Translations of this page:

Osmius

Osmius Agent for Exchange 2003
Agent name: osm_ag_EXCHNG03 Agent code: EXCHNG03
Content: Osmius Agent for Microsoft Exchange Server 2003 User Manual
Date: 02/10/2009 Revision Date: / /

General Information

This agent can monitor various parameters of Microsoft Exchange Server 2003 mail servers using WMI technology. It has been tested in different environments. However, we recommend checking its functionality before implanting it in a production environment.

Exchange 2003 agent has been developed using functionalities and enhancements of Osmius framework and ACE libraries, so it is necessary to install the ACE libraries for the proper deployment and operation of Exchange 2003 Osmius agent. See chapter: installation.

EXCHNG03 agent provides up to 17 basic events with configuration parameters to allow scaling of a very simple way, in addition 2 informative events provides details of the monitored system. Events have been selected by the Research and Development Osmius Team as the most interesting for this first development.

Events are based on WQL statements, so local and remote monitoring is possible.

HEYYY!!: As shown in official Microsoft doc http://msdn.microsoft.com/en-us/library/aa393720%28VS.85%29.aspx
The connection timeout can not be changed and can reach up to 120 seconds (2 minutes). This means that,
if there is no availability of the instance there may be some latency in the # appearance of
Osmius critical events in the web console and as standalone mode, due to it is a external Osmius limitation.

Exchange 2003 Instance

As a general rule each Osmius agent can monitor one instance type. If you are not familiar with these concepts check out the glossary. Each instance is individually defined in the configuration file (if you want further information go to agents and instances); depending on agent type is the instance type and depending on instance is the connection info.

CONNECTION_INFO

The connection information or connection_info is data that the agent needs to know to connect to the instance. (See more about the connection_info

For Exchange 2003 Osmius agent the connection_info prototype would be:

CONNECTION_INFO= -h HOST -d DOMAIN -u USER -p PASSWORD

Replace the following:

  • HOST: IP address or host name where Exchange 2003 server is. Optional. About firewall settings
  • DOMAIN: Domain or WorkGroup name. Mandatory if HOST has been declared.
  • USER: Username with WMI permissions. Mandatory if HOST has been declared. About user permissions settings
  • PASSWORD: password for user specified above. Mandatory if HOST has been declared.

For local monitoring (monitoring the system where the agent is installed) connection_info must be empty, because we don't need connect anywhere.

Examples:

CONNECTION_INFO= -h 192.168.1.1 -d WORKGROUP -u admin -p pass
CONNECTION_INFO=

TYPE

The type defines the instance type to be monitored. Every declared instance must be associated with a type as you can see here

For Exchange 2003:

TYPE= EXCHNG03

Event summary table for Exchange 2003

Here's briefly the capabilities of this agent, further down on this page each event is described in more detail.

EVENT DESCRIPTION c w a tseconds Extra parameters / Remarks
EXUSERCN Number of connected users 0 50 100 300 Silent mode ( -s) recommmended
EXMRECQS Mailbox Reception Queue Size 0 400 500 300 Interesant parameter for capacity plannings
EXMSNDQS Mailbox Send Queue Size 0 400 500 300 Interesant parameter for capacity plannings
EXMDELPM Delivered messages per minute in Mailbox 0 5 10 60 Silent mode ( -s) recommmended
EXMAVDET Average Delivery Time in Mailbox 0 5 10 300 Silent mode ( -s) recommmended
EXMSENTM Sent message per minute in Mailbox 0 30 60 60 Silent mode ( -s) recommmended
EXPRECQS Public Reception Queue Size 0 400 500 300 Interesant parameter for capacity plannings
EXPSNDQS Public Send Queue Size 0 400 500 300 Interesant parameter for capacity plannings
EXPDELPM Delivered messages perminute in Public 0 5 10 60 Silent mode ( -s) recommmended
EXPAVDET Average Delivery Time in Public 0 5 10 300 Silent mode ( -s) recommmended
EXPSENTM Sent menssages per minute in Public 0 30 60 60 Silent mode ( -s) recommmended
EXRPCAVL Average RPC Latency 0 40 50 300 Modo silencioso ( -s) recomendado
EXRPCREQ RPC Requests 0 25 100 60 Interesant parameter for capacity plannings
EXADDLQL Address List Queue Length 0 50 100 600 Silent mode ( -s) recommmended
EXSCATQL SMTP Categorizer Queue Length 0 7 10 300 Silent mode ( -s) recommmended
EXSLOCQL SMTP Local Queue Length 0 750 1000 300 Silent mode ( -s) recommmended
EXSREMQL SMTP Remote Queue Length 0 750 1000 300 Silent mode ( -s) recommmended

Information Events

Info events retieve general data about instance, usually this data doesn't change over time. This kind of events have no severity, simply provides instance details.

