7
Windows NT Event Tests

The Oracle Enterprise Manager Advanced Event Tests for Windows NT are divided into a series of classes or groupings that will enable you to find the event test you are interested in registering.

The class names and some of the events that you can register within the classes are listed as follows.

• Cache: includes data maps, pin reads, MDL statistics, lazy write statistics, and data flush information (See Table 7-1)

• Logical Disk: includes percentage of free space and free megabytes (See Table 7-2)

• Memory: includes free memory, swap space, average number of processes in memory, and average number of jobs waiting for I/O (See Table 7-3)

• Network Interface: includes packet statistics, current bandwidth, and bytes sent and received (See Table 7-4)

• Objects: includes processes, threads, events, semaphores, mutexes, and sections (See Table 7-5)

• Paging File: includes usage and peak usage percentages (See Table 7-6 )

• Physical Disk: includes queue lengths, disk read/write times, disk transfers, and average disk byte statistics (See Table 7-7)

• Process: includes virtual bytes, working sets, thread counts, and handle counts (See Table 7-8)

• Processor: includes user time, processor time, privileged time, DPC rates (See Table 7-9)

• System: includes file read/write operations, system call operations, and system page operations (See Table 7-10)

Summary of Windows NT Event Tests

The following tables list the Windows NT event tests by class. The full descriptions of the individual event tests follow the tables. The event tests are in alphabetical order.

Table 7-1 Cache Class Event Tests  

Event Test	Description
Async Copy Reads/sec	Async Copy Reads per Second measures the frequency of cache page reads that include placing a memory copy of the data from the cache on the application's buffer. The application will be able to access the disk and retrieve the page immediately. If the value of Async Copy Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Async Data Maps/sec	Async Data Maps per Second measures the frequency that the NTFS or HPFS file systems map a page of a file into the cache to read the page and does not wait for the cache to retrieve the page (if the page is not in the main memory.) If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Async Fast Reads/sec	Async Fast Reads per Second measures the frequency of cache page reads that retrieve data directly from the cache without going through the installed file system. In a typical read, the I/O requests prompt the file system to retrieve data from a file. If the data is not in the cache, a fast read will still eliminate one invocation of the file system. The request will have immediate control of the data even if the data is not in the cache. If the value of Async Fast Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Async MDL Reads/sec	Async MDL (Memory Descriptor List) Reads per Second measures the frequency of cache page reads that access data using the MDL. The physical address of each page within the transfer is contained in the memory descriptor list. This information enables the Direct Memory Access (DMA) device to secure the copy. The access device will not wait for the pages to fault from the disk if the pages are not in the main memory. If the value of Async MDL Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Async Pin Reads/sec	Async Pin Reads per Second measures the frequency of reading data into the cache before the data is written back to disk. When pages are read this way they become pinned in memory when the read is complete. The file system will have immediate control of the page and will be able to access the disk and retrieve the page immediately if needed. A pinned page's physical address cannot be modified. If the value of Async Pin Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Copy Read Hits %	Copy Read Hits measures the percentage of copy read hit requests that the cache receives. Copy read hits do not require a disk read to access a page in the cache. A copy read is a type of file read operation that allows a memory copy from a cache page to the application's buffer. The Local Area Network (LAN) Redirector, the LAN Server and the disk file systems use the copy reads for retrieving cache information. If the value of Copy Read Hits per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Copy Reads/sec	Copy Reads per Second measures the frequency of cache page reads that includes placing a memory copy of the data from the cache on the application's buffer. The Local Area Network (LAN) Redirector, the LAN Server, and the disk file systems use copy reads for retrieving cache information. If the value of Copy Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Data Flush Pages/sec	Data Flush Pages per Second calculates the number of pages have been flushed to disk from the Cache. Pages are flushed when the cache approves a write-through file write request of its content to disk. Note that more than one page can be transferred for each flush operation. If the value of Data Flush Pages per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Data Flushes	Data Flushes per Second measures the frequency at which the cache has approved a write-through file write request of its content to disk. Note that for each flush operation, more than one page can be transferred. If the value of Data Flushes per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Data Map Hits %	Data Map Hits calculates the percentage of Data Maps in the cache that can be resolved without retrieving a page from the disk. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Data Map Pins/sec	Data Map Pins per Second measures the frequency of Data Maps in the cache that caused a page to be pinned in the main memory. When a page is pinned the physical address in main memory and its virtual address in the cache cannot be modified. If the value of Data Map Pins per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Data Maps/sec	Data Maps per Second measures the frequency that the NTFS or HPFS file systems map a page of a file into the cache. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Fast Read Not Possibles/sec	Fast Read Not Possibles per Second is the frequency at which calls are made by the Application Program Interface (API) to try and avoid the file system to get cache data. This metric monitors the number of times that these calls fail because the file system must be accessed. If the value of Fast Read Not Possibles per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Fast Read Resource Misses/sec	Fast Read Resource Misses per Second measures the frequency at which cache reads are missed due to a lack of resources to satisfy the request. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Fast Reads/sec	Fast Reads per Second measures the frequency of cache page reads that retrieve data directly from the cache without going through the installed file system. In a typical read, the I/O requests prompt the file system to retrieve data from a file. If the data is not in the cache, a fast read will still eliminate one invocation of the file system. If the value of Fast Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Lazy Write Flushes/sec	Lazy Write Flushes per Second measures the frequency at which the lazy write thread involves updating the disk after the page has been changed in memory. By doing this the application requesting the file change will not have to wait for the disk write to complete before proceeding. Note that more than one page can be transferred on each writer operation. If the value of Lazy Write Flushes per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Lazy Write Pages/sec	Lazy Write Pages per Second measures the frequency at which the lazy write thread involves updating the disk after the page has been changed in memory. By doing this the application requesting the file change will not have to wait for the disk write to complete before proceeding. Note that more than one page can be transferred on a single disk write operation. If the value of Lazy Write Pages per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
MDL Read Hits %	MDL (Memory Descriptor List) Read Hits measures the percentage of requests that the cache receives for cache memory descriptor (MDL) list reads. MDL reads provide memory access to the cache pages without accessing the disk. If the Percentage of MDL Read Hits is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
MDL Reads/sec	MDL (Memory Descriptor List) Reads per Second measures the frequency of cache page reads that access data using the MDL. The physical address of each page within the transfer is contained in the memory descriptor list. This information enables the Direct Memory Access (DMA) device to secure the copy. If the value of MDL Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pin Read Hits %	Pin Read Hits calculates the percentage of pin requests that the cache receives. A pin read request does not require a disk read to access the page in cache. A pinned page's physical address in the cache cannot be modified. The Local Area Network (LAN) Redirector, the LAN Server, and the disk file system use pin reads to retrieve cache information. If the value of Pin Read Hits is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pin Reads/sec	Pin Reads per Second measures the frequency of reading data into the cache before the data is written back to disk. When pages are read this way they become pinned in memory when the read is complete. A pinned page's physical cache address cannot be modified. If the value of Pin Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Read Aheads/sec	Read Aheads per Second measures the frequency at which cache reads detect sequential file access. Read aheads reduce overhead access by enabling the data to be transferred in larger blocks than those requested by the application. If the value of Read Aheads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Sync Copy Reads/sec	Sync Copy Reads per Second measures the frequency of cache page reads that include placing a copy of the data from the cache on the application's buffer. The file system will not be able to access the disk and retrieve the page until the copy operation is complete. If the value of Sync Copy Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Sync Data Maps/sec	Sync Data Maps per Second measures the frequency that the NTFS or HPFS file systems map a page of a file into the cache and waits for the cache to retrieve the page (if the page is not in the main memory.) If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Sync Fast Reads/sec	Sync Fast Reads per Second measures the frequency of cache page reads that retrieve data directly from the cache without going through the installed file system. In a typical read, the I/O requests prompt the file system to retrieve data from a file. If the data is not in the cache, a fast read will still eliminate one invocation of the file system. The request will not wait until the data has been retrieved from disk if the data is not in the cache. If the value of Sync Fast Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Sync MDL Reads/sec	Sync MDL (Memory Descriptor List) Reads per Second measures the frequency of cache page reads that access data using the MDL. The physical address of each page within the transfer is contained in the memory descriptor list. This information enables the Direct Memory Access (DMA) device to secure the copy. The access device will wait for the pages to fault from the disk if the pages are not in the main memory. If the value of Sync MDL Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Sync Pin Reads/sec	Sync Pin Reads per Second measures the frequency of reading data into the cache before the data is written back to disk. When pages are read this way they become pinned in memory when the read is complete. When the page is pinned in the cache the file system can regain control of the page. Until the page is pinned in cache, however, the file system cannot access the disk and retrieve the page. A pinned page's physical address in the cache cannot be changed. If the value of Sync Pin Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-2 Logical Disk Class Event Tests

Event Test	Description
% Free Space	Percentage Free Space calculates the ratio of available free space on the logical disk unit to the total usable space provided by the selected logical disk drive.
Free Megabytes	Free Megabytes measures the available (unallocated) space on the selected disk drive in megabytes. One megabyte = 1,048,576 bytes.

