Windows Server 2019 Module 8 Section 1 Windows Server Monitoring Tools

Task manager Processes tab allow you to look at

displays a list of running programs, which are subdivided into application and inter processes of the Windows OS. This also displays summary of the processor and memory usage

Task manager Performance Tab

This tab displays a summary of the CPU usage, memory usage, and network statistics

Task manager Users Tab

This tab shows a consumption of resources per user. This can also be expanded to see a more detailed look.

Task manager Details Tab

This tab lists all the running processes on the computer, providing staticts about the CPU, memory, and consumption of other resources. This tab can also be used to manage ther unning processes.

Task manager Services Tab

This tab provides a list of running Windows Services and related information. This tab indicates whether a service is running and displays the process identifier (PID). This tab can also be used to start and stop services.

Performance Monitor is a Microsoft Management Console (MMC) snap in that does what

obtain system performance information, analyze the performance effects that application and service have on a computer, obtain and overview of system performance, and collect detailed information for troubleshooting.

What does Performance Monitor use performance counters for?

to measure a system’s state or activity.

How does a performance counter work

by requesting the current value of performance counters at a specified time interval

Multi Graph views allows you to

look at multiple graph views that enables you to visually review performance log data.

Custom Views in Performance Monitor allows you to

create custom views and then export them as data collector sets for use with performance and logging features

What is a data collector set

a custom set of performance counters, event traces, and system configuration data.

What does a Data collector set do

Organized multiple data-collection points into a single portable component.

***NOTE*** A data collector set can be configured to generate an alert when it reaches thresholds that are configured in performance counters.

***NOTE*** A data collector set can be incorporated into logs or observe it in Performance Monitor.

A data collector set can be configured for

collecting data at a set time every day or until a file size is filled

What are the monitoring options you can select when setting a schedule for data collector sets

beginning date, expiration date, and start time

What is Performance counter data

server performance data

Event Trace Data

provides information about system activities and events, and its often useful for troubleshooting.

System Configuration Information data

allows the current state of registry keys and changes to those keys to be recorded.

Types of data collector sets

Performance counters

Event Trace Data

System configuration Information

Data Collector sets and Performance Monitor are used to organize ““ into a single component that you can use to review or log performance

collection points

How do you create your own custom data collector set

Performance Monitor > Data Collector Sets > User Defined

Data Collector System Diagnostics Template

This template is responsible for objects and counters that report the status of hardware resources, system response times, and processes on the local computer, along with system information and configuration data. This report also provides guidance on ways to optimize the computers responsiveness

Data Collector Systems Performance Template

This template generate reports that detail the status of local hardware resources, system response times, and processes

Data Collector WDAC Diagnostics Template

This template enables you to trace and debug information for Winnows Data Access Components(WDAC)

Data Collector Basic Template

This template creates a simple collector that you can add to later. It includes a processor performance counter, a simple configuration trace, and a Windows Kernel trace object

What does the Reports feature do

allows you to observe and generate reports from a set of counter that you create by using data collector sets.

Performance monitor create a new ““ every time a data collector set runs

Report

Physical Disk% Disk time counter

This counter measures the percentage of time the disk was busy during the sample interval. If this counter rises more than 85 percent, the disk system is saturated.

PhysicalDisk\Avg. Disk Queue Length counter

This counter indicates how many I/O operations are waiting for the hard drive to become available. If the value is larger than two times the number of spindles, the disk itself might be the bottleneck. If this counter indicates a possible bottleneck, consider measuring the Avg. Disk Read Queue Length and Avg. Disk Write Queue Length to determine if read or write operations are causing the bottleneck.

Memory\Pages per Second Counter

This counter measures the rate at which pages are read from or written to the disk to resolve hard page faults. If the value is greater than 1,000 as a result of excessive paging, a memory leak might exist.

Processor% Processor Time Counter

This counter measures the percentage of elapsed time that the processor spends running a non-idle thread. If the percentage is greater than 85 percent, the processor is overwhelmed, and the server might require a faster processor.

System\Processor Queue Length Counter

This counter indicates the number of threads in the processor queue. The server doesn't have enough processor power if the value is more than two times the number of central processing units (CPUs) for an extended period.

Network Interface\Bytes Total/Sec Counter

This counter measures the rate at which bytes are sent and received over each network adapter, including framing characters. The network is saturated if more than 70 percent of the interface is consumed.

Network Interface\Output Queue Length Counter

This counter measures the length of the output packet queue, in packets. Network saturation exists if this value is more than two.

If you server is configured with SSDs what become less relevant

the disk counters that were mentioned in this set

What does Reliability Monitor do

monitors hardware and software issues that occur during the selected time interval. Based on the number and type of issues, it assigns a number called a stability index that indicates the server’s reliability.

How big does the reliability index range from

1 - 10

Where can reliability monitor be found

control panel > browsing to security and maintenance > maintenance

What can you save a reliablilty report as

.XML file

What does the Problem Reports console do

allows a more depth monitor for the issues in reliability monitor

What does the “Check for a solution for all reported problems“ do

search the internet for solutions for the problems

What is Event Viewer

A collection of log files affecting hardware, software and OS events that report on potential problems, critical issues, and general information about your computer.

How to get to Event Viewer

Server Manager > Tools > Event Viewer

Events in event viewer are catagorized by

severity

Event viewer event types

Informational Event - Lets you know an even has happened such as a service starting or stopping

Warnings

Erros

Critical Event - Most severe event, meaning the server will most likely crash

What are the contents of an event

Brief description and information about the level of event and error codes.

What does the Processes ID (PID) do

can be matched to the task manager of a computer so you can tell what is causing the issue

How can you forward all log files to a single server

Forward Events feature

Best way to monitor multiple servers

deploy software to monitor them all at once

If you need to monitor more than 100 servers you must use

Microsoft system center or something else: because Server manager can’t handle more than 100

Server manager can be installed on WIndows 10 to

be a console to monitor the local and remote servers

Server manager can not monitor what type of windows devices

client devices

What type of devices can you add to Windows Admin Center

Servers

Windows PC’s

Failover Clusters

Hyperconverged clusters

Windows Admin Center comes with that management solution already installed

Server Manager

Computer Management

Cluster Creation

Cluster Management

What are some task server manager can do in windows admin center

overview of the server health

enable azure backup and file sync

Manager certificates, containers, devices

Configure DNS and DHCP

Manage local users and groups. roles and features, scheduled task, service and storage, and windows updates

Performance monitor and System insights

System insights gives you what

better insight into the functioning of your servers

Systems insights it only available on

Windows server 2019 (according to the reading)

How does System Insights work

machine learning model to analyze system data including performance counters and events

What does Windows Sysinternals tools do?

A suite of tools that provide a collection of advanced investigative and troubleshooting tools

What are some sysinternal tools

Process explorer and process monitor

What does Process Explorer do

determine the currently active processes on a windows computer, depending on the mode you can see Handled that the selected process has opened and Dynamic Link libraries (DLLs) and memory mapped files that the process has loaded

What does process monitor do

displays real time file system, registry, and process/thread activity.

Config Performance tools does

enables you to quickly defragment your frequently used files

DiskMon performance tool does what

enables the computer to capture all hard disk activity, and it acts like a software disk activity light in the system tray

PageDefrag performance tool does what

enables you to defragment your paging files and registry hives