SERVICES REFERENCE MANUAL
SolarWinds N-central
Version 11.2
Last Updated: Monday, April 16, 2018 Services Reference Manual: SolarWinds N-central
page 2 Services Reference Manual: SolarWinds N-central
About SolarWinds N-central services
SolarWinds N-central services monitor customer devices, generate email alerts and PSA tickets, and enable technicians to view the status of devices and troubleshoot errors. Services are composed of metrics that monitor one aspect of a device. For example, the CPU service monitors the overall device CPU usage and the top five CPU-consuming processes. The Process service monitors not only if a specific process is running, but also the CPU, Memory and Disk I/O that the process is consuming.
For a full list of services available, see the SolarWinds N-central Services List.
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae. Service types
SERVICE DESCRIPTION TYPE AMP Reports on results generated when running Automation Manager Policies using Global Output Parameters.
Backup Monitors backup applications such as Backup Exec and Asigra for the device classes:
n Laptop - Windows n Server - Generic/Windows n Workstation - Generic/Windows n Custom
Backup Monitors integrated backup functionality based on D2D backup software. Manager
EDF Customized services use a Java agent - External Data Feed - to monitor devices and applications through scripts.
ESXi Monitors aspects of ESXi servers, including power consumption, logical drives, and related properties using the CIM services/ports.
Local Services monitored by agents, including CPU, Disk, Memory and Process services.
Log File Agents for Windows, OS X and Linux can scan log files. Agents can scan the entire log file time or only the lines in the log file that have been added since the log file was scanned.
This category includes both the Log Append) and Log Batch service types.
Maint Monitor internal SolarWinds N-central processes and should not be modified.
ODBC Windows probes and agents can make ODBC queries to SQL databases. This service retrieves data from an SQL database and alerts you if the data does not match expectations.
QST Uses Intel Quiet System Technology to monitor computer operating temperatures.
Security Unique services that wait for a device to report a problem. Log
page 3 Services Reference Manual: SolarWinds N-central
SERVICE DESCRIPTION TYPE (Syslog) Commonly found on network infrastructure devices such as firewalls, switches, and routers, Syslog- based services, for example, FW-Cisco, can only be monitored by a Windows probe. Agents cannot monitor Syslog-based services.
SNMP Gathers data by sending SNMP "GET" queries to the target device. As SNMP is a common protocol used on both Windows and non-Windows devices. Many services such as the APC UPS service use SNMP to get data.
System Based on the License Compliance service, monitors the number of software licenses allowed for a customer based on thresholds specified for individual applications.
TCP By querying the TCP port that an application is using, SolarWinds N-central can tell you if that application is responding and available for your customers to use. The HTTP service and the FTP services both use TCP queries. The HTTP service monitors the status of a website, and the FTP service monitors whether or not an FTP server is online.
This category includes both the TCP and GenericTCP service types.
VMware Monitor elements of a VMware virtualization environment.
WMI Gathers data by sending WMI queries to the target device. All services that use WMI are available only on devices classed as Laptop - Windows, Server - Windows, or Workstation - Windows. Monitors MS applications, such as SQL, Exchange, IIS, and ISA.
This category includes the WMIWorkstation and WMIServer service types.
WSUS Interacts with a WSUS server to monitor patch compliance and generate reports. Why services change state When SolarWinds N-central receives data about a service, it compares that data against the thresholds defined for that service and changes the state of the service based on what threshold range the data falls into. For example, if the agent reported back a value of 3, SolarWinds N-central transitions the service into a Warning state:
n Normal: 0-2 n Warning: 3 -5 n Failed: 6-10 There are cases where the service may not report a Normal, Warning, or Failed state:
n If the data reported does not fall into the Normal, Warning, or Failed ranges, the service will transition to a Misconfigured state. n If the agent or probe wasn’t able to gather the requested data, the service will transition to a Misconfigured state. n If the data doesn’t match what it expects, for example, if it’s expecting text, but receives an integer), the service will transition to a No Data state. n If SolarWinds N-central stops receiving data for the service, the service will transition to a Stale state.
page 4 Services Reference Manual: SolarWinds N-central
n If the device enters a downtime period, the service will transition to a Disconnected state. n If a user disables the service, the service will transition to a No Data state. More about service states
n Normal changes the service to Failed when the service stops running. n Reversed inverts the monitoring process. For example, a process that should not be running on a device can be monitored by the Process service using this method. After the process starts running, the state for the Process service changes to Failed. n Custom enables you to set up values for the Normal, Warning, and Failed states. For example, threshold settings for scan details, such as file size, average round trip time, and time to live (TTL) can be customized. n Off stops processing the scan detail for a state. If one scan detail is set to Off, the service is processed for a state based on the thresholds of the rest of the scan details. If all of the scan details are set to Off, the service is processed for its availability.
page 5 Services Reference Manual: SolarWinds N-central
Custom services
If you need a service that is not readily available in SolarWinds N-central, you can create a custom service. A custom services leverage:
n Automation Manager Policies, n SolarWinds N-central's proprietary external data feed ( EDF) engine, n TCP port queries, n Log file monitoring, n SNMP queries, n Syslog messages, and n WMI queries Custom services function similarly to the services included with SolarWinds N-central. Stock service items A stock service item is a predefined metric for an EDF, SNMP, or WMI custom service. This includes: CPU, Memory, Process, and UPS services. Use stock service items when the data you are collecting with the custom service needs to be included in SolarWinds N-central's Executive Summary report or in any Report Manager report. For example, CPU usage. What do you want to do?
n Add a custom service n Import or export a custom service n Review custom service properties
page 6 Services Reference Manual: SolarWinds N-central
Add a Custom service
1. Click Administration > Service Management > Custom Services. 2. Click Add and select one of: n Service: Create a custom service with no service items.
n Service using Stock Service Item: Create a custom service that already has services configured.
A stock service item is a predefined metric for an EDF, SNMP, or WMI custom service. This includes: CPU, Memory, Process, and UPS services. 3. Select the type of custom service to be created. 4. Type a Name and description for the service 5. Configure the properties of the service as required and click Save. For more information, see Custom Service Properties.
If you delete a custom service, SolarWinds N-central removes all associated instances of the service from any device, and deletes all collected historical data.
page 7 Services Reference Manual: SolarWinds N-central
Custom service properties The properties of custom services differ depending on the type of service you are creating. Common properties of all types of custom services include a service name and description. To create a custom service, click Administration > Service Management > Custom Services and click Add. Automation Manager Policy Monitoring Service
The timeout interval is the period that SolarWinds N-central will wait for a response from a service before it causes the service to transition to a different state. The timeout interval for custom services based on Automation Manager Policies is calculated by subtracting two (2) minutes from the scan interval. This value can not be modified.
DETAILS TAB
Select Automation Policy Select the specific Automation Manager Policy output that the service will monitor.
Service Identifier Enter a unique identification value to be assigned to the custom service.
SCHEDULE TAB
Interval Configure the frequency when the service transmits the command string to the TCP port.
THRESHOLDS TAB
String Evaluation Select the operator used to evaluate the state of the service based on the global output parameters of the associated Automation Manager Policy.
String Value Enter the character string used for evaluating the state of the service based on the global output parameters of the associated Automation Manager Policy.
If String does not contain Select the state that the custom service transitions to if it does not find the string {String value} display state value. as
If String does contain {String Select the state that the custom service transitions to if it finds the string value. value} display state as
Size of Monitored File Select the threshold ranges for transitioning the state of the custom service based on the size of the monitored file.
External Data Feed Service An External Data Feed (EDF) service is the best option if you want to monitor a device that does not support WMI or SNMP, and you cannot install an agent on it. EDF is a small Java agent that returns the output of a script or application. SolarWinds N-central displays the output of the script as if it was a conventional service. Each piece of data that you intend to have the Windows agent or Windows probe report back to SolarWinds N- central is called a metric. 1. In the Data and Thresholds tab, click Add Metric. 2. In the Configure Metric dialog box, enter the Metric name.
page 8 Services Reference Manual: SolarWinds N-central
3. From the Data Type drop-down menu, select the appropriate value for the data reported by the EDF Agent. 4. Select the Unit if the metric measured should scale automatically based on the data collected. It is critical that you select the appropriate type of data for a metric. If you select an inappropriate metric, SolarWinds N-central will not accept the reported data by the EDF Agent and the service will transition to a Stale state. 5. Click Save.
Frequently Asked Questions Q: Where can I download the EDF Agent and samples of EDF code? A: You can download the EDF SDK, which contains both the EDF agent and sample EDF code, from the N-able Resource Center. Q: When would I use a Unit? A: Units are useful if you are measuring the amount of traffic that is passed through a particular NIC. The amount of traffic is reported in bits, however you can configure your service to report kilobits, megabits, and gigabits as those units are more user-friendly. To do this select Bits from the Unit drop-down list box. Generic TCP Service A Generic TCP service is best used when you have an application that is available over a network, for example, a web page or email server, and you want to monitor the application. The Generic TCP service enables you to query the port that the application is running on and determine if the port responds, and if the port sends out the correct response.
SCHEDULE TAB
Interval Configure the schedule when the service will query the TCP port.
DETAILS TAB
Timeout Enter the Timeout Value in seconds that the Probe waits for a response from the TCP port. Value
Port Enter the Port Number if it is different than the default provided. Number
Send Enter the Send Command String transmitted to the TCP port. Command String
Validating Enter the Validating String that the probe receives from the TCP port. String You must use a string, not a regular expression for the Validating String.
THRESHOLDS TAB
DNS Configure how the service responds if it can resolve the host name of the device by selecting the Resolution states displayed.
page 9 Services Reference Manual: SolarWinds N-central
Generic Configure how the service responds if the probe receives the Validating Stringby selecting the Service states displayed. Availability
Round Trip Select the ranges for transitioning the service to a Normal, Warning, or Failed state based on the Time (ms) amount of time in milliseconds it takes for the command string transmit to the TCP port, and to receive a response.
Log Scan (Appended) Service Use a Log Scan (Appended) service when the log file that you want to monitor is updated by new lines at the end of the log file. If the log file that you want to monitor is completely overwritten whenever the application writes to the log file, use the Log Scan (Batch) service.
SCHEDULE TAB
Interval Configure the schedule when the service will scan the log.
DETAILS TAB
Log File Name and Path Enter the Log File Path to define the path and file name for the log file that the service monitors. If the log file is located on the same computer as SolarWinds N-central, click Browse to locate the file.
The path must be local. UNC paths such as \\mydesktop\C$) are not supported.
Rules Add a regular expression Rule.
THRESHOLDS TAB
Difference in minutes between the Select the ranges for transitioning the service to a Normal, Warning, or last modification date of the file and Failed state based on the amount of time between when the log file was last the local time of the test modified and when the service scanned the log.
File Size Select the ranges for transitioning the service to a Normal, Warning, or Failed state based on the size in bytes of the log file.
Line Count of Log File Select the ranges for transitioning the service to a Normal, Warning, or Failed state based on the number of lines contained within the log file.
Log Scan (Batch) Service Use the Log Analysis (Batch) service when the log file that you want to monitor is completely overwritten whenever the application writes to the log file. If the log file that you want to monitor is updated by new lines appended to the end of the log file, use the Log Analysis (Appended) service. Log Analysis (Batch) services can recognize wildcard characters for the name of the monitored log file. If the file name is modified, use a * symbol to instruct the Windows agent to look for the most recent log file that meets the search criteria. If the log file is C:\test20091010.log and the only thing that remains constant in the filename is the word "test" and the suffix .log, type C:\test*.log in the Log File Name and Path. page 10 Services Reference Manual: SolarWinds N-central
SCHEDULE TAB
Interval Configure the schedule when the service will scan the log.
DETAILS TAB
Log File Name and Path Enter the Log File Path to define the path and file name for the monitored log file. If the log file is located on the same computer as SolarWinds N- central, click Browse to identify the file.
The path must be local. UNC paths such as \\mydesktop\C$) are not supported.
Rules Add a regular expression Rule.
THRESHOLDS TAB
Difference in minutes between the Select the ranges for transitioning the service to a Normal, Warning, or last modification date of the file and Failed state based on the amount of time between when the log file was last the local time of the test modified and when the service scanned the log.
File Size Select the ranges for transitioning the service to a Normal, Warning, or Failed state based on the size (in bytes) of the log file.
Line Count of Log File Select the ranges for transitioning the service to a Normal, Warning, or Failed state based on the number of lines contained within the log file.
Last Parsed Dates in Time Zone Select the range for the service to report a Normal state.
SNMP Service SNMP is a communications protocol supported by many devices including printers, firewalls, switches, and routers, which includes Windows and Linux devices. Use an SNMP custom service to obtain information from those types of devices.
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
SCHEDULE TAB
Interval Configure the schedule when the service will query the target device using SNMP.
QUERIES TAB
Queries Create an SNMP query. For each query, you can uniquely identify and display each instance with the SNMP index or the text description, for example, CPU-O or Process - store.exe. This only applies if you want to have multiple instances of the service on a device.
DATA AND THRESHOLDS TAB
Metrics Each piece of data that you intend to have the Windows agent or Windows probe report back to SolarWinds N-central is called a metric. You an configure a maximum of thirty metrics for each custom SNMP service.
page 11 Services Reference Manual: SolarWinds N-central
1. Enter the Metric Name. 2. Select one of the following:
n Variable to Use - Select if the service will not perform any calculations on the data gathered through SNMP. This option requires selecting the appropriate variable.
n Calculation to Use - Enter the appropriate algebraic calculation if the service will perform calculations on the data gathered through SNMP. 3. From the Data Type drop-down menu, select the appropriate value for the data reported by SNMP. If you select an inappropriate value for the Data Type, SolarWinds N-central will not accept the data reported by the Agent or Probe and the service will transition to a Stale state. 4. Select the appropriate Unit if the metric being measured should scale automatically based on the data collected. 5. Click Save.
To configure thresholds: 1. Select Use Mapping to map specific values or ranges of values to Normal, Warning, or Failed. 2. When you enable Use Mapping with a numeric Type of Data, you can specify numeric ranges. Enable Use Mapping with a string Type of Data to map number values string values. 3. Specify the appropriate thresholds for your service. If you do not want to set thresholds for this metric, clear the Configure Thresholds check box. For example, if it is a string value.
Frequently Asked Questions
Q: What is an SNMP Index? A: Everything in SNMP has a unique numeric identifier called an SNMP index. For example, if you have two NIC cards on a device, one NIC may have an SNMP index of .1 while the other may have an SNMP index of .2. When you make an SNMP query to find out information about the NIC, such as the NIC speed, you must specify the OID to query and the SNMP index to use. SolarWinds N-central enables you to configure up to 15 SNMP queries within one service. If you have six different metrics that you want to but from two different SNMP indices, you can have two separate SNMP queries in the service: one for the first SNMP index, and one for the second SNMP index. Q: What mathematical operators does the SDK accept? A: SolarWinds N-central accepts the following mathematical operators:
n / Divide n * Multiply n + Add n - Subtract Note that variables in the SDK start with a $ symbol (for example, $Var1, $Var2) Example calculations:
n $Var1 + $Var2 n ($Var1 + $Var2) / 100 To perform a delta calculation, for example, collect two data samples and then return the difference, replace the $ in front of the variable with a carat ^. For example, enter ^Var1 in the Calculation to Use field.
page 12 Services Reference Manual: SolarWinds N-central
Q: When would I use a Unit? A: Units are useful if you are measuring the amount of traffic that passes through a particular NIC. The amount of traffic reported is in bits, however you would like your service to report kilobits, megabits, and gigabits in the SolarWinds N-central UI because those units are more user-friendly. For this situation, you would choose Bits from the Units drop-down menu. Syslog Service Many networking devices such as switches, routers, or firewalls will send a syslog message when they detect that an event has occurred. Custom Syslog services are used to monitor these types of events.
SCHEDULE TAB
Interval Configure the schedule for when the service will scan the syslog.
DETAILS TAB
Rules Add a regular expression Rule.
THRESHOLDS TAB
Number of Lines Select the ranges for transitioning the service to a Normal, Warning, or Failed state based on Processed the number of lines processed in the syslog file.
Frequently Asked Questions
Q: How do I add a new regular expression? A: To add a new regular expression, click Add String to Match up to a maximum of six regular expressions. Q: How does the Windows probe receive syslog messages? A: When you add an syslog message-based service to a device, the Windows probe begins monitoring port 514. Any syslog messages that the probe receives are then logged and the Windows probe then scans the syslog for any regular expressions that you have specified in your custom service. The log file is: C:\Program Files\N-able Technologies\Windows Probe\syslog\log\syslog.log. Q: How does the Windows Probe know when a new syslog message has been received from a specific device? A: When the Windows Probe receives a new syslog message, it records that message in the syslog.log file. This entry is preceded by a date/time stamp as well as the IP address of the device that sent the syslog message. For example, 07/07/2009 12:42 192.168.1.1
page 13 Services Reference Manual: SolarWinds N-central
Previously in the SDK, variable names were configured in the format of a combination of the WMI Property and WMI class. For example, if the WMI Class was Class and the WMI Property was Property, the variable name would be $Property.Class which would be a unique name. If a new WMI Query was added and the same WMI Class and WMI Property were used, the SDK would configure the new variable with an incremental number such as $Property.Class.1 to ensure that the variable name was unique. Adding an incremental number to the end of a variable name was not considered an optimal method to ensure that variable names are unique and so when the SDK was incorporated into , this model was changed. Now with the creation of custom services, variable names are formatted as a combination of the WMI Namespace, WMI Class and WMI Property with the addition of validation to ensure the uniqueness of any variable names. With this new method in place, an example of this new configuration would be $Property.Class.root\cimv2\Ncentral.
SCHEDULE TAB
Interval Configure the schedule when the service will scan the target devices.
QUERIES TAB
Queries 1. Click Add. 2. Enter the WMI Namespace. 3. In the Variables in SELECT Statement table, click + to add variables to the query statement. 4. Edit the variables in the table by double-clicking the WMI Property. 5. Enter the FROM WMI Class. 6. From Calculate As, select the format for the data that the query will report from. 7. After WHERE, click + to add constraints for the query. 8. In the Constraints in WHERE Clause table, double-click the elements to edit the constraints. 9. Click Save.
To reorder the queries, click the up or down arrow to the left of each query.
DATA AND THRESHOLDS TAB
Metrics Configure a maximum of 30 metrics for each custom WMI service. 1. Enter the Metric Name. 2. Select one of the following:
n Variable to Use - Select if the service will not perform any calculations on the data gathered through WMI. This option requires selecting the appropriate variable.
n Calculation to Use - Enter the appropriate algebraic calculation if the service will perform calculations on the data gathered through WMI. 3. From the Data Type drop-down menu, select the appropriate value for the data reported by WMI.
If you select an inappropriate value for the Data Type, SolarWinds N-central will not accept the data reported by the Agent or Probe and the service will transition to a Stale state. 4. Select the appropriate Unit if the metric being measured should scale automatically based on the data collected. 5. Click Save.
To configure thresholds
page 14 Services Reference Manual: SolarWinds N-central
1. Select Use Mapping to map specific values or ranges of values to Normal, Warning, or Failed. 2. When you enable Use Mapping with a numeric Type of Data, you can specify numeric ranges (for example, 1,3,5, or 1,3-20,21,25,30-35). 3. Specify the appropriate thresholds for your service. If you do not want to set thresholds for this metric (for example, if it is a string value), clear the Configure Thresholds check box.
page 15 Services Reference Manual: SolarWinds N-central
Import and export custom services
Before you begin, download a service XML file either from the SolarWinds MSP Resource Center or from an alternate source. Import a custom service 1. Click Administration > Service Management > Custom Services. 2. Click Import. 3. Click Browse to locate the file. 4. Click Import Custom Service. Export a custom service 1. Click Administration > Service Management > Custom Services. 2. In the Action column for a specific service, click Export. 3. Save the service's XML file to the location you would like to use for storing custom service files. 4. Click OK.
page 16 Services Reference Manual: SolarWinds N-central
Custom Monitoring Services
Custom services function similarly to the services included with SolarWinds N-central, except that you can fine tune them to meet your needs. In the same way, you can find new custom services in the SolarWinds MSP Resource Center and import them. What do you want to do?
n Import custom monitoring services from the NRC n Create WMI-based custom monitoring services n Create AMP-based custom monitoring services n Create SNMP-based custom monitoring services n Apply custom monitoring services n Create an SNMP-based Custom Service using Asset Data n Add SNMP-based Custom Services to discovery jobs n Watch a video on building a custom WMI-based service n Watch video on building a custom AMP-based service n Watch a video on building a custom SNMP-based service
page 17 Services Reference Manual: SolarWinds N-central
Apply Custom Monitoring Services You can apply all custom monitoring services the same way. Once you have created them, you can apply to an individual device or added to a service template. Apply a custom monitoring service to one or more devices 1. Click View > All Devices and click the check box in the first column for the device (or devices) that you want to add a service. 2. Click Add Service. 3. Locate the service in the list and select the number of Instances of the service to apply and click Apply. 4. If necessary, click View > All Devices and click on the name of a device where you added this service. 5. Click Select Status on the Monitoring tab. 6. Click on the Service. It may take a few minutes for the service to begin retrieving data. 7. You can now edit the Service Details, Thresholds and Self-Healing parameters for this service as it applies to this specific device. Apply a custom monitoring service to a service template 1. Click Administration > Service Management > Service Templates. 2. Select the template that you want to add a custom service. It must apply to the appropriate device class for the service. 3. From the Service drop-down menu, select the custom monitoring service and click Add Service. 4. Edit the Details, Thresholds and Self-Healing parameters for the service. 5. Click OK, then Save.
page 18 Services Reference Manual: SolarWinds N-central
Create WMI-based Custom Monitoring Services WMI (Windows Management Instrumentation) is an implementation of the Web-Based Enterprise Management (WBEM) standard. It provides an access mechanism to a vast collection of Windows management data and methods on Windows Servers and Windows Workstations. Many of the services SolarWinds N-central is set up to monitor use WMI queries to collect performance information or asset information from Windows devices. If there is something you want to monitor that is not included in a built-in service, and it is stored in WMI, you can create your own WMI-based service. Creating WMI-based services requires knowledge of how the WMI protocol works. For information about WMI, see the Microsoft Developers' Network online library documentation. The steps below provides a very simple example which checks that the browser service has started and retrieves information about it. 1. Click Administration > Service Management > Custom Services. 2. Click Add > Service > WMI (Window Workstations and Windows Servers). 3. Enter a Name and Description for this service. 4. On the Queries tab, click Add . 5. Enter Win32_Service in the WMI Class field. 6. You now need to add the Win32_Service properties that you want to access: a. Double-click LoadPercentage1 and change to the first property that you want to monitor. Enter Started. b. To add another property, click the blue plus (+) button after Select. Change this to Status. c. In the same way, add Description.
page 19 Services Reference Manual: SolarWinds N-central
7. Set the constraint, so that this information is only retrieved where the service name is "Browser": a. Click the blue plus (+) button after Where. b. Double-click Deviceid1 and enter Name. c. Double-click CPU1 and change it to Browser.
d. Click Save. You have created a SELECT statement to retrieve the Started, Status, and Description values WHERE the service Name is Browser. 8. On the Data and Thresholds tab, click Add Metric. We now need to say how we want to handle this information. a. Enter the name you want to give the first metric. Enter Browser Started. b. For Variable to Use, select $Started.Win32_Service.root\cimv2. c. For Data Type, select Boolean.
d. Click Save. e. Repeat for Status and Description, using String as the Data Type. 9. Click Configure Thresholds for the Browser Started metric in the Action column.
page 20 Services Reference Manual: SolarWinds N-central
10. Select Failed in the If Test returns False, Display State As drop-down list box. 11. Select Normal in the If Test returns True, Display State As drop-down list box.
12. Click Save. 13. If you want to set the scanned frequency for this service, you can set it on the Schedule tab. 14. Click Save.
You can add this service to a template or to any Windows server or workstation as described in Apply Custom Monitoring Services.
page 21 Services Reference Manual: SolarWinds N-central
Create AMP-based Custom Monitoring Services An Automation Manager Policy (AMP), is a collection of Powershell-based Automation Objects combined into policy scripts. SolarWinds N-central comes with many AMPs already created but also provides you with the Automation Manager, a drag-and-drop automation designer, which enables you to quickly and easily create, edit, run, debug, and manage policies without any programming knowledge. For information on using the pre-defined AMPs and creating your own using the Automation Manager, see Using Automation Manager. You can create custom services using AMPs that have global output parameters. You can set the thresholds for these parameters to facilitate SolarWinds N-central features, such as notifications and self-healing.
Amp-based monitoring is only available for professional licensed Windows devices.
1. Click Administration > Service Management > Custom Services. 2. Click Add, select Service, then Automation Manager Policy. 3. Enter a Name and a Description for this Custom Service. 4. On the Details tab, click the Select Automation Policy drop-down menu and select the required policy. AMPs that are suitable for monitoring appear. 5. You can add a Service Identifier to uniquely identify this use of the AMP as a service. 6. The output parameter for the AMP are listed on the Thresholds tab. Depending on the AMPs outputs these will be: n String evaluations, where you can test if a string value occurs in the parameter and display the state of Normal, Warning or Failed accordingly.
n Ranges, where you can set the range that the value must be in to display the state of Normal, Warning, or Failed. 7. Click the Schedule tab to set the scanned frequency for this service. 8. Click Save.
You have now created a very simple AMP service. You can add this service to a template or to any Windows server or workstation as described in Apply Custom Monitoring Services.
page 22 Services Reference Manual: SolarWinds N-central
Create SNMP-based Custom Monitoring Services SolarWinds N-central provides many built-in services that query SNMP data to monitor the health of these devices. If you find that you need to access SNMP information not retrieved by an existing service, you can create your own SNMP-based custom services in SolarWinds N-central.
See also, SNMP OIDs used during Discovery.
1. Click Administration > Service Management > Custom Services. 2. Click Add > Service > SNMP. 3. Enter a Name and Description . 4. On the Queries tab, click Add and enter a Query Name. 5. Double-click the default OID Name and enter the name to use for the first OID. 6. Double-click on the default OID To Query value and enter the OID.
You can use a SNMP walk tool, such as iReasoning's MIB Browser, to connect to a network device and retrieve OIDs for specific devices. 7. Click the blue plus (+) button to add another OID, using the steps above. 8. Click Save. 9. On the Data and Thresholds tab, click Add Metric and enter a name for the first Metric . 10. Create the metric using the OIDs you added. You can select Variable to Use and select the OID, or select Calculation to Use and create a metric using one or more variables. 11. Select the Data Type and the Unit that applies to this variable or calculation. 12. Click Save. Repeat these steps if you require further metrics. 13. On the Data and Thresholds tab, click Configure Thresholds in the Action column. 14. Enter the ranges that define Normal, Warning and Failed states for this metric. You can redefine these when you add this service to a device. 15. Click Save and repeat to configure further metrics. 16. Click Save to return to the list of custom services.
You can now add this service to a template or to any Windows server or workstation. For more information, see Apply custom monitoring services.
page 23 Services Reference Manual: SolarWinds N-central
Create an SNMP-based custom service using asset data
Use asset discovery data to automatically configure SNMP-based custom services on any SNMP-enabled device. This will speed the application of custom services to save time when adding new devices. 1. Click Administration > Service Management > Custom Services. 2. Click Add > Service > SNMP and enter a service name. 3. Click Add and enter a Query Name. 4. Enter the OID names and identifiers to use by clicking the + button. 5. Click Let the Agent/Probe get the SNMP index and enter the OID value. 6. Click the check box for Enabling editing of this field in SolarWinds N-central. This makes the discovered property visible on the service and service template. 7. Click Save. 8. On the Queries tab, click the Identifier Options drop-down list box and select SNMP value to uniquely identify the instance of the service on the device. 9. Click Save.
You have now created the SNMP-based service. After you create the SNMP-based custom service in SolarWinds N-central, create a Service Template but do not apply it to the device. Run a Discovery Job against the device and apply the Service Template to it.
page 24 Services Reference Manual: SolarWinds N-central
Install and configure SNMP Install the SNMP softare 1. On the Windows Startmenu, go to Control Panel > Programs and Features > Turn Windows features on or off. 2. Select Simple Network Management Protocol (SNMP).
For Windows XP and Windows 2003, this is a sub-component of the Management and Monitoring Tools component.
Configure the SNMP Windows service 1. On the Windows Start menu, go to Programs > Windows Administrative Tools > Windows Services 2. Double-click the SNMP Service. 3. Click the Security tab. If the tab is unavailable, you need to reboot the computer. 4. Add a community string with "READ ONLY" access. 5. ClickAccept SNMP Packets from any host. 6. Click OK.
page 25 Services Reference Manual: SolarWinds N-central
Import custom monitoring services from the SolarWinds MSP Resource Center In addition to the monitoring services supplied with your installation of SolarWinds N-central, there are additional services available at the N-able Resource Center. You can download these and add them to individual devices, multiple devices or templates. 1. Go to the SolarWinds MSP Resource Center (https://nrc.n-able.com), and go to Community > Custom Monitoring. 2. Download the required service by right-clicking on the file name and clicking Save Target As. n If the file is a .zip file, you will need to unzip it and extract the .xml file it contains.
Zip files often contain technical documentation specific to the service. Some include PowerScript files. See the included documentation for a description of the scripts and how to use them. 3. Upload this custom service into SolarWinds N-central by clicking Administration > Service Management > Custom Services, and click Import.
For information on adding a service to a device or template, see Apply Custom Monitoring Services .
page 26 Services Reference Manual: SolarWinds N-central
Managing Services Add services Services are composed of metrics that monitor one aspect of a device. SolarWinds N-central services monitor customer devices, generate e-mail alerts and PSA tickets, and enable technicians to view the status of devices and troubleshoot errors. When adding services, SolarWinds N-central lists the services that are available based on the device's class, monitoring options, and the selected monitoring probe.
If a Workstation - Generic and a Workstation - Windows are selected, only the services that can be monitored by both types of device classes will be listed.
When adding services to multiple devices, SolarWinds N-central lists only the services that are available to all of the selected devices based on the device class, monitoring options, and selected monitoring Probe. Tthe number of instances displayed for each service is based on the lowest number remaining for all of the devices. 1. Click Views > All Devices. 2. Select the check box next to the device or devices to add services to. 3. Click Add Services. 4. Select the Monitoring Appliance. If you are adding services to more than one device, only the services available to all of the devices appear. 5. Specify the number of Instances for each service. 6. Click Apply.
The services are added to the device. If any of the selected services could not be added to all of the devices, a System Error screen displays those services. Ensure that the service's information appears on the Service Details tab and the Thresholds tab is accurate. Only services that have been enabled can be monitored on the status dashboards. Asigra backup service For the Backup Exec and Asigra Backup services, the Discovered Jobs screen will appears after clicking Apply. Select the check box next to the discovered backup jobs you want to monitor.
page 27 Services Reference Manual: SolarWinds N-central
Delete a service Remove a service that is being monitored on a device if it is no longer required for that device. 1. Click Views > All Devices. 2. In the Name column click the device name. 3. Click Monitoring > Status. 4. Select the check box next to the service you want to delete. 5. Click Delete, then OK.
SolarWinds N-central removes the monitoring service from the device.
page 28 Services Reference Manual: SolarWinds N-central
Disable services on a device If you want to temporarily stop the monitoring process, disable the service. Disabling the service retains the settings when you enable the service again. For example, you can disable the services on a device that is to be shut down for maintenance and then enable the services again once the device is back up and running, without having to reset the service details and thresholds. 1. Click Views > All Devices. 2. In the Name column, click a device. 3. Click Monitoring > Status. 4. In the Monitored column for the service that you want to disable, click the toggle icon.
The service monitoring is turned off for the device without deleting the service. The service state changes to No Data.
page 29 Services Reference Manual: SolarWinds N-central
Disable services Disable services you do not use to make it easier to see and select the most used services. By disabling the services you do not use, when applying services or create service templates, it is easier to see and access those most used services. For example, if your customers do not use Cisco appliances, disable those services so they will not appear in the list. When disabled, a service is removed from devices and dashboards. 1. Click Administration > Service Management > Service Control. 2. Select the check boxes next to the services to disable. 3. Click Disable, then OK.
The services are disabled and the Service Control screen appears with the updated status of the services and service groupings. In the service templates, the disabled services will not appear. If you disabled services that were set on any device, the services are removed from the devices.
page 30 Services Reference Manual: SolarWinds N-central
Enable a services on a device You can enable and monitor a service on a device that were disabled due to maintenance on the device. 1. Click Views > All Devices. 2. In the Name column of the All Devices view, click a device. 3. Click Monitoring > Status. 4. In the Monitored column for the service that you want to disable, click the toggle icon.
The service becomes enabled and begins monitoring the device.
page 31 Services Reference Manual: SolarWinds N-central
Generate a report on a service Generate a report for a service on a device to get an overall view of how the device is functioning. There are a number of default reports available. The selection of reports available for a service depends on what the service is monitoring. You can also export the report to PDF or CSV and email it. The reports available are:
n Security Incidents By Service n Service Metrics n Status Distribution n Detailed Status n Availability Of One Service On Multiple Devices n Availability Aggregated For One Service On One Device n Raw Monitored Data
If you generate the Availability Of One Service On Multiple Devices report, it will only display the results for the device you are editing.
1. Click Views > All Devices. 2. In the Name column click a device. 3. Click Monitoring > Status. 4. Click on the service name. 5. Click the Reports tab. 6. Select a report type from the drop-down list box. 7. Click Show Config to customize the report and export or email it.
page 32 Services Reference Manual: SolarWinds N-central
Regular expressions Regular expressions contain strings of characters and metacharacters specified by the user to find predetermined key words in a log file. Metacharacters are symbols that take the form of grammatical punctuation, numbers, and the alphabet. Metacharacters are used with character strings to increase the probability of finding keywords in a specified log file. Regular expressions are specified in the Service Details tab for services. The parameters for the regular expressions are specified in the Thresholds tabs. The table below describes the basic regular expressions that you can use.
META MATCH EXAMPLE CHARACTER
. Matches any single character b.t except newline. Scans for the line containing a b followed by any character and a t.
* Matches an expression that has 0 bt* or more of the preceding character. Scans for the line containing a b followed by 0 or more ts.
+ Matches an expression that has bt+ one or more of the preceding character. Scans for the line containing a b followed by 1 or more ts.
^ Matches the beginning of a line. ^bt Scans for the line that begins with bt.
$ Matches the end of a line. bt$ Scans for the line that ends with bt.
\ Prevents the function of the file1\.dll subsequent metacharacter. (The Scans for the line containing file1.dll. escape character) To allow the period to be a part of the line, the "\" prevents the period from functioning as a metacharacter.
[ ] Matches any character that is [Bb]t[0-9] within these brackets. Scans for the line that contains an upper or lowercase b, a lowercase t, followed by a digit that is between and including zero and nine.
? Matches an expression that has 0 bt? or 1 of the proceeding character. Scans for the line that contains a b that may or may not be followed by a t.
page 33 Services Reference Manual: SolarWinds N-central
About self-healing Self-healing is a pre-configured response and action to specific types of service failures. When a failure occurs, SolarWinds N-central automatically restarts the service or executes a script configured by the administrator to try to resolve the issue. The system then verifies if the problem has been resolved and sends the appropriate notifications.
When creating a Self Healing action that runs a script, and that script name contains spaces, you need to enclose the script name in quotes.
You cannot use self-healing on services that are in service groups or services monitored by the SolarWinds N-central server.
Self-healing at the device level is only available under the following conditions:
n The device where the service has been added is in Professional mode. n The operating system of the device is Microsoft Windows. n The device where the service has been added is being monitored by a Windows agent or probe. What do you want to do?
n Configure a service to use self-healing at the device level n Configure a service to use self-healing through service templates
page 34 Services Reference Manual: SolarWinds N-central
Backup Exec service
The Backup Exec service monitors the status of backups that have been performed by Symantec Backup Exec. Using the Open Database Connectivity (ODBC) protocol, the Backup Exec service can monitor up to 50 jobs. Backup Exec can discover the following job types by SolarWinds N-central and monitored by the Backup Exec service:
n Backup n Catalog n Duplicate to Tape n Report n Restore n TestRun n Utility n Verify
Service Type ODBC Instances on a 50 Device
Supported n Backup Exec version 9.x to 12.x Systems/Applications n Backup Exec 2010 to 2012 n Backup Exec 16 Device Class Server - Windows Monitored By Windows agent or Windows probe Timeout Value The time in seconds that the SolarWinds N-central server waits before considering the ODBC connection a failure. The default is 5 seconds. Failed Job Status List The list of Backup Exec job status codes that will make the service transition to a failed state. Warning Job Status The list of Backup Exec job status codes that will make the service transition to a warning List state. Job Timeout Job Timeout measured in hours. If the Backup Exec job has not run in the specified time, the Backup Exec service will transition to a failed status. Scan Interval in The time between each scan. The default scan interval for Backup Exec is 30 minutes. Minutes Repeat Weekly on The scan is repeated weekly on the specified days. Days Repeat Monthly on The scan is repeated monthly on the specified days. Days
page 35 Services Reference Manual: SolarWinds N-central
Metrics
METRIC NAME DESCRIPTION Backup Exec Job Return Code A numeric value that indicates the status of the backup. Elapsed Time The amount of time taken to perform the backup. Number of directories backed up Number of files backed up Number of files skipped The details of the backup. Number of files corrupted Number of files in use Total bytes backed up Byte rate (MB per minute) The speed of the backup. Backup Exec job status codes You can view the return values for the associated job status on the status screen for the Backup Exec service. These values represent specific critical issues.
1 Job is terminal due to cancellation.
2 Job has been completed by the engine and is waiting on final disposition.
3 Job is terminal with success but there are some exceptions.
4 Job has been sent for execution.
5 Job is in a hold state.
6 Job is terminal with an error.
7 The schedule for the task is invalid.
8 The time window is mutually exclusive thus job will never run.
9 Job is eligible for dispatch and is late.
10 Date of job makes it eligible to run, but time is not in window.
11 DEPRECATE: Set as sub-status on READY job now.
12 The job needs to be dispositioned to an actual state.
13 The system forced recovery of the job.
14 Job has been disabled in the system.
15 The job will be restarted with checkpoint restart enabled, this value is only set in job history summary.
16 Job is currently running on server.
17 Job is eligible for dispatch. page 36 Services Reference Manual: SolarWinds N-central
18 The job has a due date in the future.
19 Job is terminal with success.
20 Job is ready, but another higher precedence task is eligible to run.
21 The job was aborted due to AbortThreshold timeout.
22 The job needs to have the due date calculated.
23 The job is linked to another job so will not start until master job is finished.
24 The job failed somewhere between RunJob() and before it was inserted on remote machine.
25 The job's scheduled start time has passed but a dependent job has not yet completed.
page 37 Services Reference Manual: SolarWinds N-central
Setting Up the SQL Server in Mixed Mode Before the Backup Exec service can monitor the results of the discovered jobs performed by Microsoft SQL Server database, you must set up SQL Server in mixed mode. Review the changes below, approved, and implemented by a Microsoft certified professional. For more information on switching SQL Server to Mixed Mode, contact Microsoft Corporation. 1. Click Start > All Programs > Microsoft SQL Server > Enterprise Manager. 2. Navigate to the appropriate SQL Server Group. 3. In the contents pane, right-click the appropriate SQL server. 4. Click Properties and click the Security tab. 5. Under the Security heading, locate the Authentication section and select SQL Server and Windows. 6. Click OK.
page 38 Services Reference Manual: SolarWinds N-central
Advantages of monitoring Backup Exec with SolarWinds N- central Monitoring Backup Exec is typically a source of frustration for many service providers. It means dedicating a technician's time to logging into the Backup Exec console every day to check the status of each job; an inefficient, repetitive, and expensive workflow. SolarWinds N-central’s Backup Exec service eliminates this frustration and makes better use of your technician’s time by automating how they monitor Backup Exec. When a Backup Exec job fails, the Backup Exec service notifies a technician and automatically provided with trending data that allows him to resolve the issue quickly. The SolarWinds N-central Backup Exec service can monitor up to 50 jobs on a device. For each job, the Backup Exec service monitors a number of critical metrics, including:
n the status of the backup job, n the elapsed time, number of files and directories that have been backed up, n the number of files that have been skipped or corrupted, n the number of files that are in use, n the total data backed up, and n the file transfer rate.
page 39 Services Reference Manual: SolarWinds N-central
How SolarWinds N-central gets Backup Exec data The system has three main components: the Backup Exec database, the Windows probe or agent, and the SolarWinds N-central server.
SQL database Backup Exec commits all information about its backup jobs to an SQL database. By default, Backup Exec installs itself on an SQL Express database. You can also install Backup Exec on a SQL Server database. Windows probe or Windows agent You can use either a Windows probe or a Windows agent for the Backup Exec service. The monitoring agent or probe connects to the SQL database using the Open Database Connectivity (ODBC) protocol and reads the job information. SolarWinds N-central server The SolarWinds N-central server receives updates at a predefined scan interval from the monitoring agent or probe. The SolarWinds N-central server then updates the Backup Exec service with the new information and sends notifications as configured.
page 40 Services Reference Manual: SolarWinds N-central
Discovering Backup Exec Jobs Before adding the Backup Exec service to a device, you need to perform a discovery. This will configure the Backup Exec database to permit the SolarWinds N-central Windows agent and Windows probe to gather data about the Backup Exec jobs from it. 1. Click Views > All Devices and click the Name of the device that is running Backup Exec. 2. On the Properties tab, select Monitor Backups in the Monitoring Options section. 3. Select Backup Exec. 4. Click Advanced Configuration to display all of the Backup Exec properties. 5. In the Backup Exec section, specify the Database Name. The User Name and Password fields are pre- configured by default. 6. Click Save. 7. Click Discover to tell the agent or probe to discover the backup jobs on the device.
page 41 Services Reference Manual: SolarWinds N-central
Configuring the Backup Exec Service After completing the discovery step, you can add the Backup Exec service to the device and begin monitoring the backup jobs. 1. Click View > All Devices. 2. Click the Name of the device running Backup Exec. 3. Select the Status tab and click Add. 4. Enter 1 in the Instances field for the Backup Exec service and click OK. 5. Click the Backup Exec service. 6. Select the check box beside each job you would like to monitor. 7. Click Add.
page 42 Services Reference Manual: SolarWinds N-central
Configuring Backup Exec Monitoring Schedule The default configuration for the Backup Exec service is to monitor backups that occur once a day. If your backups are only once every few days, or once a week, it is important to change the Backup Exec service to scan only after completing a new backup, otherwise the Backup Exec service will report a Failed state, because the Job Timeout value will exceed the default of 24 hours. To re-configure the monitoring schedule of the Backup Exec service, click the Service Details tab, and select the appropriate schedule from the Scanning section.
Tip: Run a Backup Exec service scan one hour after the backup usually finishes. This will ensure that the service will not scan while the backup is still running.
page 43 Services Reference Manual: SolarWinds N-central
AV Defender Behavioral Scan Events service
The AV Defender Behavioral Scan Events service reports on security-related issues that AV Defender has detected and neutralized. Basic service information
Service Type API
Max instances on each device 1
Supported Systems/Applications Any Windows device that has AV Defender installed.
Supported Device class Laptops – Windows, Servers – Windows, Workstations - Windows
Monitored By Windows agents Troubleshooting
ISSUE CORRECTIVE ACTION Misconfigured Confirm that AV Defender has been successfully installed on the device. Monitoring The AV Defender Behavioral Events service is designed to monitor in near-real time for items blocked by the Behavioral Analysis module of AV Defender. The service will trigger a failure or warning based on the type of the event that was blocked. The service is an event-based service. As such, the service will always show a Normal status in the N-central UI, as Failed and Warning states only last long enough to trigger a notification. This behavior allows the AV Defender Behavioral Events service to generate multiple notifications or tickets if more than one event is detected within a scan interval. This service should always be associated with a notification profile that has a zero minute delay, to ensure that all events detected by the service generate a notification or ticket. Configuration There are four possible Scans that the AV Defender Behavioral Scan Events service can analyze:
n IDS Application Blocked n AVC Application Blocked n AVC Exploit Blocked n Other The only available actions to monitor is “Blocked”. By default, The AV Defender Behavior Scan Events triggers a failure when any of the four event types return a Blocked action.
page 44 Services Reference Manual: SolarWinds N-central
Active Directory service
The Active Directory service monitors the performance of the Active Directory LDAP service.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Windows 2000, Windows 2003, and Windows 2008 Domain Controllers.
Device Class Server - Windows
Monitored By Windows agents
Scan Interval 15 minutes Properties queried and calculations performed
NameSpace root\cimv2
WMIClassName Win32_PerfRawData_NTDS_NTDS
Var.0.Property LDAPBindTime
Var.1.Property LDAPSuccessfulBindsPersec
Var.2.Property LDAPWritesPersec
Var.3.Property LDAPUDPoperationsPersec
Var.4.Property LDAPActiveThreads
Var.5.Property LDAPClientSessions
Var.6.Property DRAInboundObjectUpdatesRemaininginPacket
Var.7.Property DRAPendingReplicationSynchronizations Status details
STATUS DESCRIPTION DETAIL Bind Time Time taken for the last successful LDAP bind. (ms)
Successful Number of LDAP binds since last reboot. Binds
Writes The rate that LDAP clients perform write operations, per second.
UDP The number of UDP operations the LDAP server is processing. Operations
Active The current number of threads in use by the LDAP subsystem of the local directory service. Threads
page 45 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL Client The number of connected LDAP client sessions. Sessions
Inbound The number of object updates received in the current directory replication updates packets that have Updates in not yet been applied to the local server. This counter tells you if the monitored server is receiving Packet changes, and is taking too long to apply them to the database.
Pending The number of directory synchronizations that are in queue for this server. This counter identifies Replication replication backlog - the larger the number, the larger the backlog. Syncs
page 46 Services Reference Manual: SolarWinds N-central
Active Directory 2012 - DRA service
The Active Directory 2012 - DRA service monitors replication activity by measuring the performance of the Active Directory and the Directory Replication Agent (DRA).
Service Type WMI
Instances on a Device 15
Supported Systems/Applications Windows 2012
Device Class Server - Windows
Monitored By Windows agents
Scan Interval 15 minutes
STATUS DETAIL DESCRIPTION DRA Inbound Full Sync The number of objects remaining until the full synchronization process is completed. Objects Remaining
DRA Inbound Values DNS The number of values of object properties received per second from replication Only (Requests/Second) partners where the values are for object properties that belong to distinguished names.
DRA Outbound Values The number of values of object properties sent per second to replication partners DNS Only where the values are for object properties that belong to distinguished names. (Requests/Second)
DRA Pending Replication The number of directory synchronizations that are queued for this server but are not Synchronizations yet processed.
DS Directory Reads The number of directory reads performed per second. (Requests/Second)
DS Directory Writes The number of directory writes performed per second. (Requests/Second)
LDAP Searches The number of search operations measured per second performed by LDAP clients. (Requests/Second)
LDAP Successful Binds The number of LDAP bindings measured per second that occurred successfully. (Requests/Second)
page 47 Services Reference Manual: SolarWinds N-central
Active DSOs (Cisco) service
The Active DSOs (Cisco) service monitors the number of digital switch over (DSO) channels on a Cisco Voice Gateway device that are currently active.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Cisco Voice Gateway devices.
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
OBJECT DESCRIPTORS NUMERICAL OID $ActiveDSOs 1.3.6.1.4.1.9.10.19.1.1.4
STATUS DETAIL DESCRIPTION ActiveDSOs Number of active DSO channels on the specified device. Number of active DSOs:
n Normal = 0 to 99 n Warning = 100 to 999 n Failed = more than 1000
page 48 Services Reference Manual: SolarWinds N-central
ADTRAN - Device Health service
The ADTRAN - Device Health service monitors the health of ADTRAN switch/router devices.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications ADTRAN Switch/Router devices.
Device Class Switch/Router
Monitored By Windows probes
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Device Health Summary 1.3.6.1.4.1.664.5.53.1.1.7 Device Health is mapped as:
n Okay: 0 to 3 n Warning: 4 n Failed: 5, 6
Device Health State Returns the following states:
n (1) Unknown n (2) Unused n (3) OK n (4) Warning n (5) Critical n (6) Non-recoverable
page 49 Services Reference Manual: SolarWinds N-central
ADTRAN - Memory service
The ADTRAN - Memory service monitors the heap memory usage of an ADTRAN switch/router device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications ADTRAN Switch/Router devices
Device Class Switch/Router
Monitored By Windows probes
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Total Memory 1.3.6.1.4.1.664.5.53.1.4.7 The total memory for that memory pool.
Memory Used Total Memory - Free Heap Memory The amount of used memory.
Percent of Memory [1- (Free Heap Memory / Total The amount of used memory as a percentage of the Used Memory)] x 100 total memory.
Free Heap 1.3.6.1.4.1.664.5.53.1.4.8 The amount of available memory. Memory
page 50 Services Reference Manual: SolarWinds N-central
Agent Status service
The Agent Status service monitors the time since the agent last checked in. This service only monitors devices that have an agent. Agent Status service will also automatically begin monitoring the device when an agent is installed. When Agent Status is first added to a device, the service is in a Misconfigured state until the agent first makes contact with the central server. During the monitoring process, the central server queries the time of the most recent connection of a device's agent to the network. This is compared to the current time and the resulting difference is then compared to the specified threshold values so that it can be represented by the appropriate state on the status dashboard for the service. If the time difference between the previous and current connection is within 10 minutes, the service state will display Normal; between 10 and 20 minutes, Warning; and over 20 minutes, Failed. If this service enters a Failed state, the central server disconnects all other services with the exception of:
n System Check-In n System Replacement n System Warranty To prevent services from disconnecting, ensure that the Unscheduled Downtime check box on the Add Device screen or on the Properties tab of the Edit Device screen is not selected.
This service cannot use Self Healing.
You can choose to show this service in the Active Issues view.
Service Type Central server asset
Instances on a Device 1
Supported All available agents Systems/Applications
Device Class Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Central server asset
Scan Interval 5 minutes Status details
STATUS DESCRIPTION DETAIL Check-In The threshold that compares the time difference between the current time and the most recent Interval connection to the specified threshold values.
page 51 Services Reference Manual: SolarWinds N-central
Application Compliance service
The Application Compliance service ensures that your organization's network complies with your organization's software policies. By ensuring continued policy compliance, this service helps you protect your organization from outside threats and the use of unauthorized software. During the monitoring process, the Application Compliance service collects the names of the installed applications from the Windows registry and compares them with a default list of applications that is approved by your organization. Your administrator enters the list of names. When the service detects an application name that is not on the list of approved application names, it changes to a Failed state.
This service cannot use Self Healing.
Service Type WMI
Instances on a 1 Device
Supported Windows Systems/Applications
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Central server asset
Scan Interval 1440 minutes (24 hours)
Application List A list of the applications that you would like to monitor. Use the selection buttons to move applications from the Discovered list to the Allowed list to monitor them. Properties queried and calculations performed
Namespace root\default
WMI Class StdRegProv
WMI Property 0 DisplayName Status details
STATUS DETAIL DESCRIPTION Applications are in Compliance Displays the list of applications that are non-compliant. Notifies when an unauthorized application has been identified.
page 52 Services Reference Manual: SolarWinds N-central
APC PDU service
The APC PDU service monitors the phase status of the user-specified phase (circuit) and reports the low/medium/high thresholds for that sensor, as dictated by the PDU.
Service Type SNMP
Instances on a Device 3
Supported Any APC PDU device that supports the PowerNet392 SNMP MIB. Systems/Applications
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Phase Number Enter the phase number (1, 2, or 3) to monitor. The default is 1. The only asccepted values are 1, 2, or 3. OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION Load (Amperes) 1.3.6.1.4.318.1.1.12.2.3.1.1.2/ 10
Maximum Acceptable Load (Amperes) 1.3.6.1.4.318.1.1.12.2.2.1.1.4
Phase Utilization ((Load/10)/Maximum Acceptable Load)*100
page 53 Services Reference Manual: SolarWinds N-central
APC UPS – Humidity service
The APC UPS - Humidity service monitors the status and reported humidity of the specified environment sensor.
Service Type SNMP
Instances on a 1 Device
Supported Any APC UPS device that supports the PowerNet392 SNMP MIB, and has an attached Systems/Applications environment sensor that reports humidity readings.
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Environment Sensor Enter the name of the monitored environment sensor. To find the name of the environment sensor attached to the UPS, query the UPS device with the .1.3.6.1.4.1.318.1.1.10.2.3.2.1.2 SNMP OID. The default name is Int Sensor. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Humidity 1.3.6.1.4.1.318.1.1.10.2.3.2.1.6 The humidity reading .
Sensor Status 1.3.6.1.4.1.318.1.1.10.2.3.2.1.3 Monitors the status of the humidity sensor.
Sensor Status 1.3.6.1.4.1.318.1.1.10.2.3.2.1.3 Displays the current status of the humidity sensor. Two Description values can be returned: Connected or Disconnected.
page 54 Services Reference Manual: SolarWinds N-central
APC UPS Temperature service
The APC UPS Temperature service monitors the status and reported temperature of the specified environment sensor.
Service Type SNMP
Instances on a 1 Device
Supported Any APC UPS device that supports the PowerNet392 SNMP MIB. Systems/Applications
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Environment Sensor Enter the name of the monitored environment sensor. To find out the name of the environment sensor attached to the UPS, query the UPSdevice with the .1.3.6.1.4.1.318.1.1.10.2.3.2.1.2 SNMP OID. The default name is Int Sensor. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Temperature 1.3.6.1.4.1.318.1.1.10.2.3.2.1.4 Displays the temperature reading reported by the temperature sensor.
Temperature Unit 1.3.6.1.4.1.318.1.1.10.1.2.2.1.5 Displays the Temperature Unit : Celsius or Fahrenheit.
Sensor Status 1.3.6.1.4.1.318.1.1.10.2.3.2.1.3 Monitors the status of the temperature sensor.
Sensor Status 1.3.6.1.4.1.318.1.1.10.2.3.2.1.3 Displays the current status of the temperature sensor: Description Connected or Disconnected.
page 55 Services Reference Manual: SolarWinds N-central
APC UPS service
The APC UPS service provides basic and advanced APC UPS battery information.
Service Type SNMP
Instances on a Device 1
Supported Any PowerNet-MIB Compliant Device from APC. Systems/Applications
Device Class Server - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows.
>Monitored By Windows Probes
Scan Interval 15 minutes OID/Calculation
METRIC OID/CALCULATION DESCRIPTION NAME Status 1.3.6.1.4.1.318.1.1.1.2.1.1 The status of the UPS battery.
n Unknown (1) : Warning n batteryNormal (2) : Normal n batteryLow (3) : Failed A Battery Low (3) value indicates the UPS will be unable to sustain the current load, and its services will be lost if power is not restored.