Table 7-3 Memory Class Event Tests  

Event Test	Description
% Committed Bytes In Use	Percentage of Committed Bytes in Use measures the real-time ratio of committed bytes to the commit limit. The ratio indicates the amount of virtual memory in use. Note that if the paging file is extended the commit limit may change. If the Percentage of Committed Bytes in Use is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Available Bytes	Available Bytes metric measures the real-time amount of virtual memory on the Zeroed, Free and Standby lists. If this value is less than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Available Memory (%)	Available Memory % measures the real-time amount of free memory in the percentage of total physical memory.
Cache Bytes	Cache Bytes measures the number of bytes currently being used by the system cache. The system cache buffers data retrieved from the disk or local area network. The system cache then uses the memory that is not currently being used by any active system processes. If Cache Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Cache Faults/sec	Cache Faults per Second measures the number of times a cache fault occurs. Cache faults are caused when the cache manager fails to find a file's page in the immediate cache and requests the memory manager to locate the page in memory or on the disk so that it can be added to the immediate cache. If the value of Cache Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Commit Limit	Commit Limit measures the amount of virtual memory (in bytes) that can be committed without extending the paging files. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Committed Bytes	Committed Bytes measures the total amount of virtual memory (in bytes) that have been committed. Committed memory should not be confused with reserved memory. Committed memory must have available disk storage or the main memory must by large enough to contain the committed virtual memory. If the value of Committed Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Demand Zero Faults/sec	Demand Zero Faults per Second measures the number of page faults for pages that must be filled with zeroes before the fault is resolved. If the zeroed list is not empty, the fault can be resolved by removing a page from the zeroed list. If the value of Demand Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Free System Page Table Entries	Free system page table entries measure the number of page table entries that are not currently being used by the system. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Page Faults/sec	Page Faults per Second measures the number of Page Faults in the processor. A page fault occurs when a virtual memory page is referenced by a process and that page is not in the current Working Set of the main memory. If the value of Page Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Page Reads/sec	Page Reads per Second measures the number of times the disk was read to retrieve pages of virtual memory to resolve page faults. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Page Writes/sec	Page Writes per Second measures the number of times pages have been written to disk because they were modified since the last retrieval. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pages/sec	Pages per Second measures the number of pages read from the disk or written to the disk to resolve faulty memory references. The metric calculates the sum of pages input per second plus the pages output per second. Use this metric to monitor memory thrashing and excessive paging. If the value of Pages per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pages Input/sec	Pages Input per Second measures the number of pages read from the disk to resolve faulty memory references. This is an important metric to monitor if memory thrashing and excessive paging has become a problem. If the value of Pages Input per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pages Output/sec	Pages Output per Second measures the number of pages that were written to disk because the pages were modified in main memory. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pool Nonpaged Allocs	Pool Nonpaged Allocs (Allocations) is the number of times a call has been made to allocate space in the nonpaged pool. Nonpaged pool pages cannot be paged out to the paging file. As long as they are allocated they must remain in the main memory. If the value of Pool Nonpaged Allocs is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pool Nonpaged Bytes	Pool Nonpaged Bytes measures the number of bytes in the nonpaged pool. Nonpaged pool pages cannot be sorted in the paging file. As long as they are allocated, they must remain in the main memory. If the value of Pool Nonpaged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pool Paged Allocs	Pool Paged Allocs (Allocations) is the number of times a call has been made to allocate space in the system paged pool. Paged pool pages can be paged out to the paging file when the pages are not being accessed for any sustained amount of time. If the value of Pool Paged Allocs is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pool Paged Bytes	Pool Paged Bytes measures the number of bytes in the paged pool. Paged pool pages can be paged out to the paging file when not being used by the system for a sustained length of time. If Pool Paged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pool Paged Resident Bytes	Pool Paged Resident Bytes measures the size of paged pool bytes that reside in the main memory. The pool paged resident bytes value indicates the actual cost of the paged pool allocation since it is currently in use and it uses real (physical) memory. If the value of Pool Paged Resident Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
System Cache Resident Bytes	System Cache Resident Bytes measures the total number of bytes residing in the disk cache. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
System Code Resident Bytes	System Code Resident Bytes measures the number of bytes of system code currently residing in the main memory. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
System Code Total Bytes	System Code Total Bytes monitors the ntoskrnl.exe, hal.dll, and the boot drivers and file systems loaded by the ntldr/osloader for the total number of bytes of the pageable pages. If System Code Total Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
System Driver Resident Bytes	System Driver Resident Bytes measures the total number of system driver bytes residing in the core memory. The returned value is considered the code working set of pageable drivers. If the value of System Driver Resident Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
System Driver Total Bytes	System Driver Total Bytes monitors all of the system driver devices and returns the total number of pageable pages currently in the devices. If the value of System Driver Total Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Transition Faults/sec	Transition Faults per Second measures the number of page faults that have been resolved by recovering pages that were being written to disk when the page fault occurred. These pages can be recovered without any additional disk activity. If the value of Transition Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Write Copies/sec	Write Copies per Second measures the number of page faults that have been resolved by making a copy or the page when an attempt is made to write to the page. If the value of Write Copies per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-4 Network Interface Class Event Tests  

Event Test	Description
Bytes Received/sec	Bytes Received per Second measures the rate at which bytes are received on the interface. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Bytes Sent/sec	Bytes Sent per Second measures the rate at which bytes are sent on the interface. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Bytes Total/sec	Bytes Total per Second measures the rate at which bytes are sent and received on the interface. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Current Bandwidth	Current Bandwidth estimates the interface's current bandwidth in bits per second (bps). The nominal bandwidth value is given for interfaces that do not vary in bandwidth or for those where no accurate estimation can be made. If the Current Bandwidth is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Output Queue Length	Output Queue Length measures the length of the output packet queue (in packets.) Performance delays occur when the output queue experiences a bottleneck (typically when the length is longer than 2). Eliminate bottlenecks for optimal performance. If the Output Queue Length is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets/sec	Packets per Second measures the rate at which packets are sent and received on the network interface. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Outbound Discarded	Packets Outbound Discarded measures the number of outbound packets that were chosen to be discarded (to prevent them from being transmitted) and possibly free up buffer space. If the number of Packets Outbound Discarded is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Outbound Errors	Packets Outbound Errors measures the total number of outbound packets that had errors and therefore could not be transmitted. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Received/sec	Packets Received per Second measures the rate at which packets are received on the network interface. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Received Discarded	Packets Received Discarded measures the number of inbound packets that were chosen to be discarded to prevent them from being delivered to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space. If the number of Packets Received Discarded is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Received Errors	Packets Received Errors measures the total number of inbound packets that contained errors and prevented them from being delivered to a higher-layer protocol. If the number of Packet Received Errors is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Received Non-Unicast/sec	Packets Received Non-Unicast per Second measures the rate at which non-unicast (subnet broadcast or subnet multicast) packets are delivered to a higher-layer protocol. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Received Unicast/sec	Packets Received Unicast per Second measures the rate at which (subnet) unicast packets are delivered to a higher-layer protocol. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Received Unknown	Packets Received Unknown measures the total number of packets the interface received and discarded because of an unknown or unsupported protocol. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Sent/sec	Packets Sent per Second measures the rate at which packets are sent on the network interface. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Sent Non-Unicast/sec	Packets Sent Non-Unicast per Second measures the rate at which higher-level protocols requested packets to be transmitted to non-unicast (subnet broadcast or subnet multicast) addresses. The packets sent non-unicast rate includes the packets that were discarded or not sent. If the value of Packets Sent Non-Unicast per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Packets Sent Unicast/sec	Packets Sent Unicast per Second measures the rate at which higher-level protocols requested packets to be transmitted to subnet-unicast addresses. The packets sent unicast rate includes the packets that were discarded or not sent. If the value of Packets Sent Unicast per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-5 Objects Class Event Tests  

