1. M ODULE 2: P REPARING TO M ONITOR S ERVER P ERFORMANCE

2. O VERVIEW FOR HOLE MODULE 2 Introduction to Monitoring Server Performance Performing Real-Time and Logged Monitoring Configuring and Managing Counter Logs Configuring Alerts

3. W HY M ONITOR P ERFORMANCE ? By monitoring performance, you obtain data that you can use to: Understand workload and its effect on system resources Identify resource-use trends Test proposed configuration changes Diagnose and optimize the system

4. W HAT I S R EAL -T IME AND L OGGED M ONITORING ? Real-Time Monitoring Logged Monitoring Monitors the system Processes and updates data from the operating system Documents the state of memory, processor, storage and network Monitors the system Processes and updates data from the operating system Documents the state of memory, processor, storage and network Collects and stores data for a span of time Detects bottlenecks and records system changes Performed in Performance Logs and Alerts Collects and stores data for a span of time Detects bottlenecks and records system changes Performed in Performance Logs and Alerts

5. W HAT I S A C OUNTER L OG ? Performance counters measure performance Counter logs store performance data over time

6. L ESSON : C ONFIGURING A LERTS What Is an Alert? Limitations of Alerts What Is Event Viewer? What Is EventCombMT? Practice: Configuring and Viewing Alerts

7. W HAT I S AN A LERT ? A feature that detects out of range values A counter setting called a threshold A mechanism that: Log events May send a message May start a counter log May initiate a program A measure based on baselines

8. L IMITATIONS OF A LERTS Permissions constrain alert creation Dependent services constrain alert actions Example: Messenger service Faulty remote connections impair the reliability of alerts

9. W HAT I S E VENT V IEWER ? A tool for viewing and configuring event logs A way to view the application log A collection of log files with a 16 MB default size Filter events based on type, source, computer, and time

10. W HAT I S E VENT C OMB MT? A utility for parsing event logs on multiple servers Searching can be based on: Event ID Event type Source Log Finds alerts on many servers quickly