Monitor Windows via WMI from Cacti on Linux

Thomas.Pacce · Post by **Thomas.Pacce** » Wed Apr 15, 2009 9:44 am

I am having issues with graph values i think.

My IIS graph is showing:

IIS Request Statistics - Get Requests per sec
Current 303,59m
Average 400,58m
Maximum 697,02m

But when i run from the command line:
GetRequestsPersec:62911
GetRequestsPersec:62996
...

claymen · Post by **claymen** » Wed Apr 15, 2009 6:04 pm

That would be correct.

The graph is showing rate of change, the command line is showing you what the actual value is for the counter (perfmon counter) you are monitoring via WMI.

It means you number of get requests per second is less than 1. Keeping in mind cacti polls by default every 5 minutes so basically over the course of 5 minutes the number of get requests worked out as an average to lower than 1 per second.

Thomas.Pacce · Post by **Thomas.Pacce** » Thu Apr 16, 2009 3:42 am

Ok understood.

I have no graph for db performance, the rrd file is created but query doesnt succeed.

root@amsterdam-sm09:~# /usr/bin/wmic --namespace='root\CIMV2' --authentication-file=/usr/share/cacti/site/scripts/cactiwmi.pw //amsterdam-ms01 "SELECT ActiveClientLogons,MessagesDelivered,MessagesSent,MessagesSubmitted,ReceiveQueueSize,SendQueueSize,TotalCountofRecoverableItems,TotalSizeofRecoverableItems FROM Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox WHERE Name="
ERROR: Retrieve result data.
NTSTATUS: NT code 0xc0041017 - NT code 0xc0041017
root@amsterdam-sm09:~# /usr/bin/php -q /usr/share/cacti/site/scripts/wmi.php -h 'amsterdam-ms01' -u '/usr/share/cacti/site/scripts/cactiwmi.pw' -w 'Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox' -n '' -k 'Name' -v '' -c 'ActiveClientLogons,MessagesDelivered,MessagesSent,MessagesSubmitted,ReceiveQueueSize,SendQueueSize,TotalCountofRecoverableItems,TotalSizeofRecoverableItems'
NTSTATUS: NT code 0xc0041017 - NT code 0xc0041017

Return code non-zero, debug mode enabled!

/usr/bin/wmic --namespace='root\CIMV2' --authentication-file=/usr/share/cacti/site/scripts/cactiwmi.pw //amsterdam-ms01 "SELECT ActiveClientLogons,MessagesDelivered,MessagesSent,MessagesSubmitted,ReceiveQueueSize,SendQueueSize,TotalCountofRecoverableItems,TotalSizeofRecoverableItems FROM Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox WHERE Name="
Exec Status: 1

root@amsterdam-sm09:~# /usr/bin/wmic --namespace='root\CIMV2' --authentication-file=/usr/share/cacti/site/scripts/cactiwmi.pw //amsterdam-ms01 "SELECT ActiveClientLogons,MessagesDelivered,MessagesSent,MessagesSubmitted,ReceiveQueueSize,SendQueueSize,TotalCountofRecoverableItems,TotalSizeofRecoverableItems FROM Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox WHERE Name="
ERROR: Retrieve result data.
NTSTATUS: NT code 0xc0041017 - NT code 0xc0041017
root@amsterdam-sm09:~#

claymen · Post by **claymen** » Fri Apr 17, 2009 8:16 pm

Does the class exist if you run scriptomatic2 on the box itself? Exchange and SQL are notorious for not registering the WMI classes properly. This is where wmiadap /f comes into plan. There are further details earlier in the thread about this.

claymen · Post by **claymen** » Mon Apr 20, 2009 2:31 am

Final release of 0.0.6

Been using this at work for over a month without issue.

Please see original post for updated versions.

Thomas.Pacce · Post by **Thomas.Pacce** » Mon Apr 20, 2009 2:41 am

claymen wrote:Does the class exist if you run scriptomatic2 on the box itself? Exchange and SQL are notorious for not registering the WMI classes properly. This is where wmiadap /f comes into plan. There are further details earlier in the thread about this.

I can retrieve succesfully the values from scriptomatic so the classes are ok.
ActiveClientLogons: 60
AverageDeliveryTime: 2318
Caption:
CategorizationCount: 112
ClientLogons: 152
...
..
.

Permissions are ok, i use an admin account.
The query looks odd though:
root@amsterdam-sm09:~# /usr/bin/php -q /usr/share/cacti/site/scripts/wmi.php -h 'amsterdam-ms01' -u '/usr/share/cacti/site/scripts/cactiwmi.pw' -w 'Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox' -n '' -k 'Name' -v '' -c 'ActiveClientLogons,MessagesDelivered,MessagesSent,MessagesSubmitted,ReceiveQueueSize,SendQueueSize,TotalCountofRecoverableItems,TotalSizeofRecoverableItems'
NTSTATUS: NT code 0xc0041017 - NT code 0xc0041017

Return code non-zero, debug mode enabled!

/usr/bin/wmic --namespace='root\CIMV2' --authentication-file=/usr/share/cacti/site/scripts/cactiwmi.pw //amsterdam-ms01 "SELECT ActiveClientLogons,MessagesDelivered,MessagesSent,MessagesSubmitted,ReceiveQueueSize,SendQueueSize,TotalCountofRecoverableItems,TotalSizeofRecoverableItems FROM Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox WHERE Name="Exec Status: 1
Name= Isnt it missing something?

claymen · Post by **claymen** » Mon Apr 20, 2009 3:05 am

You need a filter value mate.