Time On 1.3.6.1.4.1.318.1.1.1.2.1.2 The elapsed time since the UPS has switched to battery power.
Last 1.3.6.1.4.1.318.1.1.1.2.1.3 The date when the UPS system's batteries were last replaced, in Replaced mm/dd/yy format. For Smart-UPS models, this value is originally set in the factory. When replacing the UPS batteries, the administrator should reset this value.
Capacity 1.3.6.1.4.1.318.1.1.1.2.2.1 The remaining battery capacity expressed as a percentage.
Temperature 1.3.6.1.4.1.318.1.1.1.2.2.2 The current internal UPS temperature, expressed in degrees Celsius.
Time 1.3.6.1.4.1.318.1.1.1.2.2.3 The run time remaining before battery exhaustion. Remaining
Replace 1.3.6.1.4.1.318.1.1.1.2.2.4 Indicates if the UPS batteries need to be replaced. Indicator n noBatteryNeedsReplacing(1) : Normal n batteryNeedsReplacing(2) : Failed
page 56 Services Reference Manual: SolarWinds N-central
AV Defender Security Event service
This service applies to both the Managed AV Defender Security Event and the Unmanaged AV Defender Security Event. The AV Defender Security Event service reports on security events when they are detected on a device that has AV Defender installed .
This service cannot use Self Healing.
Service Type Custom API
Instances on a Device 1
Supported Systems/Applications Any device with AV Defender installed.
Device Class Workstation - Windows, Laptop - Windows, Server - Windows
Monitored By Windows agents
Scan Interval 5 minutes
Configure this service by selecting the detection types that AV Defender are reporting on, then choose the actions to take on detected security threats. Configure the AV Defender Event service
1. Click View > All Devices in the navigation pane. 2. In the Name column, click the device that you want to edit a service. 3. Click the Monitor > Status tabs. 4. In the Service column, click the AV Defender Security Event service. 5. Click the Service Details tab. 6. Under Malware Detection Type, select the detection types in the left-hand column that you want to monitor. 7. Click > to move the type to the right-hand column. 8. Under Monitoring Actions, select the actions and status you want returned by the AV Defender Security Event service based on the column where the action is listed as: n To return a Normal status, click Move to Normal
n To return a Warning status, click Move to Warning
n To return a Failed status, click Move to Failed 9. Click OK.
Most detected phishing events correspond to items that have been handled by the client. Any that get through are part of an email archive, or because a reboot is required. In both cases, the malware has been contained, so there's no reason for alarm. If an alarm keeps reappearing, there may be something that the client has not yet detected.
page 57 Services Reference Manual: SolarWinds N-central
Notification numeric values Notifications for the AV Defender Security Event service use numeric values to report different elements of security events with the values mapped as follows by default:
MALWARE TYPE MALWARE THREAT TYPE MALWARE STATE MALWARE TAKEN ACTIONS 1 = File 0 = Virus 1 = Present 1 = Deny/Ignore 2 = HTTP 1 = Spyware 2 = Deleted 3 = Disinfect 3 = Cookie 2 = Adware 3 = Blocked 5 = Delete 4 = POP3 3 = Spam 4 = Quarantined 7 or 9 = Move To Quarantine 5 = SMTP 4 = Rootkit 5 = Cleaned 10 = Disinfect Only 6 = Process 5 = Diar 7 = Boot Sector 6 = Application 8 = Registry 7 = Archive Bomb 9 = Stream
page 58 Services Reference Manual: SolarWinds N-central
AV Defender Status service
The AV Defender Status service monitors:
n Installation Status, n Whether AV Defender’s Definition Files are up-to-date, n Whether or not AV Defender is up-to-date, n Detected Errors, n The Number of Days Since the Last Successful Scan.
Service Type Custom API
Instances on a 1 Device
Supported Any device on which AV Defender or Bitdefender Cloud Security for Endpoints version 3.5 Systems/Applications is installed.
Device Class Workstation - Windows, Laptop - Windows, Server - Windows
Monitored By Windows agents
Scan Interval Scans are conducted based on scan tasks that can be started either manually or based on a schedule. The scan interval is the number of minutes between scans that the Windows agent will report data for this service provided that none of the following antivirus actions or issues are detected:
n Installation, n Upgrade, or n Signature update. If any of the antivirus actions or issues listed above are detected, the Windows agent will report the information immediately.
Protection This button indicates the state of AV Defender on the device. Clicking the button will enable or disable AV Defender. For example, if the button shows ON, clicking it will turn AV Defender OFF.
Run Scan Click to run a scan immediately. Status details
STATUS DETAIL DESCRIPTION Installation Status The current status of the installation of AV Defender on the device. The thresholds for this scan detail are:
n Normal n Warning n Failed
Protection Status The current status of AV Defender's protection of the device from security threats. page 59 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION The thresholds for this scan detail are:
n Normal n Warning n Failed
Detected Errors The current status of security threats detected by AV Defender. The thresholds for this scan detail are:
n Normal n Warning n Failed
Detected Errors The security engine errors detected.
Last Successful Scan The date and time at which the last successful security scan was carried out. Time
Days since last The amount of time that has passed since the last successful security scan was carried successful scan (or out. If no security scans have been performed since the service was added to the device, from installation date if this value will indicate the amount of time in days since AV Defender was successfully no scans have been installed. performed since 302_SCAN_LOG service was added) The AV Defender Status will not populate this value until a log file is created on the local device in the folder C:\Program Files(x86)\N-Able Technologies\Tools\AVDefenderEvents\. AV Defender will send this information to the agent once actioned. The date of Days Since last Scanned uses the date the 302_SCAN_LOG file was created and subtracts the current Unix(Epoch) time.
Last Successful Scan Specific results detected by the last successful security scan. Additional information on Result detected security threats can be displayed on the Reports tab of the AV Defender Events service.
Product Is Licensed The license status of AV Defender indicated as either True or False.
Antivirus - Anti- The installation status of the anti-malware module of AV Defender indicated as either malware True or False.
Signature Age (In The amount of time (in days) that has passed since the signature file was updated. Days)
Firewall The installation status of the firewall module of AV Defender indicated as either True or False (0 = False, 1 = True).
User Control The installation status of the user control module of AV Defender indicated as either True or False (0 = False, 1 = True).
Privacy Control The installation status of the privacy control module of AV Defender indicated as either True or False (0 = False, 1 = True).
Product Update The status of automatic updates to AV Defender indicated as either Yes or No. Enabled
page 60 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Last Product Update The date and time of the last successful update to AV Defender.
Product Version The current version of the AV Defender engine installed on the device.
Product Update Error A numeric code indicating any errors with updates to AV Defender. Code
Product Update Error A description of any errors with updates to AV Defender. Message
Definitions Up To Date Whether AV Defender definition files are current indicated as either Yes or No.
Scanning Enabled The operational state of security scanning indicated as either Yes or No.
Enabled Components The AV Defender modules that are currently enabled on the device.
Installed Components The AV Defender modules that have been successfully installed on the device.
page 61 Services Reference Manual: SolarWinds N-central
AV Status service
The AV Status service provides consolidated management of antivirus applications. The service reports the following information for antivirus software:
n product name, n scanning status, n current status of updates, and n version information.
To add the AV Status service to a device, you must run the AV Security script available in the SolarWinds MSP Resource Center.
Service Type WMI
Instances on a 1 Device
Supported Windows XP, Windows Vista Systems/Applications
Device Class Laptop - Windows, Server - Windows, Workstation - Windows
Monitored By Windows probe, Windows agent
Service Description This service uses the root\SecurityCenter WMI class on a Windows XP/Vista workstation to establish the Antivirus Product name, Scanning status, Up-to-date status, and Version number.
Scan Interval 15 minutes (default), 60 minutes (maximum) (Minutes) Properties queried and calculations performed
Namespace root\SecurityCenter
WMI Class AntiVirusProduct
WMI Property 0 DisplayName
WMI Property 1 onAccessScanningEnabled
WMI Property 2 productUptoDate
WMI Property 3 versionNumber Status details
STATUS DETAIL DESCRIPTION Antivirus Product Name The monitored antivirus software. It normally includes both the vendor name and the product name.
page 62 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Virus Scanning Indicates whether the antivirus software is currently actively scanning or disabled. Enabled
Antivirus Product Indicates whether the virus dictionary being used by the antivirus software is current or UptoDate outdated.
Version Number The release identifier of the monitored antivirus software.
page 63 Services Reference Manual: SolarWinds N-central
Battery Status (NetApp) service
The Battery Status (NetApp) service monitors the health of the NVRAM battery in a NetApp SAN. Basic service information
Service Type SNMP
Supported Systems/Application Any NetApp device with SNMP enabled.
Max Instances on each device 1
Supported Device class Switch/Router, other
Monitored by Windows probe Troubleshooting
ISSUE CORRECTIVE ACTION Misconfigured Check the following:
n You have the correct SNMP community string specified for the device. n The correct SNMP index has been specified on the Service Details tab (the correct SNMP index can be found by querying the NetApp SAN with the 1.3.6.1.4.1.789.1.2.5.1 SNMP OID) Metrics
NAME OID USED DEFAULT THRESHOLDS Battery 1.3.6.1.4.1.789.1.2.5.1 Normal: 1 (ok) Status Warning: Partially Discharged (2), Near End of Life (5) Failed: Fully Discharged (3), Not Present (4), At End of Life (6), Unknown (7)
page 64 Services Reference Manual: SolarWinds N-central
BES Message status service
The BES Message Status service monitors the following message statistics on a Blackberry Enterprise Server:
n the number of failed messages, n the number of pending messages, n the number of expired messages, n the number of messages sent per minute, and, n the number of messages received per minute.
Service Type SNMP
Instances on a 10 Device
Supported Any BLACKBERRYSERVER-MIB compliant device Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
SRP Identifier The Server Routing Protocol (SRP) Identifier is a unique value used to register and authenticate the BlackBerry Enterprise Server on the network. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Failed Messages 1.3.6.1.4.1.3530.5.25.1.27 Tthe number of messages to hand-held devices that have failed.
Expired Messages 1.3.6.1.4.1.3530.5.25.1.26 The number of messages to hand-held devices that have expired.
Pending Messages 1.3.6.1.4.1.3530.5.25.1.25 The number of messages pending for delivery to hand- held devices.
Messages Sent per 1.3.6.1.4.1.3530.5.25.1.207 The total number of messages sent from hand-held Minute devices per minute.
Messages Received per 1.3.6.1.4.1.3530.5.25.1.208 The total number of messages delivered to hand-held Minute devices per minute.
BES Instance Name 1.3.6.1.4.1.3530.5.20.1.2 The BlackBerry Enterprise Server's unique SRP identifier.
page 65 Services Reference Manual: SolarWinds N-central
BIOS (Dell iDRAC) service
The BIOS (Dell iDRAC) service monitors the BIOS firmware interface of a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a Device 100
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller Systems/Applications (iDRAC).
Device Class for CPU (SNMP) Servers - Management Interface
Monitored By Windows agent
Scan Interval 5 minutes
SNMP Index Enter or select the name of the SNMP index to be used by this service.
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Release $releaseDate 1.3.6.1.4.1.674.10892.5.4.300.50.1.7 The release date of the system Date BIOS.
Version $version 1.3.6.1.4.1.674.10892.5.4.300.50.1.8 The specific version identifier of the system BIOS.
Status $status 1.3.6.1.4.1.674.10892.5.4.300.50.1.5 The current status of the system BIOS mapped as: 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable.
page 66 Services Reference Manual: SolarWinds N-central
CCM Call Mgr Status service
The Cisco CallManager (CCM) Call Mgr Status service monitors the availability of the CCM sub-applications. These sub-applications include the CallManager, Call Dispatcher, TFTP Service, and Messaging Interface.
This service cannot use Self Healing.
Service Type SNMP Instances on a 1 Device Supported Cisco® CallManager Versions 4.x to 6.x Systems/Applications Device Class Server - Windows, Switch/Router Monitoring Probe Windows probe Scan Interval 15 minutes ccmStatus Index The index corresponding to the row in the ccmTable that contains the ccmStatus. The index is typically a value of 1 or 2, but can also be an integer. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Call Manager 1.3.6.1.4.1.9.9.156.1.1.2.1.5 The host name of the CallManager. Status
Call Manager 1.3.6.1.4.1.9.9.156.1.1.2.1.2 The current status of the CCM server. The CCM server is Name available if the SNMP agent received a system up event from the local CCM. The statuses are mapped as:
n Failed: 3 n Warning: 0,1,4-4294967295 n Normal: 2 The meaning of the statuses:
n 1: Unknown – The status cannot be determined n 2: Up – Call manager is up n 3: Down – Call Manager is down
Call Manager 1.3.6.1.4.1.9.9.156.1.1.2.1.4 The version number of the CallManager software. Version Number
Call Manager 1.3.6.1.4.1.9.9.156.1.1.2.1.8 The unique ID of the Cluster to which this CallManager belongs. Cluster Name
page 67 Services Reference Manual: SolarWinds N-central
CCM Conference Registration service
The Cisco CallManager (CCM) Conference Registration service monitors the state of all of the conference media devices that are connected to the CCM server. This includes the media that have been registered, unregistered, or have lost contact with the CCM manager. In addition, this service monitors the number of registration requests that have been rejected by the CCM server.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Cisco CallManager Versions 4.x to 6.x
Device Class Server - Windows
Monitoring Probe Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Registered Media 1.3.6.1.4.1.9.9.156.1.5.11 The total number of registered conference media devices that Devices are present in the network.
Unregistered 1.3.6.1.4.1.9.9.156.1.5.12 The total number of conference devices that have been Media Devices removed or have lost contact with the CCM server.
Rejected Media 1.3.6.1.4.1.9.9.156.1.5.13 The total number of conference devices that have been Devices configured incorrectly.
page 68 Services Reference Manual: SolarWinds N-central
CCM CTI Registration service
The Cisco CallManager (CCM) Computer Telephony Interface (CTI) Registration service monitors the state of the CTI devices that are connected to the CCM server. This includes the CTI devices that have been registered, unregistered, or have lost contact with the CCM manager. This service also monitors the number of registration requests that have been rejected by the CCM server.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Cisco CallManager Versions 4.x to 6.x
Device Class Server - Windows
Monitoring Probe Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Registered CTI 1.3.6.1.4.1.9.9.156.1.5.14 The total number of registered CTI devices that are present in Devices the network.
Unregistered CTI 1.3.6.1.4.1.9.9.156.1.5.15 The total number of CTI devices that have been removed or Devices have lost contact with the CCM server.
Rejected CTI 1.3.6.1.4.1.9.9.156.1.5.16 The total number of CTI devices that have been configured Devices incorrectly.
Object Identifiers (OIDs)
n 1.3.6.1.4.1.9.9.156.1.5.14 ccmRegisteredCTIDevices n 1.3.6.1.4.1.9.9.156.1.5.15 ccmUnregisteredCTIDevices n 1.3.6.1.4.1.9.9.156.1.5.16 ccmRejectedCTIDevices
page 69 Services Reference Manual: SolarWinds N-central
CCM Gateway Registration service
The Cisco CallManager (CCM) Gateway Registration service monitors the state of all gateway devices that are connected to the CCM server. This includes the gateway devices that have been registered, unregistered, or have lost contact with the CCM manager. This service also monitors the number of registration requests that have been rejected by the CCM server.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Cisco CallManager Versions 4.x to 6.x
Device Class Server - Windows
Monitoring Probe Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Registered 1.3.6.1.4.1.9.9.156.1.5.8 The total number of gateways that are registered with the CCM Gateways server.
Unregistered 1.3.6.1.4.1.9.9.156.1.5.9 The total number of unregistered gateways that have been Gateways removed or have lost contact with the CCM server.
Rejected 1.3.6.1.4.1.9.9.156.1.5.10 The total number of gateways that have been configured Gateways incorrectly.
page 70 Services Reference Manual: SolarWinds N-central
CCM Group Table (Cisco) service
The CCM Group Table (Cisco) service monitors the name of the CallManager Group and whether or not the group is the default TFTP server group.
Service Type SNMP
Instances on a 1 Device
Supported Any Cisco device that provides VPN capabilities. Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 30 minutes
ccmGroupName Type the name of the CUCM (Cisco Unified Communications Manager) server. For a list of the ccmGroup attached to a CUCM server, query 1.3.6.1.4.1.9.9.156.1.1.1.1.2 SNMP OID. OID/Calculation
OBJECT STATUS DETAIL NUMERICAL OID DESCRIPTION DESCRIPTORS CUCM ccmGroupName 1.3.6.1.4.1.9.9.156.1.1.1.1.2 Identifies the CallManager Group. ccmGroupName
CUCM ccmGroupTftpDefault 1.3.6.1.4.1.9.9.156.1.1.1.1.3 Identifies whether or not the group ccmGroupTftpDefault is the default TFTP server group.
page 71 Services Reference Manual: SolarWinds N-central
CCM MGCP Gateway service
The CCM MGCP Gateway service monitors the registration status and D Channel status of an MGCP gateway. A Call Manager is up if the SNMP agent received a system up event from the local CCM.
This service cannot use Self Healing.
Service Type SNMP Instances on a 1 Device Supported Cisco CallManager Versions 4.x to 6.x Systems/Applications Device Class Server - Windows, Server - Generic Monitored By Windows Probe Scan Interval 5 minutes MGCP Gateway Enter the name of the MGCP Gateway to be monitored. For a list of the gateways attached Name to the CCM server, query the CCM server with the 1.3.6.1.4.1.9.9.156.1.3.1.1.2 SNMP OID. OID/Calculation
METRIC OID/CALCULATION DESCRIPTION NAME Description 1.3.6.1.4.1.9.9.156.1.3.1.1.4 Status 1.3.6.1.4.1.9.9.156.1.3.1.1.5 The Status metric is a mapped value:
n Normal: 2 n Warning: 3,5 n Failed: 1,4 The meaning of the statuses:
n 1: Unknown n 2: Registered n 3: Unregistered n 4: Rejected n 5: Partially Registered Status 1.3.6.1.4.1.9.9.156.1.3.1.1.5 Describes the status as: Description n Unknown n Registered n Unregistered n Rejected n Partially Registered
page 72 Services Reference Manual: SolarWinds N-central
METRIC OID/CALCULATION DESCRIPTION NAME D-Channel 1.3.6.1.4.1.9.9.156.1.3.1.1.14 The D-Channel number of the gateway. A value of -1 in this field Number indicates that the D-Channel number is not applicable for this gateway. D-Channel 1.3.6.1.4.1.9.9.156.1.3.1.1.13 The D-Channel status of the gateway. Status The statuses are:
n 1: The D-Channel is up. n 2: The D-Channel is down. n 3: The D-Channel status is unknown. n 4: The D-channel status is not applicable for this gateway. This metric has the following thresholds: n Normal: 2 n Warning: 3,5 n Failed: 1,4 D-Channel 1.3.6.1.4.1.9.9.156.1.3.1.1.13 The statuses are: Status Reason n 1: The D-Channel is up. n 2: The D-Channel is down. n 3: The D-Channel status is unknown. n 4: The D-channel status is not applicable for this gateway.
page 73 Services Reference Manual: SolarWinds N-central
CCM Phone service
The CCM Phone service monitors the status and IP address of the specified phone.
This service cannot use Self Healing.
Service Type SNMP Instances on a 100 Device Supported Cisco CallManager Versions 4.x to 6.x Systems/Applications Device Class Server - Windows Monitored By Windows probe Scan Interval 5 minutes Phone You need to specify the name of the phone to monitor. For a list of the phones associated with the CCM server, query the server with the 1.3.6.1.4.1.9.9.156.1.2.1.1.4 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Status 1.3.6.1.4.1.9.9.156.1.2.1.1.7 The Status metric is mapped as:
n Normal: 2 n Warning: 5 n Failed: 1,3,4 Status Description 1.3.6.1.4.1.9.9.420.1.2.2.1.7 The description of the statuses:
n 1: Unknown n 2: Registered n 3: Unknown n 4: Rejected n 5: Partially Registered IP Address 1.3.6.1.4.1.9.9.156.1.2.1.1.6
page 74 Services Reference Manual: SolarWinds N-central
CCM Phone Registration service
The Cisco CallManager (CCM) Phone Registration service monitors the presence of all phones that are connected to the CCM server. This includes the phones that have been registered, unregistered, or have lost contact with the CCM manager. This service also monitors the number of registration requests that have been rejected by the CCM server.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Cisco CallManager Versions 4.x to 6.x
Device Class Server - Windows
Monitoring Probe Windows probe
Scan Interval 15 minutes OID/Calculation
STATUS DETAIL OID/CALCULATION DESCRIPTION Registered 1.3.6.1.4.1.9.9.156.1.5.5 The registered phone instruments that are present in the network. Phones
Unregistered 1.3.6.1.4.1.9.9.156.1.5.6 The phones that have been removed or have lost contact with the Phones CCM server.
Rejected Phones 1.3.6.1.4.1.9.9.156.1.5.7 The phones that have been configured incorrectly. Object Identifiers (OIDs)
n 1.3.6.1.4.1.9.9.156.1.5.5 ccmRegisteredPhones n 1.3.6.1.4.1.9.9.156.1.5.6 ccmUnregisteredPhones n 1.3.6.1.4.1.9.9.156.1.5.7 ccmRejectedPhones
page 75 Services Reference Manual: SolarWinds N-central
CCM Table (Cisco) service
The CCM Table (Cisco) service monitors the availability of the applications used to deliver a specific IP Telephony solution.
Service Type SNMP
Instances on a 1 Device
Supported Any Cisco device that provides VPN capabilities. Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 30 minutes
Index for ccmStatus Type the index corresponding to the row in the ccmTable that contains the ccmStatus. The index is typically 1, but can also be any integer. The ccmStatus is the current status of the Unified Communication Manager.
OBJECT STATUS DETAIL NUMERICAL OID DESCRIPTION DESCRIPTORS CUCM ccmStatus 1.3.6.1.4.1.9.9.156.1.1.2.1.5 The current status of the CallManager. A ccmStatus CallManager is running properly if the SNMP Agent received a 'system up' event from the local CUCM server. The status of the CallManager is mapped as:
n Unknown - the current status of the CallManager is not currently known. n Up - the CallManager is currently running and is able to communicate with other CallManagers. n Down - the CallManager is not running or the agent is unable to communicate with the local CallManager.
CUCM ccmVersion 1.3.6.1.4.1.9.9.156.1.1.2.1.4 Identifies the version number of the ccmVersion CallManager software.
CUCM ccmClusterId 1.3.6.1.4.1.9.9.156.1.1.2.1.8 Provides the unique ID (identifier) of the ccmClusterID cluster to which the target CallManager belongs. At any point in time, the Cluster ID helps in associating a CallManager to page 76 Services Reference Manual: SolarWinds N-central
OBJECT STATUS DETAIL NUMERICAL OID DESCRIPTION DESCRIPTORS any given cluster.
CUCM Status ccmStatus 1.3.6.1.4.1.9.9.156.1.1.2.1.5 The current status of the CallManager. A (Mapped) CallManager is running properly if the SNMP agent received a 'system up' event from the local CUCM server. The status of the CallManager is mapped as:
n Unknown - the current status of the CallManager is not currently known. n Up - the CallManager is currently running and is able to communicate with other CallManagers. n Down - the CallManager is not running or the agent is unable to communicate with the local CallManager.
CUCM ccmInetAddress 1.3.6.1.4.1.9.9.156.1.1.2.1.7 Identifies the IP address of the Cisco Call ccmInetAddress Manager. The type of address for this is identified by ccmInetAddressType.
CUCM ccmInetAddress2 1.3.6.1.4.1.9.9.156.1.1.2.1.10 Identifies the additional IP(v4/v6) address ccmInetAddress2 details of Cisco Unified Communications Manager. The type of address for this object is identified by ccmInetAddress2Type.
CUCM ccmDescription 1.3.6.1.4.1.9.9.156.1.1.2.1.3 The description for the CallManager. ccmDescription
page 77 Services Reference Manual: SolarWinds N-central
CCM VoiceMail Registration service
The Cisco CallManager (CCM) VoiceMail Registration service monitors the presence of the voice mail devices that are connected to the CallManager. This includes voice mail devices that have been registered, become unregistered, or have lost contact with the CCM server. In addition, this service monitors the number of registration requests that have been rejected by the CCM server.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Cisco CallManager Versions 4.x to 6.x
Device Class Server - Windows
Monitoring Probe Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Registered Voice Mail 1.3.6.1.4.1.9.9.156.1.5.17 The registered voice mail devices that are present in the Devices network.
Unregistered Voice 1.3.6.1.4.1.9.9.156.1.5.18 The voice mail devices that have been removed or have lost Mail Devices contact with the CCM server.
Rejected Voice Mail 1.3.6.1.4.1.9.9.156.1.5.19 The voice mail devices that have been configured Devices incorrectly.
page 78 Services Reference Manual: SolarWinds N-central
Cisco - Connections service
The Cisco - Connections service monitors the number of connections currently in use by the Cisco firewall.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported Cisco PIX and Cisco ASA firewalls. Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probe
Scan Interval 15 minutes
Cisco Firewall The index corresponding to the string number of connections currently in use by the entire Connection Stat firewall, which is determined by performing an SNMP walk on the Description Index cfwConnectionStatTable and locating the cfwConnectionStatDescription (.1.3.6.1.4.1.9.9.147.1.2.2.2.1.3).
Cisco Firewall The number of connections currently in use by the entire firewall. Connection Stat Description Value
Cisco Firewall The index corresponding to the string highest number of connections in use at any one Connection Stat time since system startup, which is determined by performing an SNMP walk on the Index cfwConnectionStatTable and locating cfwConnectionStatDescription (.1.3.6.1.4.1.9.9.147.1.2.2.2.1.3).
Cisco Firewall The highest number of connections in use at any one time since system startup. Connection Stat Description OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Current 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5 The number of connections currently in use by the entire Connections firewall.
Max 1.3.6.1.4.1.9.9.147.1.2.2.2.1.5 The highest number of connections in use at any one time Connections since system startup.
To configure Cisco - Connections, walk the cfwConnectionStatTable table and look at cfwConnectionStatDescription. # snmpwalk -Cp -On -c public -v1 10.150.1.20 .1.3.6.1.4.1.9.9.147.1.2.2.2.1.3
page 79 Services Reference Manual: SolarWinds N-central
1.3.6.1.4.1.9.9.147.1.2.2.2.1.3.40.6 = STRING: "number of connections currently in use by the entire firewall" .1.3.6.1.4.1.9.9.147.1.2.2.2.1.3.40.7 = STRING: "highest number of connections in use at any one time since system startup" Variables found: 2
The default strings for the two parameters in the UI must correspond to these values.
page 80 Services Reference Manual: SolarWinds N-central
Cisco Unity Express Mailbox service
The Cisco Unity Express Mailbox service monitors the capacity (in minutes), available time, number of messages, and status (enabled or disabled) of the specified mailbox.
Service Type SNMP
Instances on a 1 Device
Supported Cisco Call Unity Express Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
Voicemail Box Enter the name of the monitored voice mail box. For a list of the voice mail boxes associated with the CCM Unity Express server, query the server with the .1.3.6.1.4.1.9.9.420.1.2.2.1.2 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION Mailbox Size 1.3.6.1.4.1.9.9.420.1.2.2.1.6
Mailbox Time Used 1.3.6.1.4.1.9.9.420.1.2.2.1.7
Mailbox Time Used (percentage of time used) 1.3.6.1.4.1.9.9.420.1.2.2.1.8
Is Voicemail Enabled? 1.3.6.1.4.1.9.9.420.1.2.2.1.16
Number of Messages 1.3.6.1.4.1.9.9.420.1.2.2.1.9
page 81 Services Reference Manual: SolarWinds N-central
Citrix® Presentation Server service
The Citrix Presentation Server service monitors the availability of the port on which the Citrix Metaframe Presentation Server application runs. The availability of the port, determined by the service testing the port's connectivity, indicates that the Citrix Metaframe Presentation Server application is running. This service also measures the DNS resolution and the round trip time of the initial connection request and response. The availability results of the TCP service are then reflected on the status dashboard for the Citrix Presentation Server service. A maximum of three instances of this service can be set on a device, with each instance monitoring a different port on the device.
The Citrix Presentation Server service does not use the Warning state.
Service Type Generic TCP
Instances on a 3 Device
Supported Citrix MetaFrame Presentation Systems/Applications
Device Class Server - Generic, Workstation - Generic, Novell, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe
Scan Interval 5 minutes
imeout Value The time (in seconds) that the SolarWinds N-central server waits before considering the test a failure. The default is 30 seconds.
Port Number The TCP port number used to monitor the Citrix Presentation Server service. Status details
STATUS DETAIL DESCRIPTION Citrix Presentation The threshold that determines the availability of the port. Server service Availability
Average Round Trip The time for a request to be sent and received. Time (ms)
Generic DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 82 Services Reference Manual: SolarWinds N-central
Chassis Intrusion (Dell iDRAC) service
The Chassis Intrusion (Dell iDRAC) service monitors the chassis security feature that detects if a chassis component is removed or replaced from a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a Device 100
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller Systems/Applications (iDRAC)
Device Class for CPU (SNMP) Servers - Management Interface
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Index Enter or select the name of the SNMP index to be used by this service.
>OBJECT STATUS D NUMERICAL OID DESCRIPTION DETAIL ESCRIPTORS
Status $Status 1.3.6.1.4.1.674.10892.5.4.300.70.1.5 The current status of the chassis intrusion sensor mapped as: 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable.
Reading $Reading 1.3.6.1.4.1.674.10892.5.4.300.70.1.6 Indicates whether or not the chassis intrusion sensor is currently being read mapped as: 1 - chassisNotBreached, 2 - chassisBreached, 3 - chassisBreachedPrior, and, 4 - chassisBreachSensorFailure.
Type $Type 1.3.6.1.4.1.674.10892.5.4.300.70.1.7 Indicates the type of the intrusion sensor used for chassis security mapped as: 1 - chassisBreachDetectionWhenPowerON, and, 2 - chassisBreachDetectionWhenPowerOFF.
Settings $Setting 1.3.6.1.4.1.674.10892.5.4.300.70.1.4 Indicates the current state settings of the intrusion sensor mapped as:
page 83 Services Reference Manual: SolarWinds N-central
>OBJECT STATUS D NUMERICAL OID DESCRIPTION DETAIL ESCRIPTORS
1 - unknown, 2 - enabled, 4 - notReady, and 6 - enabledAndNotReady.
page 84 Services Reference Manual: SolarWinds N-central
Clustered fail over status (NetApp) service
The Clustered Fail over Status (NetApp) service monitors the status of the clustered failover capabilities of a NetApp SAN.
For more information, see www.netapp.com/us/. Overview
Service Type SNMP
Service ID 24148
Supported Systems/Application NetApp NetApp SANs
Max. Instances Per Device 1
Scheduler Type Interval Based Scheduler
Time to Stale 30
MIB Module(s) NETWORK-APPLIANCE-MIB
OID(s) $Settings - 1.3.6.1.4.1.789.1.2.3.1 $State - 1.3.6.1.4.1.789.1.2.3.2 $Reason - 1.3.6.1.4.1.789.1.2.3.3 $PartnerStatus - 1.3.6.1.4.1.789.1.2.3.4 $LastPartnerContact - 1.3.6.1.4.1.789.1.2.3.5 $PartnerName - 1.3.6.1.4.1.789.1.2.3.6 $InterconnectStatus - 1.3.6.1.4.1.789.1.2.3.8
Known Limitations N/A
Supported Device Class Storage
Notification Profile N/A
Monitored By Windows probe Input values
USER CONFIGURABLE OPTIONS SETTINGS UNITS DEFAULT SETTINGS Scan Interval Range 5 1440 Minutes 5
page 85 Services Reference Manual: SolarWinds N-central
Output values
METRICS DEFAULT THRESHOLDS UNITS FORMULAE NOTES Failover State Range 0 2 The Failover State metric is mapped... Normal: 2 Normal 0 0 Warning: 4 Failed: 1, 3 N/A $State Warning 1 1 ... where ... 1 = Dead 2 = Can Takeover Failed 2 2 3 = Cannot Takeover 4 = Takeover
Failover State N/A N/A $State Description
Failover Settings Range 0 1 N/A $Settings The Failover Settings metric is mapped... Normal: 2 Failed: 1, 3, 4, 5 Normal 0 0 ... where ... 1 = Not Configured 2 = Enabled 3 = Disabled Failed 1 1 4 = Takeover by Partner Disabled 5 = This Node Dead
Failover Settings N/A N/A $Settings Description
Failover Readiness Range 0 1 N/A $Reason
Normal 0 0
Failed 1 1
Failover Readiness N/A N/A $Reason Description
page 86 Services Reference Manual: SolarWinds N-central
METRICS DEFAULT THRESHOLDS UNITS FORMULAE NOTES Failover Partner Range 1 3 $PartnerStatus The Failover Partner Status Status metric is mapped... Normal: 1 Normal 2 2 Failed: 2-6 ... where ... 1 = OK Warning 1 1 2 = Unknown Reason 3 = Disabled by Operator
Failed 3 3 4 = Interconnect Offline 5 = Disable by Partner 6 = Takeover Failed
Failover Partner N/A N/A $PartnerStatus Status Description
Time Since Last Range 0 4294967295 Seconds $LastPartnerContact Partner Contact / 100 Normal 0 100
Warning 99 1000
Failed 999 4294967295
Failover Partner N/A N/A $PartnerName Name
Interconnect Status Range 0 1 N/A $InterconnectStatus The Interconnect Status metric is mapped... Normal: 4
Normal 0 0 Failed: 1-3 ... where ... 1 = Not Present 2 = Down Failed 1 1 3 = Partial Failure 4 = Up
Interconnect Status N/A N/A $InterconnectStatus Description
page 87 Services Reference Manual: SolarWinds N-central
Troubleshooting
ISSUE CORRECTIVE ACTION Misconfigured Ensure you have the correct SNMP community string of the device.
page 88 Services Reference Manual: SolarWinds N-central
Connections – Watchguard service
The Connections - Watchguard service monitors the number of active connections and the number of dropped connections going through a Watchguard device.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any device compliant with the WATCHGUARD-SYSTEM-STATISTICS MIB.
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION Active Connections 1.3.6.1.4.1.3097.6.3.80
Dropped Connections 1.3.6.1.4.1.3097.6.3.34
page 89 Services Reference Manual: SolarWinds N-central
Connectivity service
The Connectivity services monitors whether or not a device is accessible on the network. By querying the device with ICMP packets, the Connectivity service can alert you when the device is not accessible from the network in the same manner as the ping command. The connectivity service may not function properly when monitored by probes installed on systems using Windows Vista. This is due to the default setting in Windows Firewall with Advanced Security that does not allow incoming ICMP Echo messages. This may be resolved by enabling ICMP Echo messages through the creation of new inbound custom rules to allow ICMPv4 and ICMPv6 Echo Requests. For more information, see the Microsoft documentation on Windows Firewall with Advanced Security.
Service TCP/ICMP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central Server By
Scan 5 minutes Interval
Timeout The time in seconds that the SolarWinds N-central server waits before considering the test a failure. Value The default is 30 seconds.
Packet The time in milliseconds between packets. The default is one millisecond. Interval To define the packet interval in full seconds, the value must be expressed in units of one thousand. For example, a packet interval of 2000 will be 2,000 milliseconds or two seconds.
Packet The number of packets to send for each scan. The default is five. Number
Packet The number of data bytes in each packet. The default is 32. Size
Default TTL is the number of hops that a data packet must take before being discarded or returned. The TTL default is 255. Status details
Status Description Details
Packet Loss A packet is dropped when its TTL value reaches zero or when the remote host is unreachable. (percentage) When a packet is dropped, the echoed packet is never received.
page 90 Services Reference Manual: SolarWinds N-central
Time to Live A state transition for the service occurs when the threshold value exceeds the specified range for (hops) any of these threshold types.
Round Trip The time for a request to be sent and received. Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, the state will appear as Failed, based on the default settings.
page 91 Services Reference Manual: SolarWinds N-central
Connectivity (VMware) service
The Connectivity (VMware) service monitors the availability of the TCP ports for the CIM-XML and WS-Management protocols on an ESXi server or vCenter appliance. These are the protocols SolarWinds N-central uses to monitor virtualized environments that are running on VMware hosts. This service provides a way to determine if there will be any issues discovering and monitoring those environments. The default CIM-XML port is 5989, and the default WS-Management port is 443. If you configured ESXi server or vCenter appliance to use custom port assignments, SolarWinds N-central can make the appropriate modifications by clicking Settings > Monitoring Options of the device. SolarWinds N-central uses the CIM services and ports for monitoring. Basic service information
Service Type ESXi
Supported Systems/Applications Any ESXi/vCenter 5.1 server
Maximum Instances on each Device 1
Supported Device Class Servers – ESXi, Servers - Windows
Monitored by Windows probe
Scan Interval 5 minutes Troubleshooting
ISSUE CORRECTIVE ACTION Failed Verify that:
n there are no networking or routing issues preventing the Windows probe from communicating with the ESX/vCenter device, and n you configured the appropriate settings in either ESXi or vCenter to open the CIM-XML and WS- Management protocols. Metrics
NAME DEFAULT THRESHOLDS Is the CIM port responding? Normal: Yes Failed: No
Is the Web port responding? Normal: Yes Failed: No
page 92 Services Reference Manual: SolarWinds N-central
CPU (ADTRAN) service
The CPU (ADTRAN) service monitors the utilization rate of the CPU on ADTRAN Switch/Router devices.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications ADTRAN Switch/Router devices
Device Class Switch/Router
Monitored By Windows probes
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION CPU Usage 1.3.6.1.4.1.664.5.53.1.4.4 CPU usage as a percentage of total CPU, compared to threshold (%) values.
page 93 Services Reference Manual: SolarWinds N-central
CPU (NetApp) service
The CPU (NetApp) service monitors the CPU usage, indicating the load (as a percentage) on the CPU of a NetApp SAN.
For more information, see www.netapp.com/us/. Overview
Service Type SNMP
Service ID 24142
Supported Systems/Application Indicates the load as a percentage of the CPU of a NetApp SAN.
Max. Instances Per Device 1
Scheduler Type Interval Based Scheduler
Time to Stale 30
Service Description Monitors CPU usage.
OID(s) $CPU - 1.3.6.1.4.1.789.1.2.1.3 Input values
USER CONFIGURABLE OPTIONS SETTINGS UNITS DEFAULT SETTINGS Scan Interval Range 5 1440 Minutes 5 Output values
DEFAULT U F METRICS NOTES THRESHOLDS NITS ORMULAE CPU Range 1 100 N/A $CPU The service shows the amount of failures along with Utilization the corresponding message associated with the Normal 0 79 failure. Warning 80 84
Failed 85 100 Troubleshooting
ISSUE CORRECTIVE ACTION Misconfigured Either SNMP is not configured on the device or the community string may be incorrect.
page 94 Services Reference Manual: SolarWinds N-central
CPU (Cisco) service
The CPU (Cisco) service monitors the CPU usage on Cisco devices that support CISCO-PROCESS-MIB. For information on other CPU services, see CPU service (local API, SNMP, WMI).
This service cannot use Self Healing.
Service Type SNMP
Instances on a 32 Device
Supported Any Cisco device that supports CISCO-PROCESS-MIB. Systems/Applications
Device Class for CPU Switch/Router (SNMP)
Monitored By Windows probes
Scan Interval 15 minutes
CPU Index The SNMP index of the CPU, which is determined by performing an SNMP walk on cpmCPUTotal5sec (.1.3.6.1.4.1.9.9.109.1.1.1.1.3). OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION % CPU Utilization (5 1.3.6.1.4.1.9.9.109.1.1.1.1.3 How busy the CPU was over the last five seconds as a Seconds) percentage of its capacity.
% CPU Utilization (1 1.3.6.1.4.1.9.9.109.1.1.1.1.4 How busy the CPU was over the last one minute as a Minute) percentage of its capacity.
% CPU Utilization (5 1.3.6.1.4.1.9.9.109.1.1.1.1.5 How busy the CPU was over the last five minutes as a Minutes) percentage of its capacity.
page 95 Services Reference Manual: SolarWinds N-central
CPU Status (Fujitsu) service
The CPU Status (Fujitsu) service monitors the health of a physical CPU on a Fujitsu server.
Service Type SNMP
Instances on a 100 Device
Supported Fujitsu workstations, laptops or servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
CPU Name Type the name of the monitored CPU. For a list of CPUs, query the device with the .1.3.6.1.4.1.231.2.10.2.2.10.6.4.1.3 SNMP OID.
Scanning You can configure the scan interval according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Status 1.3.6.1.4.1.231.2.10.2.2.10.6.4.1.4
$Model 1.3.6.1.4.1.231.2.10.2.2.10.6.4.1.5
$Manufacturer 1.3.6.1.4.1.231.2.10.2.2.10.6.4.1.6
$Cores 1.3.6.1.4.1.231.2.10.2.2.10.6.4.1.9
$ConfigurationStatus 1.3.6.1.4.1.231.2.10.2.2.10.6.4.1.17
STATUS DESCRIPTION DETAIL Status Describes the current status of the monitored CPU with values mapped as: 1. FAILED - unknown: CPU status could not be evaluated 2. NORMAL - not-present: CPU socket is empty 3. NORMAL - ok: CPU is available and working properly 4. WARNING- disabled: CPU was manually disabled in BIOS setup 5. WARNING - error: CPU has encountered errors but is still in use 6. FAILED - failed: CPU has failed and is disabled 7. WARNING - missing-termination: CPU socket needs a terminator module when not populated but the terminator is missing 8. WARNING - prefailure-warning: CPU has encountered too many errors within a certain time period and is predicted to fail in near future
page 96 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL Model The model name of the monitored CPU (for example, Pentium Xeon).
Manufacturer The name of the manufacturer of the monitored CPU, for example, Intel.
Cores Specifies the number of physically available logical processors within one physical CPU (for hyper- threading and multi-core CPUs). This is the sum of all cores and all logical CPUs of a hyper- threading CPU.
Configuration Describes the current status of the configuration of the monitored CPU with values mapped as: Status 1. WARNING - Unknown: CPU status could not be evaluated 2. NORMAL - Normal: Regular CPU configuration 3. FAILED - DisabledManually: CPU was manually disabled (in BIOS setup) 4. NORMAL - HotSpare: CPU is a hot-spare CPU (for future use) 5. NORMAL - Mirror: CPU is mirrored (for future use) 7. FAILED - notUsable: CPU is currently not usable (due to configuration problems) 8. FAILED - configurationError: CPU misconfiguration
page 97 Services Reference Manual: SolarWinds N-central
CPU – Juniper ScreenOS service
The CPU - Juniper ScreenOS service monitors the CPU usage of a Juniper device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Netscreen OS 5.4 and later Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
CPU Index Enter the SNMP index of the CPU. For a list of the CPU indices, query the device with the .1.3.6.1.4.1.3224.16.1.1 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION CPU Usage 1.3.6.1.4.1.3224.16.1.1
page 98 Services Reference Manual: SolarWinds N-central
CPU – Juniper Secure Access service
The CPU - Juniper Secure Access service monitors the memory and CPU usage of a Juniper Secure Access (SA) device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported IVE OS 6.0 and later. Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
CPU Index You may need to specify a CPU Index value other than zero. To see the available index values, query the Juniper SA device with the 1.3.6.1.4.1.12532.10 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION CPU Utilization 1.3.6.1.4.1.12532.10
page 99 Services Reference Manual: SolarWinds N-central
CPU service (local API, SNMP, WMI)
The CPU service monitors the utilization rate of the central processing unit on a device. Depending on the device, the CPU service will gather information using one of:
n Local API call, n SNMP, n WMI.
If an agent is installed on the device, local API calls will be used to collect data.
The CPU service reports the average CPU usage on a device. For devices that have multiple CPUs, the CPU service reports on the average CPU usage across all CPUs for the scan interval. For information on the CPU (Cisco) service, see CPU (Cisco).
Service Type Local API SNMP WMI
Instances on a 8 Device
Supported Windows devices Windows devices and devices that Windows devices Systems/Applications support the HOST-RESOURCES MIB
Device Class for CPU Server - Generic, Server - Generic, Workstation - Laptop - Windows, (Local API) Workstation - Generic, Generic, Other, Printer, Laptop - Windows, Laptop - Windows, Server Scanner/Camera, Switch/Router, Server - Windows, - Windows, and Laptop - Windows, Server - Windows, and Workstation - Workstation - Windows and Workstation - Windows Windows
Monitored By Windows agent Windows probe, Red Hat Enterprise Windows probe, Linux or Mac OSX 10.x agent Windows agent
Scan Interval 60 minutes
Processor Number The ID number of the n/a n/a processor that you would like to monitor.
Processor Index n/a The index of the processor to monitor. n/a
Processor Name A unique identifier, which represents the processor. Properties queried and calculations performed (WMI only)
Namespace root\cimv2
WMI Class Win32_Processor
WMI Property 0 LoadPercentage
page 100 Services Reference Manual: SolarWinds N-central
OID/Calculation (SNMP only)
METRIC NAME OID/CALCULATION DESCRIPTION CPU Usage (%) 1.3.6.1.2.1.25.3.3.1.2 The usage of the CPU, expressed as a percentage. Configure the processor index To obtain the processor index, walk the object ID .1.3.6.1.2.1.25.3.3.1.2 on the target device's address to determine which indices are available for monitoring. .1.3.6.1.2.1.25.3.3.1.2.1 50 .1.3.6.1.2.1.25.3.3.1.2.2 10
There are two indices in this case-"1" and "2". To monitor both processors, add the service to the device and enter 1 for the Processor Index. Add the service a second time and enter 2 for the Processor Index.
page 101 Services Reference Manual: SolarWinds N-central
CPU Status (Dell iDRAC) service
The CPU Status (Dell iDRAC) service monitors the health of a physical CPU on a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a 100 Device
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller (iDRAC). Systems/Applications
Device Class for CPU Servers - Management Interface (SNMP)
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Value Enter or select the name of the CPU to monitor in the format Processor FQDD (Fully Qualified Device Descriptor) of each processor device. For a list of CPUs, query the device with the .1.3.6.1.4.1.674.10892.5.4.1100.30.1.26 SNMP OID.
$#160;
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Name $DeviceBrandName 1.3.6.1.4.1.674.10892.5.4.1100.30.1.23 The brand name and model of the processor device.
Status $Status 1.3.6.1.4.1.674.10892.5.4.1100.30.1.5 The current status of the processor device mapped as: 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable.
page 102 Services Reference Manual: SolarWinds N-central
CPU (VMware) service
The CPU (VMware) service monitors the CPU usage on ESXi servers. SolarWinds N-central uses the Common Information Model (CIM) services and ports for monitoring.
This service cannot use Self Healing.
Service Type ESXi
Instances on a 1 - One instance of the CPU (VMware) service is aggregated across multiple processors Device on the ESXi server if there are multiple CPUs on the device.
Supported ESX or ESXi 4.x, 5.x and later. Systems/Applications ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 15 minutes
METRIC NAME DESCRIPTION CPU Usage (%) The usage of the CPU, expressed as a percentage.
page 103 Services Reference Manual: SolarWinds N-central
CPU Watchguard service
The CPU - Watchguard service monitors the instantaneous, one, five minute, and 15 minute CPU usage.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported Any device compliant with the WATCHGUARD-SYSTEM-STATISTICS MIB. Systems/Applications
Device Class Switch/Router, Other
Monitored By Windows probe
Scan Interval 5 minutes
CPU Index Enter the SNMP index of the monitored CPU. For a list of the SNMP indices, query the device with the .1.3.6.1.4.1.3097.6.3.4 SNMP OID. SNMP OID
METRIC NAME OID/CALCULATION Current CPU 1.3.6.1.4.1.3097.6.3.4
1 Minute CPU 1.3.6.1.4.1.3097.6.3.77
5 minute CPU 1.3.6.1.4.1.3097.6.3.78
15 minute CPU 1.3.6.1.4.1.3097.6.3.79 Metric
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
OID/C METRIC NAME DESCRIPTION ALCULATION
Current CPU Usage Current CPU / 100 The current CPU usage of the Watchguard device.
1 Minute CPU 1 Minute CPU / The average CPU usage of the Watchguard device over the past Usage 100 minute.
5 Minute CPU 5 Minute CPU / The average CPU usage of the Watchguard device over the past 5 Usage 100 minutes.
15 Minute CPU 15 Minute CPU / The average CPU usage of the Watchguard device over the past 15 Usage 100 minutes.
page 104 Services Reference Manual: SolarWinds N-central
Datastore (VMware) service
The Datastore (VMware) service monitors the storage location for virtual machine files on ESXi servers. SolarWinds N-central uses the CIM services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 100
Supported Systems/Applications vCenter, ESX or ESXi 4.x, 5.x and later.
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
Datastore Name The name of the monitored Datastore.
This service cannot use Self Healing.
To access information on the Datastores on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION Total Disk Space (GB) The total size of the datastore.
Disk Space Used (GB) The amount of space currently in use on the datastore.
Disk Space Free (GB) The amount of space that is currently unoccupied on the datastore.
Disk Usage (%) The amount of space currently unoccupied on the datastore expressed as a percentage of the total space.
List of Snapshots A list of the record files that store configuration data for ESXi servers at particular points in time.
Guests The virtual machine guest operating systems currently configured on the ESXi server.
Total Disk Space used by all The amount of space currently used by all snapshot files including the Virtual Machine files (GB) original snapshot.
Total Disk Space used by The amount of space currently used by all snapshot files since the original Snapshot Overhead files (GB) snapshot but not including the original snapshot.
page 105 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION Oldest Snapshot The name of the snapshot record files that have the oldest creation date and time.
page 106 Services Reference Manual: SolarWinds N-central
DHCP Active Queue Length service
The DHCP Active Queue Length service monitors the number of packets in the processing queue of a DHCP server.
Service Type WMI
Instances on a Device 15
Supported Systems/Applications Windows 2012
Device Class Server - Windows
Monitored By Windows agents
Scan Interval 15 minutes
STATUS DESCRIPTION DETAIL Active Specifies the current length of the internal message queue of the DHCP server. This value is equal to Queue the number of unprocessed messages that have been received by the server. Large values may Length indicate heavy server traffic.
page 107 Services Reference Manual: SolarWinds N-central
DHCP Server Service
The DHCP Server service monitors the status of the DHCP Server running on a Windows device.
Service Type WMI
Instances on a Device 100
Supported Systems/Applications Any WMI-enabled Server - Windows.
Device Class Server - Windows
Monitored By Local agent
STATUS DESCRIPTION DETAILS Acks/sec The number of DHCP acknowledgment messages (DHCPACKs) sent per second by the DHCP server to clients.
Active Queue The current length of the internal message queue of the DHCP server. This number equals the Length number of unprocessed messages received by the server.
Packets The number of packets per second that expire and are dropped by the DHCP server. When a Expired/sec DHCP-related message packet is internally queued for 30 seconds or more, it is determined to be stale and expired by the server.
Packets The number of message packets received per second by the DHCP server. Received/sec
Releases/sec The number of DHCP release messages (DHCPRELEASEs) received per second by the DHCP server from clients. This number only exists if a DHCP client sends a release to the server. This can occur manually, such as when the ipconfig command is used at the client computer. Release messages can also be sent by the client if it is configured with the "Release DHCP lease on shutdown" option.
Requests/sec The number of DHCP request messages (DHCPREQUESTs) received per second by the DHCP server from clients.
Conflict The current length of the conflict check queue for the DHCP server. This queue holds messages Check Queue without responses while the DHCP server performs address conflict detection. Length
Declines/sec The number of DHCP decline messages (DHCPDECLINEs) received per second by the DHCP server from clients.
Discovers/sec The number of DHCP discover messages (DHCPDISCOVERs) received per second by the server. These messages are sent by clients when they start on the network and obtain a new address lease.
Duplicates The number of duplicated packets per second dropped by the DHCP server. This number can be Dropped/sec affected by multiple DHCP relay agents or network interfaces forwarding the same packet to the
page 108 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAILS server.
Informs/sec The number of DHCP information messages (DHCPINFORMs) received per second by the DHCP server. DHCP inform messages are used when the DHCP server queries for the directory service for the enterprise root and when dynamic updates are being done on behalf of clients by the server.
Milliseconds The average time (in milliseconds) used by the DHCP server to process each packet it receives. per Packet This number can vary depending on the server hardware and its I/O subsystem. (Avg)
Nacks/sec The number of DHCP negative acknowledgment messages (DHCPNAKs) sent per second by the DHCP server to clients.
Offers/sec The number of DHCP offer messages (DHCPOFFERs) sent per second by the DHCP server to clients.
page 109 Services Reference Manual: SolarWinds N-central
Disk (Local API, SNMP, WMI) service
The Disk service monitors a hard disk for its used, free, and total disk space. If a drive name is not found, the drive will appear misconfigured. For example, if you are monitoring a USB drive or similar removable drive that is removed.
Service Type Local API, SNMP, and WMI
Instances on a 15 Device
Device Class for Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Disk (Local API) Workstation - Windows
Device Class for Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Disk (SNMP) Laptop - Windows, Server - Windows, and Workstation - Windows
Device Class for Laptop - Windows, Server - Windows, and Workstation - Windows Disk (WMI)
Monitored By Agent (Windows, Red Hat Enterprise Linux, and Mac OSX 10.4 and higher) and Windows probe (SNMP and WMI)
Scan Interval 60 minutes
Drive Designation The letter of the hard disk or partition to monitor. For example, C: or D:. Letter
Volume Index The index of the SNMP object representing the partition of hard disk to monitor. (SNMP only) Properties queried and calculations performed (WMI only)
Namespace root\cimv2
WMI Class Win32_LogicalDisk
WMI Property 0 Size
WMI Property 1 FreeSpace
To configure Volume Name or Volume Index, walk the .1.3.6.1.2.1.25.2.3.1.3 SNMP OID on the target device's IP address to determine which disks are available for monitoring. .1.3.6.1.2.1.25.2.3.1.3.1 "A:\" .1.3.6.1.2.1.25.2.3.1.3.2 "C:\ Label: Serial Number 74ebc3fb" .1.3.6.1.2.1.25.2.3.1.3.3 "D:\ Label:SP2POEM_EN Serial Number 356563d9" .1.3.6.1.2.1.25.2.3.1.3.4 "Virtual Memory" OID/Calculation (SNMP only)
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
page 110 Services Reference Manual: SolarWinds N-central
METRIC OID/CALCULATION DESCRIPTION NAME Total Disk (Total Disk Size x $hrStorageAllocationUnit) / 1024 The size of the disk. Size
Disk Space (Disk Space Used x $hrStorageAllocationUnit) / 1024 The amount of space used on the Used disk.
