Logged in users

[gcsc]

Hi everyone

I have a Server running 2008 R2, which is a single domain controller and runs SQL 2008 (not my decision) being monitored by Cacti Version 0.8.8b.

The logged on users graphs grows and grows until the server gets a reboot, at the last reboot it had 974 users logged on despite there being only 2 showing in task manager. What ever is being monitored logging on to the server is not logging off.

What does Cacti use or where does it get this information from ? Could this be including users authenticating against A/D and connections to the database ?

Thanks

[BSOD2600]

You're talking about the [Host MIB - Logged in Users] template?

If so, it's polling HOST-RESOURCES-MIB::hrSystemNumUsers (.1.3.6.1.2.1.25.1.5.0) which is defined as:

"The number of user sessions for which this host is
storing state information. A session is a collection
of processes requiring a single act of user
authentication and possibly subject to collective job
control."

[b9313]

Sorry for grave digging but I'm seeing the exact same thing on my terminal servers (RDS) here. Is there a better way to get active terminal sessions or another MIB we should use?

Edit: after some Googling and searching this forum a bit more it looks like WMI is going to be the only way to do this effectively. I've found one solution that requires installing something on the target being graphed, but I'd really like to avoid that. Surely there is a way to poll that via WMI right from cacti. Still looking...

[BSOD2600]

Yup, using WMI to access the performance counters is the only way. There are tools out there like http://forums.cacti.net/viewtopic.php?f=3&t=25600 or http://www.snmp-informant.com/ which can make this easier instead of writing your own script (again).