Exchange 2013 Performance Monitor Data Collector Sets

I've noticed that the Exchange 2013 install created two data collector sets within Performance Monitor:
ExchangeDiagnosticsDailyPerformanceLog
ExchangeDiagnosticsPerformanceLog
These sets are creating daily log files saved in C:\Program Files\Microsoft\Exchange Server\V15\Logging\Diagnostics\DailyPerformanceLogs that are about 500MB in size, which are filling up our system volume.
I've tried stopping them, but they get restarted automatically. I also tried deleting them, but they get recreated automatically. Is there a way to disable these? We have a 3rd party tool that we use for performance monitoring and would like to avoid having
to delete these log files on a regular basis to keep our system volume from filling up.
As a workaround, I've changed the path where the log files get saved to a non existent drive letter, but would still like to disable the Data Collector Sets completely.
Thanks,
-Cory

Do note,
These performance counters only take up 1 week and not more so it will be about 3-5 GB if you can`t spare this on you c disk you have not implemented any best practise exchange design.
specialy with todays JBOD SATA design your c disk will be 1TB +. Review your designs to match MS advise.
MCTS-MCITP exchange 2010 | MCTS-MCITP Exchange: 2007 | MCSA Messaging: 2003 | MCP windows 2000
Hello Martin,
Many of us are implementing exchange in a virtual environment, where disk is at a premium.  Spending money on a 1 TB system drive is not a reasonable expectation.  Even if that is best practice, there should be a way to manage the location and
size of these log files. 
The inability to manage the location of log/performance data for centralization, or other reasons, is one more example of the disconnect between MS and their customer's use cases in regards to 2013. 
These are the requirements for 2013 from MS:
At least 30 GB on the drive on which you install Exchange
An additional 500 MB of available disk space for each Unified Messaging (UM) language pack that you plan to install
200 MB of available disk space on the system drive
A hard disk that stores the message queue database on with at least 500 MB of free space.
So your statement is invalid as 30 GB is not even close to deal with the amount of log and performance data that we cannot modify in any way. 

Similar Messages

  • Performance Monitor data collector logs 2 entries instead of one

    I have a problem on a Windows 2008 Server. I've attempted multiple times to create a data collector set to log performance counters at various intervals.
    Instead of it logging 1 row per time, it logs 2. And the metrics are different on each one.
    No errors on the server. Example pasted below.
    "06/06/2014 14:24:36.934" "1.3780056338967284"
    "06/06/2014 14:24:36.937" "100"
    "06/06/2014 14:25:36.934" "0.97016384152540658"
    "06/06/2014 14:25:36.937" "67.5"
    Any ideas? I don't have this problem on other servers.
    Thanks,
    Matt

    Hi Matt,
    Based on your description, please install the following Hotfix and check if can solve this issue.
    Duplicated data may be in the Performance log when
    you use the Performance Logs and Alerts service to collect performance data in Windows Server 2008, in Windows Vista, in Windows 7, or in Windows Server 2008 R2
    If this issue still persists, please let me summarily know how you create the Data Collector Set.
    Hope this helps.
    Best regards,
    Justin Gu

  • Cannot start a default data collector set in Server 2008 R2

    Trying to start a default data collector set "System Performance" in Windows Server 2008 R2, but it won't start.
    I am a domain and enterprise admin, and have actually added my domain credentials to the two Perfmon roles ("Performance Monitor Users" and "Performance log users"). Every time I try to start the "System Performance" Data Collector
    set, it fails to start - the start function gets dimmed together with the stop function.
    I check the task scheduler, and it seems everytime I have tried to run the data collector set, I get the following error logged:
    "Logon Failure: the user has not been granted the requested logon type at this computer. (0x80070569)"
    I can see that the error number means I do not have access to the machine, but I assure you that I'm logged in as a enterprise admin, the machine is the primary domain controller, and I have permission to do anything else on this machine and the domain.
    I am not experiencing the same problem with two 2012 Servers or either of the two VMs running on this 2008 R2 Server.
    Thanks in advance.
    FMilani

    Hi,
    The 0x80070569 error typically caused by the permission issue, If are the enterprise admin, please try the following steps to confirm there haven’t other GPO permission reason.
    1. Create a new OU and put the this server in it
    2. Create a Group Policy object for this new OU
    3. We blocked inheritance of other policies (if applicable)
    4. Make sure we did not set ANY user rights in our new policy
    5. We edited the local user rights add your account as local admin.
    6. Run the cmdlet gpupdate /force.
    More information:
    Starting or Live Migrating Hyper-V virtual machines may fail with error 0x80070569 on Windows Server 2012-based computers
    http://support.microsoft.com/kb/2779204/en-us
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Exchange 2013 Availability monitoring

    Hi All,
    I'm sort of stuck on the Exchange 2013 Probe Monitors, Monitors such as Imap, ActiveSync, Pop3 and FrontEndTransport keep failing. To fix/check the issue I'm following the below links:
    http://technet.microsoft.com/en-us/library/ms.exch.scom.activesync(v=exchg.150).aspx
    http://technet.microsoft.com/en-us/library/ms.exch.scom.imap(v=exchg.150).aspx
    For example typing in Invoke-MonitoringProbe ActiveSync\ActiveSyncCTPProbe -Server server1.contoso.com | Format-List
    I will get the following error:
    WARNING: Index was out of range. Must be non-negative and less than the size of the collection.
    Parameter name: index
    Not sure why I'm getting this error.
    For Imap testing i.e. typing in Invoke-MonitoringProbe IMAP\ImapCTPProbe -Server server1.contoso.com | Format-List
    I will get the following error:
    WARNING: No mailboxes were found to use in the CTP probe.
    I'm absolutely stumped on why I'm getting these errors.
    I'm running my Exchange servers on Hyper-V 2012 (My Hyper-V 2012 is clustered and managed by VMM 2012 SP1)
    I have 8 Exchange 2013 Enterprise CU6 nodes, with 2 DAGS
    Each Exchange server is running 4 cores of Processor and 24Gig of Ram (Not using Dynamic Memory)
    If someon can shed some light on this issue it would be most appreciated.
    Regards
    Mike

    Hi,
    Thanks for your update.
    Based on my research, I notice that most of this issue occur on the code level.
    Some threads that I've refered:
    1.
    https://social.msdn.microsoft.com/Forums/en-US/b4d46d2b-ed00-45ce-82ce-1a23790e52d5/index-was-out-of-range-must-be-nonnegative-and-less-than-the-size-of-the-collection-parameter?forum=csharplanguage
    2.
    http://stackoverflow.com/questions/19162248/index-was-out-of-range-must-be-non-negative-and-less-than-the-size-of-the-colle
    Disclaimer: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information
    found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
    I suggest ask Exchange Development Forum to double confirm this issue. For your convenience:
    https://social.technet.microsoft.com/Forums/office/en-US/home?forum=exchangesvrdevelopment
    Thanks
    Mavis Huang
    TechNet Community Support

  • Capturing performance monitor data to a file

    We would like to be able to capture the performance monitoring data, such as the memory
    usage to a file for later use in reports or analysis. I know how to view interactively,
    but cannot figure out a way (if there is one) to capture it to a file.