Disk Free [(Total Disk Size - Disk Space Used) x The unoccupied space on the Space $hrStorageAllocationUnit] / 1024 partition or disk.
Disk Usage (Disk Space Used / Total Disk Size) x 100 The percentage of space used on the (%) disk.
page 111 Services Reference Manual: SolarWinds N-central
Disk I/O service
The Disk I/O service monitors read and write operations on the disk.
Devices running Windows 2000 cannot monitor the Disk I/O service.
Service Type WMI
Instances on a 16 Device
Supported Any WMI-enabled Server - Windows or workstation Systems/Applications
Device Class Laptop - Windows, Server - Windows, Workstation - Windows
Monitored By Windows probes
Scan Interval 15 minutes
Instance An instance of the WMI class Win32_PerfRawData_PerDisk_PhysicalDisk; for example, _ Total. To find the disk name to monitor, start Perfmon in Windows. Click Add Counters, and in the Performance Object drop-down menus click Physical Disk. The available instances appears in the right hand window under Select instances from list. For Disk Constraint, enter the value contained within the quotations. You must specify a WSP probe as the monitoring endpoint since this is a WMI service. The device class of the device must be Laptop - Windows, Server - Windows or Workstation - Windows. Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfRawData_PerfDisk_LogicalDisk
WMI Property 0 CurrentDiskQueueLength
WMI Property 1 AvgDiskQueueLength
WMI Property 2 Timestamp_Sys100NS
WMI Property 3 Frequency_Sys100NS
Scandetail.1.Recipe ^scandetail1 / ^timeelapse02 Status details
STATUS DETAIL DESCRIPTION Current Queue Number of requests outstanding on the disk at the time the performance data is collected, including requests in service at the time of the snapshot. The value represents an
page 112 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION instantaneous length, not an average over a time interval. Multi-spindle disk devices can have multiple requests active at one time, but other concurrent requests await service. This property may reflect a transitory high or low queue length. If the disk drive has a sustained load, the value will be consistently high. Requests experience delays proportional to the length of the queue minus the number of spindles on the disks. This difference should average less than two for good performance.
Average Queue The average number of both read and write requests that were queued for the selected disk during the sample interval.
Write The number of write operations performed per second on the selected disk during the Operations/Second sample interval.
Read The number of read operations performed per second on the selected disk during the Operations/Second sample interval.
Total The total number of both read and write operations performed per second on the selected Operations/Second disk during the sample interval.
Data Written (KB) The amount of data written to the selected disk during the sample interval.
Data Read (KB) The amount of data read from the selected disk during the sample interval.
Total Data The total amount of data both read from and written to the selected disk during the sample Sent/Received interval. (KB)
Idle Time (%) The percentage of time during the sample interval in which the selected disk remained in an idle state; all the requests from the operating system to the disk have been completed and there is no pending read or write requests.
Disk Time (%) The average number of both read and write requests that were queued for the selected disk during the sample interval expressed as a percentage.
Disk Read Time The average number of read requests that were queued for the selected disk during the (%) sample interval expressed as a percentage.
page 113 Services Reference Manual: SolarWinds N-central
DNS service
The DNS service monitors the DNS server for its availability. The results from monitoring are displayed on the status dashboard under the service and can also be provided in any notifications triggered by the service.
Service Type TCP/UDP
Instances on 1 a Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe, Central server
Scan Interval 5 minutes
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a Value failure. The default is 30 seconds.
Port Number The TCP port number used to monitor the DNS service.
FQDN to The resolvable FQDN used to determine service availability. Resolve
During the monitoring process, a name server lookup (nslookup) is run at the preset scan intervals to test the availability of the DNS server. If the DNS server returns all of the IP addresses of the specified FQDN, the test is successful. The nslookup is run using UDP. If a DNS response to the DNS query is too large for the UDP packet, then the service state is displayed as Failed, although the DNS server is functional. For this reason, to receive accurate results of the DNS server's availability, specify an FQDNthat will return fewer IP addresses for the FQDN to Resolve service detail. An FQDN that returns fewer IP addresses has a greater chance of fitting into the UDP packet. The DNS service can monitor the DNS server through the central server or a Windows probe. If the DNS server is on a public network, the central server is used. If the DNS server is on a private network, a probe is used to send the information received from the DNS server through the firewall to the central server. To monitor the DNS server, you must add the DNS server as a device and to the device. Status details
STATUS DESCRIPTION DETAIL DNS Determines whether the DNS service is up or down. The DNS service does not use the Warning Service state. Availability For example, a DNS test is considered successful if the target DNS server is able to resolve a web site address.
Round Trip The time for a request to be sent and received. Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution
page 114 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 115 Services Reference Manual: SolarWinds N-central
DNS Performance Counters service
The DNS Performance Counters service monitors the status of the DNS Server service on a Windows device.
Service Type WMI
Instances on a Device 100
Supported Systems/Applications Any WMI-enabled Server - Windows.
Device Class Server - Windows
Monitored By Local agent
STATUS DETAILS DESCRIPTION Caching Memory The total amount of system memory in use by the DNS server for caching.
Database Node Memory The total amount of system memory in use by the DNS server on this node for database pages.
Secure Update Received Per The average number of secure update requests received by the DNS server per sec second.
TCP Message Memory The total amount of TCP message memory used by the DNS server.
TCP Query Received Per sec The average number of TCP queries received by the DNS server per second.
TCP Response Sent Per sec The average number of TCP responses sent by the DNS server per second.
Total Query Received Per sec The average number of queries received by the DNS server in each second.
Total Response Sent Per sec The average number of responses sent by the DNS server in each second.
UDP Message Memory The total UDP message memory used by the DNS server.
UDP Query Received Per sec The average number of UDP queries received by the DNS server in each second.
UDP Response Sent Per sec The average number of UDP responses sent by the DNS server in each second.
Nbstat Memory The total amount of system memory in use by the DNS server for Nbtstat.
Record Flow Memory The total amount of system memory in use by the DNS server for record flow.
Dynamic Update No Operation The average number of No-operation/Empty dynamic update requests received Per sec by the DNS server in each second.
Dynamic Update Received Per The average number of dynamic update requests received by the DNS server in sec each second.
Dynamic Update Written to The average number of dynamic updates written to the database by the DNS Database Per sec server in each second.
Recursive Queries Per sec The average number of recursive queries received by the DNS server in each second.
page 116 Services Reference Manual: SolarWinds N-central
STATUS DETAILS DESCRIPTION Recursive Query Failure Per The average number of recursive query failures in each second. sec
Recursive Time Out Per sec The average number of recursive query sending time-outs in each second.
page 117 Services Reference Manual: SolarWinds N-central
Disable services
Disable services you do not use to make it easier to see and select the most used services. By disabling the services you do not use, when applying services or create service templates, it is easier to see and access those most used services. For example, if your customers do not use Cisco appliances, disable those services so they will not appear in the list. When disabled, a service is removed from devices and dashboards. 1. Click Administration > Service Management > Service Control. 2. Select the check boxes next to the services to disable. 3. Click Disable, then OK.
The services are disabled and the Service Control screen appears with the updated status of the services and service groupings. In the service templates, the disabled services will not appear. If you disabled services that were set on any device, the services are removed from the devices.
page 118 Services Reference Manual: SolarWinds N-central
Ethernet Errors service
The Ethernet Errors service monitors the NIC interfaces on a device for the following issues: Alignment Errors, FCS Errors, Collisions, MAC Receive Errors, MAC Send Errors, Carrier Sense Errors, and frames that are too long.
The Ethernet Errors service only works with network infrastructure devices, such as switches, routers, fire walls, wireless access points. It will not work on servers, laptops, or workstations. To monitor NIC issues on those devices, use the Interface Health service.
Complete the steps below to monitor the Ethernet service on a device. 1. Click View > All Devices and click the name of a device. 2. Click Settings > Properties and ensure Use SNMP is selected. 3. Click Save if required. 4. Click Monitoring > Status. 5. Click Add, enter 1 for the number of instances of the Ethernet Errors service. 6. Click Apply. 7. Click the Ethernet Errors service and then click the Service Details tab. 8. In Interfaces to Monitor, select the NICs/ports that you would like to monitor. 9. Click OK.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 60 Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probe
Interfaces to Select the name or SNMP index of the NICs or ports that you would like to monitor. Monitor
Scan Interval 60 minutes
To monitor the Ethernet Errors service on a device, you need to:
n select the SNMP Enabled option when adding the device, and n add the Ethernet Errors service to the device and set the Interfaces to Monitor service detail. The tables IF-MIB and EtherLike-MIB describe the SNMP objects that are queried by the probe. EtherLike-MIB
OBJECT DESCRIPTORS NUMERICAL OID dot3StatsIndex 1.3.6.1.2.1.10.7.2.1.1
page 119 Services Reference Manual: SolarWinds N-central
OBJECT DESCRIPTORS NUMERICAL OID dot3StatsAlignmentErrors 1.3.6.1.2.1.10.7.2.1.2
dot3StatsFCSErrors 1.3.6.1.2.1.10.7.2.1.3
dot3Stats1CollisionFrames 1.3.6.1.2.1.10.7.2.1.4
dot3StatsMultipleCollisionFrames 1.3.6.1.2.1.10.7.2.1.5
dot3StatsInternalMacReceiveErrors 1.3.6.1.2.1.10.7.2.1.16
dot3StatsInternalMacTransmitErrors 1.3.6.1.2.1.10.7.2.1.10
dot3StatsCarrierSenseErrors 1.3.6.1.2.1.10.7.2.1.11
dot3StatsFrameTooLongs 1.3.6.1.2.1.10.7.2.1.13 OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC OID/CALCULATION DESCRIPTION NAME Alignment ^ dot3StatsAlignmentErrors An Alignment Error can indicate the following about a received Errors packet:
n The number of bits in the received packet has an uneven byte count. That is, not an integral multiple of 8. n The received packet has a Frame Check Sequence (FCS) error. n Alignment Errors often result from MAC layer packet formation problems and cabling problems. These problems cause corruption of data, loss in data and the transmission of packets through more than two cascaded multi-port transceivers.
FCS ^ dot3StatsFCSErrors FCS Errors, a type of cyclic redundancy checking, indicate Errors that frames received by an interface are an integral number of octets long, but do not pass the FCS check.
Both Alignment Errors and FCS Errors can be caused by equipment powering up or down or by noise interference on unshielded twisted-pair (10BASE-T) segments. In a network that complies with the Ethernet standard, FCS Errors or Alignment Errors indicate bit errors during a transmission or reception. A very low rate is acceptable. Although Ethernet allows a 1 in 108 bit error rate, typical Ethernet performance is 1 in 1012 or better.
Collisions ^ dot3Stats1CollisionFrames + ^ Collisions indicate that two or more devices detect that the dot3StatsMultipleCollisionFrames network is idle and try to send packets at exactly the same time within one round-trip delay. Because only one device can
page 120 Services Reference Manual: SolarWinds N-central
METRIC OID/CALCULATION DESCRIPTION NAME transmit at a time, both devices must stop sending and attempt to retransmit. Collisions are detected by the transmitting stations.
The retransmission algorithm helps to ensure that the packets do not retransmit at the same time. However, if the devices retry at nearly the same time, packets can collide again; the process repeats until either the packets finally pass onto the network without collisions, or 16 consecutive collisions occur and the packets are discarded.
MAC ^ MAC receive errors can indicate the malfunction of an Receive dot3StatsInternalMacReceiveErrors Ethernet card on the subnet. You can identify the subnet and Errors possibly the unit in question from the MAC address and the IP number.
MAC ^ This type of error indicates that the transmission failed Send dot3StatsInternalMacTransmitErrors because of an internal MAC sublayer error that is not caused Errors by a collision or a carrier sense error.
Carrier ^ dot3StatsCarrierSenseErrors Indicates that the transmission failed because the carrier was Sense not present during any or all of the transmission attempts. Errors
Frame ^ dot3StatsFrameTooLongs A packet that is longer than 1518 octets (including FCS Too Long octets) can cause a Frames Too Long Error. This type of error is often caused by a malfunction in the jabber protection mechanism on a transceiver, or the presence of excessive noise on the transmission cable.
The threshold value units are measured in packets.
page 121 Services Reference Manual: SolarWinds N-central
Exchange 2013 Delivery Queue service
The Exchange 2013 Delivery Queue service monitors the size of the queues on a Microsoft Exchange 2013 server and sends out an alert if they grow too large.
Basic Service Information
Service Type AMP (uses the Exchange 2013 Delivery Queues Automation Manager Policy)
Supported Systems/Applications Windows workstation and servers running Exchange 2013
Known limitations Only Windows
Max Instances on each device 100
Supported Device class Workstation/server – Windows, Laptop – Windows
Notification Profile N/A
Monitored by Local agent
Queue The default value is _Total, which monitors all Delivery Queues on the Exchange server. You can Name optionally specify a different Queue Troubleshooting
The service Verify that Powershell 3.0 is installed. reports a Get-Counter Misconfigured Open Powershell in Administrator mode and use the command on the Metric status. Value specified in the counter path and replace $queuename with the name of the queue being monitored. The default queue name is _total. Check the Active Mailbox Delivery Queue Length (Messages) is being reported to the Exchange server. Get-Counter "\MSExchangeTransport Queues (_total)\Active Mailbox Delivery Queue Length
Refer to the MSDN on how to set up the Exchange 2013 counter is any of the metrics return an error. Metrics
Active Mailbox Delivery Queue Length n Normal- 0 - 100 n Warning - 101-249 n Failed - 250+
Active Non-SMTP Delivery Queue Length n Normal - 0 - 100
page 122 Services Reference Manual: SolarWinds N-central
n Warning - 101-249 n Failed - 250+
Retry Mailbox Delivery Queue Length n Normal - 0 - 100 n Warning - 101-249 n Failed - 250+
Retry Non-SMTP Delivery Queue Length n Normal - 0 - 100 n Warning - 101-249 n Failed - 250+
Submission Queue Length n Normal- 0 - 100 n Warning - 101-249 n Failed - 250+
Unreachable Queue Length n Normal- 0 - 100 n Warning - 101-249 n Failed - 250+
Poison Queue Length n Normal - 0 - 0 n Warning - 1- 4 n Failed - 5+
page 123 Services Reference Manual: SolarWinds N-central
Exchange Delivery Queue service
The Exchange 2013 Delivery Queue service uses a Windows agent to monitor the message queues of Microsoft Exchange Server 2013/2016.
Basic Service Information
Service Type AMP
Powershell cmdlet Get-counter MSExchangeTransport Queues (Queue Name)
Supported Systems/Applications Windows Workstations and Servers
Known limitations Windows only
Max Instances on each device 100
Supported Device class Laptops – Windows, Servers – Windows, Workstations – Windows
Notification Profile N/A
Monitored by Local agent Configuring the service
Queue The default value is _Total, which monitors all delivery queues on the Microsoft Exchange server. Name You can also specify a different queue. Troubleshooting
misconfigured 1. Confirm that Exchange 2013 is installed on the target device. 2. Open PowerShell in Administrator Mode. 3. Use the Get-Counter command on the metric value specified in counter path, using the name of the queue you want to monitor. For example, for Active Mailbox Delivery Queue Length: Get-Counter "\MSExchangeTransport Queues(_total)\Active Mailbox Delivery Queue Length
Metrics All of the performance counters queried in this service come from the MSExchangeTransport Queues Performance Counter Class.
Submission Queue Length Messages in the n 0-100 Normal submission queue. Counter, path n 101-249 Warning "\MSExchangeTransport Queues n 250-- ($QueueNAme)\Submission Queue 9,223,372,036,854,776,000 Length" Failed
Retry Non-SMTP Delivery Queue Length Messages in a retry n 0-100 Normal state in the non-SMTP page 124 Services Reference Manual: SolarWinds N-central
Counter, path gateway delivery n 101-249 Warning "\MSExchangeTransport Queues queues. n 250-- ($QueueNAme)\Retry Non-Smtp 9,223,372,036,854,776,000 Delivery Queue Length" Failed
Retry Mailbox Delivery Queue Length Messages in a retry n 0-100 Normal state attempting to "\MSExchangeTransport Queues n 101-249 Warning deliver a message to a n 250-- ($QueueNAme)\Retry Mailbox remote mailbox. Delivery Queue Length" 9,223,372,036,854,776,000 Failed
Active Non-SMTP Delivery Queue Length Messages in the drop n 0-100 Normal directory used by a Registry property, path n 101-249 Warning Foreign connector. "\MSExchangeTransport Queues n 250-- ($QueueNAme)\Active Non-Smtp 9,223,372,036,854,776,000 Delivery Queue Length" Failed
Active Mailbox Delivery Queue Length Messages in the active n 0-100 Normal mailbox queues. Registry property, path n 101-249 Warning "\MSExchangeTransport Queues ($QueueNAme)\Active Non-Smtp Delivery Queue Length"
Poison Queue Length Messages in the poison n 0-0 Normal message queue. Counter , path n 1-4 Warning "\MSExchangeTransport Queues n 5-- ($QueueNAme)\Poison Queue Length" 9,223,372,036,854,776,000 Failed
Unreachable Queue Length Messages in the n 0-100 Normal Unreachable queue. Counter, path n 101-249 Warning "\MSExchangeTransport Queues n 250-- ($QueueNAme)\Unreachable Queue 9,223,372,036,854,776,000 Length" Failed
page 125 Services Reference Manual: SolarWinds N-central
Exchange 2003 service
The Exchange 2003 service uses the Windows probe to monitor the Microsoft Exchange 2003 Server for its availability and performance.
Service Type WMI
Instances on a 10 Device
Supported Microsoft Exchange Server 2003 Systems/Applications
Device Class Server - Windows
Monitored By Windows probe
Scan Interval 15 minutes
Public Information The location of the Exchange Database (EDB) and Streaming Database (STM) files that Store EDB file you would like to monitor. The service monitors the combined size of the files and displays a status based on the specified thresholds on the Windows Services dashboard. These files contain all of the data on the Public Information Store. Access to the Public Information Store is not restricted. The default limit reflects the size of the standard edition, Public Information which is 16 GB. Modify these limits to reflect the actual disk limitations for non-standard Store STM file versions of the Information Store server. Ensure that you include the double backslashes when specifying your own EDB and STM files.
Private Information The Exchange Database (EDB) and Streaming Database (STM) files that you would like to Store EDB file monitor. The service monitors the combined size of the files and displays a status based on the specified thresholds on the Windows Services dashboard. These files contain all of the data on the Private Information Store. Access to the Private Information Store is restricted. The default limit reflects the size of the standard edition, Private Information which is 16 GB. These limits should be modified to reflect the actual disk limitations for Store STM file non-standard versions of the Information Store server. Ensure that you include the double backslashes when specifying your own EDB and STM files.
During the monitoring process, the probe uses the WMI protocol to query the following events on the Exchange Server:
n the number of users currently using the Information Store, n the public and private Information Store sizes, n the send queue size of the MS Exchange Information Store Mailbox, n the receive queue size of the MS Exchange Information Store Mailbox, and n the Remote Procedure Call (RPC) requests. To monitor the Exchange Server, you must:
n add the Exchange Server as a device. n add a Windows probe. page 126 Services Reference Manual: SolarWinds N-central
n use the Window probe to add the Exchange 2003 service to the device. Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfRawData_MSExchangeIS_MSExchangeIS
WMI Property 0 ActiveUserCount
WMI Property 1 RPCRequests
Namespace root\cimv2
WMI Class Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox
WMI Property 0 SendQueueSize
WMI Property 1 ReceiveQueueSize
Namespace root\cimv2
WMI Class CIM_DataFile
WMI Property 0 FileSize
Namespace root\cimv2
WMI Class CIM_DataFile
WMI Property 0 FileSize Status details
STATUS DETAIL DESCRIPTION The number of people currently using the The number of user connections that have shown activity in Information Store. the last 10 minutes.
The number of client requests currently being The number of requests that the Information Store is processed by the store. currently handling.
The queue of messages outbound from the The number of messages that are in the outbound queue of Information Store. the Information Store.
The queue of messages inbound to the Information The number of messages that are inbound to the Store. Information Store.
Public Information store size. The size of the Public Information database.
Private Information store size. The size of the Private Information database.
page 127 Services Reference Manual: SolarWinds N-central
Exchange 2007/2010 service
The Exchange 2007/2010 service uses a Windows probe or Windows agent to monitor the performance of Microsoft Exchange Server 2007 and Microsoft Exchange Server 2010.
Service Type Registry Query
Instances on a Device 10
Supported Systems/Applications Microsoft Exchange Server 2007 and Microsoft Exchange Server 2010
Device Class Server - Windows
Monitored By Windows probe, Windows agent
Scan Interval 15 minutes Status details
STATUS DETAIL DESCRIPTION RPC Averaged Latency The RPC latency in milliseconds averaged for the past 1024 packets.
RPC Requests The number of client requests that are currently being processed by the information store.
Local Delivery Rate The rate at which messages are delivered locally.
Active Remote Delivery Queue The number of items in the active remote delivery queues. Length
Retry Remote Delivery Queue The number of items in retry in the remote delivery queues. Length
Messages Received/sec The number of messages received by the SMTP server each second.
Messages Sent/sec The number of messages sent by the SMTP Send connector each second. Monitoring Microsoft Exchange server 2007 with a probe To monitor the Exchange 2007/2010 service with a Windows probe, the "LOCAL SERVICE" account must have Read Permission for the registry key: HKLM\System\CurrentControlSet\Control\SecurePipeServers\winreg
To give the LOCAL SERVICE account Read permission for the specified registry key: 1. On the computer running Exchange Service 2007/2010, click the Windows menu and click Run. 2. Enter regedit, and click OK. 3. Navigate to HKLM\System\CurrentControlSet\Control\SecurePipeServers\winreg. 4. Right-click on winreg, and click Permissions. 5. Click LOCAL SERVICE, and select the Allow Column check box. 6. Click OK.
page 128 Services Reference Manual: SolarWinds N-central
Exchange 2007 Store Size service
The Exchange 2007 Store Size service monitors the size of the Exchange server’s *.EDB file, and generates an alert when the file exceeds 46MB in size. By default, the Exchange 2007 Store Size service expects the file to be found at D:\Program Files\microsoft\exchange server\mailbox\first storage group\mailbox database.edb. You can changed this path on the Service Details tab of the service. Manufacturer information
Service Type WMI
Supported Systems/Applications Windows servers that are running Microsoft Exchange 2007.
Max instances on each device 50
Supported device class Servers - Windows
Monitored by Windows agent
Scan interval 15 minutes Troubleshooting
ISSUE RECOMMENDATION Misconfigured Check the following:
n The targeted device is running Exchange 2007. n The service has been configured with the correct path for the .EDB file that you are monitoring. Metrics
NAME DEFAULT THRESHOLDS Mailbox Size (MB) Normal: 1-46 Warning: 45-51 Failed: 50 or more
page 129 Services Reference Manual: SolarWinds N-central
Exchange 2007/2010 Delivery Queue service
The Exchange 2007/2010 Delivery Queue service uses a Windows agent to monitor the message queues of Microsoft Exchange Server 2007 and Microsoft Exchange Server 2010.
Service Type WMI
Instances on a 100 Device
Supported Microsoft Exchange Server 2007 and Microsoft Exchange Server 2010 Systems/Applications
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes
Queue Name Enter the name of the SNMP queue to monitor. For a list of SMTP queues, query the Win32_PerfRawData_MSExchangeTransportQueues_ MSExchangeTransportQueues WMI class. The default value is _total.
Status details
STATUS DETAIL DESCRIPTION Active Mailbox Delivery The number of active items in the mailbox delivery queue. Queue Length (Messages)
Active Non-SMTP The number of active items in the non-SMTP delivery queue. Delivery Queue Length (Messages)
Active Remote Delivery The number of active items in the remote delivery queue. Queue Length (Messages)
Aggregate Delivery The total number of items in all of the delivery queues. Queue Length All Queues (Messages)
Largest Delivery Queue The largest number of items in any of the delivery queues. Length (Messages)
Poison Queue Length The number of items in the poison delivery queue. This is the special queue used to (Messages) isolate messages determined to be harmful to the Exchange server after a transport server or service failure.
Retry Mailbox Delivery The number of items in retry in the mailbox delivery queue. Queue Length (Messages)
Retry Non-SMTP The number of items in retry in the non-SMTP delivery queue.
page 130 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Delivery Queue Length (Messages)
Retry Remote Delivery The number of items in retry in the remote delivery queue. Queue Length (Messages)
Submission Queue The number of items in the submission queue. This is the queue used to gather all Length (Messages) messages that the transport agents resolve, route, and process on the transport server.
Unreachable Queue The number of items in the unreachable queue. This is the queue used for messages Length (Messages) that Exchange cannot route to their destinations.
page 131 Services Reference Manual: SolarWinds N-central
Exchange database 2016 service
This service monitors the performance of the Microsoft Exchange server’s database and generates an alert when the database experiences performance issues. By default, this service monitors the Information Store database. You can monitor other databases by specifying a different database name in the Service Details tab of the service. Service information
Service Type WMI
Supported Systems/Applications Windows servers running Microsoft Exchange server 2016
Max instances on each device 100
Supported device class Servers - Windows
Monitored by Windows agent
Scan interval 5 minutes Troubleshooting
ISSUE CORRECTIVE ACTION Misconfigured Verify:
n The targeted device is running Microsoft Exchange server 2016. n The service is configured with the correct database name. Metrics
NAME DEFAULT THRESHOLDS Datbase Page Fault Stalls Normal: 0-10 Warning: 10-100 Failed: 100+
Database Cache Percent Hit Normal: 90-100 Warning: 70-89 Failed: 0-68
Log Record Stalls (Transactions/second) Normal: 0-10 Warning: 11-100 Failed: 51+
Log Threads Waiting Normal: 0-10 Warning: 10-50
page 132 Services Reference Manual: SolarWinds N-central
NAME DEFAULT THRESHOLDS Failed: 51+
WMI properties queried The Exchange Database 2016 service queries the Win32_PerfFormattedData_ESE_ MSExchangeDatabase WMI class for the following metrics:
n Databasepagefaultstallspersec n Databasecachepercenthit n Logrecordstallspersec n Logthreadswaiting No calculations are performed on the metrics gathered by the service. What appears in SolarWinds N-central is identical to what is found in the WMI.
page 133 Services Reference Manual: SolarWinds N-central
Exchange Database 2013 service
The Exchange Database 2013 service monitors the health of an Microsoft Exchange 2013 database.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Microsoft Exchange Server 2013
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 5 minutes
Database Name Enter the name of the database that you want to monitor. Status details
STATUS DETAIL DESCRIPTION Database Page The rate of page faults that cannot be serviced because there are no pages available for Fault Stalls allocation from the database cache.
Database Cache The percentage of database file page requests that were fulfilled by the database cache Percent Hit without causing a file operation since the server was started.
Log Record The number of log records that cannot be added to the log buffers, expressed in stalls per Stalls second, because the log buffers are full.
Log Threads The number of threads waiting to complete an update of the database by writing their data to Waiting the log.
page 134 Services Reference Manual: SolarWinds N-central
Exchange Database Latency 2013 service
The Exchange Database Latency 2013 service monitors latencies of a Microsoft Exchange 2013 database that can be caused by a number of issues including disk latencies due to a bad disk, domain controller latencies, or high user workload.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Microsoft Exchange Server 2013
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes
Database Instance The name of the Exchange 2013 database being monitored. Status detail
STATUS DESCRIPTION DETAIL Log Indicates that the Exchange server is receiving messages faster than they it can written to the Generation transport queue database due to reduced flow of intra-site, inter-site, or external mail messages. Checkpoint This may be due to message volume exceeding server capacity, applications other than Microsoft Depth Exchange Server are accessing or placing file locks on the transaction log files, or hard disks are not performing at a level to meet the disk I/O requirements of the Exchange environment.
IO Indicates the average time, in milliseconds (ms), to read from the database file. Database Reads Average Latency
IO Indicates the average time, in milliseconds (ms), to write to the database file. Database Writes Average Latency
page 135 Services Reference Manual: SolarWinds N-central
Exchange Database Store Mount Status service
The Exchange Database Store Mount Status service monitors whether or not Microsoft Exchange databases on the Microsoft Exchange servers are mounted and accessible.
Service Type WMI The query search is Win32_PerfFormattedData_ MSExchangeActiveManager_MSExchangeActiveManager
Instances on a 1 Device
Supported Microsoft Exchange Server 2007, 2010 and 2013. Systems/Applications
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 5 minutes
Database Name Enter the name of the database that you want to monitor. You can also use _Total, which will return the sum of the DatabaseMounted values for all databases. If _Total is used, you should adjust your thresholds accordingly. Status details
STATUS DETAIL DESCRIPTION Database Name The name of the Microsoft Exchange database the service is monitoring.
Database Mount Indicates the status of the database's accessibility as one of: Status n Normal 1 : The database is mounted and accessible. n Warning 2 : The service cannot determine the status of the database. The database may or may not be mounted and accessible. n Failed 0 : The database is unmounted and not accessible.
page 136 Services Reference Manual: SolarWinds N-central
Exchange Latency 2016
engineid enginename engineversion updateserialnumber
Service Type
Namespace
Supported Systems/Application
Known Limitations
Max. Instances Per Device
Supported Device Class
Notification Profile
Monitored By
ISSUE RECOMMENDATION
WMI Class
WMI PROPERTY SUPPORTED VALUES CALCULATIONS/THRESHOLD MAPPING DEFAULT THRESHOLDS
page 137 Services Reference Manual: SolarWinds N-central
Exchange Processing Time service
The Exchange Processing Time service monitors the request time and processing time for a Microsoft Exchange server.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Microsoft Exchange
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes Status detail
STATUS DETAIL DESCRIPTION Average Search Processing The average time that elapsed while waiting for searches to be completed. Time
Outbound Proxy Requests The average time in milliseconds that requests sent to a secondary client access Average Response Time server took to be completed during the scanning period.
Requests Average Response The average time in milliseconds that the Exchange Control Panel took to Time respond to requests during the scanning period.
page 138 Services Reference Manual: SolarWinds N-central
Fan Status (Cisco) service
The Fan Status (Cisco) service monitors the state of the specified fan on a Cisco device.
Service Type SNMP Instances on a 1 Device Supported Most Cisco switches/routers running IOS. Systems/Applications Device Class Switch/Router Monitored By Windows probe Scan Interval 5 minutes Fan Index The SNMP index of the fan to be monitored. For a list of the fans installed in the Cisco device, query it with the 1.3.6.1.4.1.9.9.13.1.4.1.2 SNMP OID. Fan Name The name of the fan to be monitored.
OBJECT DESCRIPTORS NUMERICAL OID $FanState 1.3.6.1.4.1.9.9.13.1.4.1.3
STATUS DETAIL DESCRIPTION Fan State The status of the fan which is mapped as:
n Normal: 1 n Warning: 2 n Failed: 3-6 Fan State Description A description of the fan's state as:
n 1: Normal n 2: Warning n 3: Critical n 4: Shutdown n 5: Not Present n 6: Not Functioning
page 139 Services Reference Manual: SolarWinds N-central
Fan Status (Dell) service
The Fan Status (Dell) service monitors the status and speed (RPMs) of the fans on a Dell server.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a Device 20
Supported Dell servers running Dell OpenManage Server Administrator software. Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows probe
Scan Interval 15 minutes
Cooling Device The SNMP index of the fan to monitor. Query the 1.3.6.1.4.1.674.10892.1.700.12.1.8 Location Name Index OID to get a list of the fan names and their SNMP indices.
Cooling Device The name of the monitored fan. Location Name Value OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Fan (Dell) Status 1.3.6.1.4.1.674.10892.1.700.12.1.5 The status of the fan. The status is mapped as:
n Normal : 3 n Warning : 0-2, 4, 11-4294967295 n Failed : 5, 6, 8-10 where the values are:
n 1: Other n 2: Unknown n 3: OK n 4: NonCritical Upper n 5: Critical Upper n 6: NonRecoverable Upper
page 140 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 7: NonCritical Lower n 8: Critical Lower n 9: NonRecoverable Lower n 10: Failed
Fan (Dell) Speed 1.3.6.1.4.1.674.10892.1.700.12.1.6 The speed in revolutions per minute of the fan.
page 141 Services Reference Manual: SolarWinds N-central
Fan Status (EqualLogic) service
The Fan Status (EqualLogic) service monitors the status and speed of the fans on a Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware.
Service Type SNMP Instances on a Device 10 Supported Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware. Systems/Applications Device Class Server - Generic, Server - Windows Monitored By Windows probe Scan Interval 5 minutes Fan Sensor Enter the name of the fan sensor to monitor. For a list of fan sensors, query the SAN with the .1.3.6.1.4.1.12740.2.1.7.1.2 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Sensor State 1.3.6.1.4.1.12740.2.1.7.1.4 The status of the fan. The meaning of the status:
n 0: Unknown n 1: Normal n 2: Warning n 3: Critical Fan Speed (RPM) 1.3.6.1.4.1.12740.2.1.7.1.3 The speed of the fan.
page 142 Services Reference Manual: SolarWinds N-central
Fan Status (Fujitsu) service
The Fan Status (Fujitsu) service monitors the status of a fan on a Fujitsu server.
Service Type SNMP
Instances on a Device 100
Supported Fujitsu workstations, laptops or servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
Fan Name Type the name of the monitored fan. For a list of fans, query the device with the .1.3.6.1.4.1.231.2.10.2.2.10.5.2.1.3 SNMP OID.
Scanning You can configure the scan interval according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Status 1.3.6.1.4.1.231.2.10.2.2.10.5.2.1.5
$CurrentSpeed 1.3.6.1.4.1.231.2.10.2.2.10.5.2.1.6
$Quality 1.3.6.1.4.1.231.2.10.2.2.10.5.2.1.7
$FailureReaction 1.3.6.1.4.1.231.2.10.2.2.10.5.2.1.8
$ShutdownDelay 1.3.6.1.4.1.231.2.10.2.2.10.5.2.1.9
STATUS DETAIL DESCRIPTION Status Describes the current status of the monitored fan with values mapped as: 1. WARNING - Unknown 2. WARNING - Disabled 3. NORMAL - OK 4. FAILED - Failed 5. WARNING - Failure Predicted 6. FAILED - Redundant Fan Failed 7. WARNING - Not Manageable 8. NORMAL - Not Present
Current Speed Specifies the current speed of the fan measured in revolutions per minute.
Fan Output Specifies the current quality of the fan indicated as a percentage of nominal speed.
page 143 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Reaction to Failure Describes the reaction if the fan fails with one of the following reported:
n Unknown n Continue n Shutdown and Power Off
Shutdown Delay if Indicates the amount of delay measured in seconds when shutdown should be Failure Occurs committed upon failure of the fan.
page 144 Services Reference Manual: SolarWinds N-central
Fan Status (HP) service
The Fan Status (HP) service monitors the condition of the system and CPU fans for Compaq/HP ProLiant servers.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a Device 1
Supported HP Proliant Servers running HP Insight Manager agents. Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
>Monitored By Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION System Fan 1.3.6.1.4.1.232.6.2.6.4 The status of the fans in the system is mapped as... (HP) n Normal: 1, 2 n Warning: 3 n Failed: 4 ...where the values are...
n 1: Other, fan status detection is not supported by this system or driver. n 2: OK, all fans are operating properly. n 3: Degraded, a non-required fan is not operating properly. n 4: Failed, a required fan is not operating properly.
CPU Fan (HP) 1.3.6.1.4.1.232.6.2.6.5 The status of the processor fans in the system is mapped as...
n Normal: 1, 2 n Warning: 3 n Failed: 4
page 145 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION ...where the values are...
n 1: Other, fan status detection is not supported by this system or driver. n 2: OK, all fans are operating properly. n 3: Degraded, a non-required fan is not operating properly. n 4: Failed, a required fan is not operating properly.
page 146 Services Reference Manual: SolarWinds N-central
Fan Status (IBM) service
The Fan Status (IBM) service monitors the status of the specified fan sensor on IBM servers.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 10 Device
Supported Any UMSLMSENSOR-MIB Compliant Device. Systems/Applications
Device Class Server - Windows, Server - Generic
Monitored By Windows agent, Windows probe
Scan Interval 5 minutes
Fan Sensor Name The name of the monitored fan sensor. You can obtain the name by querying the device with the .1.3.6.1.4.1.2.6.159.1.1.80.5.1.1 SNMP OID. The default setting is Fan Sensor 1. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Fan Sensor Status .1.3.6.1.4.1.2.6.159.1.1.80.5.1.20 The status of the fan sensor.
Fan Speed (RPM) .1.3.6.1.4.1.2.6.159.1.1.80.5.1.2 The speed of the fan.
page 147 Services Reference Manual: SolarWinds N-central
Fan Status (Intel) service
The Fan (Intel) Status service monitors the status and speed of specified fans for devices that use Intel motherboards and that have the Intel SMS software installed.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a Device 10
Supported Systems/Applications Devices using an Intel motherboard with the Intel SMS software installed
Device Class Server - Generic, Server - Windows
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Fan Status 1.3.6.1.4.1.343.2.10.3.5.600.20.1.5 The fan status is mapped as...
n Normal: 3 n Warning: 1, 2, 4 n Failed: 5, 6 ...where the values are...
n 1: Other n 2: Unknown n 3: OK n 4: Non-critical n 5, 6: Critical or Non-recoverable
Fan Status Description 1.3.6.1.4.1.343.2.10.3.5.600.20.1.5 Describes the status of the fan:
n Other n Unknown n OK n Non-Critical
page 148 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n Critical or Non-recoverable
Fan Speed (RPM) 1.3.6.1.4.1.343.2.10.3.5.600.20.1.6 The speed that the fan is turning as measured.
page 149 Services Reference Manual: SolarWinds N-central
Fan Status (NetApp) service
The Fan Status (NetApp) service monitors Indicates how many fans have failed.
For more information, see www.netapp.com/us/. Manufacturer information
Service Type SNMP
Discovery OID Index 0
Supported Systems/Application NetApp device with SNMP enabled. SolarWinds N-central information
Known Limitations N/A
Max. Instances Per Device 1
Supported Device Class Storage
Notification Profile N/A
Monitored By Windows probe Troubleshooting
ISSUE RECOMMENDATION Misconfigured Check to see if you have the correct credential on the device. Metrics 1
OID 1.3.6.1.4.1.789.1.2.4.2
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Failed Chassis Fans N/A N/A 1 – {0}Normal 2 – {>1} Failed Metrics 2
OID 1.3.6.1.4.1.789.1.2.4.3
page 150 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Chassis Fans Status N/A N/A Off
page 151 Services Reference Manual: SolarWinds N-central
Fan Status (VMware) service
The Fan Status (VMware) service monitors the status and speed (RPM) of the fans on ESXi servers. SolarWinds N- central uses the Common Information Model (CIM) services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 100
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
Fan Name The name of the monitored fan.
This service cannot use Self Healing.
To access information on the fans on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION Fan Speed (RPM) The speed in revolutions per minute (RPM) of the fan.
State Indicates whether the fan is enabled or disabled.
State Description N/A
Fan Health State The fan status is mapped as:
n Normal: 1 n Warning: 1, 2, 4 n Failed: 5, 6
Fan Health State Description Describes the status of the fan:
n Other n Unknown n OK n Non-critical
page 152 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION
n Critical or Non-recoverable
page 153 Services Reference Manual: SolarWinds N-central
File Size service
The File Size service monitors the size of a file as collected from the WMI Class: CIM_DataFile and Property: FileSize.
Service Type WMI
Instances on a Device 100
Supported Any Windows device that supports WMI. Systems/Applications
Device Class Laptop - Windows, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probes
Scan Interval 15 minutes
File Name and Path The directory path and name of the file that you would like monitored by the service. For example: c:\Program Files\Internet Explorer\iexplore.exe Properties queried and calculations performed
Namespace root\cimv2
WMI Class CIM_DataFile
WMI Property 0 FileSize Status details
STATUS DETAIL DESCRIPTION File Size The file size of the service, in bytes, kilobytes, megabytes, gigabytes.
page 154 Services Reference Manual: SolarWinds N-central
File system (NetApp) service
The File System (NetApp) service monitors the status and usage of the file system of a NetApp SAN. Basic service information
Service Type SNMP
Supported Systems/Application NetApp SAN.
Max Instances on each device 1
Supported Device class Storage
Monitored by Windows probe
Scan Interval 5 minutes Troubleshooting
ISSUE CORRECTIVE ACTION Misconfigured Verify that you have configured SolarWinds N-central with the correct SNMP community string for the device. Metrics
NAME DEFAULT THRESHOLDS File System Status Normal: 1 Warning: 2 Failed: 3
File system Status Description N/A
Highest Disk Space Used Across all Volumes (%) Normal: 0-85 Warning: 80-95 Failed: 90-100
Most Inodes Used Across all Volumes (%) Normal: 0-85 Warning: 80-95 Failed: 90-100 SNMP properties queried
Variable Name SNMP OID
OverallStatus 1.3.6.1.4.1.789.1.5.7.1
page 155 Services Reference Manual: SolarWinds N-central
StatusMessage 1.3.6.1.4.1.789.1.5.7.2
PercentUsed 1.3.6.1.4.1.789.1.5.7.3
InodesUsed 1.3.6.1.4.1.789.1.5.7.4
page 156 Services Reference Manual: SolarWinds N-central
Fortinet CPU service
The Fortinet CPU service monitors CPU usage in Fortinet devices.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Fortinet FortiGate-50B Series, 60B Series, 100A, 200A, 224B, 300A, 400A, Systems/Applications 500A, 800
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION CPU Usage 1.3.6.1.4.1.12356.1.8 Indicates CPU usage as a percentage. FortiOS 4.0 and higher 1.3.6.1.4.1.12356.101.4.1.3
page 157 Services Reference Manual: SolarWinds N-central
Fortinet Disk service
The Fortinet Disk service monitors the amount of disk space used on a Fortinet device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Fortinet FortiGate-100A, 200A, 224B, 300A, 400A, 500A, 800
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC OID/CALCULATION DESCRIPTION NAME Disk Usage 1.3.6.1.4.1.12356.1.12 The the amount of space used on the disk in MB. FortiOS 4.0 and higher 1.3.6.1.4.1.12356.101.4.1.6
Disk 1.3.6.1.4.1.12356.1.11 The total capacity of the disk in MB. Capacity FortiOS 4.0 and higher 1.3.6.1.4.1.12356.101.4.1.7
Percent (Disk Usage / Disk Capacity) x The disk space currently in use as a percentage of the total disk Used 100 space.
page 158 Services Reference Manual: SolarWinds N-central
Fortinet Memory service
The Fortinet Memory service monitors the memory (RAM) usage of Fortinet devices.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Fortinet FortiGate-50B Series, 60B Series, 100A, 200A, 224B, 300A, 400A, Systems/Applications 500A, 800
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Memory 1.3.6.1.4.1.12356.1.9 Measures the memory usage of the Fortinet device as a Usage percentage. FortiOS 4.0 or higher 1.3.6.1.4.1.12356.101.4.1.4
page 159 Services Reference Manual: SolarWinds N-central
Fortinet Sessions service
The Fortinet Sessions service monitors the number of active sessions on a Fortinet device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Fortinet FortiGate-50B Series, 60B Series, 100A, 200A, 224B, 300A, 400A, Systems/Applications 500A, 800
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Number of Sessions 1.3.6.1.4.1.12356.1.10 The number of active sessions on the device. FortiOS 4.0 or higher 1.3.6.1.4.1.12356.101.4.1.8
page 160 Services Reference Manual: SolarWinds N-central
Frame Relay service
Frame Relay is an efficient data transmission technique used to send digital information such as voice, data, LAN, and WAN traffic quickly and cost-efficiently to many destinations using virtual circuits. Frame Relay is characterized by connection-oriented, permanent or switched virtual circuits (PVC and SVC) at speeds up to 50 Mbps.
This service cannot use Self Healing.
SolarWinds N-central can monitor the Frame Relay circuit status, congestion notifications and the amount of traffic on the Frame Relay virtual circuits. You can also set thresholds against counters that indicate congestion on the network. Complete the steps below to monitor the Frame Relay service on a device. 1. Click View > All Devices and click the name of a device. 2. Click Settings > Properties and ensure Use SNMP is selected. 3. Click Save if required. 4. Click Monitoring > Status. 5. Click Add, enter 1 for the number of instances of the Frame Relay service. 6. Click Apply. 7. Click the Frame Relay service and then click the Service Details tab. 8. In Interfaces to Monitor, select the NICs/ports that you would like to monitor. 9. Click OK.
Service Type SNMP
Instances on a 60 Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probe
Scan Interval 15 minutes
Interfaces to Select the name or SNMP index of the NICs or ports that you would like to monitor. Monitor
The tables IF-MIBand FRAME-RELAY-DTE-MIB describe the SNMP objects that are queried by the probe. IF-MIB
OBJECT DESCRIPTORS NUMERICAL OID sysUptime 1.3.6.1.2.1.1.3
ifIndex 1.3.6.1.2.1.2.2.1.1
ifDescr 1.3.6.1.2.1.2.2.1.2
ifSpeed 1.3.6.1.2.1.2.2.1.5
page 161 Services Reference Manual: SolarWinds N-central
FRAME-RELAY-DTE-MIB
OBJECT DESCRIPTORS NUMERICAL OID frCircuitIfIndex 1.3.6.1.2.1.10.32.2.1.1
frCircuitState 1.3.6.1.2.1.10.32.2.1.3
frCircuitReceivedFECNs 1.3.6.1.2.1.10.32.2.1.4
frCircuitReceivedBECNs 1.3.6.1.2.1.10.32.2.1.5
frCircuitSentFrames 1.3.6.1.2.1.10.32.2.1.6
frCircuitSentOctets 1.3.6.1.2.1.10.32.2.1.7
frCircuitReceivedFrames 1.3.6.1.2.1.10.32.2.1.8
frCircuitReceivedOctets 1.3.6.1.2.1.10.32.2.1.9 OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC OID/CALCULATION DESCRIPTION NAME Octets ^frCircuitSentOctets + ^ The total number of transmitted and received octets. (Transmitted frCircuitReceivedOctets and Received)
Frames ^frCircuitSentFrames + ^ The total number of transmitted and received frames. (Transmitted frCircuitReceivedFrames and Received)
Average (^frCircuitSentOctets + ^ The average number of octets sent and received over this virtual Packet Size frCircuitReceivedOctets) / circuit calculated as a percentage of the total capacity of the virtual (^ frCircuitSentFrames + circuit. ^ frCircuitReceivedFrames)
Transmitted ( ^frCircuitSentOctets * The number of octets transmitted over the Frame Relay virtual circuit Utilization 80000) / ($ifSpeed * ^ during a scan interval time, which is calculated as a percentage of the sysUptime) total capacity of the virtual circuit: Transmitted octets is the difference between the number of octets transmitted during the previous scan and the number of octets transmitted during the current scan. This threshold is measured as a percentage value.
page 162 Services Reference Manual: SolarWinds N-central
METRIC OID/CALCULATION DESCRIPTION NAME Received ( The number of octets received over the Frame Relay virtual circuit Utilization ^frCircuitReceivedOctets during a scan interval time, which is calculated as a percentage of the * 80000) / ($ifSpeed * ^ total capacity of the virtual circuit: sysUptime) Received octets is the difference between the number of octets received during the previous scan and the number of octets received during the current scan. This threshold is measured as a percentage value.
Fwd Explicit ^frCircuitReceivedFECNs This type of notification is transmitted from the source terminal Congestion requesting the destination terminal to slow its requests for data. The Notification notification occurs when the data capacity level of the source terminal reaches the value set by the DTE, or when a switch queues a frame to a trunk that is congested. This field displays the number of FECNs received from the network indicating forward congestion since the virtual circuit was created. This threshold is measured in frames.
Bkwd Explicit ^frCircuitReceivedBECNs This type of notification is transmitted from the destination terminal Congestion requesting the source terminal to slow its data transmission. The Notification notification occurs when the data capacity level of the destination terminal reaches the value set by the DTE, or when a switch receives a frame from a trunk that is congested. This field displays the number of BECNs received from the network indicating forward congestion since the virtual circuit was created. This threshold is measured in frames.
Circuit $frCircuitState Indicates whether the particular virtual circuit is operational. Status There are two possible states: Active (displayed as ‘Normal’) = 2 Inactive (displayed as ‘Failed’) = 3
page 163 Services Reference Manual: SolarWinds N-central
F-Secure AV Central Management service
The F-Secure AV Central Management service monitors the last connection time, policy update time, and profile name. For more information, see www.f-secure.com.
You need to enable WMI Provider in the General settings of the PSB Portal to use this service. For more information see the F-Secure documentation. Manufacturer information
Service Type WMI
Namespace FSECURE
Supported Systems/Application PSB Workstation Security for 10.5 only. SolarWinds N-central information
Known Limitations Supports PSB Workstation Security 10.5 only.
Max. Instances Per Device 1
Supported Device Class Workstation - Windows Laptop - Windows
Notification Profile F-Secure AV
Monitored By Local agent Metrics
WMI Class CentralManagement
SUPPORTED CALCULATIONS/THRESHOLD DEFAULT WMI PROPERTY VALUES MAPPING THRESHOLDS Last Connection N/A N/A Off Time
Policy Update Time N/A N/A Off
Profile Name N/A N/A Off
page 164 Services Reference Manual: SolarWinds N-central
F-Secure AV Definitions service
The F-Secure AV Definitions service monitors all the F-secure AV definitions, including EngineId, EngineName, EngineVersion, and others. For more information, see www.f-secure.com.
You need to enable WMI Provider in the General settings of the PSB Portal to use this service. For more information see the F-Secure documentation.
engineid enginename engineversion updateserialnumber
10030 F-Secure Online 15.10.112 –
40001 F-Secure Spam Scanner 1.00.9694 2015-07-07_01
50002 F-Secure USS 5.08.94 2015-07-13_01
60002 F-Secure BlackLight 2.04.1099 2013-05-27_01
80001 F-Secure Gemini 3.02.384 2015-08-13_01
10010 F-Secure Hydra 5.14.151 2015-08-13_01
10020 F-Secure Aquarius 11.00.01 2015-08-14_06 Manufacturer information
Service Type AMP
Namespace FSECURE
Supported Systems/Application PSB Workstation Security 10.5 only. SolarWinds N-central information
Known Limitations Supports PSB Workstation Security 10.5 only.
Max. Instances Per Device 8
Supported Device Class Workstation - Windows Laptop - Windows
Notification Profile F-Secure AV
Monitored By Local agent Troubleshooting
ISSUE RECOMMENDATION Engineid Note the Update Time property in the F-secure console and download any pending 40001,50002 and updates. If the issue persists, verify the Update Time again. If it is current, consider turning 60002 always Failed off the threshold value or increase the UpdateTime in Days value. or warning
page 165 Services Reference Manual: SolarWinds N-central
Metrics
WMI Class AvDefinition
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING EngineName N/A N/A Off
EngineVersion N/A N/A Off
UpdateSerialNumber N/A N/A Off
Update Time N/A N/A Off
UpdateTime Age in Days N/A Current time - UpdateTime Normal: 0-7 Warning: 8-30 Failed: 31-365
page 166 Services Reference Manual: SolarWinds N-central
F-Secure AV Firewall Management service
The F-Secure AV Firewall Management service monitors build number, status, security level, and version. For more information, see www.f-secure.com.
You need to enable WMI Provider in the General settings of the PSB Portal to use this service. For more information see the F-Secure documentation. Manufacturer Information
Service Type WMI
Namespace FSECURE
Supported Systems/Application PSB Workstation Security 10.5 only. SolarWinds N-central information
Known Limitations Supports PSB Workstation Security 10.5 only.
Max. Instances Per Device 1
Supported Device Class Workstation - Windows Laptop - Windows
Notification Profile F-Secure AV
Monitored By Local agent Metrics
WMI Property Firewall
CALCULATIONS/ WMI CLASS SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Build Number N/A N/A Off
Status 1 –Enabled N/A Normal: 1 0 -Disabled Warning: 0 Failed: Other values
Security Level Block all N/A Off Mobile Home Office Office printer/file sharing Custom Allow all
page 167 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ WMI CLASS SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Version N/A N/A Off
page 168 Services Reference Manual: SolarWinds N-central
F-Secure AV Protection service
The F-Secure AV Protection service monitors Real Time and Deep Guard scanning. For more information, see www.f-secure.com.
You need to enable WMI Provider in the General settings of the PSB Portal to use this service. For more information see the F-Secure documentation. Manufacturer information
Service Type AMP
Namespace FSECURE
Supported Systems/Application PSB Workstation Security 10.5 only. SolarWinds N-central information
Known Limitations Supports PSB Workstation Security 10.5 only.
Max. Instances Per Device 1
Supported Device Class Workstation - Windows Laptop - Windows
Notification Profile F-Secure AV
Monitored By Local agent Troubleshooting
ISSUE RECOMMENDATION Real Time Scanning is not Check the F-secure console for the correct settings for virus and spyware Turned_On scanning.
Deep Guard is not Turned_On Check the F-secure console for the correct settings for Deep Guard. Metrics
WMI Class Antivirus
WMI PROPERTY SUPPORTED VALUES CALCULATIONS/THRESHOLD MAPPING DEFAULT THRESHOLDS RealTimeScanning Turned_On N/A On Turned_Off
DeepGuard Turned_On N/A On Turned_Off
page 169 Services Reference Manual: SolarWinds N-central
F-Secure AV Scan Results service
The F-Secure AV Scan Results service monitors the most recent scan result, including infected sectors and files, failed actions, and others. For more information, see www.f-secure.com.
You need to enable WMI Provider in the General settings of the PSB Portal to use this service. For more information see the F-Secure documentation. Manufacturer information
Service Type AMP
Namespace FSECURE
Supported Application PSB Workstation Security 10.5. SolarWinds N-central information
Known Limitations Supports PSB Workstation Security 10.5 only.
Max. Instances Per Device 1
Supported Device Class Workstation - Windows Laptop - Windows
Notification Profile F-Secure AV
Monitored By Local agent Troubleshooting
ISSUE RECOMMENDATION Misconfigure The last known scan result was either incomplete or unavailable. Execute another full computer scan from F-Secure. Metrics
WMI Class AvScanResult
CALCULATIONS/ DEFAULT WMI PROPERTY SUPPORTED VALUES THRESHOLD THRESHOLDS MAPPING Infected sectors N/A N/A 0 Normal > 0 failed
Infected Files N/A N/A 0 Normal > 0 failed
Renamed Infected N/A N/A Off
page 170 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ DEFAULT WMI PROPERTY SUPPORTED VALUES THRESHOLD THRESHOLDS MAPPING Files Deleted N/A N/A Off
Infected Files N/A N/A Off Quarantined
Failed Actions N/A N/A 0 Normal >0 failed
Disinfected Files N/A N/A Off
Scan Start N/A N/A Off
Scan End Scan Type Full or specific type or specific N/A Off location.
page 171 Services Reference Manual: SolarWinds N-central
F-Secure AV Software Updates service
The F-Secure AV Software Updates service monitors the service status and update information, including automatic or missing updates. For more information, see www.f-secure.com.