Apologies for missing it ealier.

Code: Select all

root@amsterdam-sm09:~# /usr/bin/php -q /usr/share/cacti/site/scripts/wmi.php -h 'amsterdam-ms01' -u '/usr/share/cacti/site/scripts/cactiwmi.pw' -w 'Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox' -n '' -k 'Name' -v '' -c 'ActiveClientLogons,MessagesDelivered,MessagesSent,MessagesSubmitted,ReceiveQueueSize,SendQueueSize,TotalCountofRecoverableItems,TotalSizeofRecoverableItems'
NTSTATUS: NT code 0xc0041017 - NT code 0xc0041017

I'm guessing you didn't enter in a filter value on your datasource in cacti? E.g. you specified -k but didn't specify anything to search on.

Thomas.Pacce · Post by **Thomas.Pacce** » Mon Apr 20, 2009 3:31 am

Cool!
I found the correct value Name for the mailboxes using Scriptomatic.

So what would happen if i would not use the -k switch, no filter would mean i would get stats for all the Information store in one graph?

Thanks again.

claymen · Post by **claymen** » Mon Apr 20, 2009 3:42 am

Thomas.Pacce wrote:Cool!
I found the correct value Name for the mailboxes using Scriptomatic.

So what would happen if i would not use the -k switch, no filter would mean i would get stats for all the Information store in one graph?

Thanks again.

No in that case it would fail because the script is expecting a filter value to be passed. E.g. you passed half the equation. You've told it to filter on Name but not what Name is equal to, to find the match.

argon0 · Post by **argon0** » Mon Apr 20, 2009 4:51 am

The filter could be _Total though (IIRC) which should pass total traffic back...

claymen · Post by **claymen** » Mon Apr 20, 2009 4:59 am

True but a value for the filter is still required

argon0 · Post by **argon0** » Mon Apr 20, 2009 10:13 am

It seems as if my remote site issues were actually caused by the remote Servers Network port being exceedingly busy all the time.

They are SQL servers communicating with Web Servers through a fire wall, which only has 100MB/s ports so running at 60-70% utilisation most of the time... The wmi requests got lost amongst the noise.

Switch the monitoring IP to another NIC on same servers, get good results...

Argon0

kosta · Post by **kosta** » Mon Apr 20, 2009 11:44 am

Is the graph template out for an 8 core machine yet?

Also, I have been getting these errors since I setup these templates. Some WMI queries work (4 core processors, SQL, memory, context switches, etc, but I get these errors on below templates:

04/20/2009 12:35:14 PM - SPINE: Poller[0] Host[76] ERROR: Empty result [10.x.x.x]: '/usr/local/bin/php -q /var/www/sites/cacti.4rnd.com/branches/cacti-8-7d/scripts/wmi.php 10.X.X.X credential Win32_PerfRawData_PerfProc_Process ThreadCount,HandleCount,PrivateBytes,VirtualBytes,PageFileBytes,PercentPrivilegedTime,PercentProcessorTime,PercentUserTime Name '
04/20/2009 12:35:13 PM - SPINE: Poller[0] Host[76] ERROR: Empty result [10.x.x.x]: '/usr/local/bin/php -q /var/www/sites/cacti.4rnd.com/branches/cacti-8-7d/scripts/wmi.php 10.X.X.X credential Win32_PerfRawData_PerfProc_Process ThreadCount,HandleCount,PrivateBytes,VirtualBytes,PageFileBytes,PercentPrivilegedTime,PercentProcessorTime,PercentUserTime Name '
04/20/2009 12:35:12 PM - SPINE: Poller[0] Host[76] ERROR: Empty result [10.x.x.x]: '/usr/local/bin/php -q /var/www/sites/cacti.4rnd.com/branches/cacti-8-7d/scripts/wmi.php 10.X.X.X credential Win32_PerfRawData_PerfDisk_LogicalDisk DiskWritesPersec,DiskWriteBytesPersec,DiskReadsPersec,DiskReadBytesPersec,CurrentDiskQueueLength Name C'
04/20/2009 12:35:11 PM - SPINE: Poller[0] Host[76] ERROR: Empty result [10.x.x.x]: '/usr/local/bin/php -q /var/www/sites/cacti.4rnd.com/branches/cacti-8-7d/scripts/wmi.php 10.X.X.X credential Win32_LogicalDisk Size,FreeSpace DeviceID C'

Anyone have an idea why?

kosta

st3rling · Post by **st3rling** » Mon Apr 20, 2009 12:59 pm

Hello Claymen,
Would you be so kind to upload or give link to the compiled version of wmic that works with 0.0.6? I tried to compile it myself but failed since I'm very new to linux. I still can't run 4 and 8 CPU templates. Running CentOS (Linux 2.6.9-78.0.13.plus.c4smp)
Thank you!

argon0 · Post by **argon0** » Tue Apr 21, 2009 3:38 am

I'll post my working one (for Centos) when I can get to my work PC. If that helps.

Cacti

Monitor Windows via WMI from Cacti on Linux

WMIC

Who is online