    >
    I am designing an application which needs audio capturing..Every thing works well except one.. The audio file (with wav format) is created but it does not have any sound recorded..But the size is allocated for the audio file..can anyone provide some solution..>Yeah, sure. Change the char at column 47 of line 356 from a ',' to a '.' and it should work perfectly.
    In case that does not work for you, you might try *showing us your SSCCE that fails!*
    In the meantime, here are two code sources that can save WAVs.
    [Recording to an audio file (simple version)|http://www.jsresources.org/examples/SimpleAudioRecorder.html]
    [Recording to an audio file (advanced version)|http://www.jsresources.org/examples/AudioRecorder.html]
    >
    ...Its urgent..>For urgent matters, I recommend paying a consultant. For forum answers, I recommend being patient.
    >
    ..Thanks in advance..>For my part, thanks is well expressed by adding [Duke stars|http://wikis.sun.com/display/SunForums/Duke+Stars+Program+Overview] to match your interest in getting a solution.
    Edit 1:
    Also note:
    - Java sound has been part of the J2SE since version 1.3, whereas the JMF has been abandoned about as long. The best forum for +(future)+ sound related problems is the [Java Sound forum.|http://forums.sun.com/forum.jspa?forumID=541].
    - I also read another thread you started where a person mentioned the code tags. Not only did you fail to take their advice, but entirely ignored the comment. If you intend ignoring the advice offered, why are you asking? Or perhaps more to the point, why should we answer? If you read anything that you do not understand, please ask what the person means, rather than ignore them and blunder on, as you seem to be intent on doing.
    Edited by: AndrewThompson64 on Dec 8, 2008 6:19 AM

  • Tuning Exchange 2013 HealthSet Monitors (example: MailboxTransport - Mapi.Submit.Monitor)

    Hello everyone,
    I was hoping some of you could help me out a bit with the new monitors in Exchange 2013.
    Especially after updating to CU6 we are getting a lot of warnings from SCOM with different HealthSets that show as unhealthy. These are usually “OK” again when we log on to the server and run Get-ServerHealth or Get-HealthReport. The most common healthset is
    Compliance, but also get warnings from MailboxTransport and ActiveSync.
    If we do manage to log on before the healthset returns to healthy again, like in the example below, we can drill down a bit. We are however very unsure about what to do with this information. Perhaps we should change the threshold, but how do we find out exactly
    what this monitor is reporting on? We know it has something to do with Mapi Submit, and that the threshold is 8, but not much more than that?
    Get-ServerHealth SERVER | where {($_.healthsetname -eq "mailboxtransport") -and ($_.alertvalue -eq "unhealthy")} | ft name,alertvalue -auto
    Name                AlertValue
    Mapi.Submit.Monitor  Unhealthy
    (Get-WinEvent -LogName Microsoft-Exchange-ActiveMonitoring/MonitorDefinition | % {[XML]$_.toXml()}).event.userData.eventXml | ?{$_.Name -like "Mapi.Submit.Monitor"}
    auto-ns2                           : http://schemas.microsoft.com/win/2004/08/events
    xmlns                              : myNs
    Id                                 : 266
    AssemblyPath                       : D:\Program Files\Microsoft\Exchange Server\V15\Bin\Microsoft.Office.Datacenter.ActiveMonitoringLocal.dll
    TypeName                           : Microsoft.Office.Datacenter.ActiveMonitoring.OverallXFailuresMonitor
    Name                               : Mapi.Submit.Monitor
    WorkItemVersion                    : [null]
    ServiceName                        : MailboxTransport
    DeploymentId                       : 0
    ExecutionLocation                  : [null]
    CreatedTime                        : 2014-11-20T08:51:03.5576888Z
    Enabled                            : 1
    TargetPartition                    : [null]
    TargetGroup                        : [null]
    TargetResource                     : MailboxTransport
    TargetExtension                    : [null]
    TargetVersion                      : [null]
    RecurrenceIntervalSeconds          : 0
    TimeoutSeconds                     : 30
    StartTime                          : 2014-11-20T08:51:03.5576888Z
    UpdateTime                         : 2014-11-20T08:42:58.9416436Z
    MaxRetryAttempts                   : 0
    ExtensionAttributes                : [null]
    SampleMask                         : Mapi.Submit.Probe
    MonitoringIntervalSeconds          : 3600
    MinimumErrorCount                  : 0
    MonitoringThreshold                : 8
    SecondaryMonitoringThreshold       : 0
    MonitoringSamplesThreshold         : 100
    ServicePriority                    : 2
    ServiceSeverity                    : 0
    IsHaImpacting                      : 0
    CreatedById                        : 57
    InsufficientSamplesIntervalSeconds : 28800
    StateAttribute1Mask                : [null]
    FailureCategoryMask                : 0
    ComponentName                      : ServiceComponents/MailboxTransport/High
    StateTransitionsXml                : <StateTransitions>
                                           <Transition ToState="Unrecoverable" TimeoutInSeconds="0" />
                                         </StateTransitions>
    AllowCorrelationToMonitor          : 0
    ScenarioDescription                : [null]
    SourceScope                        : [null]
    TargetScopes                       : [null]
    HaScope                            : Server
    Version                            : 65536
    We have an Exchange 2007 server coexisting in the environment, but it is not in use and will be decommissioned.
                             ServerRole    Edition AdminDisplayVersion
    Mailbox, ClientAccess, HubTransport   Standard Version 8.3 (Build 83.6)
                  Mailbox, ClientAccess Enterprise Version 15.0 (Build 995.29)
                  Mailbox, ClientAccess Enterprise Version 15.0 (Build 995.29)