Event Test	Description
Events	The Events metric measures the total number of real-time events in the computer at the time of data collection. Events are used when two or more threads wish to synchronize execution. If the number of real-time events is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Mutexes	The Mutexes metric measures the total number of real-time mutexes in the computer at the time of data collection. Threads use mutexes to assure only one thread is executing some section of code. If the total number of real-time mutexes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Processes	Processes calculates the total number of real-time processes in the computer at the time of data collection. Each process represents the running of a program. If the number of Processes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Sections	The Sections metric measures the total number of real-time sections in the computer at the time of data collection. A section is a portion of virtual memory created by a process for data storage. Processes may share sections with other processes. If the total number of real-time sections is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Semaphores	The Semaphores metric measures the total number of real-time semaphores in the computer at the time of data collection. Semaphores are used by threads to obtain exclusive access to data structures that threads share with other threads. If the total number of real-time semaphores is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Threads	The Threads metric measures the total number of real-time threads in the computer at the time of data collection. (Threads execute instructions in a processor.) If the number of Threads is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-6 Paging File Class Event Tests

Event Test	Description
% Usage	Percent Usage measures the percentage of Page File instance usage. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-7 Physical Disk Class Event Tests  

Event Test	Description
% Disk Read Time	Percentage Disk Read Time calculates the percentage of time that the selected disk drive is busy servicing read requests. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Disk Time	Percentage Disk Time calculates the total amount of time that the selected disk drive was busy servicing read or write requests. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Disk Write Time	Percentage Disk Write Time calculates the percentage of time that the selected disk drive was busy servicing write requests. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Avg. Disk Bytes/Read	Average Disk Bytes/Read calculates the average number of bytes transferred from the disk during read operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Avg. Disk Bytes/Transfer	Avg. Disk Bytes/Transfer calculates the average number of bytes transferred to or from the disk during write or read operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Avg. Disk Bytes/Write	Average Disk Bytes/Write calculates the average number of bytes transferred to the disk during write operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Avg. Disk sec/Read	Average Disk sec/Read calculates the average time (in seconds) of a data read from the disk. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Avg. Disk sec/Transfer	Average Disk Sec/Transfer calculates the average time (in seconds) of a disk transfer. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Avg. Disk sec/Write	Average Disk sec/Write calculates the average time (in seconds) of a data write to the disk. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Avg. Response Time (ms)	Average Response Time (ms) calculates the average time (in milliseconds) of a disk transfer.
Current Disk Queue Length	Current Disk Queue Length calculates the total real-time number of outstanding requests that are on the disk and are currently in service when the performance data is collected. To maintain optimal performance calculate the ratio of delayed request to the length of the disk queue minus the number of spindles on the disks. The difference should be less than 2. (Note that disk devices with multiple spindles can have multiple requests active at one time.) If the value of Current Disk Queue Length is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Disk Bytes/sec	Disk Bytes per Second calculates the frequency at which bytes are transferred to or from the disk during write or read operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Disk Read Bytes/sec	Disk Read Bytes per Second calculates the frequency at which bytes are transferred from the disk during read operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Disk Reads/sec	Disk Reads per Second calculates the frequency of read operations on the disk. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Disk Transfers/sec	Disk Transfers per Second calculates the frequency of read and write operations on the disk. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Disk Write Bytes/sec	Disk Write Bytes per Second calculates the frequency at which bytes are transferred to the disk during write operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Disk Writes/sec	Disk Writes per Second calculates the frequency of write operations on the disk. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-8 Process Class Event Tests  

Event Test	Description
% Privileged Time	Percentage Privileged Time calculates the percentage of time that process threads have been executing code in Privileged Mode. Services often run in Privileged Mode to gain access to system-private data. Threads executing in User Mode protect system-private from access. System calls may be explicit or implicit (when a page fault or an interrupt occurs, for example.) Special process boundaries have been integrated with Windows NT so that code executing in User Mode will not interfere with the Windows NT Executive, Kernel, and device drivers. Note that you may see Windows NT-related tasks in other subsystem processes in addition to seeing the Privileged Time in your own process. If the Percentage Privileged Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Processor Time	Percentage Processor Time measures the total amount of time that the processor was used by the threads of a process to execute instructions. Instructions sent to handle certain hardware interrupts or trap conditions may be included in the percentage of processor time. If the Percentage Processor Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% User Time	Percentage User Time calculates the percentage of time that process threads have been executing code in User Mode. Special process boundaries have been integrated with Windows NT so that code executing in User Mode will not interfere with the Windows NT Executive, Kernel, and device drivers. Note that you may see Windows NT-related tasks in other subsystem processes in addition to seeing the Privileged Time in your own process. If the Percentage User Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Elapsed Time	Elapsed time measures the total amount of time (in seconds) that the process has been running. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Handle Count	Handle Count calculates the total number of handles currently open by each thread in this process. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Page Faults/sec	Page Faults per Second measures the rate of Page Faults by the threads executing in this process. Page faults occur when threads reference a virtual memory page that is not in currently its working set in main memory. When the page is not in the working set it cannot be fetched from disk if it is in main memory or when the shared page is being used by another process. If the value of Page Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Page File Bytes	Page File Bytes measures the total number of bytes this process has used in the paging file(s). Paging files store pages of memory used by the process but are not contained in other files. Paging files are shared by all processes but if there is insufficient space in the paging files, other processes may not be able to allocate memory. If the value of Page File Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pool Nonpaged Bytes	Pool Nonpaged Bytes calculates the total number of bytes in the Nonpaged Pool. The Paged Pool is the area in the system memory where operating system components acquire space to accomplish tasks. Nonpaged Pool pages remain in main memory as long as they are allocated and cannot be paged out to the paging file. If the value of Pool Nonpaged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Pool Paged Bytes	Pool Paged Bytes calculates the total number of bytes in the Paged Pool. The Paged Pool is the area in the system memory where operating system components acquire space to accomplish tasks. When not being accessed by the system, Paged Pool pages can be paged out to the paging file. If the value of Pool Paged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Private Bytes	Private Bytes calculates the total number of bytes allocated by the process that cannot be shared with other processes. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Thread Count	Thread Count measures the number of threads in the process that are currently active. Threads are responsible for executing instructions (basic units of application work). Every active process has at least one thread. If the Thread Count is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Virtual Bytes	Virtual Bytes calculates the current size (in bytes) of the virtual address space being used by a process. Using too much virtual memory may limit the ability to load libraries. Note that using virtual address space is not an indication that you are also using disk or main memory pages. If the value of Virtual Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Working Set	Working Set measures total number of bytes currently in the Working Set of the process. The Working Set is the set of memory pages recently accessed by the threads in the process. If the system's free memory rises above a threshold, the pages are left in the Working Set even if they are not in use. If the system's free memory falls below a threshold, the pages are trimmed from Working Sets. If the memory pages are needed they will then be soft-faulted back into the Working Set before they leave main memory. If the value of Working Set is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-9 Processor Class Event Tests  

Event Test	Description
% DPC Time	Percentage of DPC (Deferred Procedure Call) Time measures the percentage of time the processor spends in DPC mode. This metric can also assist in determining the cause of excessive privileged mode usage. A deferred procedure call is caused when a hardware device interrupts the processor and the Interrupt Handler chooses to execute its work in a deferred procedure call. DPCs enable interrupts to occur because deferred procedure calls run at a lower priority than interrupts. If the Percentage of DPC Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Interrupt Time	Percentage of Interrupt Time measures the percentage of time a processor spends handling hardware interrupts. When the processor is interrupted by a hardware device, the Interrupt Handler signals an I/O completion and issues another pending I/O request. This metric can also be used to determine the source of excessive Privileged mode usage. If the Percentage of Interrupt Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Privileged Time	Percentage of Privileged Time measures the percentage of time a processor spends in Privileged mode with non-idle threads. The Percentage of Privileged Time metric includes Windows NT service layer, the Executive routines, the Windows NT Kernel, and device drivers in the calculation of total Privileged time. If the Percentage of Privileged Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Processor Time	Percentage of Processor Time measures the total amount of time that a processor is busy executing a non-idle thread. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% User Time	Percentage of User Time measures the percentage of time a processor spends in user mode with non-idle threads. The Percentage of User Time metric includes the amount of time that all application code and peripheral devices execute in user mode. If the Percentage of User Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
APC Bypasses/sec	APC (Asynchronous Procedure Call) Bypasses per Second calculates the rate at which kernel APC interrupts are circumvented. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
DPC Bypasses/sec	DPC (Deferred Procedure Call) Bypasses per Second calculates the average rate at which Dispatch interrupts are circumvented. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
DPC Rate	DPC (Deferred Procedure Call) Rate calculates the average rate at which DPC objects are added to the processor's DPC queue. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
DPCs Queued/sec	DPCs (Deferred Procedure Calls) Queued per Second measures the rate at which DPC objects are added to the processor's DPC queue. If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Interrupts/sec	Interrupts per Second measures the number of times the processor experiences an interrupt caused by a device. Device interruptions occur when the device completes a task or when the device requires attention. These interruptions suspend normal thread executions which can cause the processor to switch to a higher priority thread. If Interrupts per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Table 7-10 System Class Event Tests  

