WinRM monitoring

Introduction

Summary dashboard details

Monitored attributes for WinRM

To configure and troubleshoot WinRM

Introduction:

From Entuity v19.0 upwards, monitoring for WinRM (Windows) is supported. Note, you must configure WinRM on your managed servers before you can monitor them via WinRM. Please see this article for help and information on configuring WinRM for remote monitoring.

The following versions of Windows are supported for WinRM monitoring:

• Windows Server 2012
• Windows Server 2016
• Windows Server 2019

Out of the box, WinRM monitoring is detailed in the following dashboards:

• Summary dashboard
• Incidents dashboard
• Events dashboard
• Thresholds dashboard
• Attributes dashboard
• Associations dashboard

Summary dashboard details:

The Summary dashboard details the following:

• name
• type
• server name
• OS architecture, description, distribution, domain name, hostname, manufacturer, name, release, type, version
• incident summary
• events over time
• network adapters
• CPU utilization
• memory utilization
• logical volume

Monitored attributes for WinRM:

Entuity monitors the following attributes for WinRM (which can be seen on the Attributes dashboard):

• CE OS Polling Duration
• CE OS Polling Status
• CE OS Polling Status Detail
• Committed Bytes in Use %
• Count of Critical Events
• Count of Info Events
• Count of Major Events
• Count of Minor Events
• Count of Severe Events
• CPU Utilization % across all CPUs (Daily)
• CPU Utilization % across all CPUs (Hourly)
• CPU Utilization %
• Display Name
• Free Physical Memory
• Free Swap Memory
• Free Virtual Memory
• Incident Status
• Incident Summary (Open Incidents)
• Incident Summary (Closed Incidents)
• Load Averages - data collected is of 5 minute average.
• Number of Logical Processors
• OS Architecture
• OS Description
• OS Distribution
• OS Distribution Version
• OS Domain name
• OS Hostname
• OS Manufacturer
• OS Name
• OS Release
• OS Type
• OS Version
• OS Version Code Name
• Pages
• Pages Output
• Process Count
• Processor Time % (Daily)
• Processor Time % (Hourly)
• Processor Time %
• Shared Memory Segments Utilization % - polled as an additional metric for the base OS object.
• StormWorks ID
• Total Physical Memory
• Total Swap Memory
• Total Virtual Memory
• Used Physical Memory %
• Associations:
  
  

  Device

  • Active Tunnels
  • Active VPNs
  • Admin Down %
  • Asset Tag
  • Average SNMP Response Time
  • BGP Identifier
  • BGP Local AS
  • BGP Peer Remote IP Addresses
  • Bios Version
  • Buffer Allocation Failure Rate
  • Buffer No Memory Failure Rate
  • CE HW Collector Definition
  • CE OS Collector Definition
  • CE Polling Duration
  • CE Polling Status
  • CE Status Detail
  • Certified
  • Chassis Fan Status
  • Chassis Status
  • Chassis Temperature
  • Cluster Current Users
  • Config Change Type
  • Configuration Transfer Server
  • Count of Critical Events
  • Count of Info Events
  • Count of Major Events
  • Count of Minor Events
  • Count of Severe Events
  • CPU Utilization %
  • Current Users
  • Degraded
  • Description
  • Device State
  • Device SysUpTime Counter Wraps
  • Device Type
  • Display Name
  • Down %
  • EIGRP Peer Remote IP Addresses
  • Event Summary
  • Extra Info
  • File Hits Rate
  • Firmware Image Last Status
  • Firmware Image Local MD5
  • Firmware Image Location
  • Firmware Image Name
  • Firmware Image Start
  • Firmware Image Status
  • Firmware Version
  • Hardware Version
  • ICMP Redirect Rate
  • ICMP Redirects %
  • ICMP TTL Exceeded Rate
  • ICMP TTL Exceeded %
  • Inbound VPN Packet Loss
  • Inbound VPN Packet Loss Rate
  • Inbound VPN Packet Rate
  • Incident Status
  • Incident Summary
  • IP Discard Rate (No Route)
  • IP Discards (No Route) %
  • IP Packet Forward Rate
  • IP Packet Forwards %
  • IP Packet Received Rate
  • IP Transport
  • IS-IS Peer Remote IP Addresses
  • Last Reboot Time
  • LLDP Discovery Enabled
  • Location
  • Management Level
  • Management MAC Address
  • Manufacturer
  • Maximum Allowed Tunnels
  • Meeting Hits Rate
  • Memory Used %
  • Missing Components
  • Model
  • Name
  • Name Resolution State
  • NBAR Capable
  • NBAR Supported Protocols
  • Network Hits Rate
  • Newly Disappeared Modules
  • Newly Discovered Modules
  • Object Status
  • OK %
  • OS Name
  • OSPF Admin Status
  • OSPF Area Border Router
  • OSPF Autonomous System Border Router
  • OSPF Peer Remote IP Addresses
  • OSPF Router ID
  • OSPF TOS Support
  • Outbound VPN Packet Loss
  • Outbound VPN Packet Loss Rate
  • Outbound VPN Packet Rate
  • Part Number
  • Poll Status
  • Polled Device Name
  • Polled IP Address
  • Power Consumption
  • Product Name
  • Project VDSL Port Speeds
  • Running Configuration Files
  • Serial Number
  • SNMP Failure Rate
  • SNMP Percent Waiting
  • SNMP Response State
  • SNMP Success Rate
  • SNMP Type
  • Spare Part Number
  • Startup Configuration Files
  • State Detail
  • Stormworks ID
  • System Contact
  • System Description
  • System Name
  • System Object Identifier
  • System Services
  • System Type
  • TCP Connections
  • TCP Retransmission Algorithm
  • Total Hits Rate
  • Tunnel Utilization %
  • Uninitialized %
  • Unique ID
  • Unknown %
  • Version
  • VPN Initiation Failure (Per Minute)
  • VPN Initiation Response Failures (Per Minute)
  • VPN Monitoring
  • VPN System Capacity Failures (Per Minute)
  • VPN Tunnel Remote IP Addresses
  • VTP Domain Name
  • Web Hits Rate
  • XML Data Collection
  • Zone