    Thanks Belinda.
    We had a look in the log you mentioned, and found some events that appear to be related.
    Mailbox Transport Submission - the verification that the probe messages were successfully submitted within 5 minutes to HUB has failed. 
          This could indicate that the mailbox submissions are taking too long or not progressing at all.
          SequenceNumber: 635515592255510017
          Error: MapiSubmitLAMProbe finished with CheckPreviousMail failure.
          FailureContext: MapiSubmitLAMProbe finished with CheckPreviousMail failure.
          ExecutionContext: MapiSubmitLAMProbe started. This performs - 1. Submits a new message to Store 2. Checks results from previous Send Mail operation. Sequence # = 635515592255510017. First Run? = False. Previous mail submission to store
    was successful. Results -  # of previous results: 0.  Could Not Find stages that ran.  Previous SendMail failure -  Mail submitted to Store during the previous run never reached SendAsCheck. 
                            This may indicate a latency from Store to Submission Service. Investigating.  Found lower SA latency. Indicates an issue in Submission service. 
                                Investigate. In SendMail -  NotificationID=00000044-0000-0000-0000-0000659c9601 Sending mail. SendMail finished. MapiSubmitLAMProbe finished with CheckPreviousMail
    failure. 
          CheckPreviousRunMail exception details: 
          Current SendMail exception details: 
          MailWasSentInLastRun (0(no)/1(yes)): 1
          CheckMailSuccess(0(no)/1(yes)): 0
          SendMailSuccess(0(no)/1(yes)/2(no-noMDBs)/3(no-noActiveMDBs)/4(no-ignorableException)): 1
          PreviousMailLatencies: <[email protected]>,,2014-11-20T08:37:58.817Z;LSRV=SERVER001.DOMAIN.locale:TOTAL=0.811|SA=0.343|MTSSDMO=0.426|MTSSDPL=0.002|MTSSDSS=0.008|MTSSDS=0.031|MTSS=0.466;;<[email protected]>,,2014-11-20T08:32:58.772Z;LSRV=SERVER001.DOMAIN.locale:TOTAL=0.702|SA=0.203|MTSSDMO=0.451|MTSSDPL=0.003|MTSSDSS=0.007|MTSSDS=0.047|MTSS=0.500;;<[email protected]>,,2014-11-20T08:27:58.664Z;LSRV=SERVER001.DOMAIN.locale:TOTAL=1.170|SA=0.530|MTSSDMO=0.548|MTSSDPL=0.002|MTSSDSS=0.035|MTSSDS=0.078|MTSS=0.647;;
          GetPreviousMailLatencyFailures: 
          (The following are applicable if the mail was actually sent)
          MailSentAt: 20.11.2014 08:42:58
          TimeInSendingToStore: 62,3989
          Sent Mail Result Details:
            (InternetMessageId:<[email protected]>;
            ItemEntryId:0 0 0 0 2E 57 BD C1 1C 4B 5C 47 9E 54 6E B8 B2 C5 75 38 7 0 FA 78 3 5 D1 D4 6 48 B2 FF B 4 D7 25 55 92 0 0 0 0 1 B 0 0 FA 78 3 5 D1 D4 6 48 B2 FF B 4 D7 25 55 92 0 0 18 1A CD F1 0 0 )
            Properties of Sending mail 
            (Subject:00000044-0000-0000-0000-0000659c9601-MapiSubmitLAMProbe;
            Sender:[email protected];
            MbxGuid:340b204b-c716-4dfe-bbe1-cf09b5c73934;
            MdbGuid:2a6b9801-1647-4378-bc11-6ff342d22fcf;
            Recipient:[email protected];
            Body and MessageClass:MessageClass:IPM.Note.MapiSubmitLAMProbe;MessageBody:This is a Probe Mapi message that's Submitted from Store to Mailbox transport Submission service to Hub transport service;
            DoNotDeliver, DropMessageInHub and DeleteAfterSent:DoNotDeliver:True;DropMessageInHub:True;DeleteAfterSubmit:True;)
    Probe Exception: 'System.ApplicationException: MapiSubmitLAMProbe finished with CheckPreviousMail failure.
       at Microsoft.Forefront.Monitoring.ActiveMonitoring.Transport.Probes.MapiSubmitLAMProbe.PerformProbeFinalAction(Boolean potentialForAlertBasedOnPreviousRun, Boolean potentialForAlertBasedOnCurrentRun, Exception previousRunVerificationException,
    Exception currentRunException, DateTime timeMessageSentToStore)
       at Microsoft.Forefront.Monitoring.ActiveMonitoring.Transport.Probes.MapiSubmitLAMProbe.DoWorkInternal(CancellationToken cancellationToken)
       at Microsoft.Forefront.Monitoring.ActiveMonitoring.Transport.Probes.MapiSubmitLAMProbe.DoWork(CancellationToken cancellationToken)
       at Microsoft.Office.Datacenter.WorkerTaskFramework.WorkItem.Execute(CancellationToken joinedToken)
       at Microsoft.Office.Datacenter.WorkerTaskFramework.WorkItem.<>c__DisplayClass2.<StartExecuting>b__0()
       at System.Threading.Tasks.Task.Execute()'
    Probe Result Name: 'Mapi.Submit.Probe'
    Probe Result Type: 'Failed'
    Monitor Total Value: '0'
    Monitor Total Sample Count: '12'
    Monitor Total Failed Count: '12'
    Monitor Poisoned Count: '0'
    Monitor First Alert Observed Time: '16.11.2014 21:40:10'

  • Exchange 2013 Performance counters

    Hi All
    Can I have performance counters which need to be monitored regularly for below
    CAS - Outlook & OWA Connectivity
    Mail flow
    Database & DAG health
    ActiveSync
    SAH

    Hi SAH,
    Tuning a system for optimum performance is an iterative process. We must take the time to understand all the variables that affect your system, including user profile, architecture, and hardware.
    More details about Understanding Exchange Performance, please refer to:
    https://technet.microsoft.com/en-us/library/dd351192(v=exchg.141).aspx
    Besides, we can use Microsoft Exchange Jetstress and Microsoft Exchange Load Generator to evaluate system performance before deploy Exchange evnironment, for your reference:
    http://technet.microsoft.com/en-us/library/dd335108(v=exchg.141).aspx
    Also, we can run Exchange Best Practices Analyzer to monitor Exchange server:
    http://technet.microsoft.com/en-us/library/aa997090(v=exchg.80).aspx
    Note: we can download
    this tool for Exchange 2013.
    Best Regards,
    Allen Wang

  • Exchange 2013 Performance Analysis Tool?

    Wondering if someone can help... We have recently installed a new Exchange 2013 CAS and Mailbox Server setup. We have migrated half of our user estate now and I want to ensure performance is good. I can sit and watch Memory/CPU in Task manager all day but
    this is not always a clear indication of how busy the server is getting.
    Is there any recommended counters for CAS/Mailbox server in Exchange 2013? I was kind of hoping to then use the PALv2 tool to analysis and look for high I/O issues and CPU issues but no such luck... Any recommendations would be great. 
     

    Wondering if someone can help... We have recently installed a new Exchange 2013 CAS and Mailbox Server setup. We have migrated half of our user estate now and I want to ensure performance is good. I can sit and watch Memory/CPU in Task manager all day but
    this is not always a clear indication of how busy the server is getting.
    Is there any recommended counters for CAS/Mailbox server in Exchange 2013? I was kind of hoping to then use the PALv2 tool to analysis and look for high I/O issues and CPU issues but no such luck... Any recommendations would be great. 
    Did you size the server according to the Calculator?
    http://blogs.technet.com/b/exchange/archive/2013/05/14/released-exchange-2013-server-role-requirements-calculator.aspx
    http://blogs.technet.com/b/exchange/archive/2013/05/06/ask-the-perf-guy-sizing-exchange-2013-deployments.aspx
    Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

  • Exchange 2013 CU3 monitoring

    Hello,
    I'm getting several times per day the following alert in the Event Viewer of  both my Mailbox Role servers which then raise an alert in SCOM 2012:
    Log Name: Microsoft-Exchange-ManagedAvailability/Monitoring
    Source: ManagedAvailability
    Event ID: 4
    Mean Scan Time has been greater than 60 seconds for the last 15 mins. Please investigate.
    I'm not able to find information about what is being monitored and how to get rid of this events.
    Any help appreciated.
    Thank you in advance.
    Raffaele Zamuner