Event Test	Description
% Registry Quota In Use	Percentage (%) Registry Quota In Use measures the total amount of registry quota allowed by the system. If the value of Percentage Registry Quota In Use is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Total DPC Time	Percentage (%) Total DPC (Deferred Procedure Call) Time calculates the percentage of total DPC time divided by the number of system processors. If the Percentage Total DPC Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Total Interrupt Time	Percentage (%) Total Interrupt Time calculates the total percentage of interrupt time for all processors divided by the number of system processors. If the Percentage Total Interrupt Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Total Privileged Time	The Percentage (%) of Total Privileged Time measures the amount of time the processors are running in Privileged mode. For example, if multiple processors are all running in Privileged mode, then the Percentage of Total Privileged Time would be 100%. If only half of the processors are running in Privileged mode then the percentage would be 50%. If the percentage of time that the processors are running in Privileged mode is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Total Processor Time	Percentage (%) of Total Processor Time is the fraction or percentage of time that the system processor is running non-idle threads. For example, if all of the system processors are busy the Percentage of Total Processor Time would be 100%. If only half of the processors are busy running non-idle threads, then the Percentage of Total Processor Time would be 50%. If the percentage of time that the system processor is running non-idle threads is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
% Total User Time	The Percentage (%) of Total User Time measures the amount of time the processors are running in user mode. For example, if multiple processors are all running in user mode, then the Percentage of Total User Time would be 100%. If only half of the processors are running in user mode then the percentage would be 50%. If the percentage of time that the processors are running in user mode is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Alignment Fixups/sec	Alignment Fixups per Second measures the rate by which the system is able to fix alignment faults. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Context Switches/sec	Context Switches per Second measures the rate of switches among threads. Switches can occur either inside of a single process or across multiple processes. A thread switch can happen when one thread requests information from another thread or when a higher priority thread preempts another thread. In addition to the traditional protection of User and Privileged modes, Windows NT also uses process boundaries for subsystem protection. These protection boundaries may appear in other subsystem processes in addition to the Privileged Time in the application. Switching to the subsystem process causes one Context Switch in the application thread. Switching back causes another Context Switch in the subsystem thread. If the value of Context Switches per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Exception Dispatches/sec	Exception Dispatches per Second measures the rate that the system dispatches exceptions. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
File Control Bytes/sec	File Control Bytes per Second is the sum total of bytes transferred for all file system including file system control requests or requests for information about device characteristics or status. (Does not include read or write operations.) If the value of File Control Bytes per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
File Control Operations/sec	File Control Operations per Second is the sum total of all file system operations including file system control requests or requests for information about device characteristics or status. (Does not include read or write operations.) If the value of File Control Operations per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
File Data Operations/sec	File Data Operations per Second measures the number of Read and Write operations being issued by the computer to file system devices. This metric does not measure File Control Operations. If the value of File Data Operations per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
File Read Bytes/sec	File Read Bytes per Second is the sum total of bytes transferred for all the file system read operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
File Read Operations/sec	File Read Operations per Second is the sum total of all the file system read operations on the system. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
File Write Bytes/sec	File Write Bytes per Second is the sum total of bytes transferred for all the file system write operations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
File Write Operations/sec	File Write Operations per Second is the sum total of all the file system write operations on the system. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Floating Emulations/sec	Floating Emulations per Second measures the rate by which the system performs floating emulations. If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Processor Queue Length	Processor Queue Length measures the number of threads in the current processor queue (not the threads that are currently executing.) Note that the Processor Queue Length metric is a real-time count of threads and not an average count over time. If the Processor Queue Length is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
System Calls/sec	Systems Calls per Second measures the frequency of calls to system service routines that perform basic scheduling and synchronizing of activities on the computer. These routines also provide access to non-graphical devices, memory management, and name space management. If the value of System Calls per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Total APC Bypasses/sec	Total APC (Asynchronous Procedure Call) Bypasses per Second measures the overall rate at which APC interrupts were circumvented across all processors. If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Total DPC Bypasses/sec	Total DPC (Deferred Procedure Call) Bypasses per Second measures the rate at which Dispatch Interrupts were circumvented across all platforms. If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Total DPC Rate	Total DPC (Deferred Procedure Call) Rate is the average speed (measured in seconds) by which DPC objects are added to the processor's DPC queue. If the Total DPC Rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Total DPCs Queued/sec	Total DPCs (Deferred Procedure Calls) Queued per Second measures the rate at which objects are added to the processor's DPC queue. If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.
Total Interrupts/sec	Total Interrupts per Second measures the rate that the computer is handling interruptions from system devices such as the mouse, network cards, and system clocks. This metric also indicates how busy those devices are in the overall system environment. If the value of Total Interrupts per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Descriptions of Windows NT Event Tests

The Windows NT event tests are listed in alphabetical order.

% Committed Bytes In Use

Description

Percentage of Committed Bytes in Use measures the real-time ratio of committed bytes to the commit limit. The ratio indicates the amount of virtual memory in use. Note that if the paging file is extended the commit limit may change.

If the Percentage of Committed Bytes in Use is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of committed bytes in use.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Disk Read Time

Description

Percentage Disk Read Time calculates the percentage of time that the selected disk drive is busy servicing read requests.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Percentage disk read time

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Disk Time

Description

Percentage Disk Time calculates the total amount of time that the selected disk drive was busy servicing read or write requests.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Percentage disk time

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Disk Write Time

Description

Percentage Disk Write Time calculates the percentage of time that the selected disk drive was busy servicing write requests.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Percentage disk write time

Recommended Frequency

5 minutes

User Action

Specific to your site.

% DPC Time

Description

Percentage of DPC (Deferred Procedure Call) Time measures the percentage of time the processor spends in DPC mode. This metric can also assist in determining the cause of excessive privileged mode usage. A deferred procedure call is caused when a hardware device interrupts the processor and the Interrupt Handler chooses to execute its work in a deferred procedure call. DPCs enable interrupts to occur because deferred procedure calls run at a lower priority than interrupts.

If the Percentage of DPC Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of DPC time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Free Space

Description

Percentage Free Space calculates the ratio of available free space on the logical disk unit to the total usable space provided by the selected logical disk drive.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Logical Disk(s): Filter for logical disks to be monitored, such as "0 ==> C:" or "0 ==> C:, 1 ==> D:" for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Logical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Percentage of free space

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Interrupt Time

Description

Percentage of Interrupt Time measures the percentage of time a processor spends handling hardware interrupts. When the processor is interrupted by a hardware device, the Interrupt Handler signals an I/O completion and issues another pending I/O request. This metric can also be used to determine the source of excessive Privileged mode usage.

If the Percentage of Interrupt Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of interrupt time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Privileged Time (Process Class)

Description

Percentage Privileged Time calculates the percentage of time that process threads have been executing code in Privileged Mode. Services often run in Privileged Mode to gain access to system-private data. Threads executing in User Mode protect system-private from access. System calls may be explicit or implicit (when a page fault or an interrupt occurs, for example.) Special process boundaries have been integrated with Windows NT so that code executing in User Mode will not interfere with the Windows NT Executive, Kernel, and device drivers. Note that you may see Windows NT-related tasks in other subsystem processes in addition to seeing the Privileged Time in your own process.

If the Percentage Privileged Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage privileged time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Privileged Time (Processor Class)

Description

Percentage of Privileged Time measures the percentage of time a processor spends in Privileged mode with non-idle threads. The Percentage of Privileged Time metric includes Windows NT service layer, the Executive routines, the Windows NT Kernel, and device drivers in the calculation of total Privileged time.

If the Percentage of Privileged Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of privileged time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Processor Time (Process Class)

Description

Percentage Processor Time measures the total amount of time that the processor was used by the threads of a process to execute instructions. Instructions sent to handle certain hardware interrupts or trap conditions may be included in the percentage of processor time.

If the Percentage Processor Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of processor time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Processor Time (Processor Class)

Description

Percentage of Processor Time measures the total amount of time that a processor is busy executing a non-idle thread.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of processor time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Registry Quota In Use

Description

Percentage (%) Registry Quota In Use measures the total amount of registry quota allowed by the system.

