Search 85,941 posts and 653 resources contributed by 43,546 members or post a topic.

Already Joined? Sign in
New Template - Monitor Exchange 2007 WMI Counters

Page 1 of 2 (17 items) 1 2 Next > | RSS

rated by 0 users
Not Answered This post has 0 verified answers | 16 Replies | 6 Followers | 13,109 Views


4,028 Posts
Points 17,690
Moderator
SolarWinds Employee
denny.lecompte posted on Fri, Sep 5 2008 8:51 AM
rated by 0 users

 Check out our new template for monitoring Exchange 2007 WMI Counters. Exchange 2007's implementation of WMI is atypical, and won't work properly with the WMI Performance Counter Monitor. We built a mechanism and template to get around the limitation. Please import this template and assign it to you Exchange 2007 Hub Transport Servers or Mailbox Servers and you'll get rich monitoring of this application.

You can download the app from the Content Zone.

More details here:

 

Exchange 2007 WMI Counters Template

 

This template creates APM applications to ensure the reliability of your Microsoft Exchange 2007 servers by warning you before performance problems occur.

 

Some of the Windows Management Instrumentation (WMI) performance counters monitored in this template are only available to Microsoft Exchange 2007 servers that fill Hub Transport Server and/or Mailbox Server roles. Associating this template with a server that does not fill one or both of these roles results in an Unknown status for the unavailable WMI component monitors.

 

After importing this template, set the Statistic Critical Threshold for the WMI component monitors in the template as follows:

Note: Be sure to Click Submit after modifying the threshold values.

 

Role: Hub Transport Server
- Aggregate Delivery Queue Length (AllQueues)
  Statistic Critical Threshold: 5000

 

- Active Remote Delivery Queue Length
  Statistic Critical Threshold: 250

 

- Active Mailbox Delivery Queue Length
  Statistic Critical Threshold: 250

 

- Submission Queue Length
  Statistic Critical Threshold: 100

 

- Active NonSmtp Delivery Queue Length
  Statistic Critical Threshold: 250

 

- Retry Mailbox Delivery Queue Length
  Statistic Critical Threshold: 100

 

- Retry NonSmtp Delivery Queue Length
  Statistic Critical Threshold: 100

 

- Retry Remote Delivery Queue Length
  Statistic Critical Threshold: 100

 

- Unreachable Queue Length
  Statistic Critical Threshold: 100

 

- Largest Delivery Queue Length
  Statistic Critical Threshold: 200

 

- Poison Queue Length
  Statistic Critical Threshold: 0

 

Role: Mailbox Server
- RPCAveragedLatency
  Statistic Critical Threshold: 25

 

- RPCNumofSlowPackets
  Statistic Critical Threshold: 3

 

- RPCRequests
  Statistic Critical Threshold: 70

 

- MessagesQueuedForSubmission
  Statistic Critical Threshold: 50

 

- Public: MessagesQueuedForSubmission
  Statistic Critical Threshold: 20

 

- ReplicationReceiveQueueSize
  Statistic Critical Threshold: 100

 

- SearchTaskRate
  Statistic Critical Threshold: 10

 

- SlowFindRowRate
  Statistic Critical Threshold: 10

 

- Averagedocumentindexingtime
  Statistic Critical Threshold: 30
 
These Statistic Critical Threshold values were derived from guidance provided by:
"Monitoring Without System Center Operations Manager,"  Microsoft TechNet.
http://technet.microsoft.com/en-us/library/bb201720(EXCHG.80).aspx

 

Denny LeCompte
Director of Product Management
SolarWinds
Austin, TX

follow me on Twitter

All Replies


10 Posts
Points 32
Jeff Salisbury replied on Sun, Sep 14 2008 12:53 AM
rated by 0 users

On Server 2003 do I need to grant specific permissions for WMI to monitor these counters? They all report unable to connect to the servers by WMI using a domain admin member account.

 

Jeff

Jeff
  • | Post Points: 3

45 Posts
Points 283
SolarWinds Employee
mdiotte replied on Sun, Sep 14 2008 10:52 AM
rated by 0 users

Hi Jeff,

 Is there a firewall that could be preventing the connection?  Remote WMI connections are made through DCOM which means high numbered ports are negotiated during the connection. 