You need to enable WMI Provider in the General settings of the PSB Portal to use this service. For more information see the F-Secure documentation. Manufacturer information
Service Type WMI
Namespace FSECURE
Supported Systems/Applications PSB Workstation Security 10.5 only. SolarWinds N-central information
Known Limitations Supports PSB Workstation Security 10.5 only.
Max. Instances Per Device 1
Supported Device Class Workstation - Windows Laptop - Windows
Notification Profile F-Secure AV
Monitored By Local agent Troubleshooting
ISSUE RECOMMENDATION Status Enabled is Disabled Check the F-Secure console to ensure that F-Secure is running properly.
Status Misconfigured Ensure you are running a supported version of F-Secure. Metrics
WMI Class softwareupdater
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Enabled 1 – Enabled N/A Off 0 – Disabled
InstallSecurityUpdatesAutomatically 0 – None N/A N/A 1 – Critical 2 – Critical & important page 172 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING 3 – All
MissingImportantUpdatesCount N/A N/A Off
MissingOtherUpdatesCount — N/A Off
MissingCriticalUpdatesCount — N/A Off
page 173 Services Reference Manual: SolarWinds N-central
FTP service
The FTP service supports file transfers between local and remote computers. The FTP test checks the status of the FTP service on the network device. During the test, SolarWinds N-central can determine the availability status of the FTP service by comparing the availability of the FTP service to the threshold value.
Service TCP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central server By
Scan 5 minutes Interval
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a failure. Value The default is 30 seconds.
Port The port the system uses to monitor the service. Number
Validation The response you expect to receive from the port that is being queried. If the validation string that you String specify is not returned by the port being queried, the service will transition to a Failed state. The default validation string is 220. Status details
STATUS DESCRIPTION DETAIL FTP SolarWinds N-central determines whether the FTP service is up or down. The FTP service does not Service use thresholds or the Warning state. Availability
Round Trip The time for a request to be sent and received. Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 174 Services Reference Manual: SolarWinds N-central
FW-Chk Point service
The FW-Chk Point service collects vendor-supplied metrics from the 1.3.6.1.4.1.2620 Check Point private branch, such as packets accepted, packets rejected, packets dropped, packets logged, last trap event sent.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Check Point FireWall-1 V5.4
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Module State 1.3.6.1.4.1.2620.1.1.1 The state of the firewall module.
Filter Name 1.3.6.1.4.1.2620.1.1.2 The name of the loaded filter.
Filter Date 1.3.6.1.4.1.2620.1.1.3 The date the filter was installed.
Accepted Packets 1.3.6.1.4.1.2620.1.1.4 The number of accepted packets.
Rejected Packets 1.3.6.1.4.1.2620.1.1.5 The number of rejected packets.
Dropped Packets 1.3.6.1.4.1.2620.1.1.6 The number of dropped packets.
Logged Packets 1.3.6.1.4.1.2620.1.1.7 The number of logged packets.
Major Version Number 1.3.6.1.4.1.2620.1.1.8 The major version of the CheckPoint OS.
Minor Version Number 1.3.6.1.4.1.2620.1.1.9 The minor version of the Check Point OS.
Product Name 1.3.6.1.4.1.2620.1.1.10 The model of the Check Point firewall.
Last Trap Sent 1.3.6.1.4.1.2620.1.1.11 A string containing the last SNMP trap sent from the firewall.
page 175 Services Reference Manual: SolarWinds N-central
FW-Cisco service
The FW-Cisco service monitors syslog entries from a Cisco ASA or PIX firewall.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported Cisco PIX and Cisco ASA firewalls Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
Regular Expression The strings of characters and meta-characters that you want to use to find predetermined for Severity 1 to 5 key words in the log files. You can set a different threshold option for each regular expression. Status details
STATUS DESCRIPTION DETAIL Severity 1 The severity levels reported by SolarWinds N-central are based on the regular expressions that you configure. Up to five (5) different severity levels can be reported using the format \%((PIX\|)?(ASA)| (PIX)\- followed by the number corresponding to the Cisco severity level. Severity 2 The Cisco severity levels are:
n \%((PIX\|)?(ASA)|(PIX)\-0 = Emergency Severity 3 n \%((PIX\|)?(ASA)|(PIX)\-1 = Alert n \%((PIX\|)?(ASA)|(PIX)\-2 = Critical n \%((PIX\|)?(ASA)|(PIX)\-3 = Error Severity 4 n \%((PIX\|)?(ASA)|(PIX)\-4 = Warning n \%((PIX\|)?(ASA)|(PIX)\-5 = Notification Severity 5 n \%((PIX\|)?(ASA)|(PIX)\-6 = Informational n \%((PIX\|)?(ASA)|(PIX)\-7 = Debugging
The line The number of lines, in the log file, where the agent has located and returned the keyword. This count information is displayed for each regular expression on the status details screen for the service, any matched applicable reports, and any triggered notifications, except for numeric pages. regex...
The first This is the first line of the lines that were scanned, not the first line in the file. line matched
page 176 Services Reference Manual: SolarWinds N-central
FW-FortiGate service
The FW-FortiGate service monitors syslog messages from FortiGate devices.
This service cannot use Self Healing.
Service Type Syslog
Instances on a Device 1
Supported Fortinet FortiGate-50B Series, 60B Series, 100A, 200A, 224B, 300A, 400A, Systems/Applications 500A, 800
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes Status details
STATUS DESCRIPTION DETAIL Emergency
Alert The threshold values that determine the status change of the service. Critical If the related regular expression is found, the test is successful. Otherwise, the test is unsuccessful. Error Based on the test results, the appropriate status is then displayed for the service.
Warning
The line The number of lines in the log file where the agent locates and returns the keyword. This information count is displayed for each regular expression on the status details screen for the service, any applicable matched reports, and any triggered notifications, except for numeric pages. regex...
The first This is the first line of the lines that were scanned, not the first line in the file. line matched
page 177 Services Reference Manual: SolarWinds N-central
FW-Juniper service
The default keywords that appear in the regular expression fields are obtained from Juniper. You must configure your firewall to send syslog messages to the IP address of the Windows probe. The IP address of the firewall that is registered as a device in SolarWinds N-central must be the same as the IP address that sends SNMP traps to the probes.
This service cannot use Self Healing.
Service Type Syslog
Instances on a 1 Device
Supported Juniper 25 Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe
Scan Interval 5 minutes Status details
STATUS DESCRIPTION DETAIL Emergency
Alert The threshold values that determine the status change of the service. Critical If the related regular expression is found, the test is successful. Otherwise, the test is unsuccessful. Error Based on the test results, the appropriate status is then displayed for the service.
Warning
The line The number of lines in the log file where the agent has located and returned the keyword. This count information is displayed for each regular expression on the status details screen for the service, any matched applicable reports, and any triggered notifications, except for numeric pages. regex...
The first This is the first line of the lines that were scanned, not the first line in the file. line matched
page 178 Services Reference Manual: SolarWinds N-central
FW-SonicWALL service
The FW-SonicWall service monitors syslog messages from SonicWALL devices.
This service cannot use Self Healing.
Service Type Syslog
Instances on a Device 1
Supported Systems/Applications SonicWALL TZ-Series, PRO-Series, and NSA-Series devices
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes Status details
STATUS DEFAULT KEYWORD DETAIL Severity 0 An event with a severity of emergency was detected.
Severity 1 An event with a severity of alert was detected.
Severity 2 An event with a severity of critical was detected.
Severity 3 An event with a severity of error was detected.
The line The number of lines in the log file where the agent has located and returned the keyword. This count information is displayed for each regular expression on the status details screen for the service, any matched applicable reports, and any triggered notifications, except for numeric pages. regex...
The first This is the first line of the scanned lines, not the first line in the file. line matched
page 179 Services Reference Manual: SolarWinds N-central
FW-Watchguard service
The FW-Watchguard service provides a way for you to track the status of your firewall and generate notifications and trend reports on its activities. You must configure your firewall to send syslog messages to the IP address of the Windows probe. The IP address of the firewall that is registered as a device in SolarWinds N-central must be the same as the IP address that sends SNMP traps to the probes.
This service cannot use Self Healing.
Service Type Syslog
Instances on a Device 1
Supported Systems/Applications WatchGuard Firebox X Edge e-Series, X Core e-Series, X Peak e-Series
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes Status details
STATUS DESCRIPTION DETAIL Fail
Warning
Attack The threshold values that determine the status change of the service. Flood If the related regular expression is found, the test is successful. Otherwise, the test is unsuccessful. Ping of Based on the test results, the appropriate status is displayed for the service. Death
IP Source Spoofing
The line The number of lines in the log file where the agent has located and returned the keyword. This count information is displayed for each regular expression on the status details screen for the service, any matched applicable reports, and any triggered notifications (except for numeric pages). regex...
The first This is the first line of the scanned lines that matches the regular expression. line matched
page 180 Services Reference Manual: SolarWinds N-central
FW-ZyWALL service
The FW-ZyWALL service provides a way to track the status of your firewall and generate notifications and trend reports on its activities.
This service cannot use Self Healing.
Service Type Security Log
Instances on a Device 1
Supported Systems/Applications ZyWALL 2 Plus, 2WG, 5 UTM, 35 UTM, and 70UTM firewalls
Device Class Switch/Router, Other
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME DESCRIPTION System Errors Monitors for any system errors reported by the ZyWALL device.
IPSec IKE or PKI Monitors for any IPSec IKE or PKI attacks reported by the ZyWALL device.
Blocked Web Sites Monitors for any attempts to access blocked web sites.
Attacks Monitors for any attacks.
Other Categories Monitors for any other issues reported by the ZyWALL device.
page 181 Services Reference Manual: SolarWinds N-central
TCP Port Availability service
The TPC Port Availability service, formerly called Generic TCP, monitors the connectivity of a socket on a specified port on a device and, if the port is available, a specific TCP service functioning on the port. After the port has successfully passed the test for connectivity, the service can continue on to use an appropriate command string to test the TCP service it is monitoring and a validation string against which to check the response it receives. The availability results of the TCP service are then reflected on the status dashboard for the TCP port availability service. For example, the command string 201 receiving the appropriate response code 220 indicates that the FTP service is running and available for use. The service also measures the round trip time for the request and the DNS resolution. You can set a maximum of six instances of the TCP port availability service on a device, with each instance monitoring a different port on the device.
The service does not use the Warning state.
Service TCP port availability (Generic TCP) Type
Instances 10 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central Server By
Scan 5 minutes Interval
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a Value failure. The default is 30 seconds.
Port The TCP port number used to monitor the TCP port availability service. Number
Send A predefined set of characters specific to the TCP service. The string is transmitted upon connection Command to the host and requests the response about the TCP service. String
Validation The response you expect to receive from the port that is being queried. If the validation string that String you specify is not returned by the port being queried, the service will transition to a Failed state. Status details
STATUS DESCRIPTION DETAIL Generic The threshold that determines the availability of the port. Service Availability
page 182 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL Round Trip The time for a request to be sent and received. Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 183 Services Reference Manual: SolarWinds N-central
SNMP Query (Integer) service
The SNMP Query integer service, formerly called Generic SNMP (Integer), can be set up to monitor any integer value by using SNMP. This service monitors one integer value at a time by enabling you to specify the SNMP object identifier (OID) and the SNMP index of the value that you would like to monitor. The OID can be any 32-bit integer.
Service Type SNMP
Instances on a 25 Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Switch/Router, and Server - Windows
Monitored By Windows probe
Target OID Index The SNMP Index of the variable that you would like to monitor.
Target OID Variable The SNMP OID of the variable that you would like to monitor.
Scan Interval 15 minutes. OID/Calculation
METRIC OID/C DESCRIPTION NAME ALCULATION OID Value Monitors the instance, which is obtained by combining the value of the target OID index and the target OID variable that are set on the Service Details tab.
System Up 1.3.6.1.2.1.1.3 How long the device has been online. Time OID
page 184 Services Reference Manual: SolarWinds N-central
ODBC query service
The ODBC query service, formerly called Generic ODBC Service, monitors the results of an ODBC query sent to a SQL database. The data returned by the ODBC query is then evaluated against the regular expressions specified in the service.
When setting up the connection, the username and password must be an SQL user account. A Windows account will not connect.
Service Type ODBC
Instances on a Device 50
Supported ODBC-compliant SQL servers Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Agent (Windows and Red Hat Linux), Windows probe
Scan Interval 5 minutes
ODBC Driver Name The name of the ODBC driver that allows the Generic ODBC service to query the specified database.
Database Port The port on which the database accepts incoming queries.
Database Name The name of the database to be queried.
Database Username The SQL username that is used to access the database. This cannot be a Windows account user name.
Database Password The SQL password that is used to access the database. This cannot be a Windows user account password.
Database Query The SQL query statement that is submitted to the database.
Column 1 Name
Column 2 Name The name of the database values that are being queried for the value.
Column 3 Name
Column 1 Regular Expression
Column 2 Regular The values that SolarWinds N-central should look for in the results of the ODBC query. Expression
Column 3 Regular Expression
page 185 Services Reference Manual: SolarWinds N-central
ODBC Driver Support
AGENT/PROBE ODBC DRIVER AND VERSION MDAC ODBC Driver 2.8 Unix ODBC Driver 2.2.10 Postgres SQL ODBC Driver 8.01
Windows agent x
Red Hat agent x x
Suse agent x x
Windows probe x Status details
STATUS DETAIL DESCRIPTION Transaction time in milliseconds The total transaction time to connect, authenticate, send a query, retrieve results, and disconnect.
Rows returned by the query The number of rows returned by a query.
Rows returned by the query that matched all The number of rows that matched all of the column regular column regular expressions expressions.
page 186 Services Reference Manual: SolarWinds N-central
Generic SQL Server service
The Generic SQL Server service monitors the availability of the port where the MS SQL Server application runs. The availability of the port, which is determined by the service testing the port's connectivity, indicates that the MS SQL Server application is running. This service also measures the DNS resolution and the round trip time of the initial connection request and response. The availability results of the TCP service are then reflected on the status dashboard for the Generic SQL Server service. You can set a maximum of three instances of this service on a device, with each instance monitoring a different port on the device.
The Generic SQL Server service does not use the Warning state.
Service Type Generic TCP
Instances on a 3 Device
Supported Microsoft SQL Server Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe, central server
Scan Interval 5 minutes
Timeout Value The time in seconds that the SolarWinds N-central server waits before considering the test a failure. The default is 30 seconds.
Port Number The TCP port number used to monitor the Generic SQL service is 1433. Generic SQL server thresholds
STATUS DESCRIPTION DETAIL Generic SQL The threshold that determines the availability of the port. Server Availability
Round Trip The time in milliseconds for a request to be sent and received. Time (ms)
DNS Resolution The threshold that determines whether the device name can be resolved. If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state is Normal. Otherwise, it is Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state is Normal. Otherwise, it is Failed, based on the default settings.
page 187 Services Reference Manual: SolarWinds N-central
SNMP Query (String) service
The SNMP Query (string) service, formerly called Generic String (SNMP), will collect any OID using a configurable OID parameter field. It is returned as a string in SolarWinds N-central's database regardless of the original SNMP data type. Thresholds cannot be applied to Generic String.
Service SNMP Type
Instances 1000 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server Class - Windows
Monitored Windows probe By
Target The Index of the object that you would like to monitor. OID Index
Target The OID that you would like to monitor. OID Variable
Scan 15 minutes Interval
ObjectID - The unfinished OID. Append the rest of the dotted decimal values that correspond to the SNMP .1.3.6.1 object you wish to query to this unfinished OID. For example, if the OID is .1.3.6.1.2.1.2.2.1.8, enter .2.1.2.2.1.8. You must also include the index. For example, to collect the sysDescr system description, enter 2.1.1.1.0 in this field.
You can set the service to monitor any variable by using the SNMP. This service monitors one value at a time by allowing you to specify the SNMP object identifier (OID) and the index of the object that you would like to monitor. SNMP query status details
STATUS DETAIL DESCRIPTION Generic String The returned string.
System Uptime The uptime of the device. This status detail is required.
page 188 Services Reference Manual: SolarWinds N-central
Guest Status (VMware) service
The Guest Status (VMware) service monitors Guest instances on an ESX server. SolarWinds N-central uses the CIM services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device One per discovered Guest.
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
This service cannot use Self Healing.
METRIC NAME DESCRIPTION Guest Status Is the Guest is running or not.
Guest Status Description of the Guest's current status. Description
VMware Tools Status Current status of VMWare Tools.
VMware Tools Status Description of the current status of VMWare Tools. Description
Is VMware Tools Is the VMWare Tools is running or not. Running?
Guest CPU Shares Allocation of CPU resources to the Guest.
CPU Reservation Minimum amount of CPU resources, in MHz, that have been reserved for use by the Guest.
Guest CPU Limit Maximum amount of CPU resources, in MHz, that can be used by the Guest.
Host CPU Consumed CPU resources, in MHz, that are being used by the Host.
Host CPU Usage CPU resources, expressed as a percentage of the total CPU resources, that are being used by the Host.
CPU Ready Time Time, in milliseconds, that the virtual machine was ready but could not get scheduled to run on the physical CPU.
page 189 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION CPU Ready Time, expressed as a percentage of the total CPU availability, that the virtual machine was ready but could not get scheduled to run on the physical CPU.
CPU Count The number of CPUs used by the virtual machine.
Disk Shares Virtual hard disk shares that have been allocated to the virtual machine.
IOPs Limit Maximum number of I/O operations per second that can be used by the virtual machine.
Disk Read Rate Average number of kilobytes read from each virtual disk on the virtual machine during the scan interval.
Disk Write Rate Average number of kilobytes written to each virtual disk on the virtual machine during the scan interval.
Provisioned Disk Indicates the maximum disk space, in GB, that can be utilized by the virtual machine. Space
Disk Space Used Indicates the amount of disk space, in GB, that is currently being utilized by the virtual machine.
Disk Usage Indicates the amount of disk space, expressed as a percentage of total disk space, that is currently being utilized by the virtual machine.
Memory Shares A configured value that indicates the amount of virtual memory shares that have been allocated to the virtual machine.
Provisioned Memory A configured value that indicates the amount of memory, in GB, that has been guaranteed for use by the virtual machine.
Active Memory Memory, in GB, that has recently been accessed by the virtual machine.
Active Memory (%) Memory, expressed as a percentage (%) of total memory, that has recently been accessed by the virtual machine.
Consumed Memory Indicates the amount of memory, in GB, that is being used by the virtual machine.
Consumed Memory Indicates the amount of memory, expressed as a percentage (%) of total memory, that is (%) being used by the virtual machine.
Memory Ballooning Indicates the amount of memory, in GB, allocated by the virtual machine memory- management driver that controls ballooning.
Memory Reservation Minimum amount of memory, in GB, that has been specifically reserved for use by the virtual machine.
Memory Limit Maximum amount of memory, in GB, that can be used by the virtual machine.
Power Consumption Power, in Watts, being used by the virtual machine.
Guest Data Receive The transfer rate in bytes/second that the virtual machine receives data. Rate
Guest Data Transmit The transfer rate in bytes/second that the virtual machine transmits data. Rate
Guest Dropped Data packets lost during the reception of data by the virtual machine.
page 190 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION Packets (Received)
Guest Dropped Data packets lost during the transmission of data by the virtual machine. Packets (Transmitted)
Guest Network Bandwidth consumption, in Kb/second, of the virtual machine. Usage
page 191 Services Reference Manual: SolarWinds N-central
HKLM Registry Query (Integer) service
This service uses the Registry Query (Integer) AMP to query a specific key in registry. This service queries the registry key under the registry path specified in service parameters and convert the result to an integer which can be monitored. This service is supported only on HKEY_LOCAL_MACHINE, although other registry hives might work. Example: Registry Key: DbgJITDebugLaunchSetting Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework Output: Integer value
For more information, refer to www.microsoft.com.
Service Type AMP
Powershell cmdlet Get-ItemProperty-Path
Supported Systems/Application Windows Workstation Windows Server
Known limitations Windows only
Max instances per device 100
Supported devices class Workstation - Windows Laptop - Windows
Notification profile N/A
Monitored by Local agent Troubleshooting
ISSUE RECOMMENDATION Misconfigured Check if Powershell 3.0 is installed and the registry key is available.
CBS Reboot CBS returns true if a new windows component has been added or removed. This key is useful Pending to check if windows has been altered. Failed status
Windows This status is failed when a Windows update was installed or moved and requires a reboot. Update Reboot Required Failed status
File Rename The Pending File rename operation is modified when a new application is installed or updated. Pending This key might or might not indicate that a reboot is required, however it indicates changes on (Reboot) Failed the file system due to application or Windows changes. status
page 192 Services Reference Manual: SolarWinds N-central
HKLM Registry Query (String) service
This service uses the Registry Query (String) AMP to query a specific key in registry. This service will query the registry key under the registry path specified in service parameters and convert the result to a string that can be monitored. This service is supported only on HKEY_LOCAL_MACHINE, although other registry hives might work. Example: Registry Key: InstallRoot Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\.NETFramework Output: String value
For more information, refer to www.microsoft.com.
Service Type AMP
Powershell cmdlet Get-ItemProperty-Path
Supported Systems/Application Windows Workstation Windows Server
Known limitations Only Windows
Max instances per device 100
Supported device class Workstation - Windows Laptop - Windows
Notification profile N/A
Monitored by Local agent Troubleshooting
ISSUE CORRECTIVE ACTION Misconfigured Check to see if Powershell 3.0 is installed and the registry key is available. Metrics
REGISTERY SUPPORTED CALCULATIONS/THRESHOLD DEFAULT THRESHOLDS PROPERTY VALUES MAPPING Value N/A N/A String exist normal else failed
page 193 Services Reference Manual: SolarWinds N-central
HTTP service
The HTTP service monitors a Web server to ensure it is running and publishing web pages without reporting any errors. You must add the HTTP service on the web server, which you must add as a device in SolarWinds N-central. The HTTP service also includes WTS functionality that monitors the specific content on a web site by searching for a matching regular expression. For example, you can monitor the availability of specific content on an e-commerce site that uses a database-driven architecture. The results from monitoring are displayed on the status dashboard under the HTTP service. If specified, the results can also be provided in any notifications triggered by the service. During the monitoring process, the HTTP service first attempts to resolve the DNS entry for the web server. If the DNS test is successful, the service then checks the availability and response time of the web server using a specified URL. If the DNS test is not successful, the service changes to the Misconfigured state. A code in the response header from the Web server determines whether the server is in a Normal, Warning, or Failed state. The Normal or Warning response codes are tracked as parameters on the status dashboard. The Failed response codes are automatically change the service to the Failed state.
To avoid potential security risks, we recommend that you configure this service to use an account that has limited privileges. A potential security risk exists when generating a Configuration Summary Report for this service. This report will display all of the service's parameters including the passwords for the accounts that are used by the HTTP service to monitor Web servers.
Service Type TCP
Instances on 20 a Device
Device Class Server - Generic, Other, Printer, Scanner/Camera, Switch/Router, Workstation - Windows, Workstation - Generic, and Server - Windows
Monitored By Windows probe, Central server
Scan Interval 5 minutes
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a Value failure. The default is 30 seconds.
Port Number 80
Validation HTTP. This field displays a predefined set of characters that the system compares to the String response to determine whether the response is valid.
HTTP URL The URL used to test the availability of the web server. For example:
n www.xyz.com, n index.html, n http://www.xyz.com/index.html, or n http://www.xyz.com/ A partial URL of the network address of the Web server can also be used. When setting up the URL, an issue occurs if the first portion of the relative URL can be resolved by the monitoring device as a domain name.
page 194 Services Reference Manual: SolarWinds N-central
For example, if you were monitoring http://192.168.1.1/example.com/index.html, and only provided the relative URL /example.com/index.html, the monitoring device will determine that the first portion is a domain name and assume an absolute URL was provided. As a workaround, you can configure the HTTP service with the absolute URL manually.
Login The username that is used to sign in to the designated URL. You can use the Login Username for Username latency testing, but does not need to be configured if the designated web page does not require credentials.
Login The security password used to sign in to the designated URL. You can use the Login Password Password for latency testing, however you do not need to configure it if the designated web page does not require credentials.
Authentication The security authentication scheme used by the designated URL for determining whether Scheme requests for access are valid or not. This property should be configured as one of:
n Basic, n Digest, n NTLM, n Kerberos, or n Negotiate.
Normal The codes in the response header that indicate a Normal state. Response Code
Warning The codes in the response header that indicate a Warning state. Response Code Any codes in the response header that are not configured as either a Normal Response Code or a Warning Response Code will result in the service being transitioned into a Failed state.
Content The regular expression used to find a specific match in the content on the web page. Verification Regular For example: The page cannot be displayed. Expression
STATUS DETAIL DESCRIPTION HTTP Service The availability of a web server based on the response code returned by the HTTP response Availability header.
Average Round The average time for a request to be sent and received. Trip Time (ms)
DNS Resolution The FQDN or IP address that determines whether the device name can be resolved. If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address' format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 195 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Content The regular expression that triggers the status for the matched contents on the web page. Verification Regular Expression HTTP status code definitions to HTTP or HTTPS service availability
The three possible values for HTTP Service Availability or HTTPS Service Availability (Normal: 1, Warning: 2, and, Failed: 0) are based on HTTP Status Code Definitions. RFC 2616 'Hypertext Transfer Protocol -- HTTP/1.1' defines the protocol referred to as "HTTP/1.1". This protocol includes more stringent requirements than HTTP/1.0 in order to ensure reliable implementation of its features. Normal By default, SolarWinds N-central evaluates the following 'HTTP or HTTPS Status Code Definitions' as Normal (HTTP or HTTPS Service Availability 1):
STATUS HTTP OR HTTPS SERVICE DEFINITION RFC DESCRIPTION CODE AVAILABILITY 100 Continue RFC 2616 Section Normal (1) 10.1.1
101 Switching Protocols RFC 2616 Section Normal (1) 10.1.2
200 OK RFC 2616 Section Normal (1) 10.2.1
201 Created RFC 2616 Section Normal (1) 10.2.2
202 Accepted RFC 2616 Section Normal (1) 10.2.3
203 Non-Authoritative RFC 2616 Section Normal (1) Information 10.2.4
204 No Content RFC 2616 Section Normal (1) 10.2.5
205 Reset Content RFC 2616 Section Normal (1) 10.2.6
206 Partial Content RFC 2616 Section Normal (1) 10.2.7
Warning By default, SolarWinds N-central evaluates the following 'HTTP Status Code Definitions' as Warning (HTTP or HTTPS Service Availability 2):
page 196 Services Reference Manual: SolarWinds N-central
STATUS CODE DEFINITION RFC DESCRIPTION HTTP OR HTTPS SERVICE AVAILABILITY 300 Multiple Choices RFC 2616 Section 10.3.1 Warning (2)
301 Moved Permanently RFC 2616 Section 10.3.2 Warning (2)
302 Found RFC 2616 Section 10.3.3 Warning (2)
303 See Other RFC 2616 Section 10.3.4 Warning (2)
304 Not Modified RFC 2616 Section 10.3.5 Warning (2)
305 Use Proxy RFC 2616 Section 10.3.6 Warning (2)
306 (Unused) RFC 2616 Section 10.3.7 Warning (2)
307 Temporary Redirect RFC 2616 Section 10.3.8 Warning (2)
Failed By default, SolarWinds N-central evaluates the following 'HTTP Status Code Definitions' as Failed (HTTP or HTTPS Service Availability 0):
STATUS HTTP OR HTTPS DEFINITION RFC DESCRIPTION CODE SERVICE AVAILABILITY
400 Bad Request RFC 2616 Section 10.4.1 Failed (0)
401 Unauthorized RFC 2616 Section 10.4.2 Failed (0)
402 Payment Required RFC 2616 Section 10.4.3 Failed (0)
403 Forbidden RFC 2616 Section 10.4.4 Failed (0)
404 Not Found RFC 2616 Section 10.4.5 Failed (0)
405 Method Not Allowed RFC 2616 Section 10.4.6 Failed (0)
406 Not Acceptable RFC 2616 Section 10.4.7 Failed (0)
407 Proxy RFC 2616 Section 10.4.8 Failed (0) Authentication Required
408 Request Timeout RFC 2616 Section 10.4.9 Failed (0)
409 Conflict RFC 2616 Section 10.4.10 Failed (0)
410 Gone RFC 2616 Section 10.4.11 Failed (0)
411 Length Required RFC 2616 Section 10.4.12 Failed (0)
412 Precondition Failed RFC 2616 Section 10.4.13 Failed (0)
413 Request Entity Too RFC 2616 Section 10.4.14 Failed (0) Large
page 197 Services Reference Manual: SolarWinds N-central
STATUS HTTP OR HTTPS DEFINITION RFC DESCRIPTION CODE SERVICE AVAILABILITY 414 Request-URI Too RFC 2616 Section 10.4.15 Failed (0) Long
415 Unsupported Media RFC 2616 Section 10.4.16 Failed (0) Type
416 Requested Range RFC 2616 Section 10.4.17 Failed (0) Not Satisfiable
417 Expectation Failed RFC 2616 Section 10.4.18 Failed (0)
500 Internal Server RFC 2616 Section 10.5.1 Failed (0) Error
501 Not Implemented RFC 2616 Section 10.5.2 Failed (0)
502 Bad Gateway RFC 2616 Section 10.5.3 Failed (0)
503 Service Unavailable RFC 2616 Section 10.5.4 Failed (0)
504 Gateway Timeout RFC 2616 Section 10.5.5 Failed (0)
505 HTTP Version Not RFC 2616 Section 10.5.6 Failed (0) Supported
page 198 Services Reference Manual: SolarWinds N-central
HTTPS service
The HTTPS service monitors all of the scan details of the HTTP service and the validity and expiry date of an SSL certificate on a device. You can monitor the scan details for the SSL certificates only if the certificates have been signed by a CA that has been uploaded in SolarWinds N-central or is listed in the default CA certificate file provided by SolarWinds N-central. For more information on uploading a certificate, see Uploading a certificate. The HTTPS service does not currently provide the ability to interact with web sites that use self-signed certificates.
When performing Regex matching, the service looks at the whole web response, including the HTTP/HTTPS header and the page content, not only the page content.
The HTTPS service also includes WTSS functionality that monitors the specific content on a web site over a secure web connection by searching for a matching regular expression. For example, you can monitor the availability of specific content on an e-commerce site that uses a database driven architecture. The results from monitoring are displayed on the status dashboard under the HTTP service. If specified, the results can also be provided in any notifications triggered by the service. The SolarWinds N-central HTTPS service does not support forms-based authentication.
Service Type TCP
Instances on 20 a Device
Device Class Server - Generic, Other, Printer, Scanner/Camera, Switch/Router, Workstation - Windows, Workstation - Generic, and Server - Windows
Monitored By Windows probe, SolarWinds N-central server
Scan Interval 5 minutes
Timeout The time that the SolarWinds N-central server waits before considering the test a failure. The Value default is 30 seconds.
Port Number 443
HTTPS URL The URL used to test the availability of the web server. For example:
n www.xyz.com, index.html n http://www.xyz.com/index.html n http://www.xyz.com/ A partial URL is accessed using the network address of the web server. When setting up the URL, an issue occurs if the first portion of the relative URL can be resolved by the monitoring device as a domain name. For example, if you were monitoring https://192.168.1.1/example.com/index.html, and only provided the relative URL /example.com/index.html, the monitoring device will determine that the first portion is a domain name and assume an absolute URL was provided. As a workaround, you can configure the HTTPS service with the absolute URL manually.
page 199 Services Reference Manual: SolarWinds N-central
Login The username used to sign in to the designated URL. You can use the Login Username for Username latency testing, but you do not need to configure it if the web page does not require credentials.
Login The security password used to sign in to the designated URL. You can use the Login Password Password for latency testing, but you do not need to configure it if the web page does not require credentials.
Authentication The security authentication scheme used by the designated URL for determining if requests are Scheme valid or not. Configure this property using one of:
n Basic n Digest n NTLM n Kerberos n Negotiate
Normal The codes in the response header that indicate a Normal state. Response Code
Warning The codes in the response header that indicate a Warning state. Response Code Any codes in the response header that are not configured as either a Normal Response Code or a Warning Response Code will result in the service being transitioned into a Failed state.
Content The regular expression used to find a specific match in the content on the web page. For Verification example: The page cannot be displayed. Regular Expression
STATUS DETAIL DESCRIPTION HTTPS Service The availability of a web server based on the response code returned by the HTTPS Availability response header. This will appear as Failed if the a CA certificate of the Web server has not been uploaded or if it is not in the default a CA certificate file.
Round Trip Time The time for a request to be sent and received. (ms)
DNS Resolution The FQDN and IP address that determines whether the device name can be resolved. If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address' format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
Server Certificate The validity of the SSL certificate, indicated as either valid or invalid. Signature
page 200 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Server Certificate The number of days remaining before the expiration of the SSL certificate. Expiration (days)
Content The regular expression that triggers the status for the matched contents on the Web page. Verification Regular Expression HTTP Status code definitions to HTTPS service availability
The three possible values for HTTPS Service Availability (Normal: 1, Warning: 2, and, Failed: 0) are based on HTTP Status Code Definitions. RFC 2616 'Hypertext Transfer Protocol -- HTTP/1.1' defines the protocol referred to as "HTTP/1.1". This protocol includes more stringent requirements than HTTP/1.0 in order to ensure reliable implementation of its features. Normal By default, SolarWinds N-central evaluates the following "HTTP or HTTPS Status Code Definitions" as Normal (HTTP or HTTPS Service Availability 1):
STATUS HTTP OR HTTPS SERVICE DEFINITION RFC DESCRIPTION CODE AVAILABILITY 100 Continue RFC 2616 Section Normal (1) 10.1.1
101 Switching Protocols RFC 2616 Section Normal (1) 10.1.2
200 OK RFC 2616 Section Normal (1) 10.2.1
201 Created RFC 2616 Section Normal (1) 10.2.2
202 Accepted RFC 2616 Section Normal (1) 10.2.3
203 Non-Authoritative RFC 2616 Section Normal (1) Information 10.2.4
204 No Content RFC 2616 Section Normal (1) 10.2.5
205 Reset Content RFC 2616 Section Normal (1) 10.2.6
206 Partial Content RFC 2616 Section Normal (1) 10.2.7
Warning By default, SolarWinds N-central evaluates the following 'HTTP Status Code Definitions' as Warning (HTTP or HTTPS Service Availability 2):
page 201 Services Reference Manual: SolarWinds N-central
STATUS CODE DEFINITION RFC DESCRIPTION HTTP OR HTTPS SERVICE AVAILABILITY 300 Multiple Choices RFC 2616 Section 10.3.1 Warning (2)
301 Moved Permanently RFC 2616 Section 10.3.2 Warning (2)
302 Found RFC 2616 Section 10.3.3 Warning (2)
303 See Other RFC 2616 Section 10.3.4 Warning (2)
304 Not Modified RFC 2616 Section 10.3.5 Warning (2)
305 Use Proxy RFC 2616 Section 10.3.6 Warning (2)
306 (Unused) RFC 2616 Section 10.3.7 Warning (2)
307 Temporary Redirect RFC 2616 Section 10.3.8 Warning (2)
Failed By default, SolarWinds N-central evaluates the following 'HTTP Status Code Definitions' as Failed (HTTP or HTTPS Service Availability 0):
STATUS HTTP OR HTTPS DEFINITION RFC DESCRIPTION CODE SERVICE AVAILABILITY
400 Bad Request RFC 2616 Section 10.4.1 Failed (0)
401 Unauthorized RFC 2616 Section 10.4.2 Failed (0)
402 Payment Required RFC 2616 Section 10.4.3 Failed (0)
403 Forbidden RFC 2616 Section 10.4.4 Failed (0)
404 Not Found RFC 2616 Section 10.4.5 Failed (0)
405 Method Not Allowed RFC 2616 Section 10.4.6 Failed (0)
406 Not Acceptable RFC 2616 Section 10.4.7 Failed (0)
407 Proxy RFC 2616 Section 10.4.8 Failed (0) Authentication Required
408 Request Timeout RFC 2616 Section 10.4.9 Failed (0)
409 Conflict RFC 2616 Section 10.4.10 Failed (0)
410 Gone RFC 2616 Section 10.4.11 Failed (0)
411 Length Required RFC 2616 Section 10.4.12 Failed (0)
412 Precondition Failed RFC 2616 Section 10.4.13 Failed (0)
413 Request Entity Too RFC 2616 Section 10.4.14 Failed (0) Large
page 202 Services Reference Manual: SolarWinds N-central
STATUS HTTP OR HTTPS DEFINITION RFC DESCRIPTION CODE SERVICE AVAILABILITY 414 Request-URI Too RFC 2616 Section 10.4.15 Failed (0) Long
415 Unsupported Media RFC 2616 Section 10.4.16 Failed (0) Type
416 Requested Range RFC 2616 Section 10.4.17 Failed (0) Not Satisfiable
417 Expectation Failed RFC 2616 Section 10.4.18 Failed (0)
500 Internal Server RFC 2616 Section 10.5.1 Failed (0) Error
501 Not Implemented RFC 2616 Section 10.5.2 Failed (0)
502 Bad Gateway RFC 2616 Section 10.5.3 Failed (0)
503 Service Unavailable RFC 2616 Section 10.5.4 Failed (0)
504 Gateway Timeout RFC 2616 Section 10.5.5 Failed (0)
505 HTTP Version Not RFC 2616 Section 10.5.6 Failed (0) Supported
page 203 Services Reference Manual: SolarWinds N-central
Hyper-V Health service
The Hyper-V Health service monitors the status of a Hyper-V server.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Windows Server 2012 R2
Device Class Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes Status details
STATUS DETAIL DESCRIPTION Number of Partitions in Critical The total number of partitions in the Hyper-V server that are currently not State functioning properly.
Ratio of Virtual to Logical The number of virtual processors present in the Hyper-V server expressed as a Processors ratio to the total number of logical processors.
Guest Utilization (%) The percentage of processor resources currently in use by guest virtual machines.
Logical Processor 0: % Total The total combined percentage of processor utilization used by guest operating Runtime (%) systems and hypervisor software.
Root CPU: % Utilization The percentage of processor utilization of the root CPU.
Root Virtual Processor: % The percentage of processor utilization of the root virtual processor running as a Hypervisor Runtime (%) hypervisor.
page 204 Services Reference Manual: SolarWinds N-central
Hyper-V 2008 Guest Status service
The Hyper-V 2008 Guest Status service monitors the status of Hyper-V guests on a Windows Server 2008.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Windows Server 2008
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes
VM Name The name of the guest virtual machine. Status details
STATUS DESCRIPTION DETAIL Enabled Indicates if the Hyper-V guest is enabled. State
Days The number of days that the Hyper-V guest has been active. Running
Health The current status of the Hyper-V guest. State Health state values are mapped as:
n 5 - OK - The virtual machine is fully functional and operating within normal operational parameters and without error. n 20 - Major Failure - The virtual machine has suffered a major failure. This value is used when one or more disks that contain the virtual machine's VHDs is low on disk space and the virtual machine has been paused. n 25 - Critical Failure - The element is nonfunctional, and recovery might not be possible. This can indicate that the worker process for the virtual machine (Vmwp.exe) is not responding to control or information requests, or that one or more disks that contain the VHDs for the virtual machine are low on disk space. For more information, see https://msdn.microsoft.com/en-us/library/hh850116%28v=vs.85%29.aspx
page 205 Services Reference Manual: SolarWinds N-central
Hyper-V 2012 Guest Status service
The Hyper-V 2012 Guest Status service monitors the status of Hyper-V guests on a Windows server 2012 R2.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Windows Server 2012 R2
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes
VM Name The name of the guest virtual machine. Status details
STATUS DESCRIPTION DETAIL Enabled Indicates if the Hyper-V guest is enabled. State
Days The number of days that the Hyper-V guest has been active. Running
Health The current status of the Hyper-V guest. State Health state values are mapped as:
n 5 - OK - The virtual machine is fully functional and is operating within normal operational parameters and without error. n 20 - Major Failure - The virtual machine has suffered a major failure. This value is used when one or more disks that contain the virtual machine's VHDs is low on disk space and the virtual machine has been paused. n 25 - Critical Failure - The element is nonfunctional, and recovery might not be possible. This can indicate that the worker process for the virtual machine (Vmwp.exe) is not responding to control or information requests, or that one or more disks that contain the VHDs for the virtual machine are low on disk space. For more information, see https://msdn.microsoft.com/en-us/library/hh850116%28v=vs.85%29.aspx
page 206 Services Reference Manual: SolarWinds N-central
IMAP service
The IMAP test checks the status of the IMAP process on the network device. IMAP is an email protocol that allows a client to access email messages on a server. SolarWinds N-central can determine the up or down status of the IMAP service. The IMAP service does not use the Warning state. SolarWinds N-central averages the availability of the IMAP service over the scan interval. It compares the availability of the IMAP service to the threshold to determine the status.
Service TCP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central server By
Scan 5 minutes interval
Timeout The time (in seconds) the SolarWinds N-central server waits before considering the test a failure. The Value default is 30 seconds.
Port The port number to be queried. The default port is 143. Number
Validation The response you expect to receive from the port that is being queried. If the validation string that you String specify is not returned by the port being queried, the service will transition to a Failed state. The default validation string is *OK. Status setails
STATUS DESCRIPTION DETAIL IMAP SolarWinds N-central determines whether the IMAP service is up or down. The IMAP service does Service not use the Warning state. SolarWinds N-central averages the availability of the IMAP service over Availability the scan interval and compares the availability of the IMAP service to the threshold to determine the status.
Round The time for a request to be sent and received. Trip Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 207 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 208 Services Reference Manual: SolarWinds N-central
IIS service
The IIS service monitors the availability and performance of the Microsoft Internet Information Server (IIS), which is a group of server applications that are compatible with the Windows NT and Windows 2000 Server operating systems. The IIS sets up and administers web sites and search engines, and supports the writing of web-based applications that access databases. During the monitoring process, the IIS service uses the Windows probe to measure the IIS server's key metrics. The Windows Services dashboard displays the results.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Microsoft IIS
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe
Scan Interval 15 minutes
Web Site Instance Name The name of the Web site that you would like to monitor. Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfRawData_W3SVC_WebService
Var.0.Property BytesTotalPersec
Var.1.Property ConnectionAttemptsPersec
Var.2.Property CurrentAnonymousUsers
Var.3.Property CurrentNonAnonymousUsers
Var.4.Property CurrentConnections
Var.5.Property GetRequestsPersec
Var.6.Property LogonAttemptsPersec
Var.7.Property Timestamp_Sys100NS
Var.8.Property Frequency_Sys100NS
Scandetail.0.Recipe (^VarBytesTotal * $timebase08) / ^timeelapse07
Scandetail.1.Recipe (^VarConnectionAttempts * $timebase08) / ^timeelapse07
Scandetail.5.Recipe (^VarGetRequests * $timebase08) / ^timeelapse07
Scandetail.6.Recipe (^VarLogonAttempts * $timebase08) / ^timeelapse07
page 209 Services Reference Manual: SolarWinds N-central
Status details
STATUS DETAIL DESCRIPTION Send and receive bytes/sec The number of bytes that the server sent and received per second.
Connection attempts/sec The number of attempts made to connect to the web per second.
Total anonymous users/sec The number of anonymous users who accessed a web page per second.
Total known users/sec The number of known users who accessed a web page, per second.
Total current connections The number of current web connections.
Total Get requests/sec The number of "Get" requests made to retrieve web sites per second.
Total log-on attempts/sec The number of attempts made to log-on to a web service per second.
page 210 Services Reference Manual: SolarWinds N-central
IIS Application Pool service
The IIS Application Pool service obtains metrics for IIS application pools, configured groups of different web applications and web sites that are isolated from other application pools. SolarWinds N-central can monitor the IIS Application Pool on devices provided that they meet the following minimum requirements:
n The operating system on the device must be one of: o Windows 2003 Server (all editions), o Windows 2003 R2 Server (all editions), o Windows 2008 Server (all editions), or, o Windows 2008 R2 Server (all editions). n Microsoft .NET 4.5.2 or later is installed on the device. n Windows PowerShell 3.0 is installed on the device.
This service can not be associated with devices that use Windows XP, Windows Vista, Windows 7, Windows 8, or Windows 2012 Server (all editions).
Service Type WMI
Instances on a Device 100
Supported Systems/Applications Internet Information Services (IIS)
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes
STATUS DETAIL DESCRIPTION Application Pool State Indicates the current state of an application pool as one of:
n 1 - Uninitialized n 2 - Initialized n 3 - Running n 4 - Disabling n 5 - Disabled n 6 - Shutdown Pending n 7 - Delete Pending
Application Pool Name The unique identifier assigned to the individual monitored IIS application pool.
Application Pool Uptime In The total amount of time that the monitored pool has been running since it was last Seconds started.
Work Process Count The total number of worker processes applied to the pool.
Total Worker Process The total number of worker processes applied to the pool and have failed.
page 211 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Failures
Total Work Process Ping The total number of failed ping attempts to the pool. Failures
Total Worker Process The total number of attempts to shut down worker processes associated with the Shutdown Failures pool that is being monitored that have failed.
Total Worker Process The total number of attempts to start worker processes associated with the pool that Startup Failures is being monitored that have failed.
page 212 Services Reference Manual: SolarWinds N-central
IIS ASP.NET Monitoring service
The IIS ASP.NET Monitoring service monitors IIS metrics for application pools, ASP.net metrics and related processes.
Service Type WMI
Instances on a Device 15
Supported Systems/Applications Internet Information Services (IIS)
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes
STATUS DESCRIPTION DETAIL ASPNET The number of times an application has been restarted during the period that the web server is Application monitored. Unexpected increases can indicate that problems are causing your web applications Restarts to recycle. This value is reset to zero every time the Internet Information Services (IIS) host is restarted.
ASPNET The number of times that a worker process has restarted on the web server. A worker process Worker can be restarted if it fails unexpectedly or if it is intentionally recycled. Process Restarts
ASPNET The amount of time in milliseconds that the most recent request waited in the queue to be Request Wait processed. Time
ASPNET Apps The number of requests waiting for service from the application queue. - Requests In Application Queue
page 213 Services Reference Manual: SolarWinds N-central
IIS Website Metrics service
The IIS Website Metrics service obtains metrics for web sites hosted using IIS. SolarWinds N-central can monitor the IIS Application Pool on devices provided that they meet the following minimum requirements:
n The operating system on the device must be one of the following: o Windows 2003 Server (all editions), o Windows 2003 R2 Server (all editions), o Windows 2008 Server (all editions), o Windows 2008 R2 Server (all editions), or, o Windows 2012 Server (all editions). n Microsoft .NET 4.5.2 or later is installed on the device. n Windows PowerShell 3.0 is installed on the device.
This service can not be associated with devices that use Windows XP, Windows Vista, Windows 7, or Windows 8.
Service Type WMI
Instances on a Device 100
Supported Systems/Applications Internet Information Services (IIS)
Device Class Server - Windows
Monitored By Windows agent
Scan Interval 15 minutes
STATUS DETAIL DESCRIPTION Anonymous Users Per Rate users are making anonymous requests to the monitored IIS web site. Second
Bytes Received Per Rate that the monitored IIS web site receives data. Second
Bytes Sent Per Second Rate that the monitored IIS web site sends data.
CGI Requests Per Rate that the monitored IIS web site simultaneously processesCGI requests. Second
Files Received Per Rate that the monitored IIS web site receives files. Second
Files Sent Per Second Rate that the monitored IIS web site sends files.
Get Requests Per Rate that HTTP requests using the GET method are made to the monitored IIS web Second site.
Known Users Per Rate users are making non-anonymous requests to the monitored IIS web site. page 214 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Second
Not Found Errors Per Rate of errors due to requests that could not be satisfied because the requested Second document could not be found.
Post Requests Per Rate requests using the POST method are made to the monitored IIS web site. Second
page 215 Services Reference Manual: SolarWinds N-central
Interface Health service
The Interface Health service monitors the health of NIC interfaces using SNMP. This service collects inbound discards, inbound errors, outbound discards, outbound errors and outbound queue length from the generic RFC1213-MIB. 1. Configure SNMP on the device. For more information, see the manufacturer's documentation. 2. Login to SolarWinds N-central. 3. Click View > All Devices and click the Name of a device. 4. Click Settings > Properties and ensure Use SNMP is selected. 5. Click Save if required. 6. Click Monitoring > Status and click Add. 7. Enter 1 for the number of instances of the Interface Health service that you would like to associate to the device. 8. Click Apply. 9. Click the Interface Health service and click the Service Details tab. 10. For Monitored Interface, select the NICs/ports that you would like to monitor. 11. Click OK. SolarWinds N-central creates a new instance of the Interface Health service for every NIC or port that it is monitoring.
Service Type SNMP
Instances on a Device 400
Supported Any SNMP MIB-II Compliant Device (RFC1213-MIB or IF-MIB). Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
Monitored Interface Select the the NICs or ports that you would like to monitor, identified by SNMP Index, Interface Name, or Interface Alias. OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Inbound Discards 1.3.6.1.2.1.2.2.1.13 Calculation: Sample2 - Sample1
Inbound Errors 1.3.6.1.2.1.2.2.1.14
page 216 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION Calculation: Sample2 - Sample1
Outbound Discards 1.3.6.1.2.1.2.2.1.19 Calculation: Sample2 - Sample1
Outbound Errors 1.3.6.1.2.1.2.2.1.20 Calculation: Sample2 - Sample1
Administrative Status 1.3.6.1.2.1.2.2.1.7
Operational Status 1.3.6.1.2.1.2.2.1.8 Mapped as...
n Normal: 1, 5 n Warning: 2 n Failed: 3, 4, 6, 7 ... where ...
n 1: Up n 2: Down n 3: Testing n 4: Unknown n 5: Dormant n 6: Not Present n 7: Lower Layer Down
Operational Status Describes the operational status: Description n Up n Down n Testing n Unknown n Dormant n Not Present n Lower Layer Down
Detected Port Speed 1.3.6.1.2.1.2.2.1.5 Indicates the interface's current bandwidth in bits per second.
page 217 Services Reference Manual: SolarWinds N-central
Intrusion Detection service
The Intrusion Detection service monitors events that are generated by Snort and any other intrusion detection applications installed on your network. The intrusion detection application searches the network packets for suspicious patterns that match its predefined class-types and logs them to a local log file or to its database. If the intrusion detection application has been configured to log its events to a local log file, then SolarWinds N-central can monitor the application. During the monitoring process, the agent that is used for the Intrusion Detection service scans the log file for any keywords that match the regular expressions specified for the service. If a match is found, the agent reports it to the central server. Based on the specified threshold, SolarWinds N-central then displays the appropriate status for the service. If the status triggers a notification, the notification includes the first line and the line numbers on which the keyword was found unless a numeric pager was used for the notification. The first line and any subsequent line numbers are also displayed in the applicable reports and on the status details screen for the service. This service also supports wide characters. By default, the Snort class-types are contained in the service's regular expressions, which are classified as Failed or Warning.
The Intrusion Detection service is supported by the Linux agent and all of the Windows agents.
Service Type Log Appended
Instances on a 1 Device
Supported Snort and IDS applications Systems/Applications
Device Class Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Agent (Windows and Red Hat Enterprise Linux)
Scan Interval 5 minutes
Log File Name and The directory path and name of the log file monitored by this service. The name and path Path specified can be complete or partial, and will change depending on the Intrusion Detection software you use. For example: C:\N-able\Rocks\MSP.log Critical (1) Regular Expression 1
CLASS TYPE DESCRIPTION attempted-admin Attempted administrator privilege gain.
attempted-user Attempted user privilege gain.
shellcode-detect Executable code was detected.
page 218 Services Reference Manual: SolarWinds N-central
CLASS TYPE DESCRIPTION successful-user Successful administrator privilege gain.
successful-admin Successful user privilege gain. Critical (2) Regular Expression 2
CLASS TYPE DESCRIPTION trojan activity A network Trojan was detected.
unsuccessful-user Unsuccessful user privilege gain.
web-application attack Web application attack. Warning (1) Regular Expression 3
CLASS TYPE DESCRIPTION attempted-dos Attempted denial of service.
attempted-recon Attempted information leak.
bad-unknown Potentially bad traffic.
denial-of-service Detection of a denial of service attack.
misc-attack Misc attack.
non-standard-protocol Detection of a non-standard protocol or event.
rpc-portmap-decode Decode of an RPC query.
successful-dos Denial of service.
successful-recon-largescale Large scale information leak.
successful-recon-limited Information leak.
suspicious-filename-detect A suspicious file name was detected.
suspicious-login An attempted login using a suspicious username was detected. Warning (2) Regular Expression 4
CLASS TYPE DESCRIPTION system-call-detect A system call was detected.
unusual-client-port-connection A client was using an unusual port.
web-application-activity Access to a potentially vulnerable web application.
page 219 Services Reference Manual: SolarWinds N-central
Other status details C STATUS LASS DESCRIPTION DETAILS T YPE
The line Off The number of lines in the log file that the keyword has been located and returned by the agent. count This information is displayed for each regular expression on the status details screen for the matched service, any applicable reports, and any triggered notifications, except for numeric pages. regex...
The first The first 250 characters of the first line in the log file containing the matching keyword returned line by the agent. This information is displayed on the service's status details screen, any applicable matched reports, and any triggered notifications, except for numeric pages.
page 220 Services Reference Manual: SolarWinds N-central
ISA 2000 service
The ISA 2000 service monitors the availability of the Microsoft Internet Security and Acceleration (ISA) server, which serves as an enterprise firewall and a cache server. The ISA firewall scans circuit, application, and packet data and the ISA cache server manages Web page requests and provides faster access to frequently used sites by saving them. During the monitoring process, the ISA 2000 service uses the Windows probe to measure the ISA server's key metrics. The results are then displayed on the dashboard for the service.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Microsoft ISA server and the enterprise edition of the ISA server 2000.