If the value of Percentage Registry Quota In Use is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of registry quota in use.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Total DPC Time

Description

Percentage (%) Total DPC (Deferred Procedure Call) Time calculates the percentage of total DPC time divided by the number of system processors.

If the Percentage Total DPC Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of total DPC time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Total Interrupt Time

Description

Percentage (%) Total Interrupt Time calculates the total percentage of interrupt time for all processors divided by the number of system processors.

If the Percentage Total Interrupt Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of total interrupt time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Total Privileged Time

Description

The Percentage (%) of Total Privileged Time measures the amount of time the processors are running in Privileged mode. For example, if multiple processors are all running in Privileged mode, then the Percentage of Total Privileged Time would be 100%. If only half of the processors are running in Privileged mode then the percentage would be 50%.

If the percentage of time that the processors are running in Privileged mode is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of total privileged time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Total Processor Time

Description

Percentage (%) of Total Processor Time is the fraction or percentage of time that the system processor is running non-idle threads. For example, if all of the system processors are busy the Percentage of Total Processor Time would be 100%. If only half of the processors are busy running non-idle threads, then the Percentage of Total Processor Time would be 50%.

If the percentage of time that the system processor is running non-idle threads is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of total processor time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Total User Time

Description

The Percentage (%) of Total User Time measures the amount of time the processors are running in user mode. For example, if multiple processors are all running in user mode, then the Percentage of Total User Time would be 100%. If only half of the processors are running in user mode then the percentage would be 50%.

If the percentage of time that the processors are running in user mode is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of total user time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% Usage

Description

Percent Usage measures the percentage of Page File instance usage.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Paging File(s): Filter for paging files to be monitored, such as _Total, or * for all paging files on the system. Note: To access the list of all available paging files, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Paging File".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of page file instance usage.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% User Time (Process Class)

Description

Percentage User Time calculates the percentage of time that process threads have been executing code in User Mode. Special process boundaries have been integrated with Windows NT so that code executing in User Mode will not interfere with the Windows NT Executive, Kernel, and device drivers. Note that you may see Windows NT-related tasks in other subsystem processes in addition to seeing the Privileged Time in your own process.

If the Percentage User Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of user time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

% User Time (Processor Class)

Description

Percentage of User Time measures the percentage of time a processor spends in user mode with non-idle threads. The Percentage of User Time metric includes the amount of time that all application code and peripheral devices execute in user mode.

If the Percentage of User Time is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of user time.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Alignment Fixups/sec

Description

Alignment Fixups per Second measures the rate by which the system is able to fix alignment faults.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The alignment faults fixed per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

APC Bypasses/sec

Description

APC (Asynchronous Procedure Call) Bypasses per Second calculates the rate at which kernel APC interrupts are circumvented.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of APC bypasses per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Async Copy Reads/sec

Description

Async Copy Reads per Second measures the frequency of cache page reads that include placing a memory copy of the data from the cache on the application's buffer. The application will be able to access the disk and retrieve the page immediately.

If the value of Async Copy Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of asynchronous copy reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Async Data Maps/sec

Description

Async Data Maps per Second measures the frequency that the NTFS or HPFS file systems map a page of a file into the cache to read the page and does not wait for the cache to retrieve the page (if the page is not in the main memory.)

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of asynchronous data maps per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Async Fast Reads/sec

Description

Async Fast Reads per Second measures the frequency of cache page reads that retrieve data directly from the cache without going through the installed file system. In a typical read, the I/O requests prompt the file system to retrieve data from a file. If the data is not in the cache, a fast read will still eliminate one invocation of the file system. The request will have immediate control of the data even if the data is not in the cache.

If the value of Async Fast Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of asynchronous fast reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Async MDL Reads/sec

Description

Async MDL (Memory Descriptor List) Reads per Second measures the frequency of cache page reads that access data using the MDL. The physical address of each page within the transfer is contained in the memory descriptor list. This information enables the Direct Memory Access (DMA) device to secure the copy. The access device will not wait for the pages to fault from the disk if the pages are not in the main memory.

If the value of Async MDL Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of asynchronous MDL reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Async Pin Reads/sec

Description

Async Pin Reads per Second measures the frequency of reading data into the cache before the data is written back to disk. When pages are read this way they become pinned in memory when the read is complete. The file system will have immediate control of the page and will be able to access the disk and retrieve the page immediately if needed. A pinned page's physical address cannot be modified.

If the value of Async Pin Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of asynchronous pin reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Available Bytes

Description

Available Bytes metric measures the real-time amount of virtual memory on the Zeroed, Free and Standby lists.

If this value is less than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The available memory in bytes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Available Memory (%)

Description

Available Memory % measures the real-time amount of free memory in the percentage of total physical memory.

Data Source

Available Free Memory / Total Physical Memory * 100%

Parameters

• Warning Threshold: Threshold for warning alert. The value can be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value can be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

Available physical memory in percentage.

Recommended Frequency

5 minutes

Average Response Time (ms)

Description

Average Response Time (ms) calculates the average time (in milliseconds) of a disk transfer.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The average response time in milliseconds.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Avg. Disk Bytes/Read

Description

Average Disk Bytes/Read calculates the average number of bytes transferred from the disk during read operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Average number of bytes transferred per read

Recommended Frequency

5 minutes

User Action

Specific to your site.

Avg. Disk Bytes/Transfer

Description

Avg. Disk Bytes/Transfer calculates the average number of bytes transferred to or from the disk during write or read operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Average number of bytes transferred per transfer

Recommended Frequency

5 minutes

User Action

Specific to your site.

Avg. Disk Bytes/Write

Description

Average Disk Bytes/Write calculates the average number of bytes transferred to the disk during write operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Number of bytes transferred per write

Recommended Frequency

5 minutes

User Action

Specific to your site.

Avg. Disk sec/Read

Description

Average Disk sec/Read calculates the average time (in seconds) of a data read from the disk.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Average disk time in seconds per read

Recommended Frequency

5 minutes

User Action

Specific to your site.

Avg. Disk sec/Transfer

Description

Average Disk Sec/Transfer calculates the average time (in seconds) of a disk transfer.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Average disk time in seconds per transfer

Recommended Frequency

5 minutes

User Action

Specific to your site.

Avg. Disk sec/Write

Description

Average Disk sec/Write calculates the average time (in seconds) of a data write to the disk.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Average disk time in seconds per write

Recommended Frequency

5 minutes

User Action

Specific to your site.

Bytes Received/sec

Description

Bytes Received per Second measures the rate at which bytes are received on the interface.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of bytes are received on the interface per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Bytes Sent/sec

Description

Bytes Sent per Second measures the rate at which bytes are sent on the interface.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of bytes are sent on the interface per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Bytes Total/sec

Description

Bytes Total per Second measures the rate at which bytes are sent and received on the interface.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of bytes are sent and received on the interface per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Cache Bytes

Description

Cache Bytes measures the number of bytes currently being used by the system cache. The system cache buffers data retrieved from the disk or local area network. The system cache then uses the memory that is not currently being used by any active system processes.

If Cache Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The used system cache in bytes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Cache Faults/sec

Description

Cache Faults per Second measures the number of times a cache fault occurs. Cache faults are caused when the cache manager fails to find a file's page in the immediate cache and requests the memory manager to locate the page in memory or on the disk so that it can be added to the immediate cache.

If the value of Cache Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of cache faults per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Commit Limit

Description

Commit Limit measures the amount of virtual memory (in bytes) that can be committed without extending the paging files.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The memory commit limit in bytes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Committed Bytes

Description

Committed Bytes measures the total amount of virtual memory (in bytes) that have been committed. Committed memory should not be confused with reserved memory. Committed memory must have available disk storage or the main memory must by large enough to contain the committed virtual memory.

If the value of Committed Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The committed memory in bytes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Context Switches/sec

Description

Context Switches per Second measures the rate of switches among threads. Switches can occur either inside of a single process or across multiple processes. A thread switch can happen when one thread requests information from another thread or when a higher priority thread preempts another thread. In addition to the traditional protection of User and Privileged modes, Windows NT also uses process boundaries for subsystem protection. These protection boundaries may appear in other subsystem processes in addition to the Privileged Time in the application. Switching to the subsystem process causes one Context Switch in the application thread. Switching back causes another Context Switch in the subsystem thread.

If the value of Context Switches per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The context switches per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Copy Read Hits %

Description

Copy Read Hits measures the percentage of copy read hit requests that the cache receives. Copy read hits do not require a disk read to access a page in the cache. A copy read is a type of file read operation that allows a memory copy from a cache page to the application's buffer. The Local Area Network (LAN) Redirector, the LAN Server and the disk file systems use the copy reads for retrieving cache information.