    Hi Amit,
    here's the output from the EMS and the Event Viewer:
    [PS] C:\Windows\system32>Get-ServerHealth [ServerName] | ?{$_.alertvalue -ne "Healthy" -and $_.alertvalue -ne "Disabled"}
    Server          State           Name                 TargetResource      
    HealthSetName   AlertValue ServerComp
    onent
    [ServerName]        NotApplicable   ScanTimeMeanMonitor                       FIPS           
    Unhealthy  None
    [ServerName]        NotApplicable   MaintenanceFailur...                      DAL            
    Unknown    None
    [ServerName]        NotApplicable   DatabaseLogicalPh... FINIT                MailboxSpace    Repairing  None
    [ServerName]        NotApplicable   DatabaseLogicalPh...                      MailboxSpace   
    Unhealthy  None
    [ServerName]        Online          Total.Shadow.Queu...                     
    HubTransport    Unhealthy  HubTran...
    [ServerName]        NotApplicable   MailboxDeliveryAv...                      MailboxTrans... Unhealthy 
    None
    [ServerName]        NotApplicable   DatabaseLogicalPh... DB1                  MailboxSpace    Repairing  None
    [ServerName]        NotApplicable   DatabaseLogicalPh... MCS1                 MailboxSpace    Repairing  None
    [PS] C:\Windows\system32>get-serverhealth -Server [ServerName] -HealthSet AMScanTimeou
    [PS] C:\Windows\system32>
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Exchange-ManagedAvailability" Guid="{C424A887-A89F-455F-8319-960917152221}" />
      <EventID>4</EventID>
      <Version>0</Version>
      <Level>2</Level>
      <Task>2</Task>
      <Opcode>0</Opcode>
      <Keywords>0x8000000000000000</Keywords>
      <TimeCreated SystemTime="2014-06-03T07:23:16.626852900Z" />
      <EventRecordID>1753</EventRecordID>
      <Correlation />
      <Execution ProcessID="1860" ThreadID="21496" />
      <Channel>Microsoft-Exchange-ManagedAvailability/Monitoring</Channel>
      <Computer>[ServerName].finit.local</Computer>
      <Security UserID="S-1-5-18" />
      </System>
    - <UserData>
    - <EventXML xmlns:auto-ns2="http://schemas.microsoft.com/win/2004/08/events" xmlns="myNs">
      <HealthSet>FIPS</HealthSet>
      <Subject>FIPS health set unhealthy (ScanTimeMeanMonitor) - High Mean Scan Time</Subject>
      <Message>Mean Scan Time has been greater than 60 seconds for the last 15 mins. Please investigate. ------------------------------------------------------------------------------- States of all monitors within the health set: Note: Data may be stale.
    To get current data, run: Get-ServerHealth -Identity '[ServerName]' -HealthSet 'FIPS' State Name TargetResource HealthSet AlertValue ServerComponent ----- ---- -------------- --------- ---------- --------------- NotApplicable ScanProcessesRunningMonitor FIPS
    Healthy None NotApplicable ScanProcessBelowMinimumMonitor FIPS Healthy None NotApplicable ScanRequestsTimedOutMonitor FIPS Healthy None NotApplicable ScanRequestsTimedOutUrgentMonitor FIPS Healthy None NotApplicable ScanRequestQueueTimeoutUrgentMonitor FIPS
    Healthy None NotApplicable RecoveryQueueTimeoutUrgentMonitor FIPS Healthy None NotApplicable ScanTimeMeanMonitor FIPS Healthy None NotApplicable ScanRequestErrorRatioMonitor FIPS Healthy None NotApplicable ScanRequestErrorsMonitor FIPS Healthy None NotApplicable
    TextExtractionErrorsMonitor FIPS Healthy None NotApplicable ObsoleteEngineInUseEventMonitor FIPS FIPS Healthy None NotApplicable MaintenanceFailureMonitor.FIPS FIPS Healthy None NotApplicable EngineNotEnabledForUpdatesEventMonitor FIPS FIPS Healthy None NotApplicable
    EUSTerminationEventMonitor FIPS FIPS Healthy None NotApplicable EUSUnableToStartEventMonitor FIPS FIPS Healthy None NotApplicable ADFilteringSettingsWatcherStartFaile... FIPS FIPS Healthy None NotApplicable ScanningProcessRepeatedlyCrashingMon... FIPS FIPS
    Healthy None NotApplicable FilteringManagementServiceDownMonitor FIPS Healthy None NotApplicable PrivateWorkingSetWarning.fms fms FIPS Healthy None NotApplicable PrivateWorkingSetError.fms fms FIPS Healthy None NotApplicable ProcessProcessorTimeWarning.fms
    fms FIPS Healthy None NotApplicable ProcessProcessorTimeError.fms fms FIPS Healthy None NotApplicable ExchangeCrashEventError.fms fms FIPS Healthy None NotApplicable LongRunningWatsonWarning.fms fms FIPS Healthy None NotApplicable LongRunningWerMgrWarning.fms
    fms FIPS Healthy None NotApplicable MicrosoftFailedUpdatesMonitor FIPS Healthy None NotApplicable MicrosoftEngineErrorsMonitor FIPS Healthy None NotApplicable MSClassificationEngineErrorsMonitor FIPS Healthy None States of all health sets: Note: Data may be
    stale. To get current data, run: Get-HealthReport -Identity '[ServerName]' State HealthSet AlertValue LastTransitionTime MonitorCount ----- --------- ---------- ------------------ ------------ NotApplicable ActiveSync.Protocol Healthy 03/06/2014 05.04.35 9
    NotApplicable Autodiscover.Protocol Healthy 03/06/2014 01.18.16 9 NotApplicable ActiveSync Healthy 03/06/2014 08.24.19 1 NotApplicable Antimalware Unhealthy 03/06/2014 09.18.14 11 NotApplicable ECP Healthy 03/06/2014 08.40.07 5 NotApplicable Ediscovery.Protocol
    Healthy 03/06/2014 08.55.21 1 NotApplicable AD Healthy 03/06/2014 07.46.15 19 NotApplicable EDS Healthy 03/06/2014 08.52.30 90 NotApplicable EventAssistants Healthy 03/06/2014 09.21.03 15 NotApplicable EWS.Protocol Healthy 03/06/2014 09.15.04 11 NotApplicable
    FEP Healthy 02/06/2014 09.04.40 2 NotApplicable FIPS Healthy 03/06/2014 09.15.34 28 NotApplicable Monitoring Healthy 03/06/2014 07.53.12 17 NotApplicable MailboxMigration Healthy 02/06/2014 14.03.19 3 Online UM.CallRouter Healthy 03/06/2014 04.44.11 8 NotApplicable
    UM.Protocol Healthy 03/06/2014 05.05.45 22 NotApplicable OAB Healthy 03/06/2014 09.22.26 8 Online HubTransport Unhealthy 03/06/2014 09.22.35 133 NotApplicable EAS Healthy 02/05/2014 10.33.27 1 NotApplicable Autodiscover Healthy 03/06/2014 05.56.59 1 NotApplicable
    DataProtection Healthy 03/06/2014 09.18.11 66 NotApplicable FreeBusy Healthy 02/05/2014 10.30.56 1 NotApplicable Clustering Healthy 03/06/2014 08.21.27 5 NotApplicable BitlockerDeployment Healthy 02/06/2014 22.00.36 1 NotApplicable ClientAccess.Proxy Healthy
    02/06/2014 14.20.31 1 NotApplicable Compliance Healthy 02/05/2014 10.29.01 1 NotApplicable EWS Healthy 01/06/2014 12.57.38 1 NotApplicable FfoRws Healthy 01/06/2014 09.15.31 1 NotApplicable Places Healthy 03/06/2014 01.16.29 1 Online Transport Healthy 03/06/2014
    08.23.33 10 NotApplicable RemoteMonitoring Healthy 02/06/2014 15.11.34 4 NotApplicable Search Healthy 03/06/2014 07.04.56 140 NotApplicable Inference Healthy 01/06/2014 23.57.09 1 NotApplicable OWA Healthy 03/06/2014 09.16.39 2 NotApplicable MailboxSpace Repairing
    03/06/2014 09.22.02 17 NotApplicable MRS Healthy 03/06/2014 09.20.58 19 NotApplicable MessageTracing Healthy 03/06/2014 07.03.30 8 NotApplicable Network Healthy 03/06/2014 09.09.30 2 NotApplicable Calendaring Healthy 03/06/2014 09.19.16 8 NotApplicable PeopleConnect
    Healthy 02/06/2014 14.10.08 1 NotApplicable IMAP Healthy 03/06/2014 08.10.29 1 NotApplicable POP Healthy 03/06/2014 05.54.04 1 NotApplicable ProcessIsolation Healthy 03/06/2014 07.39.59 22 NotApplicable Provisioning Healthy 03/06/2014 08.35.16 8 NotApplicable
    Psws Healthy 03/06/2014 08.51.44 15 NotApplicable PublicFolders Healthy 03/06/2014 09.21.54 5 NotApplicable Outlook Healthy 03/06/2014 05.56.00 1 NotApplicable RPS Healthy 03/06/2014 08.22.48 1 NotApplicable RWS Healthy 03/06/2014 08.11.44 2 NotApplicable
    Security Healthy 03/06/2014 08.11.33 8 NotApplicable SiteMailbox Healthy 03/06/2014 09.07.10 4 NotApplicable Store Healthy 03/06/2014 09.19.09 110 NotApplicable TransportSync Healthy 03/06/2014 08.11.56 8 NotApplicable UserThrottling Healthy 03/06/2014 09.21.49
    8 NotApplicable FfoWebService Healthy 03/06/2014 07.07.43 1 NotApplicable DAL Healthy 03/06/2014 08.08.02 12 NotApplicable FfoWebstore Healthy 03/06/2014 07.07.33 1 NotApplicable AntiSpam Healthy 03/06/2014 06.02.52 8 NotApplicable OWA.Protocol.Dep Healthy
    30/05/2014 17.45.35 1 NotApplicable MigrationMonitor Healthy 03/06/2014 08.33.07 3 NotApplicable MailboxTransport Unhealthy 03/06/2014 09.05.01 63 NotApplicable MSExchangeCertificateDeplo... Disabled 01/01/0001 01.00.00 2 NotApplicable OWA.Protocol Healthy
    03/06/2014 07.33.09 9 NotApplicable Outlook.Protocol Healthy 02/06/2014 18.07.34 11 NotApplicable RPS.Protocol Healthy 02/05/2014 10.33.10 2 NotApplicable IMAP.Protocol Healthy 03/06/2014 07.31.55 7 NotApplicable Datamining Healthy 03/06/2014 05.06.42 7 NotApplicable
    POP.Protocol Healthy 01/06/2014 19.02.12 7 Online FrontendTransport Healthy 02/06/2014 09.06.30 7 NotApplicable CentralAdmin Healthy 03/06/2014 07.37.18 7 Online ECP.Proxy Healthy 03/06/2014 06.30.43 7 Online RPS.Proxy Healthy 03/06/2014 09.22.16 28 NotApplicable
    PushNotifications.Protocol Healthy 03/06/2014 08.34.46 7 Online RWS.Proxy Healthy 02/06/2014 22.55.09 7 Online Outlook.Proxy Healthy 03/06/2014 07.51.37 7 Online OutlookMapi.Proxy Healthy 03/06/2014 08.09.14 7 Note: Subsequent detected alerts are suppressed
    until the health set is healthy again.</Message>
      <Monitor>ScanTimeMeanMonitor</Monitor>
      </EventXML>
      </UserData>
      </Event>
    Raffaele Zamuner