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe
Scan Interval 5 minutes Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfRawData_BwcPerf_ISAServerBandwidthControl
WMI Property 0 Actualinboundbandwidth
WMI Property 1 Actualoutboundbandwidth
Namespace root\cimv2
WMI Class Win32_PerfRawData_Fwsrv_ISAServerFirewallService
WMI Property 0 ActiveSessions
Namespace root\cimv2
WMI Class Win32_PerfRawData_isactrl_ISAServerPacketFilter
WMI Property 0 Packetsdroppedduetofilterdenial
WMI Property 1 Packetsdroppedduetoprotocolviolations
Namespace root\cimv2
WMI Class Win32_PerfRawData_W3Proxy_ISAServerWebProxyservice
WMI Property 0 CacheRunningHitRatioPercent
WMI Property 1 RequestsPersec
page 221 Services Reference Manual: SolarWinds N-central
Status details
STATUS DETAIL DESCRIPTION Inbound bandwidth The amount of incoming traffic.
Outbound bandwidth The amount of outgoing traffic.
Current active sessions The total number of current Web sessions.
Packets dropped by filter denial The total number of packets that were dropped based on the firewall policies set. Packets dropped by protocol breach
Cache running hit ratio The hit rate for the last specified number of requests. This helps you determine the (%) current performance of the ISA server's cache.
Total requests/sec The number of times data is requested from a cache per second.
page 222 Services Reference Manual: SolarWinds N-central
ISA 2006 service
The ISA 2006 service monitors the Microsoft Internet Security and Acceleration (ISA) 2006 server for:
n active connections, n connections/second, n traffic, n dropped packets/second, n packets/second, n active sessions, n requests/second, and n average milliseconds/request. During the monitoring process, the ISA 2006 service uses the Windows probe to measure the ISA server's key metrics. The results are displayed on the dashboard for the service.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Any WMI-enabled Microsoft ISA 2006 server
Device Class Server - Windows
Monitored By Windows probe
Scan Interval 5 minutes Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfRawData_FWeng_ISAServerFirewallPacketEngine
WMI Property 0 ActiveConnections
WMI Property 1 ConnectionsPerSec
WMI Property 2 BytesPerSec
WMI Property 3 DroppedPacketspersec
WMI Property 4 Packetspersec
WMI Property 5 Timestamp_Sys100NS
WMI Property 6 Frequency_Sys100NS
Namespace root\cimv2
WMI Class Win32_PerfRawData_Fwsrv_ISAServerFirewallService
WMI Property 0 ActiveSessions
Namespace root\cimv2
page 223 Services Reference Manual: SolarWinds N-central
WMI Class Win32_PerfRawData_W3Proxy_ISAServerWebProxy
WMI Property 0 Requestspersec
WMI Property 1 AverageMillisecondsPerRequest
WMI Property 2 Timestamp_Sys100NS
WMI Property 3 Frequency_Sys100NS
WMI Property 4 TotalRequests
Scandetail.1.Recipe (^ConnectionsPerSec / ^ATimestamp_Sys100NS) / $AFrequency_Sys100NS
Scandetail.2.Recipe (^BytesPerSec 8 * ^ATimestamp_Sys100NS) / $AFrequency_Sys100NS
Scandetail.3.Recipe (^DroppedPacketspersec / ^ATimestamp_Sys100NS) $AFrequency_Sys100NS /
Scandetail.4.Recipe (^Packetspersec / ^ATimestamp_Sys100NS) / $AFrequency_Sys100NS
Scandetail.5.Recipe $ActiveSessions
Scandetail.6.Recipe (^Requestspersec * $BFrequency_Sys100NS) / ^BTimestamp_Sys100NS
Scandetail.7.Recipe ^AverageMillisecondsPerRequest / ^TotalRequests Status details
STATUS DETAIL DESCRIPTION Active Connections The total number of active connections currently passing data as one of the following:
n Normal n Warning n Failed
Connections/sec The number of new connections created per second as one of the following:
n Normal n Warning n Failed
Traffic The number of bytes passed through the ISA 2006 Server per second.
Dropped Packets/sec The number of packets dropped by ISA Server per second as one of the following:
n Normal n Warning n Failed
Packets/sec The number of packets inspected by ISA Server per second as one of the following:
n Normal n Warning n Failed
Active Sessions The number of active sessions for the firewall service as one of the following: page 224 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION
n Normal n Warning n Failed
Requests/Sec The rate of incoming requests that have been made to the web proxy as one of the following:
n Normal n Warning n Failed
Average The mean number of milliseconds required to service a web proxy client request as Milliseconds/Request one of the following:
n Normal n Warning n Failed
page 225 Services Reference Manual: SolarWinds N-central
Juniper (ScreenOS) - Sessions service
The Juniper (ScreenOS) Sessions service monitors the number of sessions being handled by a Juniper device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Netscreen OS 5.4 and later
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION Active Sessions 1.3.6.1.4.1.3224.16.3.2
Total Sessions 1.3.6.1.4.1.3224.16.3.3
Sessions Used (Active Sessions / Total Sessions) x 100
page 226 Services Reference Manual: SolarWinds N-central
Juniper Secure Access - Concurrent Users service
The Juniper Secure Access - Concurrent Users service monitors the number of currently logged in users of a Juniper Secure Access (SA) device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported IVE OS 6.0 and later Systems/Applications
Device Class Other, Switch/Router
Monitored By Windows Probe
Scan Interval 5
Users Index Enter the SNMP index of the users on the Juniper SA device. The default is zero. For a list of indices on the Juniper device, query it with the 1.3.6.1.4.1.12532.12 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION CPU Utilization 1.3.6.1.4.1.12532.12 The total number of users logged into the IVE console.
page 227 Services Reference Manual: SolarWinds N-central
Lexmark Hopper Status service
The Lexmark Hopper Status service monitors Lexmark printers to check if the output hopper is full.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported Lexmark N4000e, MarkNet N2000t, MarkNet N2001e, MarkNet N2002e, MarkNet Systems/Applications N2003fx, MarkNet N2401e, MarkNet N2501e, MarkNet N2601e, MarkNet Pro, MarkNet Pro 1, MarkNet Pro 3, MarkNet S, MarkNet X2011e, MarkNet X2012e, MarkNet X2030t, MarkNet X2031e, MarkNet XI, MarkNet XL, MarkNet XLe, MarkNet XP, N5 Wireless Adapter
Device Class Printer
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Output Hopper Status 1.3.6.1.4.1.641.2.1.3.1.3 The Output Hopper Status metric is mapped as ...
n Normal: 1 n Warning: 3 n Failed: 2 ... where ...
n 1: Not Full n 2: Full n 3: Unknown
Output Hopper Status Description Describes the status of the output hopper:
n Not Full n Full n Unknown
page 228 Services Reference Manual: SolarWinds N-central
Lexmark Paper Jam Status service
The Lexmark Paper Jam Status service monitors Lexmark devices for paper jam issues.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported Lexmark N4000e, MarkNet N2000t, MarkNet N2001e, MarkNet N2002e, MarkNet Systems/Applications N2003fx, MarkNet N2401e, MarkNet N2501e, MarkNet N2601e, MarkNet Pro, MarkNet Pro 1, MarkNet Pro 3, MarkNet S, MarkNet X2011e, MarkNet X2012e, MarkNet X2030t, MarkNet X2031e, MarkNet XI, MarkNet XL, MarkNet XLe, MarkNet XP, N5 Wireless Adapter
Device Class Printer
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Paper Jam Status 1.3.6.1.4.1.641.2.1.3.1.5 The Paper Not Jammed metric status is mapped as...
n Normal: 1 n Warning: 3 n Failed: 2 ... where ...
n 1: Not Jammed n 2: Jammed n 3: Unknown
Paper Jam Status Description 1.3.6.1.4.1.641.2.1.3.1.5 Describes the status:
n Not Jammed n Jammed n unknown
page 229 Services Reference Manual: SolarWinds N-central
Lexmark Tray Status service
The Lexmark Tray Status service monitors the status of the input paper tray of Lexmark printers.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported Lexmark N4000e, MarkNet N2000t, MarkNet N2001e, MarkNet N2002e, MarkNet Systems/Applications N2003fx, MarkNet N2401e, MarkNet N2501e, MarkNet N2601e, MarkNet Pro, MarkNet Pro 1, MarkNet Pro 3, MarkNet S, MarkNet X2011e, MarkNet X2012e, MarkNet X2030t, MarkNet X2031e, MarkNet XI, MarkNet XL, MarkNet XLe, MarkNet XP, N5 Wireless Adapter
Device Class Printer
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME RECALCULATION DESCRIPTION Input Tray Status 1.3.6.1.4.1.641.2.1.3.1.4 The Input Tray Status metric is mapped as...
n Normal: 1 n Warning: 3 n Failed: 2 ... where ...
n 1: Not Empty n 2: Empty n 3: Unknown
Input Tray Status Description Describes the status of the paper tray:
n Not Empty n Empty n unknown
page 230 Services Reference Manual: SolarWinds N-central
License Compliance service
The License Compliance service monitors the number of software licenses allowed for a customer, based on the thresholds specified for individual applications. For example, if a customer has a total of 100 licenses for an application and 88 instances of the application are discovered on their network, this service reports that 88% of the available licenses are in use.
This service cannot use Self Healing.
To configure license monitoring for a customer, refer to Setting the License Compliance Service Details.
This service is available only for Windows devices that have been discovered by a Windows agent or a Windows probe. For more information, see Discovery Jobs.
Service Type System
Instances on a Device 1 (one for each customer account)
Supported Systems/Applications Microsoft Windows
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe
Scan Interval 30 minutes Status details
STATUS DETAIL DESCRIPTION Vendor The name of the vendor or publisher of the application.
Software Name The name of the application.
Version The version of the application.
Licenses The number of licenses for the application.
Percent of licenses The current number of licenses in use expressed as a percentage of the total number of used application licenses allowed.
Detected The total number of application licenses discovered to be currently in use. Installations
page 231 Services Reference Manual: SolarWinds N-central
Licensing Status (VMware) service
The Licensing Status (VMware) service monitors the VMware licenses on ESXi servers. SolarWinds N-central uses the CIM services and ports for monitoring.
Service Type ESXi
Instances on a Device 1
Supported Systems/Applications vCenter, ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
To access information on the licenses on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION License Key The license key of the ESXi server.
License Days Remaining The number of days remaining before the expiration of the VMware license.
License Details The name and other properties of the VMware license issued to the ESXi server.
page 232 Services Reference Manual: SolarWinds N-central
LocalIP service
The LocalIP service provides a way to keep the SolarWinds N-central database up to date by checking the IP address of a monitored device. The Local IP test returns the IP address of the monitored device to the central server and displays it on the details screen for a device. Use the Local IP test to monitor networks that use dynamic IP addressing. To monitor the local IP of a device, select Update Monitored Address on the Agent tab of the device. Selecting this option causes the central server to update the device's network address that is monitored by the server. The central server updates the address when the device's local IP address changes based on the information gathered by the agent on the device. SolarWinds N-central does not monitor the status of the Local IP service and cannot create reports for it.
Service Type Local API
Instances on a 1 Device
Device Class Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 5 minutes
The LocalIP Address (%) threshold value is 100 in the following situations:
n when the Local IP service first scans, or n if the local agent is manually restarted, or n if the scanned IP address does not equal the defined address in the device settings network address field. The Local IP Address (%) threshold value is 50 if the scanned IP address equals the defined in the device settings network address field.
page 233 Services Reference Manual: SolarWinds N-central
Log Analysis (Appended) service
The Log Analysis (Appended) is an agent-based service and works only on log files that are located on a file system that is local to the agent. It enables you to monitor text that an application, such as a web server or a firewall, writes to its log file. During the monitoring process, the service executes a check on the log file at regular intervals, and it scans logged lines that were added to the file since its last execution. Through the use of regular expression matching and time stamp comparison, this service can notify you when the application stops logging to its log file, or when it logs an error or a warning message. This service monitors up to four log files for each device and supports wide characters.
Service Log Appended Type
Instances on 10 a Device
Device Class Server - Generic and Server - Windows
Monitored Agent (Windows, Red Hat Enterprise Linux, and Mac OS X) By
Scan 5 minutes Interval
Log File The monitored directory path and name of the log file. You specify a complete or partial name and Name and path. You must specify the directory name as well, for example: c:\test.log Path Status details
STATUS DESCRIPTION DETAIL File Size SolarWinds N-central reads the size of the file and compares it with the values your threshold (Bytes) specifications. Threshold options can vary for each specified regular expression.
Regular The thresholds for the regular expressions that you specified on the Service Details tab. Expressions (1 to 6)
Difference SolarWinds N-central compares the values that you specify in this field with the age of the log file in minutes... that is calculated by the agent. The age is the difference between the time the log file was generated and the current time.
Line Count The number of lines in the file that are scanned and compared with your threshold specifications. of Log File
The line The number of lines, in the log file, on which the keyword has been located and returned by the count agent. This information is displayed for each regular expression on the status details screen for the matched service, any applicable reports, and any triggered notifications, except for numeric pages. regex...
The first line The first 250 characters of the first line, in the log file, containing the matching keyword returned by page 234 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL matched the agent. This information is displayed on the service's status details screen, any applicable reports, and any triggered notifications, except for numeric pages.
page 235 Services Reference Manual: SolarWinds N-central
Log Analysis (Batch) service
The Log Analysis (Batch) is an agent-based service and works only on log files located on a file system that is local to the agent. It enables you to monitor text that SolarWinds N-central writes to a log file during the execution of a scheduled process or task, such as a nightly virus scan or a weekly backup. During the monitoring process, the service scans the complete log file created during the scheduled process. Through the use of regular expression matching and time stamp comparison, it ensures that the task was completed successfully. Each time SolarWinds N-central or the application performs a scheduled task or process, it creates a new Batch log file. The names of the files are numbered in sequence according to a specific application's recording convention. The Log Analysis (Batch) service uses the latest modified date as the metric to determine which log file it should scan during the monitoring process. This service monitors up to four log files for each device and supports wide characters.
Service Log Batch Type
Instances 10 on a Device
Device Server - Generic and Server - Windows Class
Monitored Agent (Windows, Red Hat Enterprise Linux, and Mac OS X) By
Log File The directory path and name of the log file that is to be monitored by the service. You can specify a Name and complete or partial name and path specified. You must specify the directory name as well, for Path example: c:\test.log
Scan 5 minutes Interval
Repeat The scan is repeated weekly on the specified days. Weekly on Days
Repeat The scan is repeated monthly on the specified days. Monthly on Days Status details
STATUS DESCRIPTION DETAIL File Size SolarWinds N-central reads the size of the file and compares it with the values your threshold (Bytes) specifications. Threshold options can vary for each specified regular expression.
Regular The thresholds for the regular expressions that you specified on the Service Details tab. Expressions (1 to 6) page 236 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL Last Parse- The time zone off-set based on GMT or UTC. able Dates Time Zone
Difference SolarWinds N-central compares the values that you specify in this field with the age of the log file in minutes... that is calculated by the agent. The age is the difference between the time the log file was generated and the current time.
Number of SolarWinds N-central scans the number of lines in the file and compares it with your threshold lines in the specifications. file
The line The number of lines, in the log file, on which the keyword has been located and returned by the count agent. This information is displayed for each regular expression on the status details screen for the matched service, any applicable reports, and any triggered notifications, except for numeric pages. regex...
The first line The first 250 characters of the first line, in the log file, containing the matching keyword returned by matched the agent. This information is displayed on the service's status details screen, any applicable reports, and any triggered notifications, except for numeric pages.
page 237 Services Reference Manual: SolarWinds N-central
Logical Drive (Adaptec) service
The Logical Drive (Adaptec) service monitors the status of the specified logical drive on an Adaptec RAID controller. You need to install Adaptec Storage Manager or IBM ServeRAID Manager on the machine that you would like to monitor. For a complete list of supported models, see:
n http://www.adaptec.com/en-US/products/asm/ n https://www-304.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR- 61707&brandind=5000008
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP Instances on a Device 10 Supported Any device using an Adaptec HostRAID card or an IBM ServeRAID card. Systems/Applications Device Class Server - Generic and Server - Windows Monitored By Windows probes Scan Interval 5 minutes Logical Drive The name of the monitored logical drive. You can obtain the name by querying the device with the .1.3.6.1.4.1.795.14.1.1000.1.1.2 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Logical Drive State 1.3.6.1.4.1.795.14.1.1000.1.1.7 Logical Drive State is mapped as:
n Normal: 3 n Warning: 1,2,4,5,6,8 n Failed: 7 The meanings for each of the possible drive states:
n 1: Unknown n 2: Other page 238 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 3: Optimal n 4: QuickInited n 5: Impacted n 6: Degraded n 7: Failed n 8: Compacted
Logical Drive State 1.3.6.1.4.1.795.14.1.1000.1.1.7 The current health of the logical drive as: Description n Unknown n Other n Optimal n QuickInited n Impacted n Degraded n Failed n Compacted
RAID Level 1.3.6.1.4.1.795.14.1.1000.1.1.4 The RAID level used by this array.
Task 1.3.6.1.4.1.795.14.1.1000.1.1.6 Task is mapped as:
n Normal: 3 n Warning: 1,2,4,5,6,7,8,9,10,11,12 The meanings for each of the possible mappings:
n 1: Unknown n 2: Other n 3: No Task Active n 4: Reconstruct n 5: Zero Initialize n 6: Verify n 7: Verify With Fix n 8: Modification n 9: Copyback n 10: Compaction n 11: Expansion n 12: Snapshot Backup
Task Description 1.3.6.1.4.1.795.14.1.1000.1.1.6 The task status of the logical drive as:
n Unknown n Other n No Task Active n Reconstruct n Zero Initialize
page 239 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n Verify n verify With Fix n Modification n Copyback n Compaction n Expansion n Snapshot Backup
Task Completion 1.3.6.1.4.1.795.14.1.1000.1.1.7 Task is mapped as:
n Normal: 3 n Warning: 1,2,4,5,6,7,8,9,10,11,12 The meanings for each of the possible mappings:
n 1: Unknown n 2: Other n 3: No Task Active n 4: Reconstruct n 5: Zero Initialize n 6: Verify n 7: Verify With Fix n 8: Modification n 9: Copyback n 10: Compaction n 11: Expansion n 12: Snapshot Backup
page 240 Services Reference Manual: SolarWinds N-central
Logical Drive (Dell OM 2.2) service
The Logical Drive (Dell OM 2.2) service monitors the overall status of a logical drive on a Dell server running Dell OpenManage Version 2.2 and later.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a Device 256
Supported Dell PowerEdge series servers running Dell OpenManage Server Administrator Systems/Applications Version 2.2 and later.
Device Class Server - Generic and Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes
Virtual Disk State Index The SNMP index of the monitored logical volume. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Virtual Disk Status 1.3.6.1.4.1.674.10893.1.20.140.1.1.4 Virtual Disk Status is mapped as...
n Normal = 1,3 n Warning = 5-4294967295 n Failed = 2,4 ... where ...
n 1 = Ready n 2 = Failed n 3 = Online n 4 = Offline n 6 = Degraded n 7 = Verifying n 15 = Resynching n 18 = Failed Reduncancy n 24 = Rebuilding page 241 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 26 = Formatting n 35 = Initializing
Virtual Disk Roll Up Status 1.3.6.1.4.1.674.10893.1.20.140.1.1.19 Virtual Disk Roll Up Status is mapped as...
n Normal = 3 n Warning = 1,2,4,7-4294967295 n Failed = 5-4294967295 ... where ...
n 1 = Other n 2 = Unknown n 3 = OK n 4 = Non-critical n 5 = Critical n 6 = Non-recoverable
Virtual Disk Component 1.3.6.1.4.1.674.10893.1.20.140.1.1.20 Virtual Disk Component Status is mapped Status as...
n Normal = 3 n Warning = 1,2,4,7-4294967295 n Failed = 5,6 ... where ...
n 1 = Other n 2 = Unknown n 3 = OK n 4 = Non-critical n 5 = Critical n 6 = Non-recoverable
page 242 Services Reference Manual: SolarWinds N-central
Logical Drive (Fujitsu) service
The Logical Drive (Fujitsu) service monitors the status of a logical drive on a Fujitsu server.
Service Type SNMP
Instances on a 100 Device
Supported Fujitsu servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
Logical Drive Enter the name of the monitored logical drive. For a list of logical drives, query the device with the .1.3.6.1.4.1.231.2.49.1.6.2.1.14 SNMP OID.
Scanning You can configure the scan interval according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Status 1.3.6.1.4.1.231.2.49.1.6.2.1.19
$ArraySize 1.3.6.1.4.1.231.2.49.1.6.2.1.3
$RAIDLevel 1.3.6.1.4.1.231.2.49.1.6.2.1.6
$StripeSize 1.3.6.1.4.1.231.2.49.1.6.2.1.7
$WriteMode 1.3.6.1.4.1.231.2.49.1.6.2.1.8
$ReadMode 1.3.6.1.4.1.231.2.49.1.6.2.1.15
$CacheMode 1.3.6.1.4.1.231.2.49.1.6.2.1.16
$DiskCacheMode 1.3.6.1.4.1.231.2.49.1.6.2.1.17
$InitializationStatus 1.3.6.1.4.1.231.2.49.1.6.2.1.18
STATUS DESCRIPTION DETAIL Status Describes the current status of the monitored logical drive with values mapped as...
n Normal: 2 n Failed: 1, 3-14 ... where ... 1. Unknown page 243 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL 2. Operational 3. Partially Degraded 4. Degraded 5. Failed 6. Rebuilding 7. Checking 8. MDCing 9. Initializing 10. Background Initializing 11. Migrating 12. Copying 13. Offline 14. In Use Spare
Initialization Describes the current status of the initialization of the logical drive with values mapped as... Status n Normal: 2 n Failed: 1, 3 ... where ... 1. Unknown 2. Initialized 3. Not Initialized
Array Size The total size of the disk array.
RAID Level The RAID level used by this array.
Stripe Size Specifies the size of the stripe (equal-sized sections of the associated hard disks to which the data is distributed) for the monitored logical drive.
Write Mode Specifies the write mode for the logical drive that you can configure as:
n Write−back - The controller sends a signal to the server when the data has been written to the controller's cache. n Write−through - The controller sends a signal to the server only when the data has been written to the drive. n Adaptive - When a charged battery is connected, this configuration operates as described under Write−back. If a charged battery is not connected, the controller behaves similarly to the Write−through option. n Adaptive write−back - This display appears when you select Adaptive and the controller currently handles the write requests as described under Write−back. After a battery failure, the controller automatically switches to Write−through. n Adaptive write−through - This display appears when Adaptive is selected and the controller currently handles the write requests as described under Write−through. When a charged battery becomes available again, the controller automatically switches back to Write−back.
page 244 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL Read Mode Specifies the read mode for the logical drive which can be configured as one of the following:
n Read-ahead - Uses advance read-access to the memory. n No read−ahead - No advance read-access to the memory is used. n Adaptive - When most of the last read-accesses to successive sectors have taken place, the controller switches to Read−ahead mode. When the read-accesses have been distributed, it switches back to No read−ahead mode.
Cache Specifies whether Read and Write operations are forwarded directly or are buffered in the cache. Mode
Disk Cache Specifies the current status of the disk cache mode. Mode
page 245 Services Reference Manual: SolarWinds N-central
Logical Drive (Intel) service
The Logical Drive (Intel) service monitors the status of the logical drive attached to a supported Intel RAID controller.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 1 Device
Monitored By Windows probe
Scan Interval 60 minutes
Drive Identifier Type the SNMP identifier for the drive. You can find the identifier by querying the device with the 1.3.6.1.4.1.3582.4.1.4.3.1.2.1.1 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Logical Drive 1.3.6.1.4.1.3582.4.1.4.3.1.2.1.5 The current state of the monitored logical drive is mapped State as...
n Normal= 3 n Warning= 1,2 n Failed= 0 ... where ...
n 0: Offline n 1: Partially Degraded n 2: Degraded n 3: Optimal
Logical Drive 1.3.6.1.4.1.3582.4.1.4.3.1.2.1.6 The name of the monitored logical drive. Name
page 246 Services Reference Manual: SolarWinds N-central
Logical Drive (VMware) service
The Logical Drive (VMware) service monitors the status of a logical drive on an ESXi server. SolarWinds N-central uses the Common Information Model (CIM) services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
A Logical Drive, also referred to as a Storage Adapter, represents a drive, either local or available through a SAN, that an ESXi server accesses. When a Guest issues a read or write command, the command processes the logical drive first, then the physical drive. The Logical Drive (VMware) service provides in-depth monitoring of that process including:
n How long the ESXi kernel takes to process read and write commands, which may indicate a CPU issue on the host. n How long the physical drive takes to process read and write commands, which may indicate an overloaded/under-performing physical drive. n Whether any read/write commands that have been issued were aborted because the ESXi server itself was unable to process them in time.
This service cannot use Self Healing.
Service Type ESXi
Instances on a Device 100
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
Logical Drive Name The name of the monitored logical drive.
To access information on the logical drives on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION Read Latency (msec) The average amount of time to complete read from the physical device.
Write Latency (msec) The average amount of time to write to the physical device (LUN).
Disk Commands The number of SCSI commands issued during the collection page 247 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION interval.
Aborted Disk The number of SCSI commands aborted during the collection Commands interval.
Data Transferred (MB) The amount of data transferred from the logical drive.
Data Received (KB) The amount of data received by the logical drive.
Bus Resets The number of SCSI-bus reset commands issued during the collection interval.
Device Latency (msec) The average amount of time to complete a SCSI command from the physical device.
Kernel Latency (msec) The average amount of time spent by VMkernel processing each SCSI command.
Queue Latency (msec) The average amount of time spent in the VMkernel queue, per SCSI command, during the collection interval.
Total Latency (msec) The highest latency value across all disks used by the host. Latency measures the time taken to process a SCSI command issued by the guest OS to the virtual machine. The kernel latency is the time VMkernel takes to process an IO request. The device latency is the time it takes the hardware to handle the request.
page 248 Services Reference Manual: SolarWinds N-central
Lync Front End service
The Lync Front End service monitors the status of the Lync service and performance data.
For more information, see the Lync web site. Manufacturer information
Service Type AMP
PowerShell cmdlet get-counter
Supported Systems/Applications Microsoft Lync 2013 Front End role SolarWinds N-central information
Known Limitations Only Front End role
Max. Instances Per Device 1
Supported Device Class Server - Windows
Notification Profile Microsoft Lync Server
Monitored By Local agent Troubleshooting
ISSUE RECOMMENDATION
Misconfigure n Confirm proper installation and configuration of the Lync server. n Confirm the running status of all the critical services of the respective roles. If the Front End service fails, statistics may not be accurate or reliably collected. Metrics for MS services
CALCULATIONS/ SUPPORTED DEFAULT WMI PROPERTY THRESHOLD VALUES THRESHOLDS MAPPING Lync Server Application Sharing – service N/A N/A True: Normal started False: Failed
Lync Server Application Sharing – start mode N/A N/A Off
Lync Server Application Sharing – status N/A N/A Off
Lync Server Audio Test Service – service started N/A N/A True: Normal False: Failed
Lync Server Audio Test Service – start mode N/A N/A Off
page 249 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ SUPPORTED DEFAULT WMI PROPERTY THRESHOLD VALUES THRESHOLDS MAPPING Lync Server Audio Test Service – status N/A N/A Off
Lync Server Audio/Video Conferencing – service N/A N/A True: Normal started False: Failed
Lync Server Audio/Video Conferencing – start N/A N/A Off mode
Lync Server Audio/Video Conferencing – status N/A N/A Off
Lync Server File Transfer Agent – service N/A N/A True: Normal started False: Failed
Lync Server File Transfer Agent – start mode N/A N/A Off
Lync Server File Transfer Agent– status N/A N/A Off
Lync Front-End Lync–service started N/A N/A True: Normal False: Failed
Lync Front-End Lync–start mode N/A N/A Off
Lync Front-End Lync–status N/A N/A Off
Lync Server IM Conferencing– service started N/A N/A True: Normal False: Failed
Lync Server IM Conferencing– start mode N/A N/A Off
Lync Server IM Conferencing– status N/A N/A Off
Lync Server Master Replicator Agent – service N/A N/A True: Normal started False: Failed
Lync Server Master Replicator Agent– start N/A N/A Off mode
Lync Server Master Replicator– status Agent N/A N/A Off
Lync Server Replica Replicator Agent – service N/A N/A True: Normal started False: Failed
Lync Server Replica Replicator Agent– start N/A N/A Off mode
Lync Server Replica Replicator Agent– status N/A N/A Off
page 250 Services Reference Manual: SolarWinds N-central
Metrics for performance monitor C ALCULATIONS SUPPORTED WMI PROPERTY / DEFAULT THRESHOLDS VALUES THRESHOLD MAPPING LS:SIP - Peers(_Total)\SIP - Connections N/A N/A Normal: 0 - 12,000 Active Warning: 12,001 - 15,000 Failed: 15,001 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - TLS N/A N/A Normal: 0 - 715,827,904 Connections Active Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Sends N/A N/A Normal: 0 - 715,827,904 Outstanding Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Average N/A N/A Normal: 0 - 25 Outgoing Queue Delay Warning: 26-35 Failed: 36 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Flow- N/A N/A Normal: 0 - 715,827,904 controlled Connections Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Average N/A N/A Normal: 0 - 715,827,904 Flow-Control Delay Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Incoming N/A N/A Normal: 0 - 715,827,904 Requests/sec Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Incoming N/A N/A Normal: 0 - 715,827,904 Responses/sec Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Outgoing N/A N/A Normal: 0 - 715,827,904 Requests/sec Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Peers(_Total)\SIP - Outgoing N/A N/A Normal: 0 - 715,827,904 Responses/sec Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Average Event N/A N/A Normal: 0 - 715,827,904 Warning: Processing Time 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Average Incoming N/A N/A Normal 0 - 715,827,904 Message Processing Time Warning: 715,827,904 - 715,827,904
page 251 Services Reference Manual: SolarWinds N-central
C ALCULATIONS SUPPORTED WMI PROPERTY / DEFAULT THRESHOLDS VALUES THRESHOLD MAPPING Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Average Local N/A N/A Normal: 0 - 715,827,904 Warning: Message Processing Time 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Average Number N/A N/A Normal: 0 - 715,827,904 Warning: Of Active Worker Threads 715,827,904 - 715,827,904 Failed 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Events In N/A N/A Normal: 0 - 715,827,904 Processing Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Events N/A N/A Normal: 0 - 715,827,904 Processed/sec Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Incoming N/A N/A Normal: 0 - 715,827,904 Messages/sec Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Messages In N/A N/A Normal: 0 - 715,827,904 Server Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
LS:SIP - Protocol\SIP - Outgoing N/A N/A Normal: 0 - 715,827,904 Messages/sec Warning: 715,827,904 - 715,827,904 Failed: 715,827,904 - 2,147,483,648
page 252 Services Reference Manual: SolarWinds N-central
Lync Mediation service
The Lync Mediation service monitors the status of the Lync service and performance data.
For more information, refer to the Lync web site. Manufacturer information
Service Type AMP
PowerShell cmdlet get-counter
Supported Systems/Applications Microsoft Lync 2013 Mediation role SolarWinds N-central information
Known Limitations Only Mediation role
Max. Instances Per Device 1
Supported Device Class Server - Windows
Notification Profile Microsoft Lync Server
Monitored By Local agent Troubleshooting
ISSUE RECOMMENDATION
Misconfigure n Confirm proper installation and configuration of the Lync server. n Confirm the running status of all the critical services of the respective roles. If the Mediation service fails, statistics may not be accurate or reliably collected. Metrics for MS services
CALCULATIONS/ SUPPORTED DEFAULT CRITICAL MS-SERVICES/DATASET THRESHOLD VALUES THRESHOLDS MAPPING Lync Server Mediation – service started N/A N/A True: Normal False: Failed
Lync Server Mediation – start mode N/A N/A Off
Lync Server Mediation – status N/A N/A Off
Lync Server Replica Replicator Agent – service N/A N/A True: Normal started False: Failed
Lync Server Replica Replicator Agent – start N/A N/A Off mode page 253 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ SUPPORTED DEFAULT CRITICAL MS-SERVICES/DATASET THRESHOLD VALUES THRESHOLDS MAPPING Lync Server Replica Replicator Agent – status N/A N/A Off Metrics for performance manager C S ALCULATIONS DEFAULT DATASET/PROPERTY UPPORTED / THRESHOLDS VALUES THRESHOLD MAPPING LS:MediationServer - Outbound Calls(_Total)\- Current — N/A Normal: 0 - 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904 - 2,147,483,648
LS:MediationServer - Outbound Calls — N/A Normal: 0 - (_Total)\- Active media bypass calls 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904 - 2,147,483,648
LS:MediationServer - Inbound Calls(_Total)\- Current — N/A Normal: 0 - 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904 - 2,147,483,648
LS:MediationServer - Inbound Calls(_Total)\- Active media — N/A Normal: 0 - bypass calls 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904
page 254 Services Reference Manual: SolarWinds N-central
C S ALCULATIONS DEFAULT DATASET/PROPERTY UPPORTED / THRESHOLDS VALUES THRESHOLD MAPPING - 2,147,483,648
LS:MediationServer - Media Relay\- Media Connectivity — N/A Normal: 0 - Check Failure 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904 - 2,147,483,648
LS:MediationServer - Health Indices\- Load Call Failure — N/A Normal: 0 - Index 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904 - 2,147,483,648
LS:MediationServer - Global Counters\- Current audio — N/A Normal: 0 - channels with PSM quality reporting 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904 - 2,147,483,648
LS:MediationServer - Global Counters\- Total failed calls — N/A Normal: 0 - caused by unexpected interaction from the Proxy 715,827,904
Warning: 715,827,904 - 715,827,904
Failed: 715,827,904 - 2,147,483,648
page 255 Services Reference Manual: SolarWinds N-central
Maintenance Mode (VMware) service
The Maintenance Mode (VMware) service monitors the ESXi servers for whenever they enter Maintenance Mode. SolarWinds N-central uses the CIM services and ports for monitoring.
This service cannot use Self Healing.
Service Type ESXi
Instances on a Device 1
Supported Systems/Applications vCenter, ESX and ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows Probes
Scan Interval 5 minutes
To access information about the maintenance mode on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
Refer to the inMaintenanceMode property.
METRIC NAME DESCRIPTION Is Maintenance Mode Enabled? Identifies whether the ESXi server is in Maintenance Mode or not.
page 256 Services Reference Manual: SolarWinds N-central
ADTRAN - Memory service
The ADTRAN - Memory service monitors the heap memory usage of an ADTRAN switch/router device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications ADTRAN Switch/Router devices
Device Class Switch/Router
Monitored By Windows probes
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Total Memory 1.3.6.1.4.1.664.5.53.1.4.7 The total memory for that memory pool.
Memory Used Total Memory - Free Heap Memory The amount of used memory.
Percent of Memory [1- (Free Heap Memory / Total The amount of used memory as a percentage of the Used Memory)] x 100 total memory.
Free Heap Memory 1.3.6.1.4.1.664.5.53.1.4.8 The amount of available memory.
page 257 Services Reference Manual: SolarWinds N-central
Memory - Cisco service
Memory - Cisco monitors memory pool utilization on any Cisco device using SNMP. The device must publish its memory usage in the CISCO-MEMORY-POOL-MIB.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Device Class Switch/Router
Monitored By SNMP (Windows probe)
Scan Interval 15 minutes
Cisco Memory The index of the textual name assigned to the memory pool, which is determined by Pool Name Index performing an SNMP walk on ciscoMemoryPoolName (.1.3.6.1.4.1.9.9.48.1.1.1.2).
Cisco Memory The value of the textual name assigned to the memory pool, which is determined by Pool Name Value performing an SNMP walk on ciscoMemoryPoolName (.1.3.6.1.4.1.9.9.48.1.1.1.2).
If the MEMPOOL_GLOBAL_SHARED pool information is queried using SNMP, it results in CPU hogs. It is evident that you might see packet drops/overruns at times of bursty/overloaded traffic when you use SNMP to poll memory statistics that require the ASA to query the information through huge chunks of memory that it is associated which results in SNMP related CPU hogs. To monitor Cisco ASA memory, use a NRC template. OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Name 1.3.6.1.4.1.9.9.48.1.1.1.2 The name of the memory pool being monitored.
Used 1.3.6.1.4.1.9.9.48.1.1.1.5 The amount of used memory.
Free 1.3.6.1.4.1.9.9.48.1.1.1.6 The amount of free memory.
Total Used + Free The total memory for that memory pool.
% Memory Utilization [Used / (Used + Free)] x 100 The utilization of memory as a percentage of total memory.
page 258 Services Reference Manual: SolarWinds N-central
Memory – Juniper (ScreenOS) service
The Memory - Juniper (ScreenOS) service monitors the memory usage of a Juniper device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Netscreen OS 5.4 and later
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION Memory Allocated 1.3.6.1.4.1.3224.16.2.1
Memory Left 1.3.6.1.4.1.3224.16.2.2
Total Memory Memory Allocated + Memory Left
Used Memory [Memory Allocated/(Memory Allocated + Memory Left)] x 100
page 259 Services Reference Manual: SolarWinds N-central
Memory – Juniper Secure Access service
The Memory -Juniper Secure Access service monitors the memory and swap usage of a Juniper Secure Access (SA) device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported IVE OS 6.0 and later. Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5
Memory Index Enter the SNMP index of the memory to be monitored; the default is zero. For a list of indices on the Juniper device, query it with the 1.3.6.1.4.1.12532.11 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION Memory Utilization 1.3.6.1.4.1.12532.11
Memory Swapped 1.3.6.1.4.1.12532.24
page 260 Services Reference Manual: SolarWinds N-central
Memory (VMware) service
The Memory (VMware) service monitors the memory usage on ESXi servers.
This service cannot use Self Healing.
Service Type ESXi
Instances on a Device 1
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
METRIC NAME DESCRIPTION Total Physical Memory The total amount (in GB) of memory on the device.
Used Physical Memory The amount (in GB) of memory currently in use.
Free Physical Memory The amount (in GB) of memory not currently being used.
Physical Memory Usage The amount of memory currently in use expressed as a percentage of the total memory.
Used Swap (MB) The amount (in MB) of swap memory currently in use.
page 261 Services Reference Manual: SolarWinds N-central
Memory service (Local API, SNMP, WMI)
The Memory service monitors the following properties of the physical memory and virtual memory on a device:
n used memory, n free memory, n total memory, and n memory utilization by the top five processes.
If the Memory service is first being monitored by a probe and then by an agent, the first few scans performed by the probe will measure total memory usage only and not memory utilization by the top five processes. When the agent begins monitoring this service, data will be reported for memory utilization by the top five processes. This may lead to a temporary discrepancy between the results reported by the probe and the agent.
One instance of this service can monitor all of the detected swap files on multiple volumes. The maximum size of a swap file monitored by this service is 16GB. You can add the Memory service to a monitored device in one of three different types: Local, SNMP, and WMI. Memory service (Local API) Service Type Local
Instances on a 1 Device
Device Class Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 60 minutes
Memory service (SNMP) If a probe discovers a Windows device using SNMP and associates the Memory service to the device, you must manually change the default values assigned for the following:
n Physical Memory Name - the default assigned value of Physical memory must be changed to Physical Memory as Windows is case-sensitive, and, n Virtual Memory Name - the default assigned value of Swap Space must be changed to Virtual Memory. If you do not make these modifications to the device in SolarWinds N-central, the Memory service will transition to a Failed state.
Service SNMP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Switch/Router, Laptop - Windows, Server - Windows, Class and Workstation - Windows
page 262 Services Reference Manual: SolarWinds N-central
Monitored Windows agent, Windows probe By
Scan 60 minutes Interval
Physical The SNMP index for the monitored physical memory. You can obtain the index values by performing Memory an SNMP walk on the OID value: .1.3.6.1.2.1.25.2.3.1.3 (hrStorageDescr). You must determine Index which OID and index value is relevant. The OID value is contained in the HOST-RESOURCES-MIB definition file.
Physical The string corresponding to the row in the hrStorageTable, which describes the type and instance of Memory the table for the Memory (SNMP) service. You can obtain the string by performing an SNMP walk on Name the OID value: .1.3.6.1.2.1.25.2.3.1.3 (hrStorageDescr).
Virtual The SNMP index for the monitored virtual memory. You can obtain the index values by performing an Memory SNMP walk on the OID value: .1.3.6.1.2.1.25.2.3.1.3 (hrStorageDescr). You must determine which Index OID and index value is relevant. The OID value is contained in the HOST-RESOURCES-MIB definition file.
Virtual The string corresponding to the row in the hrStorageTable, which describes the type and instance of Memory the table for the Memory (SNMP) service. You can obtain the string by performing an SNMP walk on Name the OID value: .1.3.6.1.2.1.25.2.3.1.3 (hrStorageDescr). OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Physical Memory Used Physical Memory/Total The percentage of physical memory used. This percentage Usage (%) Memory * 100 is compared to the thresholds.
Virtual Memory Used Virtual Memory/Total The percentage of virtual memory used. This percentage is Usage (%) Virtual Memory * 100 compared to the thresholds.
Memory Service (WMI) Service Type WMI
Instances on a Device 1
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent, Windows probe
Scan Interval 60 minutes Properties queried and calculations performed
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
page 263 Services Reference Manual: SolarWinds N-central
Namespace root\cimv2
WMI Class Win32_OperatingSystem
WMI Property 0 TotalVirtualMemorySize
WMI Property 1 TotalVisibleMemorySize
WMI Property 2 FreeVirtualMemory
WMI Property 3 FreePhysicalMemory
Scandetail.2.Recipe $VarTotalPhysicalMemSize - $VarFreePhysicalMemSize
Scandetail.3.Recipe [($VarTotalPhysicalMemSize - $VarFreePhysicalMemSize) / $VarTotalPhysicalMemSize] * 100
Scandetail.6.Recipe $VarTotalVirtualMemSize - $VarFreeVirtualMemSize
Scandetail.7.Recipe [($VarTotalVirtualMemSize - $VarFreeVirtualMemSize) / $VarTotalVirtualMemSize] * 100
page 264 Services Reference Manual: SolarWinds N-central
Memory Status (HP) service
The Memory Status (HP) service monitors the status of the memory on an HP server by testing to see whether or not the Advanced Memory Protection subsystem has been engaged.
Service Type SNMP
Instances on a 1 Device
Supported Any HP ProLiant ML and DL 300- and 500-series servers. Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
SNMP Index Type the SNMP Index used by this service. The default SNMP index is 0, and should not need to be changed. For a list of SNMP indices, query the HP server with the 1.3.6.1.4.1.232.6.2.14.4 SNMP OID.
STATUS DETAIL DESCRIPTION Memory Status The current status of memory on the monitored device mapped as:
n 0 = Normal n 1 = Failed
Memory Status The current status of memory on the monitored device as one: Description n Normal - This system is operating normally. n Failed - The system does not support fault tolerant memory or the state cannot be determined by the Management Agent. n Failed - The system is running in a degraded state because the Advanced Memory Protection subsystem has been engaged.
page 265 Services Reference Manual: SolarWinds N-central
Memory Status (IBM) service
Memory Status (IBM) monitors the status of specified memory banks on IBM servers.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a Device 8
Supported Any IBM-SYSTEM-MEMORY-MIB compliant device Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
Memory Bank Name The name of the memory bank to be monitored. OID: 1.3.6.1.4.1.2.6.159.1.1.120.1.1.1 OID/Calculation
METRIC OID/CALCULATION DESCRIPTION NAME Error 1.3.6.1.4.1.2.6.159.1.1.120.1.1.3 Indicates if the Memory Bank is experiencing any issues. The Detected returned value is True = Failed, or False = Normal.
Memory 1.3.6.1.4.1.2.6.159.1.1.120.1.1.13 The physical location of the memory bank in the IBM server. Location
page 266 Services Reference Manual: SolarWinds N-central
Memory Status (VMware) service
Memory Status (VMware) monitors the status of specified memory modules on ESXi servers. SolarWinds N-central uses the Common Information Model (CIM) services and ports for monitoring.
This service cannot use Self Healing.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 1
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
METRIC NAME DESCRIPTION All Memory is Functioning Indicates whether the specified memory modules on an ESXi server are in a Properly Normal or Failed state.
Memory Status Description Displays failure messages related to the specified memory modules.
page 267 Services Reference Manual: SolarWinds N-central
Memory Status (Dell iDRAC) service
The Memory Status (Dell iDRAC) service monitors the status of specified memory devices on a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a 100 Device
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller (iDRAC). Systems/Applications
Device Class for CPU Servers - Management Interface (SNMP)
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Value Enter or select the name of the memory device to monitor in the format Memory FQDD (Fully Qualified Device Descriptor). For a list of memory devices, query the device with the .1.3.6.1.4.1.674.10892.5.4.1100.50.1.26 SNMP OID.
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Manufacture $DeviceBrandName 1.3.6.1.4.1.674.10892.5.4.1100.50.1.21 The name of the Name manufacturer of the memory device.
Size (GB) $Size 1.3.6.1.4.1.674.10892.5.4.1100.50.1.14 The size of the memory device. A value of zero indicates that no memory is installed.
Speed (1,000s $Speed 1.3.6.1.4.1.674.10892.5.4.1100.50.1.15 The data transfer speed of the of memory device. A value of Nanoseconds) zero indicates an unknown data transfer speed.
Serial Number $SerialNumber 1.3.6.1.4.1.674.10892.5.4.1100.50.1.23 The identifying serial number of the memory device.
Status $Status 1.3.6.1.4.1.674.10892.5.4.1100.50.1.5 The current status of the memory device mapped as: 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable.
page 268 Services Reference Manual: SolarWinds N-central
Memory Status (Fujitsu) service
The Memory Status (Fujitsu) service monitors the status, size, form, type, and whether or not RAM is approved for use in a Fujitsu device.
Service Type SNMP
Instances on a 100 Device
Supported Fujitsu workstations, laptops or servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
Memory Label Enter the label of the monitored memory. For a list of memory labels, query the device with the .1.3.6.1.4.1.231.2.10.2.2.10.6.5.1.3 SNMP OID.
Scanning You can configure the scan interval according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Status 1.3.6.1.4.1.231.2.10.2.2.10.6.5.1.4
$Size 1.3.6.1.4.1.231.2.10.2.2.10.6.5.1.6
$Form 1.3.6.1.4.1.231.2.10.2.2.10.6.5.1.8
$Type 1.3.6.1.4.1.231.2.10.2.2.10.6.5.1.9
$Approved 1.3.6.1.4.1.231.2.10.2.2.10.6.5.1.12
STATUS DETAIL DESCRIPTION Status Describes the current status of the memory that is being monitored with values. 1. WARNING - Unknown: Module status could not be evaluated. 2. NORMAL - Not Present: Module socket is empty. 3. NORMAL - OK: Module is available and working properly. 4. WARNING - Disabled: Module was manually disabled in BIOS setup. 5. WARNING - Error: Module has encountered errors but is still in use. 6. FAILED - Failed: Module has failed and was disabled. 7. WARNING - Prefailure Predicted: Module has encountered too many correctable errors within a certain time period and is predicted to fail in near future. 8. NORMAL - Hot Spare
page 269 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION 9. NORMAL - Mirror 10. NORMAL - RAID 11. NORMAL - Hidden: Module socket is not available and should be hidden.
Size The current size in Megabytes of the monitored memory.
Form The form (for example, SIMM or DIMM) of the monitored memory.
Type The type (for example, SDRAM, DDRAM, DDR2, or DDR3) of the monitored memory.
Is the RAM Approved for Specifies whether or not the monitored memory is approved for the target device. Use in this Device?
page 270 Services Reference Manual: SolarWinds N-central
NetBotz Airflow service
The NetBotz Airflow service monitors the airflow reading and airflow sensor status of the specified temperature sensor.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 68 Device
Supported Any NetBotz device that has an attached airflow sensor. Systems/Applications
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Airflow Sensor To determine the name of the airflow sensors attached to the NetBotz device, query the NetBotz device with the 1.3.6.1.4.1.5528.100.4.1.5.1.1 SNMP OID.The default name is nbHawkEnc_0_AFLW. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Airflow 1.3.6.1.4.1.5528.100.4.1.5.1.8
Sensor Status 1.3.6.1.4.1.5528.100.4.1.5.1.3 This status is either Connected or Disconnected. The service reports a Failed Status if the sensor reports Disconnected.
Sensor Status 1.3.6.1.4.1.5528.100.4.1.5.1.3 Description
page 271 Services Reference Manual: SolarWinds N-central
NetBotz Audio service
The NetBotz Audio service monitors the audio reading and sensor status of the specified audio sensor.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 68 Device
Supported Any NetBotz device that has an attached audio sensor Systems/Applications
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Audio Sensor To determine the name of the audio sensors attached to the NetBotz device, query the NetBotz device with the 1.3.6.1.4.1.5528.100.4.1.4.1.1 SNMP OID. The default name is nbHawkEnc_0_AUDI. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Audio 1.3.6.1.4.1.5528.100.4.1.4.1.2
Sensor Status 1.3.6.1.4.1.5528.100.4.1.4.1.3 This status is either Connected or Disconnected. The service reports a Failed Status if the sensor reports Disconnected.
Sensor Status 1.3.6.1.4.1.5528.100.4.1.4.1.3 Description
page 272 Services Reference Manual: SolarWinds N-central
NetBotz Dew Point service
The NetBotz Dew Point service monitors the dew point reading, by default in degrees Celsius, and sensor status of the specified dew point sensor.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 68 Device
Supported Any NetBotz device that has an attached dew point sensor Systems/Applications
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Dewpoint Sensor To determine the name of the dew point sensors attached to the NetBotz device, query the NetBotz device with the 1.3.6.1.4.1.5528.100.4.1.3.1.1 SNMP OID. The default name is nbHawkEnc_0_DEW. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Dewpoint 1.3.6.1.4.1.5528.100.4.1.3.1.8 The dew point temperature measured in degrees Celsius.
Dewpoint 1.3.6.1.4.1.5528.100.4.1.3.1.9 The dew point temperature measured in degrees Fahrenheit.
Sensor Status 1.3.6.1.4.1.5528.100.4.1.3.1.3 This status is either Connected or Disconnected. The service reports a Failed Status if the sensor reports Disconnected.
Sensor Status 1.3.6.1.4.1.5528.100.4.1.3.1.3 Description
page 273 Services Reference Manual: SolarWinds N-central
NetBotz Door Switch service
The NetBotz Door Switch service monitors whether or not the door switch is open or closed, and the status of the door sensor.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 68 Device
Supported Any NetBotz device that has an attached door switch. Systems/Applications
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Door Switch To determine the name of the door switches attached to the NetBotz device, query the NetBotz device with the .1.3.6.1.4.1.5528.100.4.2.2.1.1 SNMP OID. Default name is DOOR. OID/Calculation
METRIC OID/CALCULATION DESCRIPTION NAME Door 1.3.6.1.4.1.5528.100.4.2.2.1.2 An integer value representing whether or not the door switch is Switch connected - the door is closed - or disconnected - the door is open. Status The service transitions to a Failed state if the door switch reports a disconnected status.
Door 1.3.6.1.4.1.5528.100.4.2.2.1.2 Reports either Connected or Disconnected. Switch Status Description
Sensor 1.3.6.1.4.1.5528.100.4.2.2.1.3 The health status of the sensor: Status n 0: Normal n 1: Info n 2: Warning n 3: Error n 4:Critical n 5: Failure This status is mapped as:
n Normal: 0 n Warning: 1,2
page 274 Services Reference Manual: SolarWinds N-central
METRIC OID/CALCULATION DESCRIPTION NAME
n Failed: 3,4,5
Sensor 1.3.6.1.4.1.5528.100.4.2.2.1.3 A description of the health status of the sensor. Status Description
page 275 Services Reference Manual: SolarWinds N-central
NetBotz Humidity service
The NetBotz Humidity service monitors the humidity reading and sensor status of the specified temperature sensor.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 68 Device
Supported Any NetBotz device that has an attached humidity sensor. Systems/Applications
Device Class Windows probe
Monitored By 5 minutes
Scan Interval 5 minutes
Humidity Sensor To determine the name of the humidity sensors attached to the NetBotz device, query the NetBotz device with the 1.3.6.1.4.1.5528.100.4.1.2.1.1 SNMP OID. The default name nbHawkEnc_0_HUMI. OID/Calculation
METRIC OID/CALCULATION DESCRIPTION NAME Humidity 1.3.6.1.4.1.5528.100.4.1.2.1.8 The humidity reading reported by the sensor.
Sensor 1.3.6.1.4.1.5528.100.4.1.2.1.3 An integer value representing whether or not the humidity sensor is Status connected or disconnected. The service transitions to a Failed state if the door switch reports a disconnected status.
Sensor 1.3.6.1.4.1.5528.100.4.1.2.1.3 A description of the sensor’s status. Status Description
page 276 Services Reference Manual: SolarWinds N-central
NetBotz Temperature service
The NetBotz Temperature service monitors the status and reported temperature, in Fahrenheit and Celsius of the specified temperature sensor.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 68 Device
Supported Any NetBotz device that has an attached temperature sensor. Systems/Applications
Device Class Other
Monitored By Windows probe
Scan Interval 5 minutes
Temperature Sensor To determine the name of the temperature sensors attached to the NetBotz device, query the NetBotz device with the 1.3.6.1.4.1.5528.100.4.1.1.1.1 SNMP OID. The default name is nbHawkEnc_0_TEMP. OID/Calculation
METRIC OID/CALCULATION DESCRIPTION NAME Temperature 1.3.6.1.4.1.5528.100.4.1.1.1.8 The temperature reading in Celsius. (\u00baC)
Temperature 1.3.6.1.4.1.5528.100.4.1.1.1.9 The temperature reading in Fahrenheit. (\u00baF)
Sensor 1.3.6.1.4.1.5528.100.4.1.1.1.3 An integer value representing whether the temperature sensor is Status connected or disconnected. The service transitions to a Failed state if the door switch reports a disconnected status.
Sensor 1.3.6.1.4.1.5528.100.4.1.1.1.3 A description of the sensor’s status. Status Description
page 277 Services Reference Manual: SolarWinds N-central
Network Card (Dell iDRAC) service
The Network Card (Dell iDRAC) service monitors the status of specified Network Interface Controllers (NICs) on a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a 100 Device
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller (iDRAC). Systems/Applications
Device Class for CPU Servers - Management Interface (SNMP)
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Value Enter or select the name of the network device to monitor in the format NetworkDevice FQDD (Fully Qualified Device Descriptor). For a list of network devices, query the device with the .1.3.6.1.4.1.674.10892.5.4.1100.90.1.30 SNMP OID.
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Product $Name 1.3.6.1.4.1.674.10892.5.4.1100.90.1.6 The product name of the network Name device.
MAC $MacAddress 1.3.6.1.4.1.674.10892.5.4.1100.90.1.15 The current MAC address of the Address network device.