If the value of Copy Read Hits per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of copy read hits.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Copy Reads/sec

Description

Copy Reads per Second measures the frequency of cache page reads that includes placing a memory copy of the data from the cache on the application's buffer. The Local Area Network (LAN) Redirector, the LAN Server, and the disk file systems use copy reads for retrieving cache information.

If the value of Copy Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of copy reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Current Bandwidth

Description

Current Bandwidth estimates the interface's current bandwidth in bits per second (bps). The nominal bandwidth value is given for interfaces that do not vary in bandwidth or for those where no accurate estimation can be made.

If the Current Bandwidth is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The current bandwidth in bits per second (bps).

Recommended Frequency

5 minutes

User Action

Specific to your site.

Current Disk Queue Length

Description

Current Disk Queue Length calculates the total real-time number of outstanding requests that are on the disk and are currently in service when the performance data is collected. To maintain optimal performance calculate the ratio of delayed request to the length of the disk queue minus the number of spindles on the disks. The difference should be less than 2. (Note that disk devices with multiple spindles can have multiple requests active at one time.)

If the value of Current Disk Queue Length is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Current disk queue length

Recommended Frequency

5 minutes

User Action

Specific to your site.

Data Flush Pages/sec

Description

Data Flush Pages per Second calculates the number of pages have been flushed to disk from the Cache. Pages are flushed when the cache approves a write-through file write request of its content to disk. Note that more than one page can be transferred for each flush operation.

If the value of Data Flush Pages per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of data flush pages per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Data Flushes

Description

Data Flushes per Second measures the frequency at which the cache has approved a write-through file write request of its content to disk. Note that for each flush operation, more than one page can be transferred.

If the value of Data Flushes per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of data flushes per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Data Map Hits %

Description

Data Map Hits calculates the percentage of Data Maps in the cache that can be resolved without retrieving a page from the disk.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of data map hits.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Data Map Pins/sec

Description

Data Map Pins per Second measures the frequency of Data Maps in the cache that caused a page to be pinned in the main memory. When a page is pinned the physical address in main memory and its virtual address in the cache cannot be modified.

If the value of Data Map Pins per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The data map pins per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Data Maps/sec

Description

Data Maps per Second measures the frequency that the NTFS or HPFS file systems map a page of a file into the cache.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of data maps per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Demand Zero Faults/sec

Description

Demand Zero Faults per Second measures the number of page faults for pages that must be filled with zeroes before the fault is resolved. If the zeroed list is not empty, the fault can be resolved by removing a page from the zeroed list.

If the value of Demand Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of demand zero faults per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Disk Bytes/sec

Description

Disk Bytes per Second calculates the frequency at which bytes are transferred to or from the disk during write or read operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Number of bytes transferred per second

Recommended Frequency

5 minutes

User Action

Specific to your site.

Disk Read Bytes/sec

Description

Disk Read Bytes per Second calculates the frequency at which bytes are transferred from the disk during read operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Number of bytes read per second

Recommended Frequency

5 minutes

User Action

Specific to your site.

Disk Reads/sec

Description

Disk Reads per Second calculates the frequency of read operations on the disk.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Number of disk reads per second

Recommended Frequency

5 minutes

User Action

Specific to your site.

Disk Transfers/sec

Description

Disk Transfers per Second calculates the frequency of read and write operations on the disk.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Number of disk transfers per second

Recommended Frequency

5 minutes

User Action

Specific to your site.

Disk Write Bytes/sec

Description

Disk Write Bytes per Second calculates the frequency at which bytes are transferred to the disk during write operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Number of bytes written per second

Recommended Frequency

5 minutes

User Action

Specific to your site.

Disk Writes/sec

Description

Disk Writes per Second calculates the frequency of write operations on the disk.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Physical Disk(s): Filter for physical disks to be monitored, such as 0, 1, or * for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Physical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Number of disk writes per second

Recommended Frequency

5 minutes

User Action

Specific to your site.

DPC Bypasses/sec

Description

DPC (Deferred Procedure Call) Bypasses per Second calculates the average rate at which Dispatch interrupts are circumvented.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of DPC bypasses per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

DPC Rate

Description

DPC (Deferred Procedure Call) Rate calculates the average rate at which DPC objects are added to the processor's DPC queue.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The DPC rate.

Recommended Frequency

5 minutes

User Action

Specific to your site.

DPCs Queued/sec

Description

DPCs (Deferred Procedure Calls) Queued per Second measures the rate at which DPC objects are added to the processor's DPC queue.

If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The DPCs queued per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Elapsed Time

Description

Elapsed time measures the total amount of time (in seconds) that the process has been running.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total amount of time (in seconds) that the process has been running.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Events

Description

The Events metric measures the total number of real-time events in the computer at the time of data collection. Events are used when two or more threads wish to synchronize execution.

If the number of real-time events is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Objects".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of real-time events.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Exception Dispatches/sec

Description

Exception Dispatches per Second measures the rate that the system dispatches exceptions.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of exception dispatches per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Fast Read Not Possibles/sec

Description

Fast Read Not Possibles per Second is the frequency at which calls are made by the Application Program Interface (API) to try and avoid the file system to get cache data. This metric monitors the number of times that these calls fail because the file system must be accessed.

If the value of Fast Read Not Possibles per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of fast read not possibles per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Fast Read Resource Misses/sec

Description

Fast Read Resource Misses per Second measures the frequency at which cache reads are missed due to a lack of resources to satisfy the request.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of fast read resource misses per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Fast Reads/sec

Description

Fast Reads per Second measures the frequency of cache page reads that retrieve data directly from the cache without going through the installed file system. In a typical read, the I/O requests prompt the file system to retrieve data from a file. If the data is not in the cache, a fast read will still eliminate one invocation of the file system.

If the value of Fast Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of fast reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

File Control Bytes/sec

Description

File Control Bytes per Second is the sum total of bytes transferred for all file system including file system control requests or requests for information about device characteristics or status. (Does not include read or write operations.)

If the value of File Control Bytes per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The file control bytes per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

File Control Operations/sec

Description

File Control Operations per Second is the sum total of all file system operations including file system control requests or requests for information about device characteristics or status. (Does not include read or write operations.) If the value of File Control Operations per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The file control operations per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

File Data Operations/sec

Description

File Data Operations per Second measures the number of Read and Write operations being issued by the computer to file system devices. This metric does not measure File Control Operations.

If the value of File Data Operations per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of file data operations per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

File Read Bytes/sec

Description

File Read Bytes per Second is the sum total of bytes transferred for all the file system read operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of file read bytes per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

File Read Operations/sec

Description

File Read Operations per Second is the sum total of all the file system read operations on the system.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The file read operations per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

File Write Bytes/sec

Description

File Write Bytes per Second is the sum total of bytes transferred for all the file system write operations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of file write bytes per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

File Write Operations/sec

Description

File Write Operations per Second is the sum total of all the file system write operations on the system.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The file write operations per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Floating Emulations/sec

Description

Floating Emulations per Second measures the rate by which the system performs floating emulations.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of floating emulations per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Free Megabytes

Description

Free Megabytes measures the available (unallocated) space on the selected disk drive in megabytes. One megabyte = 1,048,576 bytes.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Logical Disk(s): Filter for logical disks to be monitored, such as "0 ==> C:" or "0 ==> C:, 1 ==> D:" for all disks on the system. Note: To access the list of all available disk names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Logical Disk".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

• Disk name

• Amount of free space in megabytes

Recommended Frequency

5 minutes

User Action

Specific to your site.

Free System Page Table Entries

Description

Free system page table entries measure the number of page table entries that are not currently being used by the system.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of page table entries that are free.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Handle Count

Description

Handle Count calculates the total number of handles currently open by each thread in this process.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of handles currently open by each thread in the process.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Interrupts/sec

Description

Interrupts per Second measures the number of times the processor experiences an interrupt caused by a device. Device interruptions occur when the device completes a task or when the device requires attention. These interruptions suspend normal thread executions which can cause the processor to switch to a higher priority thread.

If Interrupts per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Processor(s): Filter for processors, such as 0, 1, or * for all processors on the system. Note: To access the list of available instance names, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Processor".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The interrupts per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Lazy Write Flushes/sec

Description

Lazy Write Flushes per Second measures the frequency at which the lazy write thread involves updating the disk after the page has been changed in memory. By doing this the application requesting the file change will not have to wait for the disk write to complete before proceeding. Note that more than one page can be transferred on each writer operation.

