Page 1 of 1
Monitoring active directory in XI
Posted: Wed Jul 13, 2011 3:56 pm
by cwscribner
Hi all.
How do I go about monitoring active directory in XI? I've seen some plugins referencing monitoring active directory but I haven't the slightest idea as to how to implement them and I haven't seen any HowTo's or documentation on doing this.
Re: Monitoring active directory in XI
Posted: Wed Jul 13, 2011 4:31 pm
by niebais
One way that we monitor Active Directory is by monitoring the NTDS process. We used the "Windows Server Wizard" to set it up.
Re: Monitoring active directory in XI
Posted: Thu Jul 14, 2011 9:15 am
by nscott
Edit: I was mistaken, it simply allows you to use AD directory passwords, not monitor active directory.
Re: Monitoring active directory in XI
Posted: Thu Jul 14, 2011 9:50 am
by cwscribner
niebais wrote:One way that we monitor Active Directory is by monitoring the NTDS process. We used the "Windows Server Wizard" to set it up.
I'm unfamiliar with AD but wouldn't the process monitoring just show up/down? Are there any metrics to capture for AD? (health, connections, etc?)
Re: Monitoring active directory in XI
Posted: Fri Jul 15, 2011 9:26 am
by nscott
Unfortunately there is not to my knowledge. There are a few plugins on the Exchange
http://exchange.nagios.org/directory/Pl ... TK/details
http://exchange.nagios.org/directory/Pl ... ck/details
I don't have an Active Directory environment here to test it on so I wouldn't be able to tell how well they work but adding checks in Nagios XI is pretty straightforward. If you want documentation on the process:
http://assets.nagios.com/downloads/nagi ... ios_XI.pdf
Regards,
Re: Monitoring active directory in XI
Posted: Fri Jul 15, 2011 11:15 am
by rseiwert
Question is what do you want to monitor in AD? Plenty of things to. WMI is your friend here and if you don't know what you are looking for use the scriptomatic as a tool to browse WMI and find what you are looking for.
http://www.microsoft.com/download/en/de ... n&id=12028
With AD I assume you want to monitor Domain Contoller and make sure they are up. Be aware that there are specific roles assigned to AD servers which can add what you want to monitor.
Again the question is what do you want to monitor.
WMI Namespace root\MicrosoftActiveDirectory which can give you the replication status of ADS servers
WMI Namespace root\Directory\LDAP which contains a ton of classes.
Then you could use the Win32_PerfRawData_NTDS_NTDS
Select LDAPClientSessions,LDAPBindTime,LDAPActiveThreads,DSThreadsinUse,DSNotifyQueueSize,ABClientSessions,ABBrowsesPersec,LDAPSearchesPersec,DSDirectoryWritesPersec,DSDirectorySearchesPersec,DSDirectoryReadsPersec from Win32_PerfRawData_NTDS_NTDS
Of course I could be totally wrong and provide this info with a disclaimer and warning to use are your own risk.
Re: Monitoring active directory in XI
Posted: Mon Jul 18, 2011 12:11 pm
by mguthrie
Thanks for the input rseiwert!