Connection $ConnectionStatus 1.3.6.1.4.1.674.10892.5.4.1100.90.1.4 The current connection status of Status the network device mapped as: 1 - connected 2 - disconnected 3 - driverBad 4 - driverDisabled 10 - hardwareInitalizing 11 - hardwareResetting 12 - hardwareClosing 13 - hardwareNotReady
Status $Status 1.3.6.1.4.1.674.10892.5.4.1100.90.1.3 The current status of the network device mapped as: 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable. page 278 Services Reference Manual: SolarWinds N-central
NIC Status (VMware) service
The NIC Status (VMware) service monitors NICS on ESXi servers. SolarWinds N-central uses the CIM services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 100
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
NIC ID The unique identifier of the monitored NIC.
This service cannot use Self Healing.
To access information about the NICs on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION Enabled State Indicates whether the NIC has been enabled or disabled.
Enabled State Description n/a
Is the NIC Using Full-Duplex? Indicates whether the NIC is in full-duplex mode or not.
NIC Speed (Mbps) The total data transfer rate, in megabytes/second, of the NIC.
Data Receive Rate The transfer rate, in bytes/second, that the NIC receives data.
Data Transmit Rate The transfer rate, in bytes/second, that the NIC transmits data.
Dropped Packets (Received) The number of data packets lost during the reception of data by the NIC.
Dropped Packets (Transmitted) The number of data packets lost during the transmission of data by the NIC.
page 279 Services Reference Manual: SolarWinds N-central
NNTP service
The NNTP service checks the status of the NNTP process on the network device. NNTP is a request-reply protocol that is similar in style to the SMTP or FTP. It provides a network news transport service and is the standard for the Internet exchange of Usenet messages. SolarWinds N-central can determine the up or down status of the NNTP service. The NNTP service does not use the Warning state. SolarWinds N-central averages the availability of the NNTP service over the scan interval. It compares the availability of the NNTP service to the threshold to determine the status.
Service TCP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, SolarWinds N-central server By
Scan 5 minutes Interval
Time Out 30 seconds Value
Port 119 Number
Validation The response you expect to receive from the queried port. If the validation string that you specify is String not returned by the port being queried, the service will transition to a Failed state. The default validation string is 200. Status details
STATUS DESCRIPTION DETAIL NNTP SolarWinds N-central determines whether the NNTP service is up or down. The NNTP service does Service not use the Warning state. SolarWinds N-central averages the availability of the NNTP service over Availability the scan interval and compares the availability of the NNTP service to the threshold to determine the status.
Round The time for a request to be sent and received. Trip Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution
page 280 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 281 Services Reference Manual: SolarWinds N-central
Oracle DB Query (Number) service
The Oracle DB Query (Number) service runs user-specified queries to return specified columns as numeric representations. SolarWinds MSP recommends that you use a user name with View-Only privileges when configuring the service. The Library used is the native Oracle library. There is no extra configuration required on the client or server side as long as the listener has been correctly configured. Helper tool To check the connectivity or query results for the Oracle server from a monitored device, run the helper tool, DatabaseInvoker.exe, located in the probe or agent bin folder. For more data, open the outfile.txt, located in the same folder, to find the column name and check values before configuring service details. Service status
Service Type Oracle
Instances on a 200 Device
Supported Oracle DB server 10.2 or higher Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Windows agent or Windows probe
If a device has an agent installed and the service is added, only the agent performs the monitoring. An agent can be used to monitor a remote Oracle server if the IP/Hostname is set in the Service Details.
Scan Interval 15 minutes
Connection Timeout Time in seconds the agent or probe will wait for a connection response from an Oracle Value server before timing out. This value is used the in Connection String in place of [CONNECT_TIME_OUT_VALUE].
Query Timeout Value Time in seconds the agent or probe will wait for a query response to return from an Oracle server before timing out.
Hostname or IP Hostname or IP address of the Oracle listener. This value is used in the Connection String address in place of [HOSTNAME_VALUE].
Instance Port Port number of the Oracle listener. This value is used in the Connection String in place of [PORT_VALUE].
SERVICE_NAME SERVICE_NAME set up in listener.ora. Using SID, change the connection string accordingly. This value is used in the Connection String in place of [SERVICE_NAME_VALUE].
Server Type Oracle server type, dedicated, shared, etc. This value is used in the Connection String in
page 282 Services Reference Manual: SolarWinds N-central
place of [SERVER_TYPE_VALUE].
Connection String Enter the connection string in the Connection String field under Service Details or have the agent or probe assemble the connection string by replacing the value provided in the service details. Note: If you enter the complete connection string, the password will appear in plain text and is visible. The default connection string is set in TNS format. To connect using EZ connection, use the following format: Data Source=[HOSTNAME_VALUE]:[PORT_VALUE]/[SERVICE_NAME_ VALUE];User Id=[USERNAME_VALUE];Password=[PASSWORD_ VALUE];Connection Timeout=[CONNECT_TIME_OUT_VALUE]
The agent or probe replaces the entities enclosed in brackets in the connection string with the value inputted in Service Details. This enables you to change the connection string as required.
Database Username Username used to access the instance. This value is used in the Connection String in place of [USERNAME_VALUE].
Database Password Password used to access the database. This value is used in the Connection String in place of [USERNAME_VALUE].
Database Query SQL query statement submitted to the database. As a best practice, specify the column name in the query and avoid using “*”.
Numeric Column Specify a column name that represent a numeric values. The column name could be the Name table column name or the name specified as "AS." If the Column Name is incorrect, the service will indicate Failed.
Column 1-5 Name n Name of the database values being queried for the value. n Values that SolarWinds N-central should look for in the results of the Oracle query.
If there is more than one column and regex the result is AND operation. For example, if users have specified column 1 and regex 1 and column 2 and regex 2, both conditions should return "True" for the service to indicate normal status.
Oracle DB query (number)
Transaction time in milliseconds Time to connect, authenticate, send a query, retrieve results, and disconnect.
Total Number Of Rows returned by The Query Number of rows returned by a query.
Rows returned by the query that matched all column The number of rows that matched all of the column regular expressions. regular expressions.
page 283 Services Reference Manual: SolarWinds N-central
Oracle DB Query (REGEX) service
The Oracle DB Query (REGEX) service monitors the results of an SQL query sent to an Oracle database. The data returned by the SQL query is then evaluated against the regular expressions specified in the service. SolarWinds MSP recommends that you use a user name with View-Only privileges when configuring the service. The Library used is the native Oracle library. There is no extra configuration required on the client or server side as long as the listener has been correctly configured. Helper tool To check the connectivity or query results for the Oracle server from a monitored device, run the helper tool, DatabaseInvoker.exe, located in the probe or agent bin folder. For more data, open the outfile.txt, located in the same folder, to find the column name and check values before configuring service details. Service status
Service Type Oracle
Instances on a 200 Device
Supported Oracle DB server 10.2 or higher Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Windows agent or Windows probe Note: If a device has an agent installed and the service is added, the monitoring is done by the agent only. An agent can be used to monitor a remote Oracle server if the IP/Hostname is set in the Service Details.
Scan Interval 15 minutes
Connection Timeout Time in seconds the agent or probe will wait for a connection response from an Oracle Value server before timing out. This value is used the in Connection String in place of [CONNECT_TIME_OUT_VALUE].
Query Timeout Value Time in seconds the agent or probe will wait for a query response to return from an Oracle server before timing out.
Hostname or IP Hostname or IP address of the Oracle listener. This value is used in the Connection String address in place of [HOSTNAME_VALUE].
Instance Port Port number of the Oracle listener. This value is used in the Connection String in place of [PORT_VALUE].
SERVICE_NAME SERVICE_NAME set up in listener.ora. Using SID, change the connection string accordingly. This value is used in the Connection String in place of [SERVICE_NAME_VALUE].
Server Type Oracle server type, dedicated, shared, etc. This value is used in the Connection String in place of [SERVER_TYPE_VALUE]. page 284 Services Reference Manual: SolarWinds N-central
Connection String Enter the connection string in the Connection String field under Service Details or have the agent or probe assemble the connection string by replacing the value provided in the service details.
If you enter the complete connection string, the password will appear in plain text and is visible.
The default connection string is set in TNS format. To connect using EZ connection, use the following format: Data Source=[HOSTNAME_VALUE]:[PORT_VALUE]/[SERVICE_NAME_ VALUE];User Id=[USERNAME_VALUE];Password=[PASSWORD_ VALUE];Connection Timeout=[CONNECT_TIME_OUT_VALUE]
The agent or probe will replace the entities enclosed in brackets in the connection string with the value inputted in Service Details. This allows you to change the connection string as required.
Database Username Username used to access the instance. This value is used in the Connection String in place of [USERNAME_VALUE].
Database Password Password used to access the database. This value is used in the Connection String in place of [USERNAME_VALUE].
Database Query SQL query statement submitted to the database. As a best practice, specify the column name in the query and avoid using “*”.
Numeric Column Specify a column name that represent a numeric values. The column name could be the Name table column name or the name specified as "AS." This value will be threshold against you can set your threshold accordingly. If the Column Name is incorrect there service show as failed.
Column 1-5 Name (Optional) Specify the Column that you want to return as string presentation. Values display in Scan Details and provide additional detail on other table columns. If you specify a column name that doesn’t exist, the service will display as Failed. Oracle DB query (number)
Transaction time in milliseconds Time to connect, authenticate, send a query, retrieve results, and disconnect.
Total Number Of Rows returned by Number of rows returned by a query. The Query
Numeric Value Returned Numeric value presentation of the Column name specified in Numeric Column Name (see above).
Column 1-5 Value String representation of Column 1-5 value (see above).
page 285 Services Reference Manual: SolarWinds N-central
Overall VPN Status (Cisco) service
The Overall VPN Status (Cisco) service monitors a number of different properties of VPN tunnels to Cisco devices.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Cisco device that provides VPN capabilities.
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
SNMP Index The SNMPindex of the status of the VPN tunnel.
OBJECT DESCRIPTORS NUMERICAL OID $Active Tunnels 1.3.6.1.4.1.9.9.171.1.2.1.1
$GlobalLocalTunnelFails 1.3.6.1.4.1.9.9.171.1.2.1.20
$GlobalRemoteTunnelFails 1.3.6.1.4.1.9.9.171.1.2.1.21
$SysCapFail 1.3.6.1.4.1.9.9.171.1.2.1.22
$AuthFail 1.3.6.1.4.1.9.9.171.1.2.1.23
$DecFail 1.3.6.1.4.1.9.9.171.1.2.1.24
$HashFail 1.3.6.1.4.1.9.9.171.1.2.1.25
STATUS DETAIL DESCRIPTION Locally Initiated Tunnel The number of VPN tunnels initiated by the monitored device that failed. Failures
Remotely Initiated Tunnel The number of VPN tunnels that connected to the monitored device that failed. Failures
System Capacity Failures The number of VPN tunnels that failed due to the capacity of the monitored device being exceeded.
Authentication Failures The number of VPN tunnels that failed due to problems with authentication.
Decryption Failures The number of VPN tunnels that failed due to problems with decrypting the data.
Hash Failures The number of VPN tunnels that failed due to problems with encrypting the data using hash values.
page 286 Services Reference Manual: SolarWinds N-central
Paper Supply Level service
The Paper Supply Level service monitors the amount of paper available to a printer as a percentage of the total capacity of the printer. The printers monitored by this service include any printer that supports the Printer-MIB.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 6 Device
Supported Any printer that supports the Printer-MIB. Systems/Applications
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes
Printer Input The SNMP index for the Printer Input Tray. To obtain the index value, perform an SNMP Description Index walk on the prtInputDescription OID (.1.3.6.1.2.1.43.8.2.1.18.).
Printer Input The SNMP description for the Printer Input Tray. To obtain the tray number, perform an Description Value SNMP walk on the prtInputDescription OID (.1.3.6.1.2.1.43.8.2.1.18). OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Description 1.3.6.1.2.1.43.8.2.1.18 A description of the paper tray.
Max Capacity 1.3.6.1.2.1.43.8.2.1.9 The maximum capacity of the paper tray.
Level 1.3.6.1.2.1.43.8.2.1.10 The current capacity of the paper tray.
Paper Level % (Level / Max Capacity) x 100 How much of the paper tray's capacity is being used.
page 287 Services Reference Manual: SolarWinds N-central
Patch Status service
The Patch Status service is automatically added to all Windows devices. It provides insight into the state of patching on a specific device as well as providing metrics for your reporting. You can configure settings through the Status, Service Details, Self-Healing, Reports tabs on this window.
The Patch Status service is not connected to Patch Management. You can use the service and not use Patch Management and visa versa.
Recommendations for setting up this service:
n On the Service Details tab, set Threshold for Monitoring old patches (days) to 31 days. n On the Thresholds tab, turn off all thresholds except for Patches installed with errors, Missing Patches Older Than (x) Days, and Reboot Required. The service will now only alert you if something has gone wrong with your patch schedule, a patch has failed or a reboot is needed. The data will still be available for reporting.
Instances on a 1 Device
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval The default interval is five minutes.
Time To Stale The time, in minutes, that SolarWinds N-central waits to receive data about the service. If no data is received within the specified time period, the service will transition to a Stale status. The default is 4320 minutes; 72 hours, or 3 days.
Threshold for The duration in days that a patch can be approved but not installed before the patch is added to Monitoring old the Missing Patches That Were Approved Over xx Days Ago metric. The default is 60 days. patches
Include Patches The types of patches to be reported by the service. in the following categories
Scanning and thresholds Unlike other SolarWinds N-central services, the Patch Status service does not run at regular time intervals; rather, it is event-based. The Patch Status service updates its status:
n after every Detection/Installation Maintenance Window event, n by events in the agent, or n by selecting Scan Now. Full detection (Windows Update Agent scan) runs only during Detection/Installation Maintenance Window or an asset scan. Outside of these updates, SolarWinds N-central uses cached patch data to refresh the Patch Status service quickly, such as when using the Scan Now feature. Full detection typically takes 10-20 minutes to complete. In some cases, full detection can take up to 60 minutes due to internal timeouts in the agent's detection process. If cached data is used, the Patch Status is updated within five minutes.
page 288 Services Reference Manual: SolarWinds N-central
Any manual installation of patches will appear in the Patch Status service after the next Detection/Installation Maintenance Window.
If there is a problem in detection, which causes a WUA error, the Patch Status service suppresses the error status for six hours in case the error is a temporary problem. Status Overview tab The overview shows a graphical representation of your patch state, including approved but not yet installed patches, and unapproved patches. The summary shows high level alerting information, including reboot details, patches installed with errors and upcoming scheduled patch events. The information on this tab is useful for patch troubleshooting. It updates each time a scheduled patch detection occurs or after completing a patch cycle. Patch Download Source Messages In the Values column of the Patch Summary table, the SolarWinds N-central provides messages as to what sources a device is configured to download patches from and if that source is functioning. Each message is split in to two parts. The first part of the message provides download source information about Windows Updates, and the second part of the message provides download source information about Third Party updates.
MICROSOFT UPDATES MEANING = MESSAGE 1 Unmanaged Patch Management is disabled.
Windows Update The agent will only download patches from Microsoft server.
Probe The agent will download patches from the probe. 123.123.123.123
Windows Update The agent is unable to reach the probe and will download patches from Microsoft (Probe unavailable) servers.
No source (Probe The agent is unable to reach the probe and is not allowed to download patches from unavailable, Windows Microsoft’s servers. Patching will fail. Update not allowed) Note: You can fix this issue and allow the device to contact external sources by selecting a Patch Profile that has the Communicate Externally for Updates option selected. For more information see Patch Management Profiles.
THIRD PARTY UPDATES = MESSAGE MEANING 2 Unmanaged Patch Management is disabled.
Not Enabled Third Party Patching is disabled.
page 289 Services Reference Manual: SolarWinds N-central
THIRD PARTY UPDATES = MESSAGE MEANING 2 Direct from vendors The agent will only download patches from third party product vendors.
Probe The agent will download patches from the probe. 123.123.123.123
Direct from vendors The agent is unable to reach the probe and will download patches from third party (Probe unavailable) product vendors.
No source (Probe The agent is unable to reach the probe and is not allowed to download patches from unavailable, Direct from third party product vendors. Patching will fail. vendors not allowed) Note: You can fix this issue and allow the device to contact external sources by selecting a Patch Profile that has the Communicate Externally for Updates option selected. For more information see Patch Management Profiles.
Windows Update Agent An up-to-date WUA ensures devices will be able to have to latest Microsoft patches available for installation. SolarWinds N-central updates the WUA automatically. An up-to-date version of the WUA is stored on the SIS server. The Patch Status service monitors the WUA and includes information of its current state. The information on the Patch Status overview page lists the installed version on the device, the version managed and available in SolarWinds N-central, and the latest known version. The table below outlines the status thresholds for the WUA.
If patch management is disabled in SolarWinds N-central, the WUA status is considered unmanaged and appears as Normal.
WUA VERSION WUA STATUS INSTALL MAINTENANCE WINDOW RESULT Up-to-date Working Normal
Up-to-date Malfunctioned Failed
Out-of-date Malfunctioned Planned Warning
Out-of-date Malfunctioned Passed Failed
Out-of-date Working Passed Warning
Out-of-date Working Not planned Warning
Out-of-date Malfunctioned Not Planned Failed
For more information on Windows Update Agent issues, see Patch Status service error messages. Approved Patches tab This tab provides a summary of patches that the device is waiting to install.
page 290 Services Reference Manual: SolarWinds N-central
Not Approved Patches tab This tab displays a list of patches available to the device that have not yet been approved. They will remain on the page until approved by the Approve/Decline patches process or by an automatic approval. From this tab, you have the ability to review and selectively approve patches for this device. Service details
Choose to adjust key metrics including threshold for old patches to be used in the monitoring metric, Threshold for Monitoring old patches (days). Thresholds Make threshold adjustments to details patch status will monitor and alert on from various templates that apply it. The Laptops - Windows Service template. Thresholds may be turned off, which prevents alerts on the number of patches available but this data will still be available to reporting. Self-Healing This tab enables you to configure Self-Healing actions for patch status. Reports This tab provides per-device reporting.
page 291 Services Reference Manual: SolarWinds N-central
Physical Drive (Adaptec) service
The Physical Drive (Adaptec) service monitors the Self-Monitoring, Analysis, and Reporting Technology ( S.M.A.R.T.) status of the specified physical drive. You must have the Adaptec Storage Manager or IBM ServeRAID Manager installed. For a complete list of supported models, see:
n http://www.adaptec.com/en-US/products/asm/, or, n https://www-304.ibm.com/systems/support/supportsite.wss/docdisplay?lndocid=MIGR- 61707&brandind=5000008
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 10 Device
Supported Any device using an Adaptec HostRAID card or an IBM ServeRAID card. Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
Physical Drive The SNMP index (unique identifier) of the monitored physical drive. You can obtain the Identifier index by querying the device with the .1.3.6.1.4.1.795.14.1.410.1.1.1 SNMP OID. OID/Calculations
METRIC NAME OID/CALCULATION DESCRIPTION S.M.A.R.T. Status .1.3.6.1.4.1.795.14.1.410.1.1.8 An integer value that reports the S.M.A.R.T. status of the physical drive...
n Normal: 2, 4 n Warning: 1 n Failed: 3, 5 ... where ...
n 1: Unknown page 292 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 2: Unsupported n 3: Disable n 4: Okay n 5: Error Predicted
S.M.A.R.T. Status .1.3.6.1.4.1.795.14.1.410.1.1.8 Describes the status of the physical drive. Description
Physical Drive 1.3.6.1.4.1.795.14.1.410.1.1.2 A text description of the physical drive Description
Physical Drive Size .1.3.6.1.4.1.795.14.1.410.1.1.3 The storage capacity of the physical drive.
page 293 Services Reference Manual: SolarWinds N-central
Physical Drive (Dell) service
The Physical Drive (Dell) service monitors the overall status of physical drives attached to Dell servers running Dell OpenManage Server Administrator software.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 50 Device
Supported Dell servers running Dell OpenManage Server Administrator software. Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Windows probe
Scan Interval 5 minutes
Physical Drive Index The SNMP index of the physical drive. You can obtain the index by querying the device with the 1.3.6.1.4.1.674.10893.1.20.130.4.1.2 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Drive State Code 1.3.6.1.4.1.674.10893.1.20.130.4.1.4 An integer value that represents the states of the drive...
n Normal: 3, 35, 40 n Warning: 1, 15, 25, 26, 28 n Failed: 0, 2, 4, 6, 7, 11, 24, 34, 39, 41, 53 ... where ...
n 0: Unknown n 1: Ready - Available for use, but no RAID configuration has been assigned. n 2: Failed - Not operational. n 3: Online - Operational. RAID configuration has been assigned.
page 294 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 4: Offline - The drive is not available to the RAID controller. n 6: Degraded - Refers to a fault-tolerant array/virtual disk that has a failed disk. n 7: Recovering - Refers to state of recovering from bad blocks on disks. n 11: Removed - Indicates that array disk has been removed. n 15: Resynching - Indicates one of the following types of disk operations: Transform Type, Reconfiguration, and Check Consistency. n 24: Rebuild n 25: No Media - CD-ROM or removable disk has no media. n 26: Formatting - In the process of formatting. n 28: Diagnostics - Diagnostics are running. n 34: Predictive failure n 35: Initializing:Applies only to virtual disks on PERC, PERC 2/SC, and PERC 2/DC controllers. n 39: Foreign n 40: Clear n 41: Unsupported n 53: Incompatible
Make 1.3.6.1.4.1.674.10893.1.20.130.4.1.3 The manufacturer of the physical drive. (DriveVendor)
Model 1.3.6.1.4.1.674.10893.1.20.130.4.1.6 The model name and/or number of the physical (DriveProductID) drive.
Drive Name 1.3.6.1.4.1.674.10893.1.20.130.4.1.2 The name of the array disk as represented in Storage Management.
Drive Spare 1.3.6.1.4.1.674.10893.1.20.130.4.1.22 The status of the array disk as a spare. State n 1: Disk is a member of a virtual disk. n 2: Disk is a member of a disk group. n 3: Disk is a global hot spare. n 4: Disk is a dedicated hot spare. n 5: Not a spare. n 99: Not applicable.
Drive Status 1.3.6.1.4.1.674.10893.1.20.130.4.1.23 Severity of the array disk state. This is the combined status of the array disk and its components.
n 1: Other n 2: Unknown n 3: OK
page 295 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 4: Non-critical n 5: Critical n 6: Non-recoverable
page 296 Services Reference Manual: SolarWinds N-central
Physical Drive (Dell iDRAC) service
The Physical Drive (Dell iDRAC) service monitors various elements related to the status of a physical drive in a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a 100 Device
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller (iDRAC). Systems/Applications
Device Class for CPU Servers - Management Interface (SNMP)
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Index Enter or select the name of the drive to monitor. For a list of drives, query the device with the .1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.54 SNMP OID.
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Disk Name $Name 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.2 The physical name of the disk as represented in Storage Management.
State $State 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.4 The current state of the physical disk being monitored mapped as:
Normal Online (3): RAID configuration has been assigned to the physical disk.
Warning Ready (2): Physical disk is available for use but no RAID configuration has been assigned.
Failure Unknown (1): Cannot determine current state.
Foreign (4): Physical disk has been moved from another controller and
page 297 Services Reference Manual: SolarWinds N-central
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS
contains all or some portion of a virtual disk.
Offline (5): Physical disk is not available to the RAID controller.
Blocked (6): Physical disk is currently blocked by controller.
Failed (7): Physical disk is not operational.
Non-RAID (8): Physical disk is not a RAID capable disk.
Removed (9): Physical disk has been removed.
Serial Number $SerialNo 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.7 The physical disk's unique identification number provided by the manufacturer.
Disk Capacity $DiskCapaity 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.11 The size of the physical disk (in megabytes).
Used Space $UsedSpace 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.17 The amount of used space (in (GB) gigabytes) on the physical disk.
Used Space n/a n/a Calculated using the formula: Percentage (%) $UsedSpace $DiskCapacity / 100.0 *
Free Space $FreeSpace 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.19 The amount of space (in (MB) megabytes) currently available on the physical disk.
Spare State $SpareState 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.22 The status of the array disk as a spare mapped as:
n 1: notASpare - Physical disk is not a spare. n 2: dedicatedHotSpare - Physical disk is a dedicated hot spare.
page 298 Services Reference Manual: SolarWinds N-central
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS
n 3: globalHotSpare - Physical disk is a global hot spare.
Display Name $DisplayName 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.55 The physical disk's friendly FQDDas represented in Storage Management.
Smart Alert $SmartAlert 1.3.6.1.4.1.674.10892.5.5.1.20.130.4.1.31 Indicates whether or not the physical disk has received a predictive failure alert.
page 299 Services Reference Manual: SolarWinds N-central
Physical Drive (EqualLogic) service
The Physical Drive (EqualLogic) service monitors the overall status of a physical drive attached to a Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware.
Service Type SNMP Instances on a 100 Device Supported Model PS6100 Dell EqualLogic SANs running v6.0.2 firmware Systems/Applications Device Class Server - Generic and Server - Windows Monitored By Windows probe Scan Interval 5 minutes Drive Identifier Enter the name of the physical drive to monitor. For a list of the physical drives, query the EqualLogic SAN with the 1.3.6.1.4.1.12740.3.1.1.1.1 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Drive Status 1.3.6.1.4.1.12740.3.1.1.1.8 Describes the current status of the physical drive. The Description possible values are:
1 On-line The disk is used in the RAID set.
2 Spare The disk is not currently used by a RAID configuration but may be used when status of a currently on-line disk changes.
3 Failed Either the disk is faulty or when there is no power.
4 Offline The disk doesn't fall into any of these other categories.
5 Alt-sig
6 Too-small The drive is too small to be used. The drive cannot be converted to spare.
7 History-of- The drive has a history of failures. The failures drive can be converted to spare.
8 Unsupported- The drive label is from a later release. version The drive can be converted to spare.
9 Unhealthy The drive is unhealthy.
page 300 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
10 Replacement The drive is a replacement drive.
11 Encrypted The drive is encrypted and cannot be decrypted.
12 NotApproved The drive is not DELL approved.
13 Preempt- The drive is off-line due to excessive failed errors.
Disk Serial Number 1.3.6.1.4.1.12740.3.1.1.1.5 The serial number of the physical drive.
Disk Model Number 1.3.6.1.4.1.12740.3.1.1.1.3 The model name and/or number of the physical drive.
Disk Model 1.3.6.1.4.1.12740.3.1.1.1.4 The firmware revision number of the physical drive. Revision Number
Disk Error Count 1.3.6.1.4.1.12740.3.1.1.1.9 The number of disk errors that have taken place since the physical drive was last powered on.
Disk Capacity (MB) 1.3.6.1.4.1.12740.3.1.1.1.6 The size of the physical drive.
page 301 Services Reference Manual: SolarWinds N-central
Physical Drive (Fujitsu) service
The Physical Drive (Fujitsu) service monitors various elements related to the status of a Physical Drive in a Fujitsu device.
Service Type SNMP
Instances on a 100 Device
Supported Fujitsu servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
Physical Drive Enter the name of the monitored physical drive. For a list of physical drives, query the device with the .1.3.6.1.4.1.231.2.49.1.5.2.1.24 SNMP OID.
Scanning You can configure the scan interval according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Status 1.3.6.1.4.1.231.2.49.1.5.2.1.15
$SMARTStatus 1.3.6.1.4.1.231.2.49.1.5.2.1.14
$BadBlocks 1.3.6.1.4.1.231.2.49.1.5.2.1.13
$DeviceErrors 1.3.6.1.4.1.231.2.49.1.5.2.1.12
$PowerStatus 1.3.6.1.4.1.231.2.49.1.5.2.1.25
$Vendor 1.3.6.1.4.1.231.2.49.1.5.2.1.6
$Model 1.3.6.1.4.1.231.2.49.1.5.2.1.5
$SerialNumber 1.3.6.1.4.1.231.2.49.1.5.2.1.17
$Capacity 1.3.6.1.4.1.231.2.49.1.5.2.1.7
$DiskConnectionInterface 1.3.6.1.4.1.231.2.49.1.5.2.1.11
$FirmwareVersion 1.3.6.1.4.1.231.2.49.1.5.2.1.16
$MaxTransferRate 1.3.6.1.4.1.231.2.49.1.5.2.1.8
STATUS DETAIL DESCRIPTION Status Describes the current status of the monitored physical drive with values mapped as:
page 302 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION 1. WARNING - Unknown 2. NORMAL - No Disk 3. NORMAL - Online 4. NORMAL - Ready 5. FAILED - Failed 6. WARNING - Rebuilding 7. NORMAL - Global Hot Spare 8. NORMAL - Dedicated Hot Spare 9. FAILED - Offline 10. FAILED - Failed Unconfigured 11. WARNING - Formatting 12. FAILED - Dead
S.M.A.R.T. Status Describes the current S.M.A.R.T. status of the monitored physical drive with values mapped as: 1. NORMAL - OK 2. FAILED - Failure Predicted 3. NORMAL - S.M.A.R.T. Not Available 4. WARNING - S.M.A.R.T. Monitoring Disabled
Bad Blocks The number of bad blocks on the monitored physical drive that cannot be reliably used for storing and retrieving data.
Read/Write/Seek The total combined number of read, write, and seek errors on the monitored physical Errors drive.
Power Status Describes the current status of the power supply for the monitored physical drive with values mapped as: 1. Device is Active 2. Device is Powered Down 3. Device Has Changed its Power Status
Manufacturer The manufacturer of the monitored physical drive.
Model The model name of the monitored physical drive.
Serial Number The serial number of the monitored physical drive.
Capacity The total capacity of the monitored physical drive measured in Gigabytes.
Disk Interface The type of interface of the monitored physical drive, for example, IDE, SCSI, or SAS.
Firmware Version The version number of the firmware that is running on the monitored physical drive.
Maximum Disk The maximum speed measured in bytes per second, of data transfer of the monitored Transfer Rate physical drive .
page 303 Services Reference Manual: SolarWinds N-central
Physical Drive (HP) service
The Physical Drive (HP) service monitors the overall status of physical drives attached to HP servers running HP’s Insight Manager software.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 50 Device
Supported HP servers running HP’s Insight Manager software. Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Windows probe
Scan Interval 5 minutes
Physical Drive (HP) The unique identifier of the physical drive. You can obtain the identifier by querying the device with the 1.3.6.1.4.1.232.3.2.5.1.1.2 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Physical Drive 1.3.6.1.4.1.232.3.2.5.1.1.6 The status is mapped as... State n Normal: 2 n Failed: 1, 3, 4 ... where ...
n 1: The HP Insight Manager Agent does not recognize the drive; you may need to upgrade your HP Insight Manager agent and/or driver software. n 2: The drive is functioning properly. n 3: The drive is no longer operating and should be replaced. n 4: The drive has a predictive failure error and should be replaced.
page 304 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION Physical Drive 1.3.6.1.4.1.232.3.2.5.1.1.6 Describes the status of the physical drive. State Description
Model 1.3.6.1.4.1.232.3.2.5.1.1.3 The model name and/or number of the physical drive.
Serial Number 1.3.6.1.4.1.232.3.2.5.1.1.51 The serial number of the physical drive.
Drive Bay 1.3.6.1.4.1.232.3.2.5.1.1.5 The bay where the physical drive is currently installed.
page 305 Services Reference Manual: SolarWinds N-central
Physical Drive (Intel) service
The Physical Drive (Intel) service monitors the status of the physical drive attached to a supported Intel RAID controller. The service requires a Drive Identifier. The default configuration for the service identifies the logical drive as 0 but this may not be the correct identifier for all devices. To see the list of available logical drive identifiers, query the device with the 1.3.6.1.4.1.3582.4.1.4.2.1.2.1.1 SNMP OID.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 16 Device
Supported Intel RAID controllers SRCSAS18E, SRCSAS144E, SROMBSAS18E, SRCSASJV, Systems/Applications SRCSASRB and SRCSATAWB with Intel RAID WEB Console Utility 2.34-00.
Device Class Server - Generic and Server - Windows
Monitored By Windows agent
Scan Interval 5 minutes
Drive Identifier Specify the SNMP identifier for the drive. You can obtain the identifier by querying the device with the 1.3.6.1.4.1.3582.4.1.4.2.1.2.1.1 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Physical Drive State 1.3.6.1.4.1.3582.4.1.4.2.1.2.1.10 The status of the physical drive is mapped as...
n Normal: 0,24 n Warning: 2 n Failed: 1,16,17,20 ... where ...
n 0: Unconfigured - Good n 1: Unconfigured - Bad n 2: Hot Spare n 16: Offline
page 306 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 17: Failed n 20: Rebuild n 24: Online
Physical Drive State 1.3.6.1.4.1.3582.4.1.4.2.1.2.1.10 Describes the status of the physical drive as Description one of:
n Unconfigured - Good n Unconfigured - Bad n Hot Spare n Offline n Failed n Rebuild n Online
Vendor 1.3.6.1.4.1.3582.4.1.4.2.1.2.1.24 The manufacturer of the physical drive.
Model 1.3.6.1.4.1.3582.4.1.4.2.1.2.1.25 The model name and/or number of the physical drive.
Capacity 1.3.6.1.4.1.3582.4.1.4.2.1.2.1.15 The total capacity of the physical drive in megabytes.
page 307 Services Reference Manual: SolarWinds N-central
Physical Drive (NetApp) service
Physical Drive (NetApp) Service Monitors the status of a physical drive in a RAID array on a NetApp SAN.
For more information, see www.netapp.com/us/. Manufacturer information
Service Type SNMP
Discovery OID 1.3.6.1.4.1.789.1.6.2.1.2 (Volume Name)
Supported Systems/Application NetApp device with SNMP enabled SolarWinds N-central information
Known Limitations N/A
Max. Instances Per Device 100
Supported Device Class Storage
Notification Profile N/A
Monitored By Windows probe Troubleshooting
ISSUE RECOMMENDATION Misconfigured Check to see if you have the correct credential on the device. Metrics 1
OID 1.3.6.1.4.1.789.1.6.2.1.3
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Status N/A N/A 1: Normal 2-5: Warning 6-10: Failed
Status Description N/A N/A Off Metrics 2
OID 1.3.6.1.4.1.789.1.6.2.1.27
page 308 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Serial Number N/A N/A Off Metrics 3
OID 1.3.6.1.4.1.789.1.6.2.1.28
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Model N/A N/A Off Metrics 4
OID 1.3.6.1.4.1.789.1.6.2.1.29
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Firmware Version N/A N/A Off Metrics 5
OID 1.3.6.1.4.1.789.1.6.2.1.30
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Disk Speed N/A N/A Off Metrics 6
OID 1.3.6.1.4.1.789.1.6.2.1.31
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Disk Type N/A N/A Off
page 309 Services Reference Manual: SolarWinds N-central
Physical Drive (VMware) service
The Physical Drive (VMware) service monitors the overall status of a physical drive on an ESXi server. SolarWinds N-central uses the Common Information Model (CIM) services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 1
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
Physical Drive ID The unique identifier of the physical drive being monitored.
This service cannot use Self Healing.
To access information about the physical drives on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION State The physical drive status is mapped as:
n Normal: 0 n Warning: 1 n Failed: 2
State Description Describes the status of the physical drive:
n Critical Failure n Degraded n Major Failure n Minor Failure n Non-recoverable Error n OK n Unknown
Enabled State Indicates whether the physical drive has been enabled or disabled.
page 310 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION Enabled State Description N/A
page 311 Services Reference Manual: SolarWinds N-central
POP service
SolarWinds N-central can monitor a network device for the presence of a POP3 mail server that is available to the network. POP3 is a protocol designed for user-to-mailbox access. It is used on the Internet to retrieve email from a mail server. SolarWinds N-central can determine the up or down status of the POP service. The POP service does not use the Warning state. SolarWinds N-central averages the availability of the POP service over the scan interval. It compares the availability of the POP service to the threshold to determine the status.
Service TCP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central server By
Scan 5 minutes Interval
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a failure. Value The default is 30 seconds.
Port 110 Number
Validation The response you expect to receive from the port that is being queried. If the validation string that you String specify is not returned by the port being queried, the service will transition to a Failed state. The default validation string is +OK. Status details
STATUS DESCRIPTION DETAIL POP SolarWinds N-central determines whether the POP service is up or down. The POP service does not Service use the Warning state. SolarWinds N-central averages the availability of the POP service over the Availability scan interval and compares the availability of the POP service to the threshold to determine the status.
Round The time for a request to be sent and received. Trip Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 312 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 313 Services Reference Manual: SolarWinds N-central
Power Consumption (VMware) service
The Power Consumption (VMware) service monitors the overall power consumption of ESXi servers. If the ESXi host does not provide any power consumption data, this service will not display the Power Usage metric. SolarWinds N-central uses the CIM services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 1
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
This service cannot use Self Healing.
METRIC NAME DESCRIPTION Power Usage The amount of power, in Watts, being used by the ESXi server.
Power The CPU power management technology currently being used by the ESXi server. ESX/ESXi Management supports both Enhanced Intel SpeedStep and Enhanced AMD PowerNow! Technology
Power The CPU power management policy currently in effect for the ESXi server. Management Policy
page 314 Services Reference Manual: SolarWinds N-central
Power Supply (Cisco) service
The Power Supply (Cisco) Service monitors the state of the specified power supply, and it's line input, on a Cisco device.
Service Type SNMP Instances on a 1 Device Supported Most Cisco switches/routers running IOS. Systems/Applications Device Class Switch/Router Monitored By Windows probe Scan Interval 5 minutes Power Supply Index The SNMP index of the power supply to be monitored. For a list of the fans installed in the Cisco device, query it with the 1.3.6.1.4.1.9.9.13.1.5.1.2 SNMP OID. Power Supply Name The name of the power supply to be monitored.
OBJECT DESCRIPTORS NUMERICAL OID $PSState 1.3.6.1.4.1.9.9.13.1.5.1.3 $PSSource 1.3.6.1.4.1.9.9.13.1.5.1.4
STATUS DETAIL DESCRIPTION Power Supply State The status of the power supply which is mapped as:
n Normal: 1 n Warning: 2 n Failed: 3-6 Power Supply State Description A description of the power supply's state as:
n 1: Normal n 2: Warning n 3: Critical n 4: Shutdown n 5: Not Present n 6: Not Functioning Power Supply Source The line input of the power supply.
page 315 Services Reference Manual: SolarWinds N-central
Power Supply (Dell) service
The Power Supply (Dell) service monitors the overall condition of the power supply for Dell servers.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 16 Device
Supported Dell PowerEdge series servers running Dell OpenManage Server Administrator software. Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probe
Scan Interval 15 minutes
Power Supply The SNMP index of the power supply. To determine the index value, perform an SNMP Location Index walk on powerSupplyLocationName (.1.3.6.1.4.1.674.10892.1.600.12.1.8).
Power Supply The name of the power supply. To determine the name, perform an SNMP walk on Location Value powerSupplyLocationName (.1.3.6.1.4.1.674.10892.1.600.12.1.8). OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Power Supply Status 1.3.6.1.4.1.674.10892.1.600.12.1.5 The status of the power supply is mapped as...
n Normal: 3 n Warning: 0,1,2,4,7-4294967295 n Failed: 5,6 ... where ...
n 1: Other n 2: Unknown n 3: OK n 4: Non Critical n 5: Critical page 316 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 6: Non Recoverable
page 317 Services Reference Manual: SolarWinds N-central
Power Supply (Dell iDRAC) service
The Power Supply (Dell iDRAC) service monitors the status of a power supply on a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a 100 Device
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller (iDRAC). Systems/Applications
Device Class for CPU Servers - Management Interface (SNMP)
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Value Enter or select the name of the power supply to monitor in the format PowerSupply FQDD (Fully Qualified Device Descriptor). For a list of power supplies, query the device with the .1.3.6.1.4.1.674.10892.5.4.600.12.1.15 SNMP OID.
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Name $Name 1.3.6.1.4.1.674.10892.5.4.600.12.1.8 The location name of the power supply.
Chassis $ChassisIndex 1.3.6.1.4.1.674.10892.5.4.600.12.1.1 The index of the system chassis as an Index integer value between 1 and 128.
Power $Status 1.3.6.1.4.1.674.10892.5.4.600.12.1.5 The current status of the power supply Supply mapped as: Status 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable.
page 318 Services Reference Manual: SolarWinds N-central
Power Supply (EqualLogic) Service
The Power Supply (EqualLogic) service monitors the overall condition of the power supply for a PS6100 Equallogic SAN using v6.0.2 firmware.
Service Type SNMP
Instances on a 5 Device
Supported PS6100 Equallogic SANs using v6.0.2 firmware. Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Windows probe
Scan Interval 5 minutes
Power Supply Enter the name of the power supply to monitor. For a list of power supplies, query the SAN with the .1.3.6.1.4.1.12740.2.1.8.1.2 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Power Supply Status 1.3.6.1.4.1.12740.2.1.8.1.3 The status of the power supply mapped as:
n 1: On and operating n 2: No AC power n 3: Failed or no data
Power Supply Fan 1.3.6.1.4.1.12740.2.1.8.1.4 If the Power Supply Status is on and operating, this field Status indicates that the operational state of the fan. Fan states are mapped as:
n 0: Not applicable n 1: Fan is operational n 2: Fan is not operational
Power Supply 1.3.6.1.4.1.12740.2.1.8.1.5 Specifies the firmware version of the power supply. Firmware Version
page 319 Services Reference Manual: SolarWinds N-central
Power Supply (Fujitsu) service
The Power Supply (Fujitsu) service monitors the status and current load of a power supply in a Fujitsu device.
Service Type SNMP
Instances on a 100 Device
Supported Fujitsu servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
Power Supply Type the name of the power supply to be monitored. For a list of power supplies, query the device with the .1.3.6.1.4.1.231.2.10.2.2.10.6.2.1.3 SNMP OID.
Scanning The scan interval can be configured according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Status 1.3.6.1.4.1.231.2.10.2.2.10.6.2.1.5
$Load 1.3.6.1.4.1.231.2.10.2.2.10.6.2.1.6
STATUS DETAIL DESCRIPTION Status Describes the current status of the power supply that is being monitored with values mapped as: 1. WARNING - Unknown 2. NORMAL - Not Present 3. NORMAL - OK 4. FAILED - Failed 5. FAILED - AC Failed 6. FAILED - DC Failed 7. FAILED - Critical Temperature 8. WARNING - Not Manageable 9. WARNING - Fan Failure Predicted 10. FAILED - Fan Failure 11. FAILED - Power Safe Mode 12. FAILED - Non Redundant DC Fail 13. FAILED - Non Redundant AC Fail
Power Supply Output Describes the current actual output load measured in Watts, of the monitored power page 320 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Load supply.
page 321 Services Reference Manual: SolarWinds N-central
Power Supply (HP) service
The Power Supply (HP) service monitors the overall condition of the power supply for HP ProLiant servers.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type: SNMP
Instances on a Device 1
Supported HP Proliant Servers running HP Insight Manager 5.1 agents. Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Power Supply (HP) .1.3.6.1.4.1.232.6.2.9.1 The status of the power supply is mapped as...
n Normal: 2 n Warning: 1, 3 n Failed: 4 ... where ...
n 1: Other n 2: OK n 3: Degraded n 4: Failed
page 322 Services Reference Manual: SolarWinds N-central
Power Supply (Intel) Service
The Power Supply (Intel) service monitors the overall condition of the specified power supply on a server with an Intel Motherboard.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 2 Device
Supported Devices using an Intel motherboard, with the Intel SMS software installed. Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
Power Supply Name The name of the monitored power supply. You can obtain the names of power supplies available for monitoring by querying the device with the 1.3.6.1.4.1.343.2.10.3.5.400.20.1.3 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Power Supply Status 1.3.6.1.4.1.343.2.10.3.5.400.20.1.5 The status of the power supply is mapped as...
n Normal: 3 n Warning: 1, 2, 4, 5 n Failed: 6 ... where ...
n 1: Other n 2: Unknown n 3: OK n 4: Non-critical n 5: Critical
page 323 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 6: Non-recoverable
Power Supply Status 1.3.6.1.4.1.343.2.10.3.5.400.20.1.5 Describes the status of the power supply as Description one of:
n Other n Unknown n OK n Non-critical n Critical n Non-recoverable
page 324 Services Reference Manual: SolarWinds N-central
Power Supply (NetApp) service
The Power Supply (NetApp) service monitors the status of a power supply in a NetApp device.
For more information, see www.netapp.com/us/. Manufacturer information
Service Type SNMP
Discovery OID Index 0
Supported Systems/Application NetApp device with SNMP enabled SolarWinds N-central information
Known Limitations N/A
Max. Instances Per Device 1
Supported Device Class Storage
Notification Profile N/A
Monitored By Windows probe Troubleshooting
ISSUE RECOMMENDATION Misconfigured Check to see if you have the correct credential on the device. Metrics 1
OID 1.3.6.1.4.1.789.1.2.4.4
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Failed Power Supplies N/A N/A 0: No (Normal) 1: Yes (Failed) Metrics 2
OID 1.3.6.1.4.1.789.1.2.4.5
page 325 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Message N/A N/A Off
page 326 Services Reference Manual: SolarWinds N-central
Power Supply (VMware) service
The Power Supply (VMware) service monitors the overall condition of a power supply on an ESXi server. SolarWinds N-central uses the Common Information Model (CIM) services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 100
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
Power Supply Name The name of the power supply.
This service cannot use Self Healing.
To access information about the power supply on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION State The power supply status is mapped as:
n Normal: 1 n Warning: 1, 2, 4 n Failed: 5, 6
State Description Describes the status of the power supply:
n Other n Unknown n OK n Non-Critical n Critical or Non-recoverable
Enabled State Indicates whether the power supply is enabled or disabled.
Enabled State Description N/A
page 327 Services Reference Manual: SolarWinds N-central
Printer Page Count (HP) service
The Printer Page Count (HP) service monitors the number of pages, including a total count as well as color and black-and-white, printed over the lifetime of an HP printer.
This service cannot use Self Healing.
Service Type SNMP
Instances on a 1 Device
Supported All network-enabled HP LaserJet printers. Systems/Applications
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes
Printer Marker Index The SNMP index of the printer device. To obtain the index value, perform an SNMP walk on prtMarkerLifeCount (.1.3.6.1.2.1.43.10.2.1.4). OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Total Page Count 1.3.6.1.2.1.43.10.2.1.4 The number of pages printed over the lifetime of the device.
Color Page Count 1.3.6.1.4.1.11.2.3.9.4.2.1.4.1.2.7 The number of pages printed in color over the lifetime of the device.
Black and White Total Page Count OID - Color The number of pages printed in black-and-white over Page Count Page Count OID the lifetime of the device.
page 328 Services Reference Manual: SolarWinds N-central
Printer Conf Changes service
The Printer Conf Changes service monitors the number of configuration changes that affect the capabilities of a printer. For example, the addition or deletion of input/output bins, the addition or deletion of print interpreters, or modifications to the media size. These changes can often affect the ability of the printer to service specific types of print jobs.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any SNMP Printer-MIB Compliant Device (RFC1759)
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Printer Conf Changes 1.3.6.1.2.1.43.5.1.1.1 A numeric counter indicating the number of configuration (Counter 32) changes applied to the target printer.
page 329 Services Reference Manual: SolarWinds N-central
Printer Cover Status service
The Printer Cover Status service monitors the current status of the printer cover.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any SNMP Printer-MIB Compliant Device (RFC1759)
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC OID/CALCULATION DESCRIPTION NAME Print Cover 1.3.6.1.2.1.43.6.1.1.2 The description value for Printer Cover device. To obtain the value, Description perform an SNMP walk on prtMarkerSuppliesDescription (.1.3.6.1.2.1.43.6.1.1.2).
Printer 1.3.6.1.2.1.43.6.1.1.3 Indicates the current condition of the printer cover as one of the following: Cover Status n Normal - the printer cover is closed and the device can function normally. n Warning - the printer cover may be open or partially open preventing the device from functioning normally. n Failed - the printer cover is open preventing the device from functioning normally.
page 330 Services Reference Manual: SolarWinds N-central
Printer Display service
This service monitors the message displayed on the message screen of the printer.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 100
Supported Systems/Applications Any printer that reports the contents of its display through the Printer-MIB.
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Display Text 1.3.6.1.2.1.43.16.5.1.2 The text currently being shown in the printer's console display.
System 1.3.6.1.2.1.1.3 The time that has passed since the printer was last turned on or Uptime restarted.
page 331 Services Reference Manual: SolarWinds N-central
Printer Page Count service
The Printer Page Count service monitors how many pages the printer has printed since it was first turned on (Page Count) and since it was last rebooted (Power On Count).
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 6
Supported Any SNMP Printer-MIB Compliant Device (RFC1759). Systems/Applications
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes
Printer Marker Index The SNMP index of the printer. To obtain the index value, perform an SNMP walk on prtMarkerLifeCount (.1.3.6.1.2.1.43.10.2.1.4). OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Page Count 1.3.6.1.2.1.43.10.2.1.4 The count of pages printed during the lifetime of the printer.
Power On 1.3.6.1.2.1.43.10.2.1.5 The count of pages printed since the printer was last booted Count rebooted.
page 332 Services Reference Manual: SolarWinds N-central
Printer Status service
The Printer Status service monitors the current status of a specified printer.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any SNMP HOST-RESOURCES-MIB Compliant Device (RFC1514)
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATIO DESCRIPTION Printer Status 1.3.6.1.2.1.25.3.5.1.1 Indicates the current condition of the printer as one of:
n 1: Other n 2: Unknown n 3: Idle n 4: Printing n 5: Warming Up
Printer Detected 1.3.6.1.2.1.25.3.5.1.2 If the printer is in an error state, the conditions that defined this Error State state are reported as one of:
n 0: Low supply of paper n 1: No paper available n 2: Low supply of toner n 3: No toner available n 4: A door on the printer is open n 5: The printer is jammed n 6: The printer is offline n 7: Technical service is requested for the printer n 8: The input tray is missing or not installed properly n 9: The output tray is missing or not installed properly n 10: The marker supply is missing or not installed properly n 11: The output tray is nearly full n 12: The output tray is full n 13: The input tray is empty n 14: The printer is overdue for preventative maintenance
page 333 Services Reference Manual: SolarWinds N-central
Printer Toner Level service
The Printer Toner Level service monitors the amount of toner as a percentage of the total capacity of the monitored printer.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 15
Supported Any SNMP Printer-MIB Compliant Device (RFC1759) Systems/Applications
Device Class Printer
Monitored By Windows probe
Scan Interval 15 minutes
Printer Marker Supplies The SNMP index of the toner cartridge, To obtain the index value, perform an SNMP Description Index walk on prtMarkerSuppliesDescription (.1.3.6.1.2.1.43.11.1.1.6).
Print Marker Supplies The name of the toner cartridge. To obtain the name, perform an SNMP walk on Description Value prtMarkerSuppliesDescription (.1.3.6.1.2.1.43.11.1.1.6). OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Max Capacity 1.3.6.1.2.1.43.11.1.1.8 The maximum capacity of toner cartridge.
Level 1.3.6.1.2.1.43.11.1.1.9 The current level of the toner cartridge.
Toner Level (Level / Max Capacity) x 100 The percentage of toner remaining.
page 334 Services Reference Manual: SolarWinds N-central
Probe Status service
The Probe Status service monitors the time since the probe last checked in.
This service cannot use Self Healing.
When Probe Status is first added to a device, the service will be in a Misconfigured state until the probe first makes contact with the central server. During the monitoring process, the central server queries the time of the most recent connection of the probe to the central server. This is compared to the current time and the resulting difference is then compared to the specified threshold values so that it can be represented by the appropriate state on the status dashboard for the service. The Probe Status will also send a notification if the probe fails and goes offline using a probe rule and notification.
n To view the rule, click Configuration > Monitoring > Rules > Windows Probes. n To view the notification, click Configuration > Monitoring > Notifications > Agent/Probe Failure. If the time difference between the previous and current connection is within 10 minutes, the service state will display Normal; between 10 and 20 minutes, Warning; and over 20 minutes, Failed. You can choose to display the Probe Status service in the Active Issues view by selecting Show in the Active Issues View in the Service Details tab.
Service Type Central Server Asset
Instances on a Probe 1
Supported Systems/Applications Windows probe
Monitored By Central Server Asset
Scan Interval 15 minutes Status details
STATUS DESCRIPTION DETAIL Check-In The threshold that compares the time difference between the current time and the most recent Interval connection to the specified threshold values.
page 335 Services Reference Manual: SolarWinds N-central
Process (Local API, SNMP, WMI) service
The Process service monitors the status of an individual process on Windows, MAC OS X, and Linux devices.
Service Local API, SNMP, and WMI Workstation Type
Instances 20 on a Device
Device Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Class for Windows Process (Local API)
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class for Windows, Server - Windows, and Workstation - Windows Process (SNMP)
Device Laptop - Windows, Server - Windows, and Workstation - Windows Class for Process (WMI)
Monitored Agent (Windows, Linux, and Mac OS X) For supported versions see SolarWinds N-central System By Requirements.
Scan 15 minutes Interval
Process The SNMP index of the status of the process. You can obtain the SNMP index by performing an Index SNMP walk on the OID value: .1.3.6.1.2.1.25.4.2.1.2 (hrSWRunName). The index values are:
n .1 n .544 n .972 n .8 n .564 n .1016 n .164 n .576 n .1032 n .192 n .628 n .1060 n .212 n .692 n .1084 n .240 n .708 n .1212 n .252 n .740 n .1256 n .420 n .800 n .1792 n .448 n .868 n .1800 n .512 n .900
You can monitor a maximum of 10 values. You must determine which OID index value is relevant. The OID description is contained in the HOST-RESOURCES-MIB definition file.
Process The name of the process to be monitored. If the Process service is monitored by a Windows probe, Name the name must match the executable name that is listed in the Processes tab of the Windows Task Manager and must also include the file extension.
page 336 Services Reference Manual: SolarWinds N-central
IEXPLORER.EXE For the Process (SNMP) service, the name must match the OID value: .1.3.6.1.2.1.25.4.2.1.2 (hrSWRunName).
For Linux agents, the process name will usually be the same as the name of the process identification (PID) file but there are exceptions. To avoid potential failures, verify that the name of the process identified in the PID file is identical to the name configured as the process name.
Process The directory path of the process identification (PID) number file. PID File (Linux The PID file is used for Linux (Local API) agents only. Only) To avoid generating an unnecessary Failed status for this service, ensure that you provide access to:
n the directory in which the PID file is located, and n the PID file itself. Properties queried and calculations performed (WMI only)
Namespace root\cimv2
WMI Class Win32_Process
WMI Property 0 Name OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Is the Process Running? 1.3.6.1.2.1.25.4.2.1.7 The current status of the Process service indicated as either Yes or No.