  Logical Volumes

  • Capacity
  • Count of Critical Events
  • Count of Info Events
  • Count of Major Events
  • Count of Minor Events
  • Count of Severe Events
  • Display Name
  • Disk Queue Length
  • Free Inodes % (Daily)
  • Free Inodes % (Hourly)
  • Free Inodes %
  • Free Inodes
  • Free Space % (Daily)
  • Free Space % (Hourly)
  • Free Space %
  • Free Space
  • File System Type
  • ID
  • Incident Status
  • Incident Summary
  • Inode Capacity
  • Mount Point
  • StormWorks ID
  • Used Inodes % (Daily)
  • Used Inodes % (Hourly)
  • Used Inodes %
  • Used Space % (Daily)
  • Used Space % (Hourly)
  • Used Space %

  Network Adapter

  • Address
  • Alias
  • Bytes In
  • Bytes Out
  • Duplex
  • Display Name
  • Count of Critical Events
  • Count of Info Events
  • Count of Major Events
  • Count of Minor Events
  • Count of Severe Events
  • Duplex
  • HW Address
  • ID
  • In Packet Discards
  • In Packet Errors
  • Incident Status
  • Incident Summary
  • Index
  • Name
  • Out Packet Discards
  • Out Packet Errors
  • Receive Rate (Bits per Second)
  • Receive Rate (Bytes per Second)
  • Speed
  • StormWorks ID
  • Transmit Rate (Bits per Second)
  • Transmit Rate (Bytes per Second)
  • Utilization In %
  • Utilization In Snapshot %
  • Utilization Out %
  • Utilization Out Snapshot %

  OS Services

  • Count of Critical Events
  • Count of Info Events
  • Count of Major Events
  • Count of Minor Events
  • Count of Severe Events
  • Display Name
  • ID
  • Incident Status
  • Incident Summary
  • Object Status
  • Service Display Name
  • Service Name
  • Service Start Mode
  • Service State
  • Service Status
  • Stormworks ID

  Windows Recovery Configuration

  • Auto Reboot
  • Count of Critical Events
  • Count of Info Events
  • Count of Major
  • Count of Minor Events
  • Count of Severe Events
  • Debug File Path
  • Debug Information Type
  • Display Name
  • Expanded Debug File Path
  • Expanded Mini-Dump Directory
  • Incident Status
  • Incident Summary
  • Kernel Dump Only
  • Mini-Dump Directory
  • Overwrite Existing Debug File
  • Send Admin Alert
  • StormWorks ID
  • Write Debug Information
  • Write to System Log

To configure and troubleshoot WinRM

Please see this article for help and information on configuring and troubleshooting WinRM.