  • Performance Monitor Remote Data Collection unable to get data

    When attempting data collection of a remote Windows 2008 server (Server_B) from another W2k8 server (Server_A) I receive the following error:  "When attempting to start the Data Collector Set the following system error occurred:  No data to
    return."
    However remote real-time monitoring of Server_B is no problem.  Also, local real-time monitoring and data collection of Server_A is successful.
    Is the error due to security restrictions?

    Hi Scott,
    Would you please let me know whether have administrator rights on the server trying to collect data collector set?
    Please type services.msc on RUN. When Services panel opened, please navigate to Performance Logs & Alerts
    service and check if it started. Meanwhile, please temporarily disable firewall and monitor the result.
    In addition, please refer to following KB and check if can help you.
    The Data Collector Set may not start on a computer that is
    running Windows Server 2008 or Windows Vista
    Performance Monitor data collector set does not collect all
    required performance counter data in Windows 7 or in Windows Server 2008 R2
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu

  • Performance Monitor MMC crashes

    Ever since we patched our servers up to MS14-016, when we open Performance Monitor and click on Data Collector Sets > System the MMC hangs and eventually crashes.  All other functions of the Performance Monitor work just fine (ie. Monitoring Tools
    > Performance Monitor, Data Collector Sets > User Defined, Data Collector Sets > Event Trace Settings, etc etc...).  Any insight into this would be greatly appreciated.  Looking at the event logs, all that is logged after the crash is:
    The program mmc.exe version 6.1.7600.16385 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
     Process ID: 1d04
     Start Time: 01cf4db4ec3f1a03
     Termination Time: 0
     Application Path: C:\Windows\system32\mmc.exe
     Report Id: c073b802-b9a8-11e3-be5e-005056a81e07
    AND
    Fault bucket , type 0
    Event Name: AppHangB1
    Response: Not available
    Cab Id: 0
    Problem signature:
    P1: mmc.exe
    P2: 6.1.7600.16385
    P3: 4a5bc808
    P4: 23c8
    P5: 0
    P6: 
    P7: 
    P8: 
    P9: 
    P10: 
    Attached files:
    These files may be available here:
    C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_mmc.exe_37c3eeafdc8c0db17ea5c8bf54865eaae859f_214d501d
    Analysis symbol: 
    Rechecking for solution: 0
    Report Id: 3b0c4e14-b9a5-11e3-be5e-005056a81e07
    Report Status: 0
    I've looked at the file it references: "C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppHang_mmc.exe_37c3eeafdc8c0db17ea5c8bf54865eaae859f_214d501d" and here are its contents:
    Version=1
    EventType=AppHangB1
    EventTime=130408341073743418
    ReportType=3
    Consent=1
    ReportIdentifier=3b0c4e13-b9a5-11e3-be5e-005056a81e07
    IntegratorReportIdentifier=3b0c4e14-b9a5-11e3-be5e-005056a81e07
    Response.type=4
    Sig[0].Name=Application Name
    Sig[0].Value=mmc.exe
    Sig[1].Name=Application Version
    Sig[1].Value=6.1.7600.16385
    Sig[2].Name=Application Timestamp
    Sig[2].Value=4a5bc808
    Sig[3].Name=Hang Signature
    Sig[3].Value=23c8
    Sig[4].Name=Hang Type
    Sig[4].Value=0
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.274.10
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Hang Signature 1
    DynamicSig[22].Value=23c8db59484cc2d09f1dd279b1b0c7be
    DynamicSig[23].Name=Additional Hang Signature 2
    DynamicSig[23].Value=42cb
    DynamicSig[24].Name=Additional Hang Signature 3
    DynamicSig[24].Value=42cb8db6cfb7dc1f7ddd991fa9dbbbbe
    DynamicSig[25].Name=Additional Hang Signature 4
    DynamicSig[25].Value=23c8
    DynamicSig[26].Name=Additional Hang Signature 5
    DynamicSig[26].Value=23c8db59484cc2d09f1dd279b1b0c7be
    DynamicSig[27].Name=Additional Hang Signature 6
    DynamicSig[27].Value=42cb
    DynamicSig[28].Name=Additional Hang Signature 7
    DynamicSig[28].Value=42cb8db6cfb7dc1f7ddd991fa9dbbbbe
    UI[3]=Microsoft Management Console is not responding
    UI[4]=Windows can check online for a solution. If you close the program, you might lose information.
    UI[5]=Check for a solution and close the program
    UI[6]=Check for a solution and close the program
    UI[7]=Close the program
    LoadedModule[0]=C:\Windows\system32\mmc.exe
    LoadedModule[1]=C:\Windows\SYSTEM32\ntdll.dll
    LoadedModule[2]=C:\Windows\system32\kernel32.dll
    LoadedModule[3]=C:\Windows\system32\KERNELBASE.dll
    LoadedModule[4]=C:\Windows\system32\GDI32.dll
    LoadedModule[5]=C:\Windows\system32\USER32.dll
    LoadedModule[6]=C:\Windows\system32\LPK.dll
    LoadedModule[7]=C:\Windows\system32\USP10.dll
    LoadedModule[8]=C:\Windows\system32\msvcrt.dll
    LoadedModule[9]=C:\Windows\system32\MFC42u.dll
    LoadedModule[10]=C:\Windows\system32\ole32.dll
    LoadedModule[11]=C:\Windows\system32\RPCRT4.dll
    LoadedModule[12]=C:\Windows\system32\OLEAUT32.dll
    LoadedModule[13]=C:\Windows\system32\ODBC32.dll
    LoadedModule[14]=C:\Windows\system32\ADVAPI32.dll
    LoadedModule[15]=C:\Windows\SYSTEM32\sechost.dll
    LoadedModule[16]=C:\Windows\system32\mmcbase.DLL
    LoadedModule[17]=C:\Windows\system32\SHLWAPI.dll
    LoadedModule[18]=C:\Windows\system32\UxTheme.dll
    LoadedModule[19]=C:\Windows\system32\DUser.dll
    LoadedModule[20]=C:\Windows\system32\IMM32.DLL
    LoadedModule[21]=C:\Windows\system32\MSCTF.dll
    LoadedModule[22]=C:\Windows\system32\odbcint.dll
    LoadedModule[23]=C:\Windows\system32\DUI70.dll