EVENT DESCRIPTION tseconds Observations
ENINFHST Hosta name) 43200 (12 hours) Unique name of a device connected to a network
EXINFVER Exchange version 43200 (12 hours) Exchange server version data

Exchange 2003 agent events

EXUSERCN

EXUSERCN event will return the number of users connected to Exchange server

Return values:

VALUE MEANING
-1 Error
X Connected users

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 300 seconds – 1 hour –> depends on instance importance
Warning threshold Consult with your Exchange 2003 administrator
Alert threshold Consult with your Exchange 2003 administrator

Parameter setting example:

EXUSERCN = -t 900 -c 0 -w 50 -a 100 -T "Connected users"

Comment: This event returns the number of real users connected to server.

EXMRECQS

EXMRECQS event returns reception queue size of Exchange Mailbox folder.

Return values:

VALUE MEANING
-1 Error
X Reception Queue Size in Mailbox

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 400
Alert threshold 500

Parameter setting example:

EXMRECQS = -t 300 -c 0 -w 400 -a 500 -T "Mailbox-Reception Queue"

Comment: This event is very useful for capacity plannings.

EXMSNDQS

EXMSNDQS returns send queue size of Exchange Mailbox folder.

Return values:

VALUE MEANING
-1 Error
X Send Queue Size

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 400
Alert threshold 500

Parameter setting example:

EXMSNDQS = -t 300 -c 0 -w 400 -a 500 -T "Mailbox-Send Queue"

Comment: This event is very useful for capacity plannings.

EXMDELPM

EXMDELPM event returns average ammount of delivered messages per minute in Exchange Mailbox folder.

Return values:

VALUE MEANING
-1 Error
X Develivered messages/minute in Mailbox

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold Consult with your Exchange 2003 administrator
Alert threshold Consult with your Exchange 2003 administrator

Parameter setting example:

EXMDELPM = -t 60 -c 0 -w 5 -a 10 -T "Mailbox-Delivered per minute"

Comment:

EXMAVDET

EXMAVDET event returns average delivery time in Exchange Mailbox folder.

Return values:

VALUE MEANING
-1 Error
X Average delivery time in Mailbox

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold Consult with your Exchange 2003 administrator
Alert threshold Consult with your Exchange 2003 administrator

Parameter setting example:

EXMAVDET = -t 300 -c 0 -w 5 -a 10 -T "Mailbox -Average Delivery time"

Comment:

EXMSENTM

EXMSENTM event return the average number of sent messages per minute in Exchange Mailbox folder.

Return values:

VALUE MEANING
-1 Error
X sent messages/minute in Mailbox

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold Consult with your Exchange administrator
Alert threshold Consult with your Exchange administrator

Parameter setting example:

EXMSENTM = -t 60 -c 0 -w 25 -a 50 -T "Mailbox-Sent message per minute"

Comment:

EXPRECQS

EXPRECQS event returns reception queue size of Exchange Public folder.

Return values:

VALUE MEANING
-1 Error
X Reception queue size in Public

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 400
Alert threshold 500

Parameter setting example:

EXPRECQS = -t 300 -c 0 -w 400 -a 500 -T "Public-Reception queue"

Comment: This event is very useful for capacity plannings.

EXPSNDQS

EXPSNDQS returns send queue size of Exchange Public folder.

Return values:

VALUE MEANING
-1 Error
X Send queue size in Public

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 400
Alert threshold 500

Parameter setting example:

EXPSNDQS = -t 300 -c 0 -w 400 -a 500 -T "Public-Send Queue"

Comment: This event is very useful for capacity plannings.

EXPDELPM

EXPDELPM event returns average number of delivered messages per minute in Exchange Public folder.

Return values:

VALUE MEANING
-1 Error
X Delivered messages/minute in Public

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold Consult with your Exchange administrator
Alert threshold Consult with your Exchange administrator

Parameter setting example:

EXPDELPM = -t 60 -c 0 -w 5 -a 10 -T "Public-Delivered per minute"

Comment:

EXPAVDET

EXPAVDET event returns average delivery time in Exchange Public folder.