To answer your question, a domain account should have the permissions required to connect via WMI.

Here's a link to a tech ref article on how to test WMI connectivity from your APM server to your Exchange server: http://www.solarwinds.com/support/apm/docs/WMITesting.pdf

 

Matt Diotte, Software Developer
ipMonitor
SolarWinds
Austin, TX

  • | Post Points: 3

14 Posts
Points 38
NetAdminCJ replied on Fri, Oct 17 2008 11:07 AM
rated by 0 users

I'm having the same problem.  There's no firewall and the WMI testing worked.  I've setup both the WMI counters template as well as the original Exchange 2007 template that came with APM, but both report an unknown status on all components.

Thanks for any help you can provide!

~CJ

~CJ

-------------------------------------------------------------------------------------------

Information is the oxygen of the modern age. It seeps through the walls topped by barbed wire, it wafts across the electrified borders.  - Ronald Reagan

  • | Post Points: 3

56 Posts
Points 154
salyerma replied on Fri, Oct 17 2008 12:19 PM
rated by 0 users

***Nevermind, I have noticed that mine do not work either.  Those counters are not present on my Exchange Server in either RAW or Formatted.  *** 

 

In the template, change one of the monitors from win32_perfformattedData to win32_perfrawdata.  (Change the formatted to raw) and see if it starts giving you data.   The numbers will not be correct, but see if you get anything.

 That will help narrow down whether your WMI driver is populating the Formatted data or not.

If you need better instructions, let me know.  And remember which one you did, it will have to be changed back.

 Marks

 

  • | Post Points: 3

14 Posts
Points 38
NetAdminCJ replied on Fri, Oct 17 2008 12:41 PM
rated by 0 users

I don't know if this was in response to my post, but it didn't work for me.  I let it sit for about 5 minutes after the change.  And actually, it was already set to raw from the get go, so I just did the opposite of what you recommended and tried it as formatted.  Everything still reports as unknown status.

~CJ

~CJ

-------------------------------------------------------------------------------------------

Information is the oxygen of the modern age. It seeps through the walls topped by barbed wire, it wafts across the electrified borders.  - Ronald Reagan

  • | Post Points: 1

14 Posts
Points 38
NetAdminCJ replied on Fri, Oct 17 2008 1:02 PM
rated by 0 users

I think I might have figured it out, at least partially.

 It looks like an account issue.  I was using my domain account (without the domain prefix).

 I, instead, chose an Exchange Admin's account w/ the domain prefix and I'm getting some statuses (thought still not everything).

 Now that I know the proper credentials, I might just remove all these apps and start over.

 I'll update if I continue to have issues.

 Thanks.

~CJ

~CJ

-------------------------------------------------------------------------------------------

Information is the oxygen of the modern age. It seeps through the walls topped by barbed wire, it wafts across the electrified borders.  - Ronald Reagan

  • | Post Points: 5

56 Posts
Points 154
salyerma replied on Fri, Oct 17 2008 3:23 PM
rated by 0 users

Well, that reply was meant for you, but I have spent so much time trying to get SQL, Exchange, and IIS working that I have had my troubleshooting backwards.

I cannot get any meaningful data out of exchange or any of the formatted data enums.  I am finding that MS is saying WMI has been removed from Exchange 2007, so I do not know if SP1 added them back.   I am still waiting to talk to anyone who has a fully working Exchange 2007 monitor.  At least then, I would know to keep beating my head in.

MarkS

  • | Post Points: 1

279 Posts
Points 1,559
SolarWinds Employee
Roger Wong replied on Fri, Oct 17 2008 3:52 PM
rated by 0 users

Mark, I'm monitoring the Exchange 2007 server we have set up in the SolarWinds lab, so I know it's possible. The one thing I had to bust my head against was getting the proper credential. I thought I had an admin account, but I didn't. 

CJ, you're unlikely to get all of the components in the Exchange 2007application monitor to report Up status, because some of the components included in the application template are only available on Exchange servers that are set up for specific roles. For example, if your Exchange server isn't set up in a Unified Messaging (UM) role, the "Microsoft Exchange Unified Messaging" and "Microsoft Exchange Speech Engine" components are going to be missing, and report Down.

You should remove missing components from your application monitors because the Down status of a component monitor affects the status of the application monitor. An application monitor with a missing component will indicate a Down status even though all of its components are operating as they should.