    LoadedModule[24]=C:\Windows\WinSxS\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac\Comctl32.dll
    LoadedModule[25]=C:\Windows\system32\SHELL32.dll
    LoadedModule[26]=C:\Windows\system32\CRYPTBASE.dll
    LoadedModule[27]=C:\Windows\system32\urlmon.dll
    LoadedModule[28]=C:\Windows\system32\iertutil.dll
    LoadedModule[29]=C:\Windows\system32\WININET.dll
    LoadedModule[30]=C:\Windows\system32\Normaliz.dll
    LoadedModule[31]=C:\Windows\system32\CLBCatQ.DLL
    LoadedModule[32]=C:\Windows\system32\mmcndmgr.dll
    LoadedModule[33]=C:\Windows\System32\msxml3.dll
    LoadedModule[34]=C:\Windows\system32\profapi.dll
    LoadedModule[35]=C:\Windows\system32\apphelp.dll
    LoadedModule[36]=C:\Windows\System32\wdc.dll
    LoadedModule[37]=C:\Windows\System32\pdh.dll
    LoadedModule[38]=C:\Windows\System32\pdhui.dll
    LoadedModule[39]=C:\Windows\system32\COMDLG32.dll
    LoadedModule[40]=C:\Windows\System32\Secur32.dll
    LoadedModule[41]=C:\Windows\system32\SSPICLI.DLL
    LoadedModule[42]=C:\Windows\System32\credui.dll
    LoadedModule[43]=C:\Windows\System32\wevtapi.dll
    LoadedModule[44]=C:\Windows\System32\VERSION.dll
    LoadedModule[45]=C:\Windows\System32\PLA.dll
    LoadedModule[46]=C:\Windows\System32\tdh.dll
    LoadedModule[47]=C:\Windows\system32\NSI.dll
    LoadedModule[48]=C:\Windows\System32\IPHLPAPI.DLL
    LoadedModule[49]=C:\Windows\System32\WINNSI.DLL
    LoadedModule[50]=C:\Windows\System32\WINSTA.dll
    LoadedModule[51]=C:\Windows\System32\UTILDLL.dll
    LoadedModule[52]=C:\Windows\system32\SETUPAPI.dll
    LoadedModule[53]=C:\Windows\system32\CFGMGR32.dll
    LoadedModule[54]=C:\Windows\system32\DEVOBJ.dll
    LoadedModule[55]=C:\Windows\System32\NETAPI32.dll
    LoadedModule[56]=C:\Windows\System32\netutils.dll
    LoadedModule[57]=C:\Windows\System32\srvcli.dll
    LoadedModule[58]=C:\Windows\System32\wkscli.dll
    LoadedModule[59]=C:\Windows\system32\SAMCLI.DLL
    LoadedModule[60]=C:\Windows\system32\LOGONCLI.DLL
    LoadedModule[61]=C:\Windows\system32\BROWCLI.DLL
    LoadedModule[62]=C:\Windows\System32\WTSAPI32.dll
    LoadedModule[63]=C:\Windows\system32\oleacc.dll
    LoadedModule[64]=C:\Windows\system32\CRYPTSP.dll
    LoadedModule[65]=C:\Windows\system32\rsaenh.dll
    LoadedModule[66]=C:\Windows\system32\RpcRtRemote.dll
    LoadedModule[67]=C:\Windows\system32\propsys.dll
    LoadedModule[68]=C:\Windows\system32\mlang.dll
    LoadedModule[69]=C:\Windows\system32\dwmapi.dll
    LoadedModule[70]=C:\Windows\system32\xmllite.dll
    LoadedModule[71]=C:\Windows\System32\ieframe.dll
    LoadedModule[72]=C:\Windows\system32\PSAPI.DLL
    LoadedModule[73]=C:\Windows\system32\SXS.DLL
    LoadedModule[74]=C:\Windows\system32\WS2_32.dll
    LoadedModule[75]=C:\Windows\system32\dnsapi.DLL
    LoadedModule[76]=C:\Windows\System32\mshtml.dll
    LoadedModule[77]=C:\Windows\system32\RASAPI32.dll
    LoadedModule[78]=C:\Windows\system32\rasman.dll
    LoadedModule[79]=C:\Windows\system32\rtutils.dll
    LoadedModule[80]=C:\Windows\system32\sensapi.dll
    LoadedModule[81]=C:\Windows\system32\msimtf.dll
    LoadedModule[82]=C:\Windows\system32\vbscript.dll
    LoadedModule[83]=C:\Windows\system32\WINMM.dll
    LoadedModule[84]=C:\Windows\system32\d2d1.dll
    LoadedModule[85]=C:\Windows\system32\DWrite.dll
    LoadedModule[86]=C:\Windows\system32\dxgi.dll
    LoadedModule[87]=C:\Windows\system32\WINTRUST.dll
    LoadedModule[88]=C:\Windows\system32\CRYPT32.dll
    LoadedModule[89]=C:\Windows\system32\MSASN1.dll
    LoadedModule[90]=C:\Windows\system32\d3d10_1.dll
    LoadedModule[91]=C:\Windows\system32\d3d10_1core.dll
    LoadedModule[92]=C:\Windows\system32\d3d11.dll
    LoadedModule[93]=C:\Windows\system32\D3D10Warp.dll
    LoadedModule[94]=C:\Windows\System32\sysmon.ocx
    LoadedModule[95]=C:\Windows\System32\ATL.DLL
    LoadedModule[96]=C:\Windows\system32\ntmarta.dll
    LoadedModule[97]=C:\Windows\system32\WLDAP32.dll
    LoadedModule[98]=C:\Windows\system32\mscoree.dll
    LoadedModule[99]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscoreei.dll
    LoadedModule[100]=C:\Windows\Microsoft.NET\Framework64\v4.0.30319\CorperfmonExt.dll
    LoadedModule[101]=C:\Windows\system32\MSVCR110_CLR0400.dll
    LoadedModule[102]=C:\Program Files (x86)\Trend Micro\OfficeScan Client\perfiCrcPerfMonMgr.dll
    LoadedModule[103]=C:\Windows\system32\loadperf.dll
    LoadedModule[104]=C:\Windows\system32\USERENV.dll
    LoadedModule[105]=C:\Windows\system32\rasctrs.dll
    LoadedModule[106]=C:\Windows\system32\tapiperf.dll
    LoadedModule[107]=C:\Windows\system32\usbperf.dll
    LoadedModule[108]=C:\Windows\system32\pcwum.dll
    LoadedModule[109]=C:\Windows\System32\perfos.dll
    LoadedModule[110]=C:\Windows\System32\perfdisk.dll
    LoadedModule[111]=C:\Windows\System32\Perfctrs.dll
    LoadedModule[112]=C:\Windows\system32\msls31.dll
    LoadedModule[113]=C:\Windows\System32\Dxtrans.dll
    LoadedModule[114]=C:\Windows\system32\ddrawex.dll
    LoadedModule[115]=C:\Windows\system32\DDRAW.dll
    LoadedModule[116]=C:\Windows\system32\DCIMAN32.dll
    LoadedModule[117]=C:\Windows\System32\Dxtmsft.dll
    LoadedModule[118]=C:\Windows\system32\windowscodecs.dll
    LoadedModule[119]=C:\Windows\System32\perfproc.dll
    LoadedModule[120]=C:\Windows\System32\perfnet.dll
    LoadedModule[121]=C:\Windows\system32\wbem\wmiaprpl.dll
    LoadedModule[122]=C:\Windows\system32\wbemcomn.dll
    FriendlyEventName=Stopped responding and was closed
    ConsentKey=AppHangXProcB1
    AppName=Microsoft Management Console
    AppPath=C:\Windows\System32\mmc.exe
    ReportDescription=A problem caused this program to stop interacting with Windows.