If the value of Lazy Write Flushes per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of lazy write flushes per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Lazy Write Pages/sec

Description

Lazy Write Pages per Second measures the frequency at which the lazy write thread involves updating the disk after the page has been changed in memory. By doing this the application requesting the file change will not have to wait for the disk write to complete before proceeding. Note that more than one page can be transferred on a single disk write operation.

If the value of Lazy Write Pages per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of lazy write pages per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

MDL Read Hits %

Description

MDL (Memory Descriptor List) Read Hits measures the percentage of requests that the cache receives for cache memory descriptor (MDL) list reads. MDL reads provide memory access to the cache pages without accessing the disk.

If the Percentage of MDL Read Hits is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of MDL read hits.

Recommended Frequency

5 minutes

User Action

Specific to your site.

MDL Reads/sec

Description

MDL (Memory Descriptor List) Reads per Second measures the frequency of cache page reads that access data using the MDL. The physical address of each page within the transfer is contained in the memory descriptor list. This information enables the Direct Memory Access (DMA) device to secure the copy.

If the value of MDL Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of MDL reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Mutexes

Description

The Mutexes metric measures the total number of real-time mutexes in the computer at the time of data collection. Threads use mutexes to assure only one thread is executing some section of code.

If the total number of real-time mutexes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Objects".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of real-time mutexes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Output Queue Length

Description

Output Queue Length measures the length of the output packet queue (in packets.) Performance delays occur when the output queue experiences a bottleneck (typically when the length is longer than 2). Eliminate bottlenecks for optimal performance.

If the Output Queue Length is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The length of the output packet queue in packets.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets/sec

Description

Packets per Second measures the rate at which packets are sent and received on the network interface.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets are sent and received on the network interface per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Outbound Discarded

Description

Packets Outbound Discarded measures the number of outbound packets that were chosen to be discarded (to prevent them from being transmitted) and possibly free up buffer space.

If the number of Packets Outbound Discarded is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of outbound packets that were discarded.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Outbound Errors

Description

Packets Outbound Errors measures the total number of outbound packets that had errors and therefore could not be transmitted.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of outbound packets that had errors.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Received/sec

Description

Packets Received per Second measures the rate at which packets are received on the network interface.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets are received on the network interface per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Received Discarded

Description

Packets Received Discarded measures the number of inbound packets that were chosen to be discarded to prevent them from being delivered to a higher-layer protocol. One possible reason for discarding such a packet could be to free up buffer space.

If the number of Packets Received Discarded is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets received discard.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Received Errors

Description

Packets Received Errors measures the total number of inbound packets that contained errors and prevented them from being delivered to a higher-layer protocol.

If the number of Packet Received Errors is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of packets received errors.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Received Non-Unicast/sec

Description

Packets Received Non-Unicast per Second measures the rate at which non-unicast (subnet broadcast or subnet multicast) packets are delivered to a higher-layer protocol.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets received non-unicast per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Received Unicast/sec

Description

Packets Received Unicast per Second measures the rate at which (subnet) unicast packets are delivered to a higher-layer protocol.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets received unicast per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Received Unknown

Description

Packets Received Unknown measures the total number of packets the interface received and discarded because of an unknown or unsupported protocol.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of packets received and discarded because of an unknown or unsupported protocol.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Sent/sec

Description

Packets Sent per Second measures the rate at which packets are sent on the network interface.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets are sent on the network interface per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Sent Non-Unicast/sec

Description

Packets Sent Non-Unicast per Second measures the rate at which higher-level protocols requested packets to be transmitted to non-unicast (subnet broadcast or subnet multicast) addresses. The packets sent non-unicast rate includes the packets that were discarded or not sent.

If the value of Packets Sent Non-Unicast per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets sent non-unicast per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Packets Sent Unicast/sec

Description

Packets Sent Unicast per Second measures the rate at which higher-level protocols requested packets to be transmitted to subnet-unicast addresses. The packets sent unicast rate includes the packets that were discarded or not sent.

If the value of Packets Sent Unicast per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Network Interface(s): Filter for network interfaces to be monitored, such as 1, or * for network interfaces on the system. Note: To access the list of available network interfaces, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Network Interface".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of packets sent unicast per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Page Faults/sec (Memory Class)

Description

Page Faults per Second measures the number of Page Faults in the processor. A page fault occurs when a virtual memory page is referenced by a process and that page is not in the current Working Set of the main memory.

If the value of Page Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of page faults per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Page Faults/sec (Process Class)

Description

Page Faults per Second measures the rate of Page Faults by the threads executing in this process. Page faults occur when threads reference a virtual memory page that is not in currently its working set in main memory. When the page is not in the working set it cannot be fetched from disk if it is in main memory or when the shared page is being used by another process.

If the value of Page Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The page faults per second in the process.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Page File Bytes

Description

Page File Bytes measures the total number of bytes this process has used in the paging file(s). Paging files store pages of memory used by the process but are not contained in other files. Paging files are shared by all processes but if there is insufficient space in the paging files, other processes may not be able to allocate memory.

If the value of Page File Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of bytes the process has used in the paging file(s).

Recommended Frequency

5 minutes

User Action

Specific to your site.

Page Reads/sec

Description

Page Reads per Second measures the number of times the disk was read to retrieve pages of virtual memory to resolve page faults.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of page reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Page Writes/sec

Description

Page Writes per Second measures the number of times pages have been written to disk because they were modified since the last retrieval.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of page writes per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pages/sec

Description

Pages per Second measures the number of pages read from the disk or written to the disk to resolve faulty memory references. The metric calculates the sum of pages input per second plus the pages output per second. Use this metric to monitor memory thrashing and excessive paging.

If the value of Pages per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of pages input/output per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pages Input/sec

Description

Pages Input per Second measures the number of pages read from the disk to resolve faulty memory references. This is an important metric to monitor if memory thrashing and excessive paging has become a problem.

If the value of Pages Input per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of page inputs per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pages Output/sec

Description

Pages Output per Second measures the number of pages that were written to disk because the pages were modified in main memory.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of pages output per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pin Read Hits %

Description

Pin Read Hits calculates the percentage of pin requests that the cache receives. A pin read request does not require a disk read to access the page in cache. A pinned page's physical address in the cache cannot be modified. The Local Area Network (LAN) Redirector, the LAN Server, and the disk file system use pin reads to retrieve cache information.

If the value of Pin Read Hits is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert. The value must be between 0.0 and 100.0.

• Critical Threshold: Threshold for critical alert. The value must be between 0.0 and 100.0.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The percentage of pin read hits.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pin Reads/sec

Description

Pin Reads per Second measures the frequency of reading data into the cache before the data is written back to disk. When pages are read this way they become pinned in memory when the read is complete. A pinned page's physical cache address cannot be modified.

If the value of Pin Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of pin reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pool Nonpaged Allocs

Description

Pool Nonpaged Allocs (Allocations) is the number of times a call has been made to allocate space in the nonpaged pool. Nonpaged pool pages cannot be paged out to the paging file. As long as they are allocated they must remain in the main memory.

If the value of Pool Nonpaged Allocs is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of times to allocate space in the non-paged pool.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pool Nonpaged Bytes (Memory Class)

Description

Pool Nonpaged Bytes measures the number of bytes in the nonpaged pool. Nonpaged pool pages cannot be sorted in the paging file. As long as they are allocated, they must remain in the main memory.

If the value of Pool Nonpaged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of bytes in the non-paged pool.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pool Nonpaged Bytes (Process Class)

Description

Pool Nonpaged Bytes calculates the total number of bytes in the Nonpaged Pool. The Paged Pool is the area in the system memory where operating system components acquire space to accomplish tasks. Nonpaged Pool pages remain in main memory as long as they are allocated and cannot be paged out to the paging file.

If the value of Pool Nonpaged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of bytes in the Non-paged Pool.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pool Paged Allocs

Description

Pool Paged Allocs (Allocations) is the number of times a call has been made to allocate space in the system paged pool. Paged pool pages can be paged out to the paging file when the pages are not being accessed for any sustained amount of time.

If the value of Pool Paged Allocs is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of times to allocate space in the system paged pool.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pool Paged Bytes (Memory Class)

Description

Pool Paged Bytes measures the number of bytes in the paged pool. Paged pool pages can be paged out to the paging file when not being used by the system for a sustained length of time.

If Pool Paged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of bytes in paged pool.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pool Paged Bytes (Process Class)

Description

Pool Paged Bytes calculates the total number of bytes in the Paged Pool. The Paged Pool is the area in the system memory where operating system components acquire space to accomplish tasks. When not being accessed by the system, Paged Pool pages can be paged out to the paging file.