Return values:

VALUE MEANING
-1 Error
X Delivery time in Public

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold Consult with your Exchange administrator
Alert threshold Consult with your Exchange administrator

Parameter setting example:

EXPAVDET = -t 300 -c 0 -w 5 -a 10 -T "Public-Average delivery time"

Comment:

EXPSENTM

EXPSENTM event return the average number of sent messages per minute in Exchange Public folder.

Return values:

VALUE MEANING
-1 Error
X Sent messages/minute in Public

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold Consult with your Exchange administrator
Alert threshold Consult with your Exchange administrator

Parameter setting example:

EXPSENTM = -t 60 -c 0 -w 25 -a 50 -T "Public-Sent messages per minute"

Comment:

EXRPCAVL

EXRPCAVL returns RPC average latency of Exchange 2003 server.

Return values:

VALUE MEANING
-1 Error
X RPC latency

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 40
Alert threshold 50

Parameter setting example:

EXRPCAVL = -t 300 -c 0 -w 40 -a 50 -T "RPC Average Latency"

Comment: This event gives a very accurate idea of Exchange mail server performance.

EXRPCREQ

EXRPCREQ returns number of Exchange 2003 RPC request.

Return values:

VALUE MEANING
-1 Error
X RPC request

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 25 - Consult with your Exchange administrator
Alert threshold 100 - Consult with your Exchange administrator

Parameter setting example:

EXRPCREQ = -t 300 -c 0 -w 25 -a 100 -T "RPC Requests"

Comment: This event is very useful for capacity plannings.

EXADDLQL

EXADDLQL returns Exchange 2003 Server Address List Queue Length.

Return values:

VALUE MEANING
-1 Error
X Address list queue length

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 50 - Consult with your Exchange administrator
Alert threshold 100 - Consult with your Exchange administrator

Parameter setting example:

EXADDLQL = -t 600 -c 0 -w 50 -a 100 -T "Address List queue"

Comment:

EXSCATQL

EXSCATQL returns Exchange 2003 Server SMTP Categorizer Queue Length.

Return values:

VALUE MEANING
-1 Error
X SMTP Categorizer queue length

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 7
Alert threshold 10

Parameter setting example:

EXSCATQL = -t 300 -c 0 -w 7 -a 10 -T "SMTP Categorizer queue"

Comment:

EXSLOCQL

EXSLOCQL returns Exchange 2003 Server SMTP Local Queue Length.

Return values:

VALUE MEANING
-1 Error
X SMTP Local Queue Length

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 750
Alert threshold 1000

Parameter setting example:

EXSLOCQL = -t 300 -c 0 -w 750 -a 1000 -T "SMTP Local Queue"

Comment:

EXSREMQL

EXSREMQL returns Exchange 2003 Server SMTP Remote Queue Length.

Return values:

VALUE MEANING
-1 Error
X SMTP Remote Queue Length

Recommended parameters:

Comparison type Direct. The higher value the higher severity (-c 0)
Monitoring interval 60 seconds – 15 minutes –> depends on instance importance
Warning threshold 750
Alert threshold 1000

Parameter setting example:

EXSREMQL = -t 300 -c 0 -w 750 -a 1000 -T "SMTP Remote queue"

Comment:

Exchange 2003 agent prerequisites

In order to compile, this agent requires a set of prerequisites, which are generic to compile any Osmius agent, you can see these prerequisites.

Verify that your system supports WMI.

Exchange 2003 agent makefiles and compilation

  • Make Project Creator (MPC) is used by Osmius, so creating Makefiles is a trivial task. If you want to learn more about MPC and Osmius check out the section of Makefiles on Osmius.
  • In the particular case of Exchange 2003 Osmius agent and Visual C 8 you can easily generate Makefile as follows:

From the agent directory using console or terminal.

%ACE_ROOT%\bin\mpc.pl -type vc8 osm_ag_exchange2003.mpc
  • Now that you created the Makefile, agent compiling is extremely simple.
Double click on Osm_Ag_Exchange2003_Osmius.vcproj and the project will be opened with Visual C.
Select the Rebuild option to compile.

Binaries are automatically installed in the bin directory of OSM_ROOT base directory.

Run Exchange 2003 agent

Exchange 2003 agent have the same running features of the other Osmius agents. You can check it out int he section Start and Stop Agents.