    Hi CyberMat,
    The next time you open your LabVIEW after a crash, there should be an error log file create. Please let me know the name of this file.
    Thanks!
    Karunya
    Warm regards,
    Karunya R
    National Instruments
    Applications Engineer

  • How do I write/use performance monitor to run an action when something happens?

    I notice that I get a popup if desktop resources are over-used asking me if I want to turn off the glass desktop.
    That's fine.
    I've been looking in Performance Monitor for how this is done, as I have a program that periodically runs amok and starts indexing my Documents directory.  I usually start to notice my machine getting sluggish when the process gets to about 1.5-2+GB
    in Virtual and working memory.  At that point it seems to be increasing it's network usage rate geometically, and interrups will start getting delayed or lost -- keyboard will lock up for periods, lots of things freezing temporarily (music will get 10-20
    second dropouts)  It can even cause a complete system lockup
    So what I would like to do is monitor any instance of this process by name ('explorer'), and restart it when it gets to over 1.5GB of usage.
    I setup a monitor of virtual size and working memory in the performance monitor, but I don't see how to set up an alarm that starts an action to restart it.  (restarting it will cause the problem to go away for anywhere from a few hours to several days).
    I've no clue as to what triggers it.
    I found a bunch of XML scripts in
    Windows/pla/Rules with names like:
    Rules.System.CPU.xml*
    Rules.System.Common.xml*
    Rules.System.Configuration.xml*
    Rules.System.Diagnostics.xml*
    Rules.System.Disk.xml*
    Rules.System.Finale.xml*
    Rules.System.Memory.xml*
    Rules.System.NetDiagFramework.xml*
    Rules.System.NetTrace.xml*
    Rules.System.Network.xml*
    Rules.System.Performance.xml*
    Rules.System.Performance.xml.orig*
    Rules.System.Summary.xml*
    Rules.System.Wired.xml*
    Rules.System.Wireless.xml*
    These have some XML language in them that looks like it woud be for monitorying and doing actions:
      <Rule name="$(RuleDiskSummary)" enabled="true">
       <Step select="/Report/Section/Table[@name='hotFile']">
        <Exists>
         <Otherwise>
          <Delete select="Summary"/>
         </Otherwise>
        </Exists>
       </Step>
       <Step select="/Report/Section/Table[@name='physicalDiskCounters']" fatal="true">
        <Exists>
         <Otherwise>
          <Insert>
           <Node>
            <Summary key="100" find="field" field="counter" value="Avg. Disk Queue Length" topic="diskInfo">
             <Data name="max" label="diskQueue"/>
            </Summary>
           </Node>
          </Insert>
         </Otherwise>
        </Exists>
       </Step>
      </Rule>
     </Group>
     <StringTable>
      <String ID="GroupSummary">Add Summary Blocks</String>
      <String ID="RuleMemorySummary">Memory Summary</String>
      <String ID="RuleDiskSummary">Disk Summary</String>
      <String ID="RuleNetworkSummary">Network Summary</String>
     </StringTable>
      <Rule name="$(RuleDiskSummary)" enabled="true">
       <Step select="/Report/Section/Table[@name='hotFile']">
        <Exists>
         <Otherwise>
          <Delete select="Summary"/>
         </Otherwise>
        </Exists>
       </Step>
       <Step select="/Report/Section/Table[@name='physicalDiskCounters']" fatal="true">
        <Exists>
         <Otherwise>
          <Insert>
           <Node>
            <Summary key="100" find="field" field="counter" value="Avg. Disk Queue Length" topic="diskInfo">
             <Data name="max" label="diskQueue"/>
            </Summary>
           </Node>
          </Insert>
         </Otherwise>
        </Exists>
       </Step>
      </Rule>
     </Group>
     <StringTable>
      <String ID="GroupSummary">Add Summary Blocks</String>
      <String ID="RuleMemorySummary">Memory Summary</String>
      <String ID="RuleDiskSummary">Disk Summary</String>
      <String ID="RuleNetworkSummary">Network Summary</String>
     </StringTable>
    Question is, how can I setup it for calling a trigger script when
    parameters for Explorer get out of spec.
    On confusing issue that stopped me from proceeding, was the time schedule to run the report:
    I only allows for once/day. 
    I need / want continuous monitorying -- say at 1 minute or 3 minute intervals (5 might work, not sure -- doesn't take long for Explorer to get to 1-2G with a network connection of 10Gb.
    So how can I monitor and control it?
    A side issue -- I notice a resource-control agent for Win 2008 -- but this was disabled for Win7.
    Anyone know why resource usage on Win7 was considered less important than on Win2k8 server?
    My version of Win7 is Win7-x64-sp1 "Ultimate" [sic] (it doesn't include professional features like resource control)...
    Thanks...This has bothered me for over a year and has persisted through new profiles and reinstalls of of the OS.
    I have a feeling it is related to MS disabling Network disks in their indexer, so Explorer ends up doing it as a surrogage for things like the search engine (with the results not stored, because they are not local -- the worst of both worlds?)... but that's
    just a feeling...
    Thanks!
    Astara...