The Number of Process 1.3.6.1.2.1.25.4.2.1.2 The number of occurrences of the process that are running Instances at the same time. Status details
STATUS DETAIL DESCRIPTION Process Users The name of the user account that initiated the process. (PIDs)
CPU Usage The percentage of CPU capacity that is used by the process.
Physical Memory The percentage of physical memory that is used by the process. Usage
Virtual Memory The percentage of virtual memory that is used by the process. Usage
page 337 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION IO Transfer Read The rate of I/O read operations used by the process (as indicated in bytes per second).
IO Transfer Write The rate of I/O write operations used by the process (as indicated in bytes per second).
IO Transfer Other The rate of I/O operations used by the process that are neither read nor write (as indicated in bytes per second).
IO Read The number of I/O read operations used by the process (as indicated in transactions per Operations second).
IO Write The number of I/O write operations used by the process (as indicated in transactions per Operations second).
IO Other The number of I/O operations used by the process that are neither read nor write (as Operations indicated in transactions per second).
If I/O operations are consistently reported as either 0 bytes/second (for I/O transfers) or 0 transactions/second (for I/O operations), the Windows device on which the process is running may require configuration of its Update Speed.
1. Start the Windows Task Manager. 2. Click the Processes tab. 3. Select the process that you want to edit. 4. Click View. 5. Under Update Speed, select Normal.
page 338 Services Reference Manual: SolarWinds N-central
RAID Battery Status (Dell) service
The RAID Battery Status (Dell) service monitors the state of batteries of the RAID controller. A Raid Controller can have more than one Battery. Once an alert is received on this service, the user can run a Walk on .1.3.6.1.4.1.674.10893.1.20.130.16.1 to find the relationship between the Battery Index and corresponding Controller. Basic service information
Manufacturer/Public Information
Service Type SNMP
Discovery OID .1.3.6.1.4.1.674.10893.1.20.130.16.1.3 (BatteryConnectionNumber)
Supported Systems/Applications RAID configured Dell with SNMP enabled.
Solarwinds N-central Specific Information
Known limitations N/A
Max Instances on each device 100
Supported Device class Windows / Linux
Notification Profile N/A
Monitored by Windows and Linux agent, Windows probe Troubleshooting
ISSUE CORRECTIVE ACTION misconfigured Ensure you have the correct SNMP credentials. Metrics C S ALCULATIONS DEFAULT OID USED UPPORTED NOTES /THRESHOLD THRESHOLDS VALUES MAPPING 1.3.6.1.4.1.674.10893.1.20.130.15.1.4 — — The status of The meanings of the the battery is statuses: mapped as: n 0: Unknown n Normal: n 1: Ready 1 n 2: Failed n Warning: n 6: Degraded 0,6, 7, 9, n 7: Reconditioning 10, 12, 36 n 9: High n 10: Low Power page 339 Services Reference Manual: SolarWinds N-central
n Failed: 2, n 12: Charging 21 n 21: Missing
1.3.6.1.4.1.674.10893.1.20.130.15.1.2 — — Off The battery's name as represented in Storage Management.
page 340 Services Reference Manual: SolarWinds N-central
RAID Controller Firmware (Dell) service
The RAID Controller Firmware (Dell) displays the version of RAID Firmware. Basic service information
Manufacturer/Public Information
Service Type SNMP
Discovery OID .1.3.6.1.4.1.674.10893.1.20.130.16.1.5 (ControllerNumber)
Supported Systems/Applications RAID configured Dell with SNMP enabled.
SolarWinds N-centralSpecific Information
Known limitations N/A
Max Instances on each device 100
Supported Device class Windows / Linux
Notification Profile N/A
Monitored by Windows agent, Windows probe Troubleshooting
ISSUE CORRECTIVE ACTION misconfigured Ensure you have the correct SNMP credentials.
misconfigured The Dell SNMP agent might not report this value for certain version of Dell SNMP agents. If 1.3.6.1.4.1.674.10893.1.20.130.1.1.8 does not exist in SNMP walk, contact Dell support. Metrics
S DEFAULT CALCULATIONS/T OID USED UPPORTED T NOTES HRESHOLD MAPPING VALUES HRESHOLDS 1.3.6.1.4.1.674.10893.1.20.130.1.1.8 — — Off The controller's current firmware version.
C S DEFAULT OID USED ALCULATIONS UPPORTED T NOTES /THRESHOLD VALUES HRESHOLDS MAPPING 1.3.6.1.4.1.674.10893.1.20.130.1.1.2 — — Off The name of the controller in
page 341 Services Reference Manual: SolarWinds N-central
C S DEFAULT OID USED ALCULATIONS UPPORTED T NOTES /THRESHOLD VALUES HRESHOLDS MAPPING this subsystem as represented in Storage Management. Includes the controller type and instance. For example, Perc3/QC 1.
page 342 Services Reference Manual: SolarWinds N-central
RAID Controller Status (Fujitsu) service
The RAID Controller Status (Fujitsu) service monitors various elements of a RAID Controller in a Fujitsu device.
Service Type SNMP
Instances on a 100 Device
Supported Fujitsu servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
RAID Contoller Enter the name of the monitored RAID controller. For a list of RAID controllers, query the device with the .1.3.6.1.4.1.231.2.49.1.4.2.1.25 SNMP OID.
Scanning You can configure the scan interval according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Manufacturer 1.3.6.1.4.1.231.2.49.1.4.2.1.3
$Model 1.3.6.1.4.1.231.2.49.1.4.2.1.2
$BusLocation 1.3.6.1.4.1.231.2.49.1.4.2.1.5
$FirmwareRevision 1.3.6.1.4.1.231.2.49.1.4.2.1.7
$BIOSRevision 1.3.6.1.4.1.231.2.49.1.4.2.1.8
$NumberOfChannels 1.3.6.1.4.1.231.2.49.1.4.2.1.9
$NumberOfPhysicalDisks 1.3.6.1.4.1.231.2.49.1.4.2.1.11
$NumberOfLogicalDrives 1.3.6.1.4.1.231.2.49.1.4.2.1.12
$CacheSize 1.3.6.1.4.1.231.2.49.1.4.2.1.13
$Status 1.3.6.1.4.1.231.2.49.1.4.2.1.15
$Interface 1.3.6.1.4.1.231.2.49.1.4.2.1.16
$SerialNumber 1.3.6.1.4.1.231.2.49.1.4.2.1.21
$DriverName 1.3.6.1.4.1.231.2.49.1.4.2.1.22
$DriverRevision 1.3.6.1.4.1.231.2.49.1.4.2.1.23
$BBUSStatus 1.3.6.1.4.1.231.2.49.1.4.2.1.24
$UEFIDriverRevision 1.3.6.1.4.1.231.2.49.1.4.2.1.27
page 343 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Controller Status Describes the current status of the monitored RAID controller with values mapped as: 1. NORMAL - OK 2. WARNING - Warning 3. FAILED - Error 5. WARNING - Unknown
Battery Backup Describes the current status of the backup battery for the monitored RAID controller with Status values mapped as: 1. WARNING - Unknown 2. NORMAL - Not Installed 3. NORMAL - Normal 4. WARNING - Charging 5. WARNING - Discharging 6. WARNING - Warning 7. FAILED - Failed
Manufacturer The name of the manufacturer of the RAID controller.
Model The model (descriptive name) of the RAID controller.
Serial Number The serial number of the RAID controller.
Firmware Version The version of the RAID controller firmware.
BIOS Version The version of the BIOS of the monitored RAID controller.
UEFI Version The version of the UEFI (Unified Extensible Firmware Interface) of the monitored RAID controller.
Driver Name The name of the software driver for the monitored RAID controller.
Driver Version The version of the software driver for the monitored RAID controller.
Bus Location The location of the bus interface for the RAID controller that is being monitored.
Number of Channels The number of hard disk channels available for the monitored RAID controller.
Number of Physical The total number of installed physical disks in the array. Disks
Number of Logical The total number of installed logical disks in the array. Drives
Onboard Cache Size The size in megabytes, of the onboard cache within the array.
Disk Connection The type of disk interface of the monitored RAID controller, for example, IDE, SCSI, or Interface SAS.
page 344 Services Reference Manual: SolarWinds N-central
RAID Status (Adaptec) service
The RAID Status (Adaptec) service monitors the status of the specified Adaptec RAID controller.
You must install the Adaptec Storage Manager or IBM ServeRAID Manager. For a complete list of supported models, see: http://www.adaptec.com/en-US/products/asm/ .
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 10 Device
Supported Any device using an Adaptec HostRAID card or an IBM ServeRAID card. Systems/Applications
Device Class Server - Generic and Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
RAID Controller Used to specify the SNMP identifier for the RAID controller. You can find the identifier by SNMP Identifier querying the device with the 1.3.6.1.4.1.795.14.1.201.1.1.1 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION RAID Controller Status 1.3.6.1.4.1.795.14.1.201.1.1.15 The “RAID Controller Status” scandetail is mapped as...
n Normal: 3 n Warning: 4 n Failed: 1,2,5 ... where ...
n 1: Unknown n 2: Other n 3: Okay n 4: Warning
page 345 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 5: Failure
RAID Controller Status 1.3.6.1.4.1.795.14.1.201.1.1.15 The status of the RAID Controller as one of: Description n Unknown n Other n Okay n Warning n Failure
Battery Status 1.3.6.1.4.1.795.14.1.201.1.1.14 The “Battery Status” scandetail is mapped as...
n Normal: 3,5 n Warning: 1,2,4,7,8,9,10 n Failed: 6 ... where ...
n 1: Unknown n 2: Other n 3: Applicable n 4: Not Installed n 5: Okay n 6: Failed n 7: Charging n 8: Discharging n 9: In Maintenance Mode n 10: Charging Disabled
Battery Status Description 1.3.6.1.4.1.795.14.1.201.1.1.14 The status of the battery for the RAID controller as one of:
n Unknown n Other n Applicable n Not Installed n Okay n Failed n Charging n Discharging n In Maintenance Mode n Charging Disabled
Model 1.3.6.1.4.1.795.14.1.201.1.1.4 The model (descriptive name) of the RAID controller.
Serial Number 1.3.6.1.4.1.795.14.1.201.1.1.6 The serial number of the RAID controller.
Firmware Version 1.3.6.1.4.1.795.14.1.201.1.1.5 Tthe version of the RAID controller firmware.
page 346 Services Reference Manual: SolarWinds N-central
RAID Status (Dell) service
The RAID Status (Dell) service monitors the state of the RAID controller only. To monitor the firmware version, use RAID Controller Firmware (Dell). To monitor the battery status of the RAID controller, use RAID Battery Status (Dell). Basic service information
Manufacturer/Public Information
Service Type SNMP
Discovery OID 1.3.6.1.4.1.674.10893.1.20.130.1.1.2 (ControllerName)
Supported Systems/Applications RAID configured Dell with SNMP enabled.
SolarWinds N-central Specific Information
Known limitations N/A
Max Instances on each device 100
Supported Device class Windows / Linux
Notification Profile N/A
Monitored by Windows agent, Windows probe Troubleshooting
ISSUE CORRECTIVE ACTION misconfigured Verify that you have the correct SNMP credentials. Metrics C S ALCULATION- DEFAULT OID USED UPPORTED S NOTES THRESHOLDS VALUES /THRESHOLD MAPPING 1.3.6.1.4.1.674.10893.1.20.130.1.1. — — The status of The current condition of the 5 the controller is controller subsystem, mapped as: including devices Status connected to it. n Normal: 1, 3 n 0:Unknown n Warnin n 1:Ready g: 0, 6 n 2:Failed n Failed: n 3:Online 2, 4 n 4:Offline page 347 Services Reference Manual: SolarWinds N-central
C S ALCULATION- DEFAULT OID USED UPPORTED S NOTES THRESHOLDS VALUES /THRESHOLD MAPPING
n 6:Degraded
1.3.6.1.4.1.674.10893.1.20.130.1.1. — — Off The type of controller: 5 n 1:SCSI Controller Type n 2:PV660F n 3:PV662F n 4:IDE (Integrated/Intelligen t Drive Electronics) n 5:SATA (Serial Advanced Technology Attachment) n 6:SAS (Serial Attached SCSI)
1.3.6.1.4.1.674.10893.1.20.130.1.1. — — Off The name of the controller 5 in this subsystem as represented in Storage Controller Name Management. Includes the controller type and instance. For example, Perc3/QC 1
page 348 Services Reference Manual: SolarWinds N-central
RAID Status (EqualLogic) service
The RAID Status (EqualLogic) service monitors the state of the RAID controller for a PS6100 Equallogic SAN using v6.0.2 firmware.
Service Type SNMP
Instances on a 100 Device
Supported Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware. Systems/Applications
Device Class Server - Windows, Server - Generic
Monitored By Windows agent, Windows probe
Scan Interval 5 minutes
RAID Array Enter the name of the RAID array to monitor. For a list of the available RAID arrays, query the SAN with the .1.3.6.1.4.1.12740.2.1.1.1.9 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION RAID Status 1.3.6.1.4.1.12740.2.1.13.1.1 The status of the RAID using a composite view of the underlying sub-systems with the status mapped to: 1. OK - The RAID is operating normally. 2. Degraded - The RAID is in a degraded state, possibly because no spares are available. 3. Verifying - Running a verification pass and displaying a percentage complete value. 4. Reconstructing - A drive is being reconstructed and displaying a percentage complete value. 5. Failed - The RAID experienced a failure, possibly due to a failed drive with no spare being available. 6. Catastrophic Loss - This may not be visible to the user since the RAID may not be able to start up. This means that administrator intervention is required to correct the problem. 7. Expanding 8. Mirroring - Indicates that a bad drive is being mirrored onto a spare drive.
RAID Capacity 1.3.6.1.4.1.12740.2.1.10.1.2 This value is expressed as a percentage and is calculated by (%) (UsedStorage) dividing the UsedStorage value by the TotalStorage value and then multiplying the result by 100. 1.3.6.1.4.1.12740.2.1.10.1.1 (TotalStorage)
page 349 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION Are There Lost 1.3.6.1.4.1.12740.2.1.13.1.3 Specifies whether there are lost blocks in the RAID array which RAID Blocks To the user may want to clear. Mapped to: Be Cleared? 1. True 2. False
Number Of 1.3.6.1.4.1.12740.2.1.13.1.4 The number of disks allocated as spares in an array. Spares
Number Of 1.3.6.1.4.1.12740.2.1.11.1.3 The number of controller modules in the array. Controllers
Number Of 1.3.6.1.4.1.12740.2.1.11.1.4 The total number of disks that have been installed in the array. Disks
Read/Write 1.3.6.1.4.1.12740.2.1.11.1.5 The size in MB of the Read/Write cache within the array. Cache Size
Read/Write 1.3.6.1.4.1.12740.2.1.11.1.6 The mode that the Read/Write cache is currently in within the Cache Mode array. The default is Write-back however, the array will be configured to Write-thru whenever there is a battery failure. Mapped to:
n 0 - Unknown n 1 - Write-thru n 2 - Write-back
page 350 Services Reference Manual: SolarWinds N-central
RAID Status (HP) service
The RAID Status (HP) service monitors the overall status of a RAID array on an HP/ProLiant server.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications HP Proliant Servers running HP Insight Manager 5.1 and later agents.
Device Class Server - Generic and Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION RAID Status (HP) 1.3.6.1.4.1.232.3.1.3 The overall condition status of the disk array is mapped as...
n Normal = 2 n Warning = 1 n Failed = 3, 4 ... where ...
n 1 = Other n 2 = OK n 3 = Failed n 4 = Predictive Failure
page 351 Services Reference Manual: SolarWinds N-central
RAID Status (VMware) service
The RAID Status (VMware) service monitors the state of a RAID controller on an ESXi server. SolarWinds N-central uses the Common Information Model (CIM) services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
When deploying VMWare on ESX servers running on Dell hardware, it may require additional setup before the service can successfully discover the physical disk and RAID objects. Some Dell servers use an LSI RAID controller and the VIB is not part of the Dell Offline bundle. For information on loading the appropriate LSI VIB, see the Customer Success Knowledge Base article RAID Status (VMWARE) service misconfigured.
Service Type ESXi
Instances on a Device 100
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
RAID Controller Name The unique identifier of the monitored RAID controller.
This service cannot use Self Healing.
To access information about the RAID controllers on your ESXi server, use a browser to access the URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION State The RAID controller status is mapped as:
n Normal: 0 n Warning: 1 n Failed: 2
State Description Describes the status of the RAID controller:
n Other n Unknown n OK
page 352 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION
n Non-critical n Critical or Non-recoverable
Enabled State Indicates whether the RAID controller has been enabled or disabled.
Enabled State Description N/A
page 353 Services Reference Manual: SolarWinds N-central
SCOM Computer Alerts service
The SCOM Computer Alerts service monitors the computer alerts raised by System Center Operations Manager (SCOM).
To use the SCOM Computer Alerts Service or the SCOM Distributed Application Alerts Service, Windows probes and Windows agents require Microsoft .NET Framework version 3.0.34353
Service Type SCOM SDK Instances on a Device 1 Supported Systems/Applications Any Server - Windows with SCOM or SCE installed Device Class Server - Windows Monitored By Windows probes, Windows agents Scan Interval 5 minutes Status details
STATUS DETAIL DESCRIPTION Computers in the Displays the number of computers that System Center Operations Manager is reporting Critical State as being in a Critical state. Computers in the Displays the number of computers that System Center Operations Manager is reporting Warning state as being in a Warning state. Computers in the Displays the number of computers that System Center Operations Manager is reporting Success State as being in a Success state. Computers in Displays the number of computers that System Center Operations Manager is reporting Maintenance as being in a Maintenance state. Computers in the Displays the number of computers that System Center Operations Manager is reporting Unknown state as being in an Unknown state.
page 354 Services Reference Manual: SolarWinds N-central
SCOM Distributed Application Alerts service
The SCOM Distributed Application Alerts service monitors the distributed application alerts raised by System Center Operations Manager.
To use the SCOM Computer Alerts Service or the SCOM Distributed Application Alerts Service, Windows probes and Windows agents require Microsoft .NET Framework version 3.0.34353
Service Type SCOM SDK
Instances on a Device: 1
Supported Systems/Applications Any Server - Windows with SCOM or SCE installed
Device Class Server - Windows
Monitored By Windows probes, Windows agents
Scan Interval 5 minutes Status details
STATUS DETAIL DESCRIPTION Distributed Applications in Displays the number of distributed applications that System Center Operations the Critical State Manager is reporting as being in a Critical state.
Distributed Applications in Displays the number of distributed applications that System Center Operations the Warning state Manager is reporting as being in a Warning state.
Distributed Applications in Displays the number of distributed applications that System Center Operations the Success State Manager is reporting as being in a Success state.
Distributed Applications in Displays the number of distributed applications that System Center Operations Maintenance Manager is reporting as being in a Maintenance state.
Distributed Applications in Displays the number of distributed applications that System Center Operations the Unknown state Manager is reporting as being in an Unknown state.
page 355 Services Reference Manual: SolarWinds N-central
Security Logs service
This service monitors the SNMP traps and syslog messages that are transmitted to the monitoring probe. Appliances and applications that run on a computer, such as a server, can be configured to record events to the probe.
This service cannot use Self Healing.
During the monitoring process, this service listens for SNMP traps and log messages that are transmitted to the probe. The service then interprets these events and displays the appropriate status based on the regular expressions that you define. The service also supports wide characters.
You must configure the monitored device to send syslog messages to the IP address of the Windows probe. The IP address of the device that is registered in SolarWinds N-central must be the same as the IP address that sends SNMP traps to the probes.
Service Type Syslog
Instances on a 1 Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probe
Scan Interval 5 minutes Status details
STATUS DESCRIPTION DETAIL Regular The threshold values for the regular expressions that you specified on the Service Details tab. Expressions (1 to 6)
The line The number of lines in the log file that the keyword has been located and returned by the agent. count This information appears for each regular expression on the status details screen for the service, matched any applicable reports, and any triggered notifications, except for numeric pages. regex...
The first line The first 250 characters of the first line in the log file containing the matching keyword returned by matched the agent. This information appears on the service's status details screen, any applicable reports, and any triggered notifications, except for numeric pages.
page 356 Services Reference Manual: SolarWinds N-central
Server Temp (Dell) service
The Server Temp (Dell) service monitors the status and temperature reading of a temperature sensor on a Dell server.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 256 Device
Supported Dell PowerEdge series servers running Dell OpenManage Server Administrator software. Systems/Applications
Device Class Server - Generic, Other, Printer, Scanner/Camera, Switch/Router, Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes
Temperature Probe The SNMP index of the temperature probe. To determine the index value, perform an Location Name Index SNMP walk on temperatureProbeLocationName (.1.3.6.1.4.1.674.10892.1.700.20.1.8).
Temperature Probe The name of the temperature probe. To determine the name, perform an SNMP walk on Location Name Value temperatureProbeLocationName (.1.3.6.1.4.1.674.10892.1.700.20.1.8). OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Server Temp (Dell) 1.3.6.1.4.1.674.10892.1.700.20.1.5 The probe status of the temperature probe is Status mapped as...
n Normal: 3 n Warning: 0-2, 4, 7, 11-4294967295 n Failed: 5, 6, 8-10 ... where ...
n 1: Other n 2: Unknown n 3: OK n 4: Non-critical Upper
page 357 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 5: Critical Upper n 6: Non-Recoverable Upper n 7: Non-critical Lower n 8: Critical Lower n 9: Non-recoverable Lower n 10: Failed
Server Temp (Dell) 1.3.6.1.4.1.674.10892.1.700.20.1.6 The temperature reading of the temperature sensor Reading (in degrees Centigrade.)
page 358 Services Reference Manual: SolarWinds N-central
Server Temp (HP) service
The Server Temp (HP) service monitors the overall condition of the thermal environment on an HP ProLiant server.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a Device 1
Supported HP Proliant Servers running HP Insight Manager 5.1 and later agents. Systems/Applications
Device Class Server - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Server Temp (HP) 1.3.6.1.4.1.232.6.2.6.1 The status of the thermal environment is mapped as...
n Normal: 1, 2 n Warning: 3 n Failed: 4 ... where ...
n 1: Other n 2: OK n 3: Degraded n 4: Failed
page 359 Services Reference Manual: SolarWinds N-central
Server Temp (IBM) service
The Server Temp (IBM) service monitors the status of the specified temperature sensor on an IBM server.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 10 Device
Supported Any UMSMSENSOR-MIB Compliant Device Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows probes
Scan Interval 5 minutes
Temperature Sensor The name of the monitored temperature sensor. To see the list of available temperature Name probes, query the device with the 1.3.6.1.4.1.2.6.159.1.1.80.1.1.1 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Temperature 1.3.6.1.4.1.2.6.159.1.1.80.1.1.2
Temperature Sensor 1.3.6.1.4.1.2.6.159.1.1.80.1.1.21 The current status of the temperature sensor as Status one of:
n OK n Degraded n Pred Fail (predicted failure)
page 360 Services Reference Manual: SolarWinds N-central
Server Temp (Intel) service
The Server Temp (Intel) service monitors the status and temperature reading of the temperature sensors on Intel motherboards.
Special Note This service operates in conjunction with the vendor-supplied hardware agent and requires SNMP to be configured so that it is accessible from both the SolarWinds N-central Agent and the SolarWinds N-central Probe. The following are the requirements in order to associate this service with a device:
n The device must undergo discovery using a Probe-based asset scan. n You need to enable SNMP enabled on the device on the Properties tab of the device. n Once you enable SNMP for the device, you need to configure a community string. The default community string is public.
Service Type SNMP
Instances on a 1 Device
Supported Devices using an Intel motherboard, with the Intel SMS software installed. Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes
Baseboard Probe The name of the monitored baseboard temperature probe. You can obtain the names of temperature probes available for monitoring by querying the device with the 1.3.6.1.4.1.343.2.10.3.5.600.40.1.3 SNMP OID.
Panel Probe The name of the monitored panel temperature probe. You can obtain the names of temperature probes available for monitoring by querying the device with the 1.3.6.1.4.1.343.2.10.3.5.600.40.1.3 SNMP OID. OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Baseboard Probe Status 1.3.6.1.4.1.343.2.10.3.5.600.40.1.5 Probe Status is mapped as :
n Normal: 3 n Warning: 1, 2, 4 n Failed: 5, 6 The meanings for each of the possible fan statuses:
n 1: Other n 2: Unknown
page 361 Services Reference Manual: SolarWinds N-central
METRIC NAME OID/CALCULATION DESCRIPTION
n 3: OK n 4: Non Critical n 5: Critical n 6: Non Recoverable
Baseboard Probe Status 1.3.6.1.4.1.343.2.10.3.5.600.40.1.5 The baseboard temperature probe status Description as one of:
n Other n Unknown n OK n Non Critical n Critical n Non Recoverable
Baseboard Temperature (°C) 1.3.6.1.4.1.343.2.10.3.5.600.40.1.6 Displays the baseboard temperature.
Front Panel Probe Status 1.3.6.1.4.1.343.2.10.3.5.600.40.1.5 The front panel temperature probe status.
Front Panel Probe Status 1.3.6.1.4.1.343.2.10.3.5.600.40.1.5 The front panel temperature probe status Description as one of:
n Normal, n Warning, or, n Failed.
Front Panel Temperature (°C) 1.3.6.1.4.1.343.2.10.3.5.600.40.1.6 The front panel temperature.
page 362 Services Reference Manual: SolarWinds N-central
SharePoint 2010 ASP.NET service
The Sharepoint 2010 ASP.NET service monitors performance counters, including current request, queued request, application restarts, requests rejected and worker process restarts.
For more information, see www.microsoft.com. Manufacturer information
Service Type WMI
Namespace Root\CIMV2
Supported Systems/Application Microsoft SharePoint 2010 SolarWinds N-central information
Known Limitations —
Max. Instances Per Device 100
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile Microsoft SharePoint 2010
Monitored By Local agent Metrics
WMI Class Win32_PerfFormattedData_ASPNET_ASPNET
CALCULATIONS/ SUPPORTED WMI PROPERTY THRESHOLD DEFAULT THRESHOLDS VALUES MAPPING RequestsCurrent N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 286331153 Failed: 2863311530- 4294967295
RequestsQueued N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
RequestsRejected N/A N/A Normal: 0 - 5 page 363 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ SUPPORTED WMI PROPERTY THRESHOLD DEFAULT THRESHOLDS VALUES MAPPING Warning: 6- 10 Failed: 11- 4294967295
RequestWaitTime N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
WorkerProcessRestarts N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
page 364 Services Reference Manual: SolarWinds N-central
SharePoint 2010 ASP.NET Application service
The Sharepoint 2010 cache ASP.NET Application service monitors performance counters, including cachedAPIHitRatio, cachedAPITrims, and RequestPerSecond.
For more information, see www.microsoft.com. Manufacturer information
Service Type WMI
Namespace Root\CIMV2
Supported Systems/Application Microsoft SharePoint 2010 SolarWinds N-central information
Known Limitations —
Max. Instances Per Device 100
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile Microsoft SharePoint 2010
Monitored By Local agent Metrics
WMI Class Win32_PerfRawData_MicrosoftWindowsSharePointMicrosoftSharePointFoundation4 _SharePointFoundation
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING CacheAPIHitRatio N/A N/A Normal: 0 - 715827881 Warning: 715827882- 715827882 Failed: 715827883- 2147483647
CacheAPITrims N/A N/A Normal: 0 - 0 Warning: 1- 10 Failed: 11- 4294967295
RequestsPerSec N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
page 365 Services Reference Manual: SolarWinds N-central
SharePoint 2010 OSS Search Indexer Plugin service
The Sharepoint 2010 OSS Search Indexer Plugin service monitors performance counters, including queries succeeded and failed.
For more information, see www.microsoft.com. Manufacturer information
Service Type WMI
Namespace Root\CIMV2
Supported Systems/Application Microsoft SharePoint 2010 SolarWinds N-central information
Known Limitations —
Max. Instances Per Device 100
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile Microsoft SharePoint 2010
Monitored By Local agent Metrics
WMI Class Win32_PerfRawData_MicrosoftWindowsSharePointSharePointServer_OSSSearchIndexerPlugin
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING QueriesSucceeded N/A N/A Normal: 0 - 1431655765 Warning: 1431655765 - 2863311530 Failed: 2863311530 - 4294967295
QueriesFailed N/A N/A Normal: 0 - 1 Warning: 2 - 2863311530 Failed: 2863311530 - 4294967295
page 366 Services Reference Manual: SolarWinds N-central
SharePoint 2013 ASP.NET service
The SharePoint 2013 ASP.NET service monitors performance counters, including current, queued, and rejected requests as well as application and worker process restarts.
For more information, see www.microsoft.com. Basic Service information
Service Type WMI
Namespace Root\CIMV2
Supported Systems/Application Microsoft SharePoint 2013 SolarWinds N-central information
Known Limitations —
Max. Instances Per Device 100
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile Microsoft SharePoint 2013
Monitored By Local agent Metrics
WMI Class Win32_PerfFormattedData_ASPNET_ASPNET
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING RequestsCurrent N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
RequestsQueued N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
RequestsRejected N/A N/A Normal: 0 - 5 Warning: 6- 10 Failed: 11- 4294967295
RequestWaitTime N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530
page 367 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Failed: 2863311530- 4294967295
WorkerProcessRestarts N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
page 368 Services Reference Manual: SolarWinds N-central
SharePoint 2013 ASP.NET Application service
The Sharepoint 2013 ASP.NET Application service monitors performance counters, including cachedAPIHitRatio, cachedAPITrims and RequestPerSecond.
For more information, see www.microsoft.com. Manufacturer information
Service Type WMI
Namespace Root\CIMV2
Supported Systems/Application Microsoft SharePoint 2013 SolarWinds N-central information
Known Limitations —
Max. Instances Per Device 100
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile Microsoft SharePoint 2013
Monitored By Local agent Metrics
WMI Class Win32_PerfFormattedData_ASPNET_ASPNETApplications
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING CacheAPIHitRatio N/A N/A Normal: 0 - 715827881 Warning: 715827882- 715827882 Failed: 715827883- 2147483647
CacheAPITrims N/A N/A Normal: 0 - 0 Warning: 1- 10 Failed: 11- 4294967295
RequestsPerSec N/A N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
page 369 Services Reference Manual: SolarWinds N-central
SharePoint 2013 Foundation service
The Sharepoint 2013 Foundation service monitors the Sharepoint Foundation’s performance counters including ActiveThreads, CurrentPageRequests, ExecutingTimePerPageRequest, IncomingPageRequestsRate, RejectPageRequestsRate, RespondedPageRequestsRate and SqlQueryExecutingtime.
For more information, see www.microsoft.com. Basic Service information
Manufacturer Information
Service Type WMI
Namespace Root\CIMV2
Supported Systems/Application Microsoft SharePoint 2013
SolarWinds N-centralSpecific Information
Known Limitations —
Max. Instances Per Device 100
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile Microsoft SharePoint 2013
Monitored By Local agent Metrics
WMI Win32_PerfRawData_MicrosoftWindowsSharePointMicrosoftSharePointFoundation4_ Class SharePointFoundation
CALCULATIONS/ SUPPORTED WMI PROPERTY THRESHOLD DEFAULT THRESHOLDS VALUES MAPPING ActiveThreads — N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
CurrentPageRequests — N/A Normal: 0 - 1431655765 Warning: 1431655765- 286331153 Failed: 2863311530-
page 370 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ SUPPORTED WMI PROPERTY THRESHOLD DEFAULT THRESHOLDS VALUES MAPPING 4294967295
ExecutingTimePerPageRequest — N/A Normal: 0 - 1431655765 Warning: 1431655765- 286331153 Failed: 2863311530- 4294967295
IncomingPageRequestsRate — N/A Normal: 0 - 715827881 Warning: 715827882- 715827882 Failed: 715827883- 2147483647
RejectPageRequestsRate — N/A Normal 0 - 715827881 Warning 715827882- 715827882 Failed 715827883- 2147483647
RespondedPageRequestsRate — N/A Normal: 0 - 715827881 Warning: 715827882- 715827882 Failed: 715827883- 2147483647
SqlQueryExecutingtime — N/A Normal: 0 - 1431655765 Warning: 1431655765- 2863311530 Failed: 2863311530- 4294967295
page 371 Services Reference Manual: SolarWinds N-central
S.M.A.R.T. Status service
The S.M.A.R.T. Status service monitors the S.M.A.R.T. monitoring system on computer drives.
Service Type WMI
Instances on a 100 Device
Supported Any WMI-enabled Server - Windows or workstation with S.M.A.R.T. installed. Systems/Applications
Device Class Laptop - Windows, Server - Windows, Workstation - Windows
Monitored By Local agent
Scan Interval 120 minutes
Disk Name The Instance Name of the disk to be monitored. You can obtain the Instance Name from WMI under the namespace rootwmi under the class MSStorageDriver_ FailurePredictStatus.
Properties queried and calculations performed
Namespace root\wmi
WMI Class MSStorageDriver_FailurePredictStatus
WMI Property 0 PredictFailure
WMI Property 1 Reason Status details
Failure Predicted - Indicates whether or not imminent failure of the drive is predicted as either True or False. Reason Code - Indicates the reason for the predicted failure mapped as:
n 1 = Raw Read Error Rate n 2 = Throughput Performance n 3 = Spin Up Time n 4 = Start/Stop Count n 5 = Reallocated Sector Count n 6 = Read Channel Margin n 7 = Seek Error Rate n 8 = Seek Time Performance n 9 = Power On Hours n 10 = Spin Retry Count n 11 = Calibration Retry Count n 12 = Power Cycle Count n 13 = Soft Read Error Rate
page 372 Services Reference Manual: SolarWinds N-central
n 170 = Available Reserved Space n 171 = SSD Program Fail Count n 172 = SSD Erase Fail Count n 174 = Unexpected Power Loss Count n 175 = Power Loss Protection Failure n 177 = Wear Range Delta n 179 = Used Reserved Block Count Total n 180 = Unused Reserved Block Count Total n 181 = Program Fail Count Total or Non-4K Aligned Access Count n 182 = Erase Fail Count n 183 = SATA Downshift Error Count or Runtime Bad Block n 184 = End-to-End error/IOEDC n 185 = Head Stability n 186 = Induced Op-Vibration Detection n 187 = Reported Uncorrectable Errors n 188 = Command Timeout n 189 = High Fly Writes n 190 = Airflow Temperature (WDC) resp. Airflow Temperature Celsius (HP) n 191 = G-sense Error Rate n 192 = Power-off Retract Count n 193 = Load Cycle Count n 194 = Temperature n 196 = Reallocation Event Count n 197 = Current Pending Sector Count n 198 = Off-line Scan Uncorrectable Sector Count n 199 = Ultra DMA CRC Error Count n 201 = Soft Read Error Rate n 202 = Data Address Mark Errors n 203 = Run Out Cancel n 204 = Soft ECC Correction n 205 = Thermal Asperity Rate (TAR) n 206 = Flying Height n 207 = Spin High Current n 208 = Spin Buzz n 209 = Offline Seek Performance n 210 = Vibration During Write (Maxtor) n 211 = Vibration During Write n 212 = Shock During Write n 220 = Disk Shift n 221 = G-Sense Error Rate n 222 = Loaded Hours n 223 = Load/Unload Retry Count n 224 = Load Friction n 225 = Load/Unload Cycle Count
page 373 Services Reference Manual: SolarWinds N-central
n 226 = Load 'In'-time n 227 = Torque Amplification Count n 228 = Power-Off Retract Cycle n 230 = GMR Head Amplitude or Drive Life Protection Status n 231 = Temperature or SSD Life Left n 232 = Endurance Remaining or Available Reserved Space n 233 = Power-On Hours or Media Wearout Indicator n 234 = Average erase count AND Maximum Erase Count n 235 = Good Block Count AND System(Free) Block Count n 240 = Head Flying Hours or Transfer Error Rate (Fujitsu) n 241 = Total LBAs Written n 242 = Total LBAs Read n 249 = NAND_Writes_1GiB n 250 = Read Error Retry Rate n 254 = Free Fall Protection
Failure codes are vendor-specific and may differ from the list above. For more information, refer to http://en.wikipedia.org/wiki/S.M.A.R.T.
page 374 Services Reference Manual: SolarWinds N-central
SMTP service
The SMTP service monitors the status of the SMTP process on a network device. SMTP is the standard Internet host-to-host email transport protocol. Typically, you use SMTP to send your email to a POP3 server, where the recipient retrieves the message. SolarWinds N-central can determine the up or down status of the SMTP service. The SMTP service does not use the Warning state. SolarWinds N-central averages the availability of the SMTP service over the scan interval. It compares the availability of the SMTP service to the threshold to determine the status.
Service TCP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central server By
Scan 15 minutes Interval
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a Value failure. The default is 30 seconds.
Port 25 Number
Validation The response you expect to receive from the queried port. If the queried port does not return the String validation string that you specify, the service transitions to a Failed state. The default validation string is 220. Status details
STATUS DESCRIPTION DETAIL SMTP SolarWinds N-central determines whether the SMTP service is up or down. The SMTP service does Service not use the Warning state. SolarWinds N-central averages the availability of the SMTP service over Availability the scan interval and compares the availability of the SMTP service to the threshold to determine the status.
Round The time for a request to be sent and received. Trip Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 375 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 376 Services Reference Manual: SolarWinds N-central
SMTP Queues service
The SMTP Queues service monitors the performance of the SMTP Server based on metrics obtained from the properties:
n the remote queue length, n the local queue length, n the current inbound connections, and n the current outbound connections.
Service Type WMI
Instances on a 1 Device
Supported Any WMI-enabled Server - Windows that has an SMTP service running which reports data Systems/Applications through the Win32_PerfRawData_SMTPServer class; for example, Microsoft Exchange
Device Class Server - Windows
Monitored By Windows probes
Scan Interval 15 minutes
SMTP Service Name An instance of the class Win32_PerfRawData_SMTPSvc_SMTPServe, for example, SMTP1. Properties queried and calculations performed (WMI only)
Namespace root\cimv2
WMI Class Win32_PerfRawData_SMTPSvc_SMTPServer
WMI Property 0 RemoteQueueLength
WMI Property 1 LocalQueueLength
WMI Property 2 InboundConnectionsCurrent
WMI Property 3 OutboundConnectionsCurrent Configuring SMTP service name Use the Web Based Enterprise Management (wbemtest) tool in Windows to get the service name to enter in the setup. 1. Press the Windows Explorer key + R to open the Run dialog box. 2. Specify wbemtest in the Open field, and press Enter. 3. Click Connect. 4. In the first field, specify the namespace: \\
page 377 Services Reference Manual: SolarWinds N-central
7. In the Enter superclass name field, specify: Win32_PerfRawData_SMTPSvc_SMTPServer. 8. Click OK. 9. Enter an instance name from the list exactly as it appears, including the case and the spaces, in the SMTP Service Name field in the task properties of the All Devices view on the central server. Status details
STATUS DETAIL Number of messages in the remote queue
Number of messages in the local queue
Number of connections currently inbound
Number of connections currently outbound
page 378 Services Reference Manual: SolarWinds N-central
SNMP service
The SNMP service monitors the performance and health of the SNMP agent on a device. SNMP is a widely used network management protocol that is present in a majority of network infrastructures (routers, switches, firewalls, and so on) as well as in different types of computing platforms.
Service Type SNMP
Instances on a 1 Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Workstation - Windows
Monitored By Windows probe
Scan Interval 15 minutes
The table SNMPV2-MIB describes the SNMP objects that are queried by the probe. SNMPV2-MIB
OBJECT DESCRIPTORS NUMERICAL OID snmpInBadVersions 1.3.6.1.2.1.11.3
snmpInBadCommunityNames 1.3.6.1.2.1.11.4
snmpInBadCommunityUses 1.3.6.1.2.1.11.5
snmpInASNParseErrs 1.3.6.1.2.1.11.6
snmpInTooBigs 1.3.6.1.2.1.11.8
snmpInNoSuchNames 1.3.6.1.2.1.11.9
snmpInBadValues 1.3.6.1.2.1.11.10
snmpInGenErrors 1.3.6.1.2.1.11.12
snmpOutTooBigs 1.3.6.1.2.1.11.20 OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC D OID/CALCULATION NAME ESCRIPTION Number ^snmpInBadVersions The of SNMP number of message SNMP s with queries version received by
page 379 Services Reference Manual: SolarWinds N-central
METRIC D OID/CALCULATION NAME ESCRIPTION error the SNMP agent on the target device that were for an unsupporte d version of SNMP.
Number ^snmpInBadCommunityNames The of wrong number of communit SNMP y string queries message received by s the SNMP agent on the device that used an incorrect SNMP community string.
Number ^snmpInBadCommunityUses The of number of message SNMP s with an messages invalid received by user the SNMP agent on the device which requested an SNMP operation which was not allowed by the SNMP community string in the message.
Number ^snmpInASNParseErrs The of SNMP number of message SNMP s messages unparsed received by the SNMP agent on
page 380 Services Reference Manual: SolarWinds N-central
METRIC D OID/CALCULATION NAME ESCRIPTION the device with syntax errors.
Number ^snmpInTooBig+^snmpNoSuchName+^snmpBadValue+^snmpGenError+^snmpOutT The of ooBig number of message SNMP s with messages invalid received by status bits or transmitted from the SNMP agent on the target device, which indicates an error status.
page 381 Services Reference Manual: SolarWinds N-central
SonicWALL CPU service
The SonicWALL CPU service monitors the CPU usage of a SonicWALL firewall.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 4
Supported Systems/Applications SonicWALL TZ-Series, PRO-Series, and NSA-Series devices
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculations
METRIC NAME OID/CALCULATIONS DESCRIPTION CPU Index 1.3.6.1.4.1.8741.1.3.1.3 Monitors the CPU usage of the SonicWALL firewall as a percentage.
page 382 Services Reference Manual: SolarWinds N-central
SonicWALL Connections service
The SonicWALL Connections service monitors the number of active connections passing through a SonicWALL firewall.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any device that supports the SonicWALL Enterprise MIB
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculations
METRIC NAME OID/CALCULATION DESCRIPTION Active 1.3.6.1.4.1.8741.1.3.1.2.0 The number of active connections currently managed by the Connections SonicWALL firewall.
page 383 Services Reference Manual: SolarWinds N-central
SonicWALL Memory service
The SonicWALL Memory service monitors the memory usage of a SonicWALL firewall.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications SonicWALL TZ-Series, PRO-Series, and NSA-Series devices
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
METRIC NAME OID/CALCULATION DESCRIPTION Memory 1.3.6.1.4.1.8741.1.3.1.4.0 Monitors the memory usage of the SonicWALL firewall as a Usage percentage.
page 384 Services Reference Manual: SolarWinds N-central
Spare Drive (NetApp) service
Spare Drive (NetApp) service monitors the status of a spare drive in a RAID array on a NetApp SAN. Manufacturer information
Service Type SNMP
Discovery OID 1.3.6.1.4.1.789.1.6.3.1.2 (spareDiskName)
Supported Systems/Application NetApp Device with SNMP enabled. SolarWinds N-central information
Known Limitations N/A
Max. Instances Per Device 100
Supported Device Class Storage
Notification Profile N/A
Monitored By Windows probe Troubleshooting
ISSUE RECOMMENDATION misconfigured Check that you have the correct SNMP credentials. Metrics
OID: DEFAULT NOTES 1.3.6.1.4.1.789.1.6.3.1.3 THRESHOLDS Status 1- 1 Normal 2- 2-4 Warning 3- 6-10 Failed
Status Description off {spare(1), addingspare(2), bypassed(3), unknown(4), offline(10)}
OID: 1.3.6.1.4.1.789.1.6.3.1.16 DEFAULT THRESHOLDS NOTES Serial Number off Serial number of the referenced disk drive.
page 385 Services Reference Manual: SolarWinds N-central
OID: 1.3.6.1.4.1.789.1.6.3.1.17 DEFAULT THRESHOLDS NOTES Vendor off Vendor of the referenced disk drive.
OID: 1.3.6.1.4.1.789.1.6.3.1.18 DEFAULT THRESHOLDS NOTES Model off Model string of the referenced disk drive.
OID: DEFAULT NOTES 1.3.6.1.4.1.789.1.6.3.1.19 THRESHOLDS Firmware Version off Firmware revision number of the referenced disk drive.
OID: 1.3.6.1.4.1.789.1.6.3.1.20 DEFAULT THRESHOLDS NOTES Disk Speed (R.P.M.) off
OID: DEFAULT NOTES 1.3.6.1.4.1.789.1.6.3.1.21 THRESHOLDS Disk Type off Interface type of the referenced disk drive (for example, SCSI).
page 386 Services Reference Manual: SolarWinds N-central
Setting Up the SQL Server in Mixed Mode
Before the Backup Exec service can monitor the results of the discovered jobs performed by Microsoft SQL Server database, you must set up SQL Server in mixed mode. Review the changes below, approved, and implemented by a Microsoft certified professional. For more information on switching SQL Server to Mixed Mode, contact Microsoft Corporation. 1. Click Start > All Programs > Microsoft SQL Server > Enterprise Manager. 2. Navigate to the appropriate SQL Server Group. 3. In the contents pane, right-click the appropriate SQL server. 4. Click Properties and click the Security tab. 5. Under the Security heading, locate the Authentication section and select SQL Server and Windows. 6. Click OK.
page 387 Services Reference Manual: SolarWinds N-central
SQL Server Buffer Manager service
The SQL Server Buffer Manager service monitors how an SQL Server uses memory to store data pages, the physical Input/Output as SQL Server reads and writes database pages, and the buffer cache by using fast non- volatile storage such as solid-state drives (SSD).
Service Type WMI
Instances on a 15 Device
Supported Microsoft SQL Server Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 15 minutes
SQL Server Instance The specific instance of the SQL Server database engine running on the target server.
STATUS DESCRIPTION DETAIL Buffer The percentage of pages found in the buffer cache without having to be read from a disk. Cache Hit Ratio
Page The number of physical database page reads that are issued per second. Reads Per Second
Page The number of physical database page writes that are issued per second. Writes Per Second
Page Life The number of seconds that a page will stay in the buffer pool without references. Expectancy (sec)
Lazy Writes The number of buffers written per second by the buffer manager's lazy writer. The lazy writer is a Per Second system process that flushes out batches of dirty, aged buffers -buffers that contain changes that must be written back to disk before the buffer can be reused for a different page - and makes them available to user processes. The lazy writer eliminates the need to perform frequent checkpoints in order to create available buffers.
page 388 Services Reference Manual: SolarWinds N-central
SQL Database Information service
The SQL Database Information service monitors information about an SQL database including file sizes and transaction rates.
Service Type WMI
Instances on a Device 15
Supported Microsoft SQL Server Systems/Applications
Device Class Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 15 minutes
SQL Server Instance The specific instance of the SQL Server database engine that is running on the target server.
Database Name The name of the monitored SQL database.
STATUS DETAIL DESCRIPTION Log Files Size (KB) The current size of the transaction log for the database that is being monitored.
Transactions per second The number of database operations/transactions performed per (Transactions/Second) second.
Data Files Size (KB) The current size of the data file for the monitored database.
page 389 Services Reference Manual: SolarWinds N-central
SQL Memory Manager service
The SQL Memory Manager service monitors various aspects of how an SQL Server uses memory.
Service Type WMI
Instances on a 3 Device
Supported Microsoft SQL Server Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 15 minutes
SQL Server Instance The specific instance of the SQL Server database engine that is running on the target server.
STATUS DETAIL DESCRIPTION Connections Memory The total amount of dynamic memory that the server is using for maintaining (KB) connections.
Lock Memory (KB) The total amount of dynamic memory that the server is using for locks.
Optimizer Memory (KB) The total amount of dynamic memory on the server that is being used for query optimization.
SQL Cache Memory The total amount of dynamic memory that the server is using for the dynamic SQL plan (KB) cache.
Total Server Memory The amount of memory that the server has committed using the memory manager. (KB)
Memory Grants Pending The total number of processes that are waiting for a workspace memory grant.
page 390 Services Reference Manual: SolarWinds N-central
SQL Server service
The SQL Server service monitors the database files of Microsoft SQL server, including individual database instances and the sum of all of the specified instances of SQL server. During the monitoring process, the SQL Server service uses the Windows probe to measure Microsoft SQL server's key activities. The status dashboard for the service displays the results.
Service Type WMI
Instances on a Device 50
Supported Systems/Applications Microsoft SQL Server
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe
Scan Interval 15 minutes
WMI class name of Database The name of the WMI class of the monitored Database Performance Performance Counter Counter.
Instance Name The instance name of the class specified in the WMI class name of Database Performance Counter. The instance will be monitored for active transactions, log file size (KB), data file size (KB), and the number of transactions occurred per second.
WMI class name of Server General The name of the monitored WMI class server general statistics performance Statistics Performance Counter counter.
WMI class name of Server Lock The name of the monitored WMI class of the server lock performance Performance Counter counter.
Instance Name The instance name applied to the class names specified in WMI class name of server lock performance counter. The instance will be monitored for the average wait time and number of deadlocks occurred per second. Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfRawData_MSSQLSERVER_SQLServerDatabases
WMI Property 0 ActiveTransactions
WMI Property 1 LogFilesSizeKB
WMI Property 2 DataFilesSizeKB
WMI Property 3 TransactionsPersec
WMI Property 4 Timestamp_Sys100NS
page 391 Services Reference Manual: SolarWinds N-central
WMI Property 5 Frequency_Sys100NS
Namespace root\cimv2
WMI Class Win32_PerfRawData_MSSQLSERVER_SQLServerGeneralStatistics
WMI Property 0 UserConnections
Namespace root\cimv2
WMI Class Win32_PerfRawData_MSSQLSERVER_SQLServerLocks
WMI Property 0 AverageWaitTimems
WMI Property 1 NumberofDeadlocksPersec
WMI Property 2 Timestamp_Sys100NS
WMI Property 3 Frequency_Sys100NS
Scandetail.3.Recipe (^VarTransactionsPersec * $timebase05) / ^timeelapse04
Scandetail.5.Recipe (^VarAverageWaitTimems * $timebase23) / ^timeelapse22
Scandetail.6.Recipe (^VarNumberofDeadlocksPersec * $timebase23) / ^timeelapse22 Status details
STATUS DETAIL DESCRIPTION Active transactions
Log file size (KB)
Data file size (KB)
Transactions/second The threshold values that determine the status change of the service.
Number of user connections
Average waiting time (ms)
Deadlocks/second
page 392 Services Reference Manual: SolarWinds N-central
SQL Server Locks service
The SQL Server Locks service monitors how an SQL Server manages locks on individual resource types. Locks are maintained on SQL Server resources to prevent concurrent use of the resources by different transactions. For example, rows read or modified during a transaction.
Service Type WMI
Instances on a 15 Device
Supported Microsoft SQL Server Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 15 minutes
SQL Server Instance The specific instance of the SQL Server database engine running on the target server.
Resource Name The name of the lock resource to obtain statistics.
STATUS DETAIL DESCRIPTION Lock Waits per Second The number of lock requests per second that required originators to wait.
Average Wait Time in The average amount of wait time for each lock request that resulted in a wait. Milliseconds
Lock Timeouts per Second The number of lock requests per second that timed out, including requests for NOWAIT locks.
Number of Deadlocks per The number of lock requests per second that resulted in a deadlock. Second
page 393 Services Reference Manual: SolarWinds N-central
SQL TCP Availability service
The SQL TCP Availability service monitors the availability of the port on which the MS SQL Server application runs. The availability of the port, which is determined by the service testing the port's connectivity, indicates that the MS SQL Server application is running. This service also measures the DNS resolution and the round trip time of the initial connection request and response. The availability results of the TCP service are then reflected on the status dashboard for the SQL TCP Availability service.
Service Type WMI
Instances on a 15 Device
Supported Microsoft SQL Server Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe
Scan Interval 15 minutes
Port Number The port that used to monitor the SQL server.
Send Command A predefined set of characters specific to the TCP service. The string is transmitted upon String connection to the host and requests the response from the TCP service.
Validating String A regular expression that determines whether the responses sent by the queried device is valid.
STATUS DESCRIPTION DETAIL DNS Resolution The threshold that determines whether the device name can be resolved. If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state is Normal. Otherwise, it is Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state is Normal. Otherwise, it is Failed, based on the default settings.
Generic SQL The threshold that determines the availability of the port. Server Availability
Round Trip The time for a request to be sent and received. Time (ms)
page 394 Services Reference Manual: SolarWinds N-central
SQL Transaction Information service
The SQL Transaction Information service monitors the transaction performance of an SQL server.
Service Type WMI
Instances on a 15 Device
Supported Microsoft SQL Server Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 15 minutes
STATUS DETAIL DESCRIPTION Latch Waits Per Second Latch requests that could not be granted immediately.
Full Scans Per Second Scans performed on base tables or indexes.
User Connections Users currently connected to the SQL server.
Logins Per Second Login attempts started.
page 395 Services Reference Manual: SolarWinds N-central
SSH service
SolarWinds N-central monitors the availability of a SSH daemon on a network device. SSH is a shell program for logging into and executing commands on a remote computer. It provides strong authentication and secure communications over a vulnerable connection. It also provides a UNIX shell augmented with a range of cryptographic options. SolarWinds N-central determines the up or down status of the SSH service. The SSH service does not use the Warning state. SolarWinds N-central averages the availability of the SSH service over the scan interval. It compares the availability of the SSH service to the threshold to determine the status.
Service TCP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central server By
Scan 5 minutes Interval
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a Value failure. The default is 30 seconds.
Port 22 Number
Validation The response you expect to receive from the queried port. If queried port does not return the String validation string that you specify, the service transitions to a Failed state. The default validation string is SSH. Status details
STATUS DESCRIPTION DETAIL SSH SolarWinds N-central determines whether the SSH service is up or down. The SSH service does not Service use the Warning state. SolarWinds N-central averages the availability of the SSH service over the Availability scan interval and compares the availability of the SSH service to the threshold to determine the status.
Round The time for a request to be sent and received. Trip Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 396 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 397 Services Reference Manual: SolarWinds N-central
Stack Status (Cisco StackWise) service
The Stack Status (Cisco StackWise) service monitors the status of the global stack for a specified Cisco StackWise switch.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Most Cisco switches/routers running IOS.
Device Class Router/Switch
Monitored By Windows probe
Scan Interval 5 minutes
OBJECT DESCRIPTORS NUMERICAL OID $Max_Switches 1.3.6.1.4.1.9.9.500.1.1.1
$Max_SwitchPriority 1.3.6.1.4.1.9.9.500.1.1.2
$RingRedundancy 1.3.6.1.4.1.9.9.500.1.1.3
STATUS DETAIL DESCRIPTION Maximum Number of Switches The maximum number of switches that you can configure on this stack.