To run Exchange 2003 agent without Osmius web console:

osm_ag_EXCHNG03.exe -c osm_ag_EXCHNG03.ini -m MASTERAG -p 1950 -d » [>> osm_ag_exchange2003.log]1)

Running in standalone mode

Exchange 2003 Osmius agent, like the others Osmius agents, allows the execution in standalone mode. This option may be particularly useful when developing a new agent or to perform specific agent tests.

Basically you have to add a new value, called SNDCMD, to Exchange 2003 Osmius agent configuration file (osm_ag_EXCHNG03.ini) as shown here.

Then you must run the Exchange 2003 Osmius agent setting Master Agent communications port to zero, for example:

osm_ag_EXCHNG03.exe -c osm_ag_EXCHNG03.ini -m 00000000 -p 0 -d

Tests list

Performed test for Exchange 2003 Osmius agent.

Date: / /
Test Results Comment
Creating an instance with all its events in silent mode - -
Creating an instance with all its events with custom text - -
Creating an instance with all its events but no custom text - -
Declaration of 3 instances with all its events to 5 seconds and keep it
running for 48 hours
- -
Declare 2 instances, cause a disconnect and then reconnect - -
Declare 1 instance and test each event - -
Elimination of general parameter and check unbootable - -
Elimination of instance CONN_INFO and check unbootable - -

APPENDIX

User permissions settings

To set up an user to access WMI without adding the user to an Administrative group, follow the next steps.

  1. Click Start, click Run, type wmimgmt.msc in the Open box, and then click OK.
  2. Right-click WMI Control, and then click Properties.
  3. Click the Security tab.
  4. Expand the Root folder, select the CIMV2 folder, and then click Security.
  5. Click Add. Type the user name you wish to use in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
  6. In the Permissions for User list, click the Allow check box next to the following permissions:
    1. Execute Methods
    2. Enable Account
    3. Remote Enable
    4. Read Security
  7. Click Advanced. In the Permission entries list, select the user you added in step 5, and then click Edit.
  8. In the Apply onto box, click This namespace and subnamespaces.
  9. Click OK three times.
  10. Quit the WMI Control snap-in.
  11. Click Start, click Run, type dcomcnfg.exe in the Open box, and then click OK.
  12. Select Component Services and then expand it. Then expand Computers. Right-click My Computer and select Properties.
  13. Select the COM Security tab.
  14. In the Access Permissions section, click Edit Limits….
  15. Click Add. Type the user name you wish to use in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
  16. In the Permissions for User list, click the Allow check box next to the following permissions:
    1. Local Access
    2. Remote Access
    3. Click OK.
  17. In the Launch and Activation Permissions section, click Edit Limits….
  18. Click Add. Type the user name you wish to use in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
  19. In the Permissions for User list, click the Allow check box next to the following permissions:
    1. Local Launch
    2. Remote Launch
    3. Local Activation
    4. Remote Activation
    5. Click OK twice.
  20. Expand My Computer and expand DCOM Config.
  21. Right-click Windows Management and Instrumentation and click Properties.
  22. Click the Security tab.
  23. In the Access Permissions section, click Edit….
  24. Click Add. Type the user name you wish to use in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
  25. In the Permissions for User list, click the Allow check box next to the following permissions:
    1. Local Access
    2. Remote Access
    3. Click OK twice.
  26. Quit the Component Services snap-in.
  27. Restart the target computer.

Firewall settings

To enable or disable WMI traffic using Windows firewall user interface

  1. Control Panel - Security - Windows Firewall.
  2. Click Change Settings and then click the Exceptions tab.
  3. In the Exceptions window, select the check box for Windows Management Instrumentation (WMI) to enable WMI traffic through the firewall.


You can do it at the command prompt.

  1. To enable WMI traffic through the Windows firewall.
    • netsh advfirewall firewall set rule group=“windows management instrumentation (wmi)” new enable=yes
  2. To disable WMI traffic through the Windows firewall.
    • netsh advfirewall firewall set rule group=“windows management instrumentation (wmi)” new enable=no


If you have another firewall other than Windows, is good to know that DCOM communications (used by WMI) are usually made using port 135.

1) Optional, to store agent messages in a file
 
en/agentes/exchng03.txt · Last modified: 2012/12/05 19:09 by osmius
 
Recent changes RSS feed Creative Commons License Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki