this script is Every 30 minutes.

3.37.3 Setting Parameter Values

Set the following parameters as needed:

Parameter	How to Set It
General Settings
Raise event if job fails
Event severity when job fails	Set the severity level, from 1 to 40, to indicate the importance of an event in which the ReadStat job fails. The default is 35.
Monitor rate of read operations
Event Notification
Raise event if read rate exceeds threshold?	Select Yes to raise an event if the read rate exceeds the threshold you set. The default is Yes.
Threshold -- Maximum reads per second	Specify the maximum number of Active Directory reads allowed per second before an event is raised. The default is 1 read per second.
Event severity when read rate exceeds threshold	Set the severity level, from 1 to 40, to indicate the importance of an event in which the read rate exceeds the threshold. The default is 20.
Data Collection
Collect data for read rate?	Select Yes to collect data for charts and reports. If enabled, specify a value in the Data collection mode parameter. The default is unselected.
Data collection mode	Specify the type of data you want to collect. The following entries are valid: 1 -- one data stream that records the total read rate. The data detail message describes the percentage of Active Directory read operations that are performed by various Active Directory services. 2 -- one data stream that records the total read rate without any detail message. 3 -- several data streams: total read rate for all Active Directory services, and one data stream for each separate services. The default is 1 (one data stream and detail message).