Useful WMI Classes for Monitoring Windows Servers

[DevilSun]

I've been doing a lot of WMI based performance monitoring, and these are some of the classes I've found useful. I hope this is my up to date list, I'll post a web page later with this information.

I've found some of these classes work best from the "raw" data, some work best from the "formatted" data, so play around with those and see what works best for you.

Also, I've noticed that some of the counters labeled as "per sec" don't give you very good data, so sometimes it's better to use the non "per sec" values and specify counter instead of gauge.

This is just a start, and most of these are used in the scripts I've posted. G'luck monitoring your Windows boxen.

Class: Win32_PerfRawData_MSExchangeUCF_MSExchangeIntelligentMessageFilter
Instance (Name): "_Total"
Requires: Exchange 2003 and Exchange IMF Add-On
Note: This is RAW DATA, so use the values as a COUNTER, not a GAUGE

MessagesScannedforUCEPersec
UCEMessagesActedUponPersec
TotalMessagesAssignedanSCLRatingof0
TotalMessagesAssignedanSCLRatingof1
TotalMessagesAssignedanSCLRatingof2
TotalMessagesAssignedanSCLRatingof3
TotalMessagesAssignedanSCLRatingof4
TotalMessagesAssignedanSCLRatingof5
TotalMessagesAssignedanSCLRatingof6
TotalMessagesAssignedanSCLRatingof7
TotalMessagesAssignedanSCLRatingof8
TotalMessagesAssignedanSCLRatingof9

Class: Win32_PerfFormattedData_TURFLIST_MSExchangeTransportFilterSink
Requires: Exchange 2003
Instance (Name): "_Total"

BlockListDNSQueriesIssued
ConnectionsAcceptedbyAcceptList
ConnectionsRejectedbyBlockListProviders
ConnectionsRejectedbyDenyList
DirectoryLookupsIssued
FailedBlockListDNSQueries
FailedDirectoryLookups
MessagesFilteredbySenderFiltering
MessagesFilteredDuetoBlankSender
RecipientsinConnectionFilteringExceptionList
RecipientsRejectedbyDirectoryLookups
RecipientsRejectedbyRecipientFiltering

Class: Win32_PerfFormattedData_SMSMSE_SMSMSE45
Requires: Symantec Mail Security 4.5 for Microsoft Exchange
Instance (Name): "SMSMSE"

BytesScannedPerSec
EncryptedItemsFoundPerSec
FilteringViolationsFoundPerSec
SMTPFilesScannedPerSec
UnscannableItemsFoundPerSec
ViolationsFoundPerSec
VirusViolationsFoundPerSec
VSAPIFilesScannedPerSec

Class: MicrosoftDNS_Statistic
Requires: DNS Server (Windows 2003)
Instance (CollectionId): "4"
Note: there are a lot of CollectionId's - Connect to "WinMgmts://<computer>/root/MicrosoftDNS"

Total queries
Notify queries
Update queries
TKeyNego queries
Standard queries
A queries
NS queries
SOA queries
MX queries
PTR queries
SRV queries
ALL queries
IXFR queries
AXFR queries
Other queries

Class: Win32_PerfFormattedData_MSExchangeIS_MSExchangeIS
Requires: Exchange 2003

ActiveUserCount
UserCount
VirusScanQueueLength
VirusScanMessagesProcessedPersec
VirusScanMessagesCleanedPersec
VirusScanMessagesDeletedPersec
VirusScanMessagesQuarantinedPersec

Class