    You can create a Data Collector Set (create manually, not template), then choose performance counter Alert, configure alert actions, from the script, seems you want to monitor the “physicalDisk” performance, so you can set the “physicalDiskCounters”
    into alert action, please follow the instruction in the link below.
    Monitor disk space
    http://www.ms-opsmgr.eu/?cat=43
    If you want to view the detailed process related about explorer when your machine getting sluggish, I'd like to introduce a tool named process explorer to you.
    http://technet.microsoft.com/en-in/sysinternals/bb896653.aspx
    It can clearly show you the processes running in your system, along with the hierarchical relationship and the cpu usage.
    NOTE
    This
    response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you.
    Microsoft
    does not control these sites and has not tested any software or information found on these sites.
    Regards
    Yolanda
    TechNet Community Support

  • Performance monitor reports and graphs don't show all the counters that were captured

    I've run into an odd behavior of performance monitor that I haven't been able to clear up yet: after I run a data collector set, the resulting report only shows a partial list of the counters that I captured, and so does the graph of that report (but different
    items).
    For instance, I chose the following counters for the data collector set:
    \PhysicalDisk(*)\% Idle Time
    \PhysicalDisk(*)\Avg. Disk Queue Length
    \PhysicalDisk(*)\Avg. Disk sec/Read
    \PhysicalDisk(*)\Avg. Disk sec/Write
    When the data collection ends, the report that gets displayed shows all those counters for _Total instance and C:, but then E: only shows % Idle Time and Avg. Disk Queue Length. That's it, the report ends there, even though I also have F: and V: drives on
    this server.
    If I choose to view the graph of this data collection, it only shows those four counters for the _Total instance.
    It took me a while to realize that all the data is being captured, but it's just the display that is truncated. If I view the folder then open the report.html, it actually shows all the data. Same with the graphs. If I select to add counters and add
    all the missing counters, they are displayed.
    I have searched high and low but haven't been able to find more than one post at ServerFault where someone had a similar issue, but no real solution or cause was provided, so I was hoping that someone here might have an idea.
    I also found a variety of articles about missing counters due to registry settings or because the counters needed to be reset, but that's a different issue that doesn't apply in my case. By the way, this is on a windows server 2012 R2 VM (file server).

    Hi SomeAdmin,
    The counter missing often caused by the related registry value is corrupted, please first refer the following related KB then perform a fix then monitor the issue again.
    Event ID 3012 — Performance Counter Loading
    http://technet.microsoft.com/en-us/library/cc775053(v=ws.10).aspx
    More information:
    Overview of Performance Monitoring
    http://technet.microsoft.com/en-us/library/cc958257.aspx
    PerfGuide: Analyzing Poor Disk Response Times
    http://social.technet.microsoft.com/wiki/contents/articles/1516.perfguide-analyzing-poor-disk-response-times.aspx
    Analyzing Storage Performance using the Windows Performance Analysis ToolKit (WPT)
    http://blogs.technet.com/b/robertsmith/archive/2012/02/07/analyzing-storage-performance-using-the-windows-performance-toolkit.aspx
    I’m glad to be of help to you!
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Performance monitor stops running

    In Windows Server 2012, in Performance Monitor, I have a user-defined Data Collector Set. It is configured to sample every 2 minutes. But it stops running after taking only 3 samples. Could I please get some advice on how to find what is stopping this so
    that it will run indefinitely?
    Here is some more detail from the properties:
    Schedule - Nothing set. I start the set running from Task Scheduler.
    Stop Condition - Nothing enabled.
    Log format: CSV
    I don't see anything in the Application or System event logs that say anything about the performance monitor. Maybe there is another event log that I don't know about.
    I have similar reports running on WS2008 machines and they don't stop running.
    Cam

    Hi Cam,
    If you mean to run this data collector indefinitely, please try to set 1439 ((23*60) + 59 )minutes for the Overall duration in stop condition, which is 23 hours and 59 minutes total run time. Because Reports are compiled once the collector
    set stops. This means we can’t let this collector just simply run forever because I will never get a report.
    Please also check the option "If the task is already running, then the following rule applies: Stop the existing instance" in the related scheduled task under Task Scheduler Library > Microsoft > Windows > PLA.
    I also recommend you can go through this article, which lists many good tips to configure Data Collector Sets:
    http://blogs.technet.com/b/askpfeplat/archive/2012/02/27/taming-perfmon-data-collector-sets.aspx
    If there is anything else regarding this issue, please feel free to post back.
    If you have any feedback on our support, please click here.
    Best Regards,
    Anna Wang
    TechNet Community Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Winmail.dat attachments from Exchange 2013 on premi and Hosted Office 365 set up.

    Hello TechNet,
    I have an on going situation with winmail.dat attachments. I currently have a ticket open with Microsoft, but I want to see if anyone has personal experience with this. Here is the rundown.
    We have migrated from an Exchange 2007 server to Exchange 2013 for the migration to Office 365. We also have a hosted Office 365 server with half of our mailboxes in the cloud and half of them on the Exchange 2013 on premise server.
    The current settings for TNEFEnabled:
    On Premise: False
    Hosted: False
     Whenever a internal email with a calendar invite(exchange calendar, go to meeting) goes out to any external domain the recipients receive winmail.dat.
    When settings for TNEFEnabled On Premise and Hosted are set to true both calendar invites and PDF, Excel attachments etc the recipients receive winmail.dat.
    When speaking with Microsoft about this issue. The representative was watching me through a LogMeIn session as I set both TNEFEnabled false on both on Premise and Hosted.
    This is really frustrating as many employees depend on this to be fully functional, and to be honest am tired of dealing with this.
    I need help.
    -Ben

    I am having the same issue.
    Luckily I have only migrated my own mailbox to office365.
    Tried both true and false TNEFEnabled on both onpremise and office365 via powershell and confirmed that both have been applied.
    If I send the email as a plain text then the attachment works ok. If I send it as HTML then I get winmail.dat.
    The above KB doesnt really help me, sending plain text emails is like going back to the dark ages!
    I am sending from outlook to outlook (I send from my external email address, to my work email address and visa-versa)
    If someone with an onpremise mailbox sends me an email, the attachment works ok.
    If someone sends me an attachment via hotmail, the attachment works ok.
    It seems to only effect emails I send to myself through outlook, i am sending it through a POP3 account to our onpremise exchange 2010 which forwards the email to office365

Maybe you are looking for