Useful WMI Classes for Monitoring Windows Servers

[DevilSun]

I've been doing a lot of WMI based performance monitoring, and these are some of the classes I've found useful. I hope this is my up to date list, I'll post a web page later with this information.

I've found some of these classes work best from the "raw" data, some work best from the "formatted" data, so play around with those and see what works best for you.

Also, I've noticed that some of the counters labeled as "per sec" don't give you very good data, so sometimes it's better to use the non "per sec" values and specify counter instead of gauge.

This is just a start, and most of these are used in the scripts I've posted. G'luck monitoring your Windows boxen.

Class: Win32_PerfRawData_MSExchangeUCF_MSExchangeIntelligentMessageFilter
Instance (Name): "_Total"
Requires: Exchange 2003 and Exchange IMF Add-On
Note: This is RAW DATA, so use the values as a COUNTER, not a GAUGE

• MessagesScannedforUCEPersec
  UCEMessagesActedUponPersec
  TotalMessagesAssignedanSCLRatingof0
  TotalMessagesAssignedanSCLRatingof1
  TotalMessagesAssignedanSCLRatingof2
  TotalMessagesAssignedanSCLRatingof3
  TotalMessagesAssignedanSCLRatingof4
  TotalMessagesAssignedanSCLRatingof5
  TotalMessagesAssignedanSCLRatingof6
  TotalMessagesAssignedanSCLRatingof7
  TotalMessagesAssignedanSCLRatingof8
  TotalMessagesAssignedanSCLRatingof9

Class: Win32_PerfFormattedData_TURFLIST_MSExchangeTransportFilterSink
Requires: Exchange 2003
Instance (Name): "_Total"

• BlockListDNSQueriesIssued
  ConnectionsAcceptedbyAcceptList
  ConnectionsRejectedbyBlockListProviders
  ConnectionsRejectedbyDenyList
  DirectoryLookupsIssued
  FailedBlockListDNSQueries
  FailedDirectoryLookups
  MessagesFilteredbySenderFiltering
  MessagesFilteredDuetoBlankSender
  RecipientsinConnectionFilteringExceptionList
  RecipientsRejectedbyDirectoryLookups
  RecipientsRejectedbyRecipientFiltering

Class: Win32_PerfFormattedData_SMSMSE_SMSMSE45
Requires: Symantec Mail Security 4.5 for Microsoft Exchange
Instance (Name): "SMSMSE"

• BytesScannedPerSec
  EncryptedItemsFoundPerSec
  FilteringViolationsFoundPerSec
  SMTPFilesScannedPerSec
  UnscannableItemsFoundPerSec
  ViolationsFoundPerSec
  VirusViolationsFoundPerSec
  VSAPIFilesScannedPerSec

Class: MicrosoftDNS_Statistic
Requires: DNS Server (Windows 2003)
Instance (CollectionId): "4"
Note: there are a lot of CollectionId's - Connect to "WinMgmts://<computer>/root/MicrosoftDNS"

• Total queries
  Notify queries
  Update queries
  TKeyNego queries
  Standard queries
  A queries
  NS queries
  SOA queries
  MX queries
  PTR queries
  SRV queries
  ALL queries
  IXFR queries
  AXFR queries
  Other queries

Class: Win32_PerfFormattedData_MSExchangeIS_MSExchangeIS
Requires: Exchange 2003

• ActiveUserCount
  UserCount
  VirusScanQueueLength
  VirusScanMessagesProcessedPersec
  VirusScanMessagesCleanedPersec
  VirusScanMessagesDeletedPersec
  VirusScanMessagesQuarantinedPersec

Class: Win32_PerfFormattedData_MSExchangeIS_MSExchangeISMailbox
Requires: Exchange 2003
Instance (Name): "_Total"

• SendQueueSize
  ReceiveQueueSize
  MessagesSentPermin
  MessagesSubmittedPermin
  MessagesDeliveredPermin

Class: Win32_PerfFormattedData_SMTPSVC_SMTPServer
Requires: SMTP Server (Windows 2003)
Instance (Name): "_Total"

• InboundConnectionsCurrent
  OutboundConnectionsCurrent
  DNSQueriesPersec

Class: Win32_PerfFormattedData_W3SVC_WebService
Requires: Web Server (Windows 2003)
Instance (Name): "_Total" or specific web site name from IIS Manager

• CurrentConnections
  CurrentAnonymousUsers
  CurrentNonAnonymousUsers

Class: Win32_Processor
Instance (DeviceId): "CPU0"

• LoadPercentage

Class: Win32_LogicalDisk
Instance (Name): "C:"

• Size
  FreeSpace

Class: Win32_OperatingSystem

• TotalVisibleMemorySize
  FreePhysicalMemory
  TotalVirtualMemorySize
  FreeVirtualMemory

Class: Win32_PerfRawData_Tcpip_NetworkInterface

• BytesReceivedPersec
  BytesSentPersec
  PacketsReceivedPersec
  PacketsSentPersec

[dev2dev]

seems like you have done good research on WMI
can you suggest me a book on wmi for vb/.net developers (.net is prefered)

i found few books at amazon

http://www.amazon.com/exec/obidos/ASIN/ ... 14-9616755


Leveraging WMI Scripting
by Alain Lissoir

Product Details:

Paperback: 600 pages
Publisher: Digital Press (April 30, 2003)
ISBN: 1555582990
Product Dimensions: 9.2 x 7.0 x 1.7 inches
Shipping Weight: 3.3 pounds. (View shipping rates and policies)
Amazon.com Sales Rank in Books: #436,004
(Publishers and authors: improve your sales)

combine order

http://www.amazon.com/exec/obidos/tg/de ... ce&s=books

Developing WMI Solutions: A Guide to Windows Management Instrumentation
by Craig Tunstall, Gwyn Cole


Paperback: 816 pages
Publisher: Addison-Wesley Professional; 1st edition (November 12, 2002)
ISBN: 0201616130
Product Dimensions: 9.3 x 7.4 x 1.1 inches
Shipping Weight: 2.7 pounds. (View shipping rates and policies)
Average Customer Review: based on 5 reviews. (Write a review)
Amazon.com Sales Rank in Books: #171,856
(Publishers and authors: improve your sales)

can you help me choosing the best one

please let me know if you have any other book which you feel would help me for begginers(should cover advanced topics)

thank you[/quote]

[pavankumar.k]

hii cacti, it seems to me that u have gone through each and every wmi-classes. some of the wmi classes present in exchange server 2003 are missing in the exchange server 2007 & few are added. can u tell me the equivalent classes for these wmi classes...


Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox Win32_PerfRawData_MSExchangeIS_MSExchangeISPublic Win32_PerfRawData_MSExchangeIS_MSExchangeIS Win32_PerfRawData_MSExchangeES_MSExchangeES Win32_PerfRawData_MSExchangeMTA_MSExchangeMTA Win32_PerfRawData_MSExchangeMTA_MSExchangeMTAConnections Win32_PerfRawData_SDStore_MSExchangeISTransportDriver Win32_PerfRawData_SMTPSVC_SMTPServer Win32_PerfRawData_MSExchangeSRS_MSExchangeSRS

it will be more helpful to me if u send me the list of useful wmi-classes in the Exchnage server 2007.

thanks.

[wwwdrich]

I have a project on my plate to start putting some of our Windows servers in Cacti, I'm looking at doing it using WMI and the wbemcli tools. If I can get it working, I'll add those classes here (as well as posting something in the Scripts & Templates forum).