To remove components from an application monitor:

1.   Click Application Performance Monitor to return to the APM Summary view.

2.   Locate the application monitor in the Down Applications resource, and then click the application name.

3.   Write down the components to remove.

4.   Click Edit Application.

5.   Click Delete adjacent to any component on your removal list, and then wait for the web page to refresh and the component to disappear.

6.   Repeat Step 5 for the remaining items on your removal list.

7.   Scroll to the bottom of the view, and then click Submit.

Note: If you leave this view without clicking Submit, no changes are made.

8.   Verify that the missing components have all been removed from the application monitor. The application monitor status should indicate Up.


Roger Wong, Lead Information Developer, SolarWinds, Inc.

  • | Post Points: 3

56 Posts
Points 154
salyerma replied on Fri, Oct 17 2008 4:01 PM
rated by 0 users

Roger Wong:

Mark, I'm monitoring the Exchange 2007 server we have set up in the SolarWinds lab, so I know it's possible. The one thing I had to bust my head against was getting the proper credential. I thought I had an admin account, but I didn't. 

Ok, I have mine working. In order to get mine to work, I had to do three things.

A) on the exchange server "wmiadap /f"

B) on the exchange server "wmiadap /resync"

C) restart the windows management (wmi) service.

See if that works for you.

  • | Post Points: 1

105 Posts
Points 3,143
bbusbey replied on Fri, Feb 6 2009 9:55 AM
rated by 0 users

Denny,

How do we get the WMI counters template to work without powershell?

I have read that MS removed the exchange WMI namespace in Exchange 2007.

 

 

BBusbey EPCO, Inc.

Orion SLX 9.1 SP3 - Hot Standby - NetFlow 3.1 - VOIP - APM

  • | Post Points: 3

4,028 Posts
Points 17,690
Moderator
SolarWinds Employee
denny.lecompte replied on Sun, Feb 8 2009 10:23 AM
rated by 0 users

bbusbey:

Denny,

How do we get the WMI counters template to work without powershell?

I have read that MS removed the exchange WMI namespace in Exchange 2007

We read the same thing , but it's not accurate.  Use the Exchange 2007 template, and you'll see that we're polling WMI counters on Exchange 2007.  They're just completely different than in 2003.

 

Denny LeCompte
Director of Product Management
SolarWinds
Austin, TX

follow me on Twitter

  • | Post Points: 3

105 Posts
Points 3,143
bbusbey replied on Mon, Feb 9 2009 7:00 AM
rated by 0 users

My poller is not working and says " the WMI credentials are not valid" , but when I test other WMI counters I get the readings.

What name space is being used to poll the exchange WMI?

BBusbey EPCO, Inc.

Orion SLX 9.1 SP3 - Hot Standby - NetFlow 3.1 - VOIP - APM

  • | Post Points: 3

608 Posts
Points 16,213
SolarWinds Employee
josh.clark replied on Mon, Feb 9 2009 7:13 AM
rated by 0 users

We uses the cimv2 namespace

Josh Clark
SolarWinds Development Team

  • | Post Points: 3

105 Posts
Points 3,143
bbusbey replied on Thu, Feb 12 2009 9:01 AM
rated by 0 users

I'm still not having any success.

Can you tell me what permissions are required to get the queue readings for Exchange from WMI?

BBusbey EPCO, Inc.

Orion SLX 9.1 SP3 - Hot Standby - NetFlow 3.1 - VOIP - APM

  • | Post Points: 3
Page 1 of 2 (17 items) 1 2 Next > | RSS

© 2003 - 2010 SolarWinds, Inc. All Rights Reserved.

Who is SolarWinds?

SolarWinds is rewriting the rules for how companies manage their networks. Guided by a global community of network engineers, SolarWinds develops simple and powerful network management software and network monitoring software for networks of all sizes. SolarWinds also offers a network certification program to become a SolarWinds Certified Professional (SCP).

What is thwack?

thwack, SolarWinds online community site, was designed by network engineers, for network engineers. thwack is a vibrant, growing community of more than 30,000 IT pros who share a passion for technology.

Explore Resources, Answers, Templates, and Advice

Download Free Networking Tools


Learn More About SolarWinds Products