Maximum Configured Switch The maximum configurable priority for a switch in this stack. Priority
Stackring Redundancy Indicates when the stack ports are connected in such a manner as to form a redundant ring.
page 398 Services Reference Manual: SolarWinds N-central
Switch status (Cisco StackWise) service
The Switch status (Cisco StackWise) service monitors the status of individual Cisco StackWise switches.
Service Type SNMP
Instances on a Device 1
Supported Most Cisco switches/routers running IOS. Systems/Applications
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
Switch Number The number of the switch in the stack. This should be a value between 1 and 9 depending on the type of switches.
OBJECT DESCRIPTORS NUMERICAL OID $StackNumAtReload 1.3.6.1.4.1.9.9.500.1.2.1.1.2
$SwitchStackRole 1.3.6.1.4.1.9.9.500.1.2.1.1.3
$SwitchStatus 1.3.6.1.4.1.9.9.500.1.2.1.1.6
$SwitchStackPriority 1.3.6.1.4.1.9.9.500.1.2.1.1.4
$SwitchMAC 1.3.6.1.4.1.9.9.500.1.2.1.1.7
$SwitchSoftwareImage 1.3.6.1.4.1.9.9.500.1.2.1.1.8
STATUS DETAIL DESCRIPTION Switch Stack The stack number to be assigned to the switch the next time that it is reloaded. Number at Next Reload
Switch Stack Role Identifies whether the switch is the stack master or a regular member of the stack.
Switch Stack Identifies the priority value of the switch which is used to determine which stack member Priority becomes the new stack master when the current stack master or switch stack resets.
Switch Status Provides a description of the current status of the specified switch. Description
Switch Status The status of the switch is mapped as: Alerting n 1 - Waiting n 2 - Progressing n 3 - Added
page 399 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION
n 4 - Ready n 5 - sdmMismatch n 6 - verMismatch n 7 - featureMismatch n 8 - newMasterInit n 9 - Provisioned n 10 - Invalid n 11 - Removed
Switch MAC The MAC address of the switch being monitored. Address
Switch Software The software image type that is currently running on the switch. Image
page 400 Services Reference Manual: SolarWinds N-central
System Battery Status (Dell iDRAC) service
The System Battery Status (Dell iDRAC) service monitors the status of a system board CMOS battery on a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a 100 Device
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller (iDRAC). Systems/Applications
Device Class for CPU Servers - Management Interface (SNMP)
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Value Enter or select the name of the battery to applied new templates. For a list of batteries, query the device with the .1.3.6.1.4.1.674.10892.5.4.600.50.1.7 SNMP OID.
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Chassis $ChassisIndex 1.3.6.1.4.1.674.10892.5.4.600.50.1.1 The index of the system chassis that contains Index the battery as an integer value between 1 and 128.
Status $Status 1.3.6.1.4.1.674.10892.5.4.600.50.1.5 The current status of the battery mapped as: 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable.
page 401 Services Reference Manual: SolarWinds N-central
System Change service
The System Change service monitors the hardware components discovered on a Windows device. Once SolarWinds N-central discovers these components, it creates a snapshot of this asset information. The System Change service uses this snapshot as a baseline to monitor any changes that occur in the assets of the device. The service scans the device for changes every day at 9:00 am. For example, the removal of a network adapter at 1:00 pm is reflected in the state of the service at 9:00 am the next day. This change is also reflected in the updated snapshot, which can then be reset as the new baseline. You can also reset a new baseline on a device. For information, see Reset the System Change service baseline for a device. The System Change service requires the following configurations:
n The service can only be monitored on discovered assets, not on devices that were manually created. n The service needs to have a recurring Windows Asset Discovery task targeted against the IP address of the target device. n A Windows probe collects the data presented in the service.
Service Type System
Instances on a Device 1
Supported Systems/Applications Microsoft Windows
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Central server asset
Scan Interval One day (1,440 minutes) Status details
STATUS DETAIL DESCRIPTION Change in number of network adapters
Change in network adapter details
Change in number of CPUs The change in the number of assets. The number can reflect any addition or removal of assets. Change in CPU details Information about the changes that have occurred in the asset details. Change in number of media access devices Information about the changes that have occurred to the asset.
Change in media access device The Stale state is displayed when a device's MAC address changes due to details changes in its network adapter.
Change in number of video controllers
Change in video controller details page 402 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION Change in size of RAM
Change in OS
page 403 Services Reference Manual: SolarWinds N-central
System Check-In service
The System Check-In service monitors roaming devices, such as laptops, to ensure their presence on the network. Their presence is determined by the frequency at which they connect to the network. For an accurate state to be determined, the device must remain connected to the network for the specified scan interval time. When System Check-in is first added to a device, the service will be in a Misconfigured state until the device's agent first makes contact with the central server. During the monitoring process, the central server queries the time of the most recent connection of a device's agent to the network. This is compared to the current time and the resulting difference is then compared to the specified threshold values so that it can be represented by the appropriate state on the status dashboard for the service. If the time difference between the previous and current connection is within 10 days, the service state is Normal; between 10 and 15 days, Warning; and over 15 days, Failed.
Service Type Central server asset
Instances on a 1 Device
Device Class Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Central server asset
Scan Interval 15 minutes Status details
STATUS DESCRIPTION DETAIL System The threshold that compares the time difference between the current time and the most recent Check-In connection to the specified threshold values.
page 404 Services Reference Manual: SolarWinds N-central
System Replacement service
The System Replacement service monitors a device's expected replacement date, specified when adding or editing the device. This service provides a means for you to better monitor the life cycle of a device and avoid issues, such as excessive maintenance and support costs, and the inadequate total cost of ownership data for purchase planning.
Service Type Central server asset
Instances on 1 a Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Central server asset
Scan Interval One day (1,440 minutes) Status details
STATUS DETAIL DESCRIPTION System Replacement The threshold that determines when to replace the device.
page 405 Services Reference Manual: SolarWinds N-central
System Warranty service
The System Warranty service monitors a device's expected warranty expiry date, specified when adding or editing the device. This service provides a means for you to avoid issues, such as leasing penalties, additional buying costs, and the inadequate total cost of ownership data for purchase planning.
Service Type Central server asset
Instances on 1 a Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Central server asset
Scan Interval One day (1,440 minutes) Status details
STATUS DETAILS DESCRIPTION System Warranty The threshold for the expiry of the warranty.
page 406 Services Reference Manual: SolarWinds N-central
Temperature Probe (Dell iDRAC) service
The Temperature Probe (Dell iDRAC) service monitors the status of a temperature sensor on a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a Device 100
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller Systems/Applications (iDRAC).
Device Class for CPU (SNMP) Servers - Management Interface
Monitored By Windows agent
Scan Interval 5 minutes
SNMP Value Enter or select the name of the temperature sensor to monitor.
$#160;
STATUS OBJECT NUMERICAL OID DESCRIPTION DETAIL DESCRIPTORS Location $LocationName 1.3.6.1.4.1.674.10892.5.4.700.20.1.8 The location name of the temperature Name probe.
Settings $Setting 1.3.6.1.4.1.674.10892.5.4.700.20.1.4 The state settings of the temperature probe mapped as: 1 - unknown 2 - enabled 4 - notReady 6 - enabledAndNotReady
Status $Status 1.3.6.1.4.1.674.10892.5.4.700.20.1.5 The current status of the temperature sensor mapped as: 1 - other 2 - unknown 3 - ok 4 - nonCriticalUpper 5 - criticalUpper 6 - nonRecoverableUpper 7 - nonCriticalLower 8 - criticalLower 9 - nonRecoverableLower 10 - failed
page 407 Services Reference Manual: SolarWinds N-central
Temperature Status (Cisco) service
The Temperature Status (Cisco) service monitors the temperature of the specified Cisco device.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Most Cisco switches/routers running IOS.
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
Temperature Sensor The name of the monitored temperature sensor.
OBJECT DESCRIPTORS NUMERICAL OID $Temperature 1.3.6.1.4.1.9.9.13.1.3.1.3
$TempSensorStatus 1.3.6.1.4.1.9.9.13.1.3.1.6
$HighTemp 1.3.6.1.4.1.9.9.13.1.3.1.4
STATUS DETAIL DESCRIPTION Temperature (°C) The current temperature reading.
Maximum Allowable Temperature (°C) The maximum allowable operating temperature of the device.
Temperature (°F) The current temperature reading.
Maximum Allowable Temperature (°F) The maximum allowable operating temperature of the device.
Temperature Sensor Status The temperature sensor status is mapped as follows:
n Normal = 1 n Warning = 2 n Failed = 3, 4, 5, or 6
Temperature Sensor Status Description Describes the status of the temperature sensor:
n 1 = Normal n 2 = Warning n 3 = Critical n 4 = Shutdown n 5 = Not Present n 6 = Not Functioning
page 408 Services Reference Manual: SolarWinds N-central
Temperature Status (Dell iDRAC) service
The Temperature Status (Dell iDRAC) service monitors the temperature of a Dell PowerEdge server using the embedded integrated Dell Remote Access Controller (iDRAC).
Service Type SNMP
Instances on a Device 100
Supported Dell PowerEdge servers with integrated Dell Remote Access Controller Systems/Applications (iDRAC)
Device Class for CPU (SNMP) Servers - Management Interface
Monitored By Windows agent
Scan Interval 15 minutes
SNMP Index Enter or select the index of the chassis monitored for temperature.
STATUS OBJECT DESCRIPTORS NUMERICAL OID DESCRIPTION DETAIL Chassis $ChassisIndex 1.3.6.1.4.1.674.10892.5.4.200.10.1.1 The index of the system Index chassis as an integer value between 1 and 128.
Temperature $TemperatureCombined 1.3.6.1.4.1.674.10892.5.4.200.10.1.63 The combined status of all temperature statistics objects of this system mapped as: 1 - other, 2 - unknown, 3 - ok, 4 - nonCritical, 5 - critical, and, 6 - nonRecoverable.
page 409 Services Reference Manual: SolarWinds N-central
Temperature Status (EqualLogic) service
The Temperature Status (EqualLogic) service monitors the temperature of a Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware.
Service Type SNMP
Instances on a 1 Device
Supported Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware. Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows agent
Scan Interval 5 minutes
Temperature Sensor Enter the name of the temperature sensor to monitor. For a list of temperature sensors, query the SAN with the .1.3.6.1.4.1.12740.2.1.6.1.2 SNMP OID.
OBJECT DESCRIPTORS NUMERICAL OID $Temperature 1.3.6.1.4.1.12740.2.1.6.1.3
$SensorState 1.3.6.1.4.1.12740.2.1.6.1.4
STATUS DETAIL DESCRIPTION Temperature (°C) The current temperature reading.
Sensor State The temperature sensor status is mapped as:
n Normal = 1 n Warning = 2, 0 n Failed = 3
Sensor State Description Description of the status of the temperature sensor:
n 0 = Unknown n 1 = Normal n 2 = Warning n 3 = Critical
page 410 Services Reference Manual: SolarWinds N-central
Temperature Status (Fujitsu) service
The Power Supply (Fujitsu) service monitors the status of a temperature sensor in a Fujitsu device.
Service Type SNMP
Instances on a 100 Device
Supported Fujitsu servers running the Fujitsu ServerView agent. Systems/Applications
Device Class for CPU Servers - Generic or Servers - Windows (SNMP)
Monitored By Windows agent
Power Supply Enter the name of the monitored temperature sensor. For a list of temperature sensors, query the device with the .1.3.6.1.4.1.231.2.10.2.2.10.5.1.1.4 SNMP OID.
Scanning You can configure the scan interval according to either a Once a Day or Daily Interval schedule.
OBJECT DESCRIPTORS NUMERICAL OID $Status 1.3.6.1.4.1.231.2.10.2.2.10.5.1.1.5
$CurrentTemperature 1.3.6.1.4.1.231.2.10.2.2.10.5.1.1.6
$WarningLevel 1.3.6.1.4.1.231.2.10.2.2.10.5.1.1.7
$CriticalLevel 1.3.6.1.4.1.231.2.10.2.2.10.5.1.1.8
$CriticalReaction 1.3.6.1.4.1.231.2.10.2.2.10.5.1.1.9
STATUS DETAIL DESCRIPTION Status Describes the current status of the monitored temperature sensor t with values mapped as: 1. WARNING - Unknown 2. NORMAL - Not Available 3. NORMAL - OK 4. FAILED - Sensor Failed 5. FAILED - Failed 6. WARNING - Temperature Warning – Too Hot 7. FAILED - Temperature – Critical 8. NORMAL - Temperature – Normal 9. WARNING - Temperature Warning
page 411 Services Reference Manual: SolarWinds N-central
Temperature Status (NetApp) service
The Temperature Status (NetApp) service monitors the status of a temperature sensor in a NetApp device.
For more information, see www.netapp.com/us/. Manufacturer Information
Service Type SNMP
Discovery OID Index 0
Supported Systems/Application NetApp device with SNMP enabled. SolarWinds N-central information
Known Limitations N/A
Max. Instances Per Device 1
Supported Device Class Storage
Notification Profile N/A
Monitored By Windows probe Troubleshooting
ISSUE RECOMMENDATION Misconfigured Check to see if you have the correct credential on the device. Metrics
OID 1.3.6.1.4.1.789.1.2.4.1
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Is the NetApp SAN running too hot N/A N/A 0: No (Normal) 1: Yes (Failed)
page 412 Services Reference Manual: SolarWinds N-central
Temperature Status (VMware) service
The Temperature Status (VMware) service monitors the status and temperature readings of temperature sensors on ESXi servers. SolarWinds N-central uses the Common Information Model (CIM) services and ports for monitoring.
If your ESX/ESXi server is operating on either Dell or HP hardware, it is strongly recommended that you install the Dell or HP Offline Bundle before the Windows probe discovers the ESX/ESXi server.
Service Type ESXi
Instances on a Device 100
Supported Systems/Applications ESX or ESXi 4.x, 5.x and later
ESXi 3.5 is not supported.
Device Class Server - ESXi
Monitored By Windows probes
Scan Interval 5 minutes
Temperature Sensor Name The unique identifier of the monitored temperature sensor.
This service cannot use Self Healing.
To access information about the temperature sensors on your ESXi server, use a browser to access the following URL: https://
Note that the Managed Object Browser (MOB) by default may be disabled and you may need to enable this feature.
METRIC NAME DESCRIPTION State The temperature sensor status is mapped as:
n Normal: 1 n Warning: 1, 2, 4 n Failed: 5, 6
State Description The status of the temperature sensor:
n Other n Unknown n OK n Non-critical n Critical or Non-recoverable
Temperature (°C) The current temperature reading.
page 413 Services Reference Manual: SolarWinds N-central
METRIC NAME DESCRIPTION Temperature (°F) The current temperature reading.
page 414 Services Reference Manual: SolarWinds N-central
Telnet service
The TELNET service checks the status of the telnet port on the network device. The Telnet protocol is designed for terminal-oriented remote login sessions. SolarWinds N-central can determine the up or down status of the Telnet service. The Telnet service does not use the Warning state. SolarWinds N-central averages the availability of the Telnet service over the scan interval. It compares the availability of the Telnet service to the threshold to determine the status.
Service Type TCP
Instances on 1 a Device
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe, SolarWinds N-central Server
Scan Interval 5 minutes
Timeout The time (in seconds) that the SolarWinds N-central server waits before considering the test a Value failure. The default is 30 seconds.
Port Number 23 Status details
STATUS DESCRIPTION DETAIL Telnet SolarWinds N-central determines whether the Telnet service is up or down. The Telnet service does Service not use the Warning state. SolarWinds N-central averages the availability of the Telnet service over Availability the scan interval and compares the availability of the Telnet service to the threshold to determine the status.
Round The time for a request to be sent and received. Trip Time (ms)
DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
page 415 Services Reference Manual: SolarWinds N-central
RDS Server - TCP Availability service
The RDS Server TCP Availability service, formerly Terminal Server service, monitors the availability of the Microsoft Windows Terminal Services, which allows remote login to a server using the Microsoft Remote Desktop client. During the monitoring process, the service uses the Windows probe to track the terminal server's key activities. The results are then displayed on the status dashboard for the service.
When adding your RDS server as a device, ensure that you select Server - Windows as the Class. The Operating System must be a server.
Service Type WMI
Instances on a 1 Device
Supported Microsoft Windows Terminal Services Systems/Applications
Device Class Server - Windows
Monitored By Windows probe, SolarWinds N-central server
Scan Interval 15 minutes
WMI Class The default value for WMI Class is Win32_PerfRawData_TermService_ TerminalServices which should be used for most Server - Windowss. For servers using Windows 2008 or Windows Vista SP1, however, the WMI Class should be set to Win32_ PerfRawData_LocalSessionManager_TerminalServices. Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfRawData_TermService_TerminalServices
WMI Property 0 ActiveSessions
WMI Property 1 InactiveSessions
WMI Property 2 TotalSessions Status details
THRESHOLD DESCRIPTION Active sessions Counts the sessions that are currently connected and have users logged on.
Inactive sessions Counts the sessions that are:
n Waiting for the initial connection, n both connected and waiting for users to log on, or n both disconnected and a user is logged on.
page 416 Services Reference Manual: SolarWinds N-central
THRESHOLD DESCRIPTION For more information, refer to the table below.
Total sessions The sum of the active and inactive sessions. Examples of active and inactive session counts
EXAMPLE SESSION COUNT Terminal Server Shutting Down Active Session Count = 0 Inactive Session Count = 0 Total Sessions = 0
Terminal Server Freshly Started Active Session Count = 0 Inactive Session Count = 1 Total Sessions = 1
Session Connected But Not Logged On Active Session Count = 0 Inactive Session Count = 2 Total Sessions = 2
Session Connected AND Logged On Active Session Count = 1 Inactive Session Count = 1 Total Sessions = 2
Session Disconnected BUT Logged On Active Session Count = 0 Inactive Session Count = 2 Total Sessions = 2
page 417 Services Reference Manual: SolarWinds N-central
Traffic service
The Traffic service uses the Windows probe to monitor the amount of data transmitted to and from the full duplex network interfaces on a device. You can monitor upload and download speeds independently allowing for accurate reporting on network interfaces that have a download speed that is different from the upload speed. 1. Configure SNMP on the device. For more information, see the manufacturer's documentation. 2. Login to SolarWinds N-central. 3. Click View > All Devices and click the name of a device. 4. Click Settings > Properties and ensure the Use SNMP. 5. Click Save if required. 6. Click Monitoring > Status and click Add, 7. Enter 1 for the number of instances of the Traffic service that you would like to associate to the device 8. Click Apply. 9. Click the Traffic service and click the Service Details tab. 10. In Interfaces to Monitor, select the NICs/ports that you would like to monitor. 11. Click OK.
Service Type SNMP
Instances on a Device 400
Device Class Server - Generic, Other, Printer, Scanner/Camera, Switch/Router, and Server - Windows
Monitored By Windows probe
Interfaces to Monitor Select the name or SNMP index of the NICs or ports that you would like to monitor.
Scan Interval 15 minutes
Upload Speed (MBits/sec) Enter the upload speed of the interface.
Download Speed Enter the download speed of the interface. (MBits/sec) OIDs used by the Traffic service
OBJECT DESCRIPTORS NUMERICAL OID sysUpTime 1.3.6.1.2.1.1.3
ifDescr 1.3.6.1.2.1.2.2.1.2
ifSpeed 1.3.6.1.2.1.2.2.1.5
ifInOctets 1.3.6.1.2.1.2.2.1.10
ifOutOctets 1.3.6.1.2.1.2.2.1.16
page 418 Services Reference Manual: SolarWinds N-central
OID/Calculations
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION Total Traffic Throughput ((^ifInOctets+ ^ifOutOctets)*8000)/^SysUpTime
Incoming Traffic Throughput (^ifInOctets*800)/(^sysUpTime)
Outgoing Traffic Throughput (^ifOutOctets*800)/(^sysUpTime)
Total Bandwidth Utilization ((^ifInOctets+ ^ifOutOctets)*8000)/ (^SysUpTime*$downbitspersecspeed*1048576)
Outgoing Bandwidth (^ifOutOctets*8000)/(^SysUpTime*$downbitspersecspeed*1048576) Utilization
Incoming Bandwidth (^ifInOctets*8000)/(^SysUpTime*$downbitspersecspeed*1048576) Utilization
Incoming Traffic ^ifInOctets
Outgoing Traffic ^ifOutOctets
Total Traffic ^ifInOctets + ^ifOutOctets
Detected Port Speed ^ifSpeed
page 419 Services Reference Manual: SolarWinds N-central
Untangle – Firewall service
The Untangle - Firewall service monitors the number of blocked requests and allowed requests received by the Untangle device.
This service cannot use Self Healing.
Service Type Firewall
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Blocked ^1.3.6.1.4.1.30054.2.0.19.7 The number of connection requests blocked by the Untangle Requests device.
Allowed ^1.3.6.1.4.1.30054.2.0.19.8 The number of connection requests allows by the Untangle Requests device.
page 420 Services Reference Manual: SolarWinds N-central
Untangle – IPS service
The Untangle - IPS service monitors the number of scans, detected intrusions, and blocked intrusions received by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Scans ^1.3.6.1.4.1.30054.5.0.19.7 The number of scans performed by the Untangle device.
Detected ^1.3.6.1.4.1.30054.5.0.19.8 The number of intrusions detected by the Untangle device. Intrusions
Blocked Intrusions ^1.3.6.1.4.1.30054.5.0.19.9 The number of intrusions that were blocked by the Untangle device.
page 421 Services Reference Manual: SolarWinds N-central
Untangle – Phish service
The Untangle - Phish service monitors the number of scans, blocked phishing attempts, passed phishing attempts, and removed phishing attempts detected by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Scans ^1.3.6.1.4.1.30054.6.0.19.7 The number of scans performed by the Untangle device.
Detected Phishing ^1.3.6.1.4.1.30054.6.0.19.8 The number of phishing attempts detected by the Attempts Untangle device.
Passed Phishing ^1.3.6.1.4.1.30054.6.0.19.9 The number of phishing attempts passed by the Attempts Untangle device.
Removed Phishing ^1.3.6.1.4.1.30054.6.0.19.10 The number of phishing attempts blocked by the Attempts Untangle device.
page 422 Services Reference Manual: SolarWinds N-central
Untangle – Protocol Filter service
The Untangle - Protocol Filter service monitors the number of scans, protocol filter detections, and protocol filter blocks detected by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Scans ^1.3.6.1.4.1.30054.6.0.19.7 The number of scans performed by the Untangle device.
Protocol Filter ^1.3.6.1.4.1.30054.6.0.19.8 The number of protocol filter detections performed by the Detections Untangle device.
Protocol Filter Blocks ^1.3.6.1.4.1.30054.6.0.19.9 The number of protocol filter blocks performed by the Untangle device.
page 423 Services Reference Manual: SolarWinds N-central
Untangle – Router service
The Untangle - Router service monitors the number of blocked requests, NAT requests, Router redirects, and DMZ requests detected by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Blocked ^1.3.6.1.4.1.30054.7.0.19.7 The number of requests blocked by the Untangle device. Requests
NAT Requests ^1.3.6.1.4.1.30054.7.0.19.8 The number of NAT requests serviced by the Untangle device.
Router Redirects ^1.3.6.1.4.1.30054.7.0.19.9 The number of router redirects serviced by the Untangle device.
DMZ Requests ^1.3.6.1.4.1.30054.7.0.19.10 The number of DMZ requests serviced by the Untangle device.
page 424 Services Reference Manual: SolarWinds N-central
Untangle – Spam service
The Untangle - Spam service monitors the number of clean messages, blocked messages, marked messages, and quarantined messages detected by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows Probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Clean Messages ^1.3.6.1.4.1.30054.10.0.19.7 The number of clean messages detected by the Untangle device.
Blocked Messages ^1.3.6.1.4.1.30054.10.0.19.8 The number of messages blocked by the Untangle device.
Marked Messages ^1.3.6.1.4.1.30054.10.0.19.9 The number of messages marked by the Untangle device.
Quarantined ^1.3.6.1.4.1.30054.10.0.19.10 The number of messages quarantined by the Untangle Messages device.
page 425 Services Reference Manual: SolarWinds N-central
Untangle – Spyware service
The Untangle - Spyware service monitors the number of scans, blocked spyware, and passed spyware detected by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Scans ^1.3.6.1.4.1.30054.8.0.19.7 The number of spyware scans performed by the Untangle device.
Blocked ^1.3.6.1.4.1.30054.8.0.19.8 The amount of spyware blocked by the Untangle device. Spyware
Passed Mail ^1.3.6.1.4.1.30054.8.0.19.9 The amount of mail passed by the Untangle device.
page 426 Services Reference Manual: SolarWinds N-central
Untangle – Virus service
The Untangle - Virus service monitors the number of scanned messages, blocked viruses, passed messages, and removed viruses detected by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Scanned Messages ^1.3.6.1.4.1.30054.9.0.19.7 The number of messages scanned for viruses.
Blocked Viruses ^1.3.6.1.4.1.30054.9.0.19.8 The number of blocked viruses.
Passed Messages ^1.3.6.1.4.1.30054.9.0.19.9 The number of messages found to be virus-free.
Removed Viruses ^1.3.6.1.4.1.30054.9.0.19.9 The number of viruses that were removed.
page 427 Services Reference Manual: SolarWinds N-central
Untangle – Web Filter service
The Untangle - Web Filter service monitors the number of scans, web filter blocks, and web filter passes detected by the Untangle device.
This service cannot use Self Healing.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Untangle UTM device.
Device Class Other, Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes OID/Calculation
SolarWinds N-central services use Reverse Polish Notation (RPN) for all calculation formulae.
METRIC NAME OID/CALCULATION DESCRIPTION Scans ^1.3.6.1.4.1.30054.1.0.19.7 The number of web requests scanned by the Untangle device.
Web Filter Blocks ^1.3.6.1.4.1.30054.1.0.19.8 The number of web requests blocked by the Untangle device.
Web Filter Passes ^1.3.6.1.4.1.30054.1.0.19.9 The number of web requests allows by the Untangle device.
page 428 Services Reference Manual: SolarWinds N-central
Uptime service
The Uptime service monitors the length of time in seconds that a Windows device has been powered on.
Service Type WMI
Instances on a Device 1
Supported Systems/Applications Any Windows device
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Local agent
Scan Interval 5 minutes Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_PerfFormattedData_PerfOS_System
WMI Property 0 SystemUpTime Status details
STATUS DETAIL DESCRIPTION Uptime (sec) The amount of time since the monitored device was last powered off.
page 429 Services Reference Manual: SolarWinds N-central
Veritas service
The Veritas service determines the success or failure of a Veritas backup by locating and reviewing the log files generated by the backup software. The Veritas service looks for system-specified status codes in the XML log file. If these status codes match specified job status values, the agent displays the Failed status on the status dashboard. If the agent does not find a match, it displays the Normal state to the central server.
Service Type Log Appended
Instances on a 1 Device
Supported Symantec Backup Exec version 10 and earlier Systems/Applications
Device Class Server - Windows
Monitored By Windows agent
Keyword The keyword is how SolarWinds N-central determines whether or not a Veritas backup succeeded or failed. If the keyword is found, the Veritas service will transition to a failed state. The default value is "Fail".
Log File Prefix The log file prefix is a string used to find log files within the log file directory. If the log file directory exists, the agent strips the prefix from the file names and looks for the file with the newest timestamp. If you use the defaults, the agent selects all of the files matching bex*.txt for consideration. For example: If you change the prefix to veritas and log.txt, the agent selects all of the files matching veritas*log.txt for consideration. The prefix cannot contain spaces or use wildcards. If the agent cannot find a file with the specified prefix, it reports the Failed state to the SolarWinds N-central server. If the log file has a .xml suffix, then SolarWinds N-central processes this file as a Veritas 9 or 10 file.
Log File Suffix The log file suffix is a string used to find log files within the log file directory. If the log file directory exists, the agent strips the suffix from the file names and looks for the file with the newest timestamp. If you use the defaults, the agent selects all of the files matching bex*.txt for consideration. For example: If you change the suffix to veritas and log.txt, the agent selects all of the files matching veritas*log.txt for consideration. The suffix cannot contain spaces or use wildcards and must include the period. If the agent cannot find a file with the specified suffix, it reports the Failed state to the central server. If the log file has a .xml suffix, then SolarWinds N-central processes this file as a Veritas 9 or 10 file. The suffix for Veritas 9 and 10 is not case- sensitive.
Log File Directory The file where the service searches for log files. The default value is a full path and can contain spaces. The trailing backslash is required. For example: page 430 Services Reference Manual: SolarWinds N-central
C:\Program Files\Veritas\Logs\
Time Offset The maximum allowable age, in hours, of the Veritas log file. The agent will calculate the time that has passed between the current time and when the Veritas log file was last modified. If the difference is more than the time offset, the log is considered out of date, and the Veritas service will report a Failed state.
Scan Interval Daily at 4:59 am.
Repeat Weekly on Repeat the log file scan weekly on the specified days. Days
Repeat Monthly on Repeated the log file scan monthly on the specified days. Days Metrics
METRIC DESCRIPTION NAME Veritas SolarWinds N-central determines the quality of performance by comparing the monitored data to the Service thresholds. The availability range is 0-255, which corresponds to: Availability n Normal = 1, n Warning = 2-255, and n Failed = 0.
Backup How long the backup took to complete. duration (Seconds)
Data The amount of data backed up by the Veritas backup job. amount backed up (Bytes)
Job Status You can view the return values for the associated job status on the status screen for the Veritas for Veritas service. These values represent specific critical issues. They are returned by Veritas Backup Exec 9 and 10 and reported by the agent. For the return values: 1, 5, 6, 7, 8, 9, 10, 11, 12, 14, 16, 20, 21, 22, and 23, the agent reports the Failed state to the central server. For the value 3, the agent reports the Warning state.
Veritas Describes the results of the latest scan. Service Details For example: Job start time is beyond the offset, this log file c:\Program Files\Veritas\Backup Exec\Nt\Data\BEX01586.xml is an old log file
page 431 Services Reference Manual: SolarWinds N-central
Return values of Veritas 9 and 10 job statuses and critical issues
RETURN JOB STATUS DESCRIPTION OF CRITICAL ISSUE VALUE 1 Canceled Job is terminal due to cancellation.
2 Completed Job has been completed by the engine and is waiting final disposition.
3 Successful with Job is terminal with success but there are some exceptions. exceptions
4 Dispatched Job has been sent for execution.
5 Hold Job is in a hold state.
6 Error Job is terminal with an error.
7 Invalid schedule The schedule for the task is invalid.
8 Invalid time window The time window is mutually exclusive thus job will never run.
9 Missed Job is eligible for dispatch and is late.
10 Not in window Date of job makes it eligible to run, but time is not in window.
11 Ready but paused Job is ready, but dispatcher is paused.
12 Pending The job needs to be dispositioned to an actual state.
13 Recovered The system forced recovery of the job.
14 Disabled Job has been disabled in the system.
15 Resumed The job will be restarted with check point restart enabled, this value is only set in the job history summary.
16 Active Job is currently running on server.
17 Ready Job is eligible for dispatch.
18 Scheduled The job has a due date in the future.
19 Success Job is terminal with success.
20 Superseded Job is ready, but another higher precedence task is eligible to run.
21 Threshold auto- The job was aborted due to Abort Threshold time-out. abort
22 To be scheduled The job needs to have the due date calculated.
23 Linked job The job is linked to another job so will not start until the master job is finished.
page 432 Services Reference Manual: SolarWinds N-central
VNC service
SolarWinds N-central can monitor the availability of a VNC server, and determines the up or down status of the VNC service. The VNC service does not use the Warning state. SolarWinds N-central averages the availability of the VNC service over the scan interval. It compares the availability of the VNC service to the threshold to determine the status.
Service TCP Type
Instances 1 on a Device
Device Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Class Windows, Server - Windows, and Workstation - Windows
Monitored Windows probe, Central server By
Scan The number of minutes between scan. The default is 5 minutes. Interval
Timeout The time in seconds that the SolarWinds N-central server waits before considering the test a failure. Value The default is 30 seconds.
Port 5900 Number
Validation The response you expect to receive from the queried port. If the validation string that you specify is String not returned by the port being queried, the service transitions to a Failed state. The default validation string is RFB. Status details
STATUS DESCRIPTION DETAIL VNC SolarWinds N-central determines whether the VNC service is up or down. The VNC service does not Service use the Warning state. SolarWinds N-central averages the availability of the VNC service over the Availability scan interval and compares the availability of the VNC service to the threshold to determine the status.
page 433 Services Reference Manual: SolarWinds N-central
Volume (EqualLogic) service
The Volume (EqualLogic) service monitors the status of a disk volume on a Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware.
Service Type SNMP
Instances on a 1 Device
Supported Model PS6100 Dell EqualLogic SAN running v6.0.2 firmware. Systems/Applications
Device Class Server - Generic, Server - Windows
Monitored By Windows agent
Scan Interval 5 minutes
Volume Name Enter the name of the volume to be monitored. For a list of available volumes, query the SAN with the .1.3.6.1.4.1.12740.5.1.7.1.1.4 SNMP OID.
OBJECT DESCRIPTORS NUMERICAL OID $Description 1.3.6.1.4.1.12740.5.1.7.1.1.6
$Size 1.3.6.1.4.1.12740.5.1.7.1.1.8
$AdminStatus 1.3.6.1.4.1.12740.5.1.7.1.1.9
$AllocatedSpace 1.3.6.1.4.1.12740.5.1.7.7.1.13
$OperStatus 1.3.6.1.4.1.12740.5.1.7.7.1.8
STATUS DESCRIPTION DETAIL Admin Specifies whether the target volume has been configured as either online or offline by the Status administrator. If a volume is offline, the ISCSI initiators cannot access it. When lost blocks that belong to a particular volume are found, the Operational Status of the volume is set to not-available-due-to-lost-cached-blocks. When the volume is in this state and if the user chooses to ignore the lost blocks by setting the volume status to Online, the subsystem automatically sets the Admin Status to online-lost- cached-blocks. The online-lost-cached-blocks state of Admin Status indicates that the user acknowledged and acted upon the lost-blocks state of the volume.
page 434 Services Reference Manual: SolarWinds N-central
STATUS DESCRIPTION DETAIL On re-start, and if the subsystem finds a volume with $AdminStatus as online-lost-cached- blocks, it will configure the Operational Status to Online instead of not-available-due-to- lost-cached-blocks as the user has already acknowledged the lost-blocks state and has chosne to ignore them.
Admin Mapped as: Status 1. Description online 2. offline 3. online-lost-cached-blocks 4. online-control 5. offline-control
Operational Specifies the current operational status of the volume. Status
Operational Mapped as: Status 1. Description available 2. not-available 3. not-available-due-to-snap-reserve-met 4. not-available-due-to-members-offline 5. not-available-due-to-lost-cached-blocks 6. not-available-due-to-thin-max-growth-met 7. not-available-due-to-nospace-for-auto-grow 8. not-available-due-to-missing-pages
Volume Specifies the total size of the monitored volume. Volume size is rounded to a multiple of 15MB. For Size (MB) thin provisioned volumes, this value represents the advertized size of the volume.
Used Calculated as ((Allocated Space/Size)*100) and expressed as a percentage of the total size of the Space (%) volume.
page 435 Services Reference Manual: SolarWinds N-central
Volume (NetApp) service
The Volume (NetApp) service monitors the status and size of a logical volume on a NetApp SAN.
For more information, see www.netapp.com/us/. Manufacturer information
Service Type SNMP
Discovery OID 1.3.6.1.4.1.789.1.5.4.1.2 (Volume Name)
Supported Systems/Application NetApp device with SNMP enabled. SolarWinds N-central information
Known Limitations N/A
Max. Instances Per Device 1
Supported Device Class Storage
Notification Profile N/A
Monitored By Probe Troubleshooting
ISSUE RECOMMENDATION Misconfigured Check to see if you have the correct credential on the device. Metrics 1
OID 1.3.6.1.4.1.789.1.5.4.1.29
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Volume Size N/A N/A Off Metrics 2
OID 1.3.6.1.4.1.789.1.5.4.1.30
page 436 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ OID USED FOR THIS METRIC SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Free Space N/A Volume Size – Off Used Space * 1024
Disk Utilization N/A Volume Size – Normal: 0-85 Used Space * 100 Warning: 80-95 Failed: 90-100
page 437 Services Reference Manual: SolarWinds N-central
VPN Tunnel (Cisco) service
The VPN Tunnel (Cisco) Service monitors the status of a VPN tunnel running on a Cisco VPN provider, such as an ASA firewall or a VPN Concentrator.
Service Type SNMP
Instances on a Device 1
Supported Systems/Applications Any Cisco device that provides VPN capabilities.
Device Class Switch/Router
Monitored By Windows probe
Scan Interval 5 minutes
OBJECT DESCRIPTORS NUMERICAL OID $ActiveTime 1.3.6.1.4.1.9.9.171.1.2.3.1.16
$HashAlgo 1.3.6.1.4.1.9.9.171.1.2.3.1.13
$DroppedInBoundPackets 1.3.6.1.4.1.9.9.171.1.2.3.1.21
$DroppedOutBoundPackets 1.3.6.1.4.1.9.9.171.1.2.3.1.29
STATUS DETAIL DESCRIPTION Tunnel Uptime The duration of the VPN tunnel being monitored.
Hash Algorithm The hashing algorithm used to compute a hash value from a base input number to encrypt the VPN tunnel.
Dropped Inbound The number of data packets being sent to the monitored device that were lost during the Packets VPN tunnel.
Dropped Outbound The number of data packets being sent from the monitored device that were lost during Packets the VPN tunnel.
page 438 Services Reference Manual: SolarWinds N-central
Windows applications and services log
The Windows Applications and Services Log enables you to monitor the Applications and Services Logs on Windows devices, similar to the Windows Event Log Service. Since you can assign up to 1,000 instances of this service to a device, you can give each instance a Service Identifier. The Service Identifier is included in email notifications and on service-related displays, including the Active Issues view and the Status tab when editing a device. This enables you to maintain multiple instances of the Windows Applications and Services Log in an organized fashion. For some sources, the Agent may not be able to retrieve an event description due to:
n the relevant Windows registry keys do not exist, n the relevant Windows registry keys do not contain valid data, or n the Event Message Files are corrupted or were not found. For any of these scenarios, the following message appears: "The description for Event ID ( Event ID Number ) in Source ( Source Name ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer."
Service Type WMI
Instances on a Device 1000
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent, Windows probe
Generate a After adding a notification trigger/profile, selecting this checkbox directs the service to Notification when an generate notifications whenever it detects events. Event is detected
Scan Interval 30 minutes
Include List The event IDs that you would like to monitor. You can specify individual event IDs or a range of comma-separated event IDs. For example: 100,200,250-400,500-650 This field allows a maximum of 200 characters. Spaces are not allowed.
Exclude List The event IDs that you would like to exclude from monitoring. You can specify individual event IDs or a range of comma-separated event IDs. For example: 100,200,250-400,500-650 This field allows a maximum of 200 characters.
Event Source Include The names of the sources that you would like to monitor. Values must be in CSV format. Filter For a range of Event IDs, use a dash (-). Use wildcard string expressions separated by commas to match event sources, included in the list of reported events.
page 439 Services Reference Manual: SolarWinds N-central
For Example, using *?icrosoft*ffice*,Adobe* matches event sources containing the strings 'microsoft office' or 'MicrosoftOffice', as well as any sources starting with the word 'Adobe'. This field does not support regular expressions.
Event Source Exclude The names of the Event Log sources that you would like to exclude from monitoring. Filter Values must be in CSV format. For a range of Event IDs, use a dash (-). Use wildcard string expressions separated by commas to match event sources, included in the list of reported events. For Example, using *?icrosoft*ffice*,Adobe* matches event sources containing the strings 'microsoft office' or 'MicrosoftOffice', as well as any sources starting with the word 'Adobe'. This field does not support regular expressions.
Event Description The name of the text string or regular expression you would like to look for in the Regex Filter Description field of the event. For more information see Regular expressions.
page 440 Services Reference Manual: SolarWinds N-central
Windows Event Log service
The Windows Event Log service enables you to monitor the Event logs on Windows devices. Since you can assign multiple instances of the Windows Event Log service to a device, you can give each instance Service Identifier. The Service Identifier will be included in email notifications and on service-related displays, including the Active Issues view and the Status tab when editing a device, this enables you to maintain multiple instances of the Windows Event Log service in an organized fashion.
This service cannot use Self Healing.
For some sources, the agent may not be able to retrieve an event description due to:
n the relevant Windows registry keys do not exist, n the relevant Windows registry keys do not contain valid data, or n the Event Message Files are corrupted or were not found. For any of these scenarios, the following message appears: "The description for Event ID ( Event ID Number ) in Source ( Source Name ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer." The Windows Event Viewer can manage the following types of logs on a computer:
n Security, n Application, n System Log, n Directory Service Log - only available on devices classed as Server-Windows, n File Replication Service Log - only available on devices classed as Server-Windows, and n DNS Server Log - only available on devices classed as Server-Windows.
The initial scan of the Windows Event Log service will scan the most recent 100 entries in the Event log.
Service Type WMI
Instances on a Device 25
Device Class Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent, Windows probe
Generate a Notification When selected, this directs the service to generate notifications whenever events when an Event is detected are detected.
Scan Interval 30 minutes
Options to Monitor: The names of the Windows Event Viewer logs that are to be monitored:
n Security (Failure, Success) n Application (Error, Information, Warning) n System (Error, Information, Warning) n Directory Service (Error, Information, Warning) n File Replication Service (Error, Information, Warning) n DNS Server (Error, Information, Warning)
page 441 Services Reference Manual: SolarWinds N-central
Include List The event IDs that you would like to monitor. You can specify individual event IDs or a range of comma-separated event IDs. For example: 100,200,250-400,500-650 This field allows a maximum of 200 characters. Spaces are not allowed.
Exclude List The event IDs that you would like to exclude from monitoring. You can specify individual event IDs or a range of comma-separated event IDs. For example: 100,200,250-400,500-650 This field allows a maximum of 200 characters.
Event Source Include Filter The names of the sources that you would like to monitor. You must use the CSV format. For a range of Event IDs, you can use a dash (-). For example: Userenv,Security,W32Time
Event Source Exclude Filter The names of the Event Log sources that you would like to exclude from monitoring. You must use the CSV format. For a range of Event IDs, you can use a dash (-). For example: Userenv,Security,W32Time
Event Description Regex The name of the text string or regular expression you would like to look for in the Filter Description field of the event. For more information on Regular Expressions, see the topic, Regular expressions. Thresholds The thresholds for the Windows Event Log service are used for monitoring as:
Event This is the status that is sent if you have selected Generate A Notification When An Event is Detected Log check box on the Service Details tab. The threshold for this module is 0 for normal and 1 for failed and Module all of the specified criteria under the Service Details tab have been met. Status
# of Indicates the number of identical identifiers that can be recorded in the log within the configured scan Duplicate interval before triggering the transition to a different state. The default for this threshold is 0 for normal Events and 1 for failed.
page 442 Services Reference Manual: SolarWinds N-central
Windows service
The Windows Service monitors the status of a specified Windows service.
Service Type WMI
Instances on a 100 Device
Supported Any WMI-enabled workstation or server running Windows XP, Windows 2000, Windows 2003, Platforms or Windows Vista
Device Class Server - Generic, Workstation - Generic, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows agent
Scan Interval 15 minutes
Service Name The name of the Windows service being monitored. Properties queried and calculations performed
Namespace root\cimv2
WMI Class Win32_Service
WMI Property 0 Started
WMI Property 1 StartMode
WMI Property 2 Status Status details
STATUS DETAIL DESCRIPTION Is the Service Started? State of the service:
n Normal if found n Failed if not found
Service Start Mode Defines the monitored service's method for starting as one of:
n Boot n System n Auto n Manual n Disabled
Service Status Identifies the current operational status of the monitored service as one of:
n OK n Error
page 443 Services Reference Manual: SolarWinds N-central
STATUS DETAIL DESCRIPTION
n Degraded n Unknown n Pred Fail n Starting n Stopping n Service
page 444 Services Reference Manual: SolarWinds N-central
Windows Firewall Status service
The Windows Firewall Status service monitors the Status Checks “MpsSVc” service status.
For more information, see www.microsoft.com. Manufacturer information
Service Type WMI
Namespace root\cimv2
Supported Systems/Application Windows Workstation XP or later and Server 2003 or later. SolarWinds N-central information
Known Limitations Only Windows
Max. Instances Per Device 1
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile N/A
Monitored By Local agent Troubleshooting
ISSUE CORRECTIVE ACTION Service failure Check if the Windows Firewall service is running. Metrics
WMI Class Win32_Service
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING State Running N/A Off Stopped
Status OK N/A Off Failed
Started 0 N/A Off 1 2 page 445 Services Reference Manual: SolarWinds N-central
Windows Firewall Status (XP, 2003) service
The Windows Firewall Status service monitors the Status Checks “MpsSVc” service status.
For more information, see www.microsoft.com. Manufacturer information
Service Type WMI
Namespace root\cimv2
Supported Systems/Application Windows Workstation XP Server 2003 SolarWinds N-central information
Known Limitations Only Windows
Max. Instances Per Device 1
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile N/A
Monitored By Local agent Troubleshooting
ISSUE CORRECTIVE ACTION Service failure Check if the Windows Firewall service is running. Metrics
WMI Class Win32_Service
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING State Running N/A Off Stopped
Status OK N/A Off Failed
Started 0 N/A Off 1 page 446 Services Reference Manual: SolarWinds N-central
CALCULATIONS/ WMI PROPERTY SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING 2
page 447 Services Reference Manual: SolarWinds N-central
Windows License Status service
The Windows License Status service monitors product and licensing information for the Microsoft Windows Operating System.
For more information, see www.microsoft.com. Manufacturer information
Service Type AMP
PowerShell cmdlet get-counter
Supported Systems/Application Microsoft Windows SolarWinds N-central information
Known Limitations Windows XP and Windows 2003 are not supported.
Max. Instances Per Device 15
Supported Device Class Server - Windows Workstation - Windows Laptop - Windows
Notification Profile N/A
Monitored By Local agent Metrics
CALCULATIONS/ NAME SUPPORTED VALUES DEFAULT THRESHOLDS THRESHOLD MAPPING Product Name N/A N/A Off
Product Description N/A N/A Off
License Status 0 = "Unlicensed" N/A Off 1 = "Licensed" 2 = "OOBGrace" 3 = "OOTGrace" 4 = "NonGenuineGrace" 5 = "Notification" 6 = "ExtendedGrace"
Genuine Status N/A N/A 0 – Normal 1 - warning
page 448 Services Reference Manual: SolarWinds N-central
Clock Drift service
The Clock Drift service monitors the time difference (in seconds) between a monitored Windows server and a NTP server.
Service Type Automation Manager Policy
Instances on a Device 100
Supported Any Windows device running the Windows Time (W32Time) service. Systems/Applications
Device Class Laptop - Windows, Server - Windows, Workstation - Windows
Monitored By Local agent
Scan Interval 5 minutes
NTP Server Type the address of the NTP server that will be used to compare the clock time of the monitored device.
Service Identifier Assign a unique identifier to this instance of the service.
STATUS DESCRIPTION DETAILS Time Offset The difference (in seconds) between the clock time of the monitored device and the designated NTP server.
page 449 Services Reference Manual: SolarWinds N-central
WSFC Resource Groups service
The WSFC Resource Groups service, formerly Windows Server Cluster (Groups), monitors the status (Online/Offline/Pending/Other) of the resource groups in a WSFC environment. This service is based on data returned from the Cluster – Groups (PS) Automation Manager Policy, included with SolarWinds N-central. This AMP file is running the Get-ClusterGroup PowerShell command to determine the status of the resource groups. Manufacturer information
Service Type Automation Manager Policy
Supported Systems/Applications Windows servers that are part of a WSFC environment.
Max instances on each device 100
Supported device class Servers - Windows
Monitored by Windows agent
Scan interval 5 minutes Troubleshooting
ISSUE RECOMMENDATION Minconfigured Check the following:
n The targeted device is part of a WSFC environment. n In a PowerShell window, confirm that the command import-module failoverclusters runs successfully.
Metrics
NAME DEFAULT THRESHOLDS Number of Online Cluster Groups Normal: 1-100,000 Warning: 0-0 Failed: -715,827,880 - -1
Number of Offline Cluster Groups Normal: -2,147,483,648 - 0 Warning: 1 – 715,827,880 Failed: 715,827,880 – 2,147,483,647
Number of Pending Cluster Groups Normal: -2,147,483,648 - 0 Warning: 1 – 715,827,880 Failed: 715,827,880 – 2,147,483,647
Number of Cluster Groups in other states Normal: -2,147,483,648 - 0 Warning: 1 – 715,827,880 Failed: 715,827,880 – 2,147,483,647
page 450 Services Reference Manual: SolarWinds N-central
WSFC Network Interface service
The WSFC Network Interface service, formerly Windows Server Cluster (Network Interfaces), monitors the status (Up/Down/Other) of the network adapters in a WSFC environment. This service is based on data returned from the Cluster – Net Interfaces (PS) Automation Manager Policy (AMP), included with SolarWinds N-central. This AMP file is running the Get-ClusterNetworkInterface PowerShell command to determine the status of the resource groups. Manufacturer information
Service Type Automation Manager Policy
Supported Systems/Applications Windows servers that are part of a WSFC environment.
Max instances on each device 100
Supported device class Servers - Windows
Monitored by Windows agent
Scan interval 5 minutes Troubleshooting
ISSUE RECOMMENDATION Minconfigured Check the following:
n The targeted device is part of a WSFC environment. n In a PowerShell window, confirm that the command import-module failoverclusters runs successfully.
Metrics
NAME DEFAULT THRESHOLDS Number of Online Cluster Groups Normal: 1-100,000 Warning: 0-0 Failed: -715,827,880 - -1
Number of Offline Cluster Groups Normal: -2,147,483,648 - 0 Warning: 1 – 715,827,880 Failed: 715,827,880 – 2,147,483,647
Number of Pending Cluster Groups Normal: -2,147,483,648 - 0 Warning: 1 – 715,827,880 Failed: 715,827,880 – 2,147,483,647
Number of Cluster Groups in other states Normal: -2,147,483,648 - 0 Warning: 1 – 715,827,880 Failed: 715,827,880 – 2,147,483,647
page 451 Services Reference Manual: SolarWinds N-central
WSFC Network
engineid enginename engineversion updateserialnumber
Service Type Namespace
Known Limitations
Issue Recommendation
WMI Class
WMI Property Supported Values Calculations/Threshold Mapping Default Thresholds
page 452 Services Reference Manual: SolarWinds N-central
RDS Server - Sessions service
The RDS Server Sessions service, formerly Windows Terminal Server, monitors the availability of the port, which the clients of the Microsoft Terminal Services use to connect to the Terminal Services application. The availability of the port, which is determined by the service testing the port's connectivity, indicates that the Terminal Services are able to connect to the Terminal Services application. This service also measures the DNS resolution and the round trip time of the initial connection request and response. The availability results of the TCP service are then reflected on the status dashboard for the Windows Terminal Server service. You can set a maximum of three instances of this service a device, with each instance monitoring a different port on the device.
The service does not use the Warning state.
Service Type Generic TCP
Instances on a 3 Device
Supported Microsoft Terminal Services Systems/Applications
Device Class Server - Generic, Workstation - Generic, Other, Printer, Scanner/Camera, Switch/Router, Laptop - Windows, Server - Windows, and Workstation - Windows
Monitored By Windows probe, SolarWinds N-central server
Scan Interval The time (in minutes) between each scan. The default is 5 minutes.
Timeout Value The time (in seconds) that the central server waits before considering the test a failure. The default is 30 seconds.
Port Number 3389 Status details
THRESHOLD DESCRIPTION Terminal Server The threshold that determines the availability of the port. Services Availability
Generic DNS The threshold that determines whether the device name can be resolved. Resolution If an FQDN has been specified, the service searches for its IP address. If the IP address is found, the state will be Normal. Otherwise, it will be Failed, based on the default settings. If an IP address has been specified, the service checks only the IP address's format. If the format is correct, the state will be Normal. Otherwise, it will be Failed, based on the default settings.
Round Trip Time The time for a request to be sent and received. (msec)
page 453 Services Reference Manual: SolarWinds N-central
Windows UAC Status service
The Windows UAC Status service monitors if the UAC is enabled on the target machine.
For more information, see www.microsoft.com. Manufacturer Information
Service Type AMP
PowerShell cmdlet Get-ItemProperty-Path
Supported Systems/Application Windows Workstation Vista or later. SolarWinds N-central Information
Known Limitations Only Windows workstation Vista or later.
Max. Instances Per Device 1
Supported Device Class Workstation - Windows Laptop - Windows
Notification Profile N/A
Monitored By Local Agent Troubleshooting
Issue Corrective Action
UAC Enabled is False Check UAC settings on windows. Metrics
WMI HKEY_LOCAL_ Class MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\'EnableLUA'
WMI Property Supported Values Calculations/ Default Thresholds Threshold Mapping
UAC Enabled True N/A On False
page 454 Services Reference Manual: SolarWinds N-central
© 2018 SolarWinds MSP Canada ULC. All rights reserved. No part of this document may be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the written consent of SolarWinds MSP Canada ULC ("SolarWinds MSP"). All right, title, and interest in and to the software and documentation are and shall remain the exclusive property of SolarWinds MSP and its respective licensors. SOLARWINDS MSP DISCLAIMS ALL WARRANTIES, CONDITIONS OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON SOFTWARE AND DOCUMENTATION FURNISHED HEREUNDER INCLUDING WITHOUT LIMITATION THE WARRANTIES OF DESIGN, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL SOLARWINDS MSP, ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY EVEN IF SOLARWINDS MSP HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. The SolarWinds MSP and N-CENTRAL marks are the exclusive property of SolarWinds MSP Canada ULC and its affiliates, are registered with the U.S. Patent and Trademark Office, and may be registered or pending registration in other countries. All other SolarWinds MSP trademarks, service marks, and logos may be common law marks, registered or pending registration in the United States or in other countries. All other trademarks mentioned herein are used for identification purposes only and may be or are trademarks or registered trademarks of their respective companies. Feedback SolarWinds MSP is a market driven organization that places importance on customer, partner and alliance feedback. All feedback is welcome at the following email address: [email protected]. About SolarWinds MSP SolarWinds MSP empowers IT service providers with technologies that fuel their success. Solutions that integrate layered security, collective intelligence, and smart automation—both on-premises and in the cloud, backed by actionable data insights, help IT service providers get the job done easier and faster. SolarWinds MSP helps our customers focus on what matters most—meeting their SLAs and delivering services efficiently and effectively. For more information, visit solarwindsmsp.com.
page 455