If the value of Pool Paged Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of bytes in the Paged Pool.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Pool Paged Resident Bytes

Description

Pool Paged Resident Bytes measures the size of paged pool bytes that reside in the main memory. The pool paged resident bytes value indicates the actual cost of the paged pool allocation since it is currently in use and it uses real (physical) memory.

If the value of Pool Paged Resident Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The size of paged pool bytes that reside in the main memory.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Private Bytes

Description

Private Bytes calculates the total number of bytes allocated by the process that cannot be shared with other processes.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of bytes allocated by the process that cannot be shared with other processes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Processes

Description

Processes calculates the total number of real-time processes in the computer at the time of data collection. Each process represents the running of a program.

If the number of Processes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Objects".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of real-time processes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Processor Queue Length

Description

Processor Queue Length measures the number of threads in the current processor queue (not the threads that are currently executing.) Note that the Processor Queue Length metric is a real-time count of threads and not an average count over time.

If the Processor Queue Length is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of threads in the current processor queue.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Read Aheads/sec

Description

Read Aheads per Second measures the frequency at which cache reads detect sequential file access. Read aheads reduce overhead access by enabling the data to be transferred in larger blocks than those requested by the application.

If the value of Read Aheads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of read aheads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Sections

Description

The Sections metric measures the total number of real-time sections in the computer at the time of data collection. A section is a portion of virtual memory created by a process for data storage. Processes may share sections with other processes.

If the total number of real-time sections is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Objects".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of real-time sections.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Semaphores

Description

The Semaphores metric measures the total number of real-time semaphores in the computer at the time of data collection. Semaphores are used by threads to obtain exclusive access to data structures that threads share with other threads.

If the total number of real-time semaphores is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Objects".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of real-time semaphores.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Sync Copy Reads/sec

Description

Sync Copy Reads per Second measures the frequency of cache page reads that include placing a copy of the data from the cache on the application's buffer. The file system will not be able to access the disk and retrieve the page until the copy operation is complete.

If the value of Sync Copy Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of sync copy reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Sync Data Maps/sec

Description

Sync Data Maps per Second measures the frequency that the NTFS or HPFS file systems map a page of a file into the cache and waits for the cache to retrieve the page (if the page is not in the main memory.)

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of sync data maps per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Sync Fast Reads/sec

Description

Sync Fast Reads per Second measures the frequency of cache page reads that retrieve data directly from the cache without going through the installed file system. In a typical read, the I/O requests prompt the file system to retrieve data from a file. If the data is not in the cache, a fast read will still eliminate one invocation of the file system. The request will not wait until the data has been retrieved from disk if the data is not in the cache.

If the value of Sync Fast Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of sync fast reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Sync MDL Reads/sec

Description

Sync MDL (Memory Descriptor List) Reads per Second measures the frequency of cache page reads that access data using the MDL. The physical address of each page within the transfer is contained in the memory descriptor list. This information enables the Direct Memory Access (DMA) device to secure the copy. The access device will wait for the pages to fault from the disk if the pages are not in the main memory.

If the value of Sync MDL Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of sync MDL reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Sync Pin Reads/sec

Description

Sync Pin Reads per Second measures the frequency of reading data into the cache before the data is written back to disk. When pages are read this way they become pinned in memory when the read is complete. When the page is pinned in the cache the file system can regain control of the page. Until the page is pinned in cache, however, the file system cannot access the disk and retrieve the page. A pinned page's physical address in the cache cannot be changed.

If the value of Sync Pin Reads per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Cache: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Cache".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of sync pin reads per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

System Cache Resident Bytes

Description

System Cache Resident Bytes measures the total number of bytes residing in the disk cache.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of bytes residing in the disk cache.

Recommended Frequency

5 minutes

User Action

Specific to your site.

System Calls/sec

Description

Systems Calls per Second measures the frequency of calls to system service routines that perform basic scheduling and synchronizing of activities on the computer. These routines also provide access to non-graphical devices, memory management, and name space management.

If the value of System Calls per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of system calls per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

System Code Resident Bytes

Description

System Code Resident Bytes measures the number of bytes of system code currently residing in the main memory.

If this value is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The size of system code residing in the main memory in bytes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

System Code Total Bytes

Description

System Code Total Bytes monitors the ntoskrnl.exe, hal.dll, and the boot drivers and file systems loaded by the ntldr/osloader for the total number of bytes of the pageable pages.

If System Code Total Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total system code size in bytes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

System Driver Resident Bytes

Description

System Driver Resident Bytes measures the total number of system driver bytes residing in the core memory. The returned value is considered the code working set of pageable drivers.

If the value of System Driver Resident Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of system driver bytes residing in the core memory.

Recommended Frequency

5 minutes

User Action

Specific to your site.

System Driver Total Bytes

Description

System Driver Total Bytes monitors all of the system driver devices and returns the total number of pageable pages currently in the devices.

If the value of System Driver Total Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of pageable pages currently in the devices in bytes.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Thread Count

Description

Thread Count measures the number of threads in the process that are currently active. Threads are responsible for executing instructions (basic units of application work). Every active process has at least one thread.

If the Thread Count is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of threads in the process that are currently active.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Threads

Description

The Threads metric measures the total number of real-time threads in the computer at the time of data collection. (Threads execute instructions in a processor.)

If the number of Threads is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Objects".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total number of real-time threads.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Total APC Bypasses/sec

Description

Total APC (Asynchronous Procedure Call) Bypasses per Second measures the overall rate at which APC interrupts were circumvented across all processors.

If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total APC bypasses per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Total DPC Bypasses/sec

Description

Total DPC (Deferred Procedure Call) Bypasses per Second measures the rate at which Dispatch Interrupts were circumvented across all platforms.

If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total DPC bypasses per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Total DPC Rate

Description

Total DPC (Deferred Procedure Call) Rate is the average speed (measured in seconds) by which DPC objects are added to the processor's DPC queue.

If the Total DPC Rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total DPC rate.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Total DPCs Queued/sec

Description

Total DPCs (Deferred Procedure Calls) Queued per Second measures the rate at which objects are added to the processor's DPC queue.

If this rate is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The total DPCs queued per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Total Interrupts/sec

Description

Total Interrupts per Second measures the rate that the computer is handling interruptions from system devices such as the mouse, network cards, and system clocks. This metric also indicates how busy those devices are in the overall system environment.

If the value of Total Interrupts per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• System: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "System".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of total interrupts per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Transition Faults/sec

Description

Transition Faults per Second measures the number of page faults that have been resolved by recovering pages that were being written to disk when the page fault occurred. These pages can be recovered without any additional disk activity.

If the value of Transition Faults per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of transition faults per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Virtual Bytes

Description

Virtual Bytes calculates the current size (in bytes) of the virtual address space being used by a process. Using too much virtual memory may limit the ability to load libraries. Note that using virtual address space is not an indication that you are also using disk or main memory pages.

If the value of Virtual Bytes is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The current size in bytes of the virtual address space used by the process.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Working Set

Description

Working Set measures total number of bytes currently in the Working Set of the process. The Working Set is the set of memory pages recently accessed by the threads in the process. If the system's free memory rises above a threshold, the pages are left in the Working Set even if they are not in use. If the system's free memory falls below a threshold, the pages are trimmed from Working Sets. If the memory pages are needed they will then be soft-faulted back into the Working Set before they leave main memory.

If the value of Working Set is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Process(es): Filter for processes to be monitored, such as vppdc, dbsnmp, or * for all processes on the system.

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of bytes currently in the Working Set of the process.

Recommended Frequency

5 minutes

User Action

Specific to your site.

Write Copies/sec

Description

Write Copies per Second measures the number of page faults that have been resolved by making a copy or the page when an attempt is made to write to the page.

If the value of Write Copies per Second is greater than or equal to the threshold values specified by the threshold arguments, and the number of occurrences exceeds the value specified in the "Number of Occurrences" parameter, then a warning or critical alert is generated.

Data Source

The data for this item was retrieved from a performance counter exposed in the system registry.

Parameters

• Memory: Default is "NT Operating System". Note: To get the available instance name, use Performance Manager or Capacity Planner and connect to the target node, then click on the class "Memory".

• Warning Threshold: Threshold for warning alert.

• Critical Threshold: Threshold for critical alert.

• Number of Occurrences: The number of consecutive occurrences. The default is 5.

Output

The number of write copy faults per second.

Recommended Frequency

5 minutes

User Action

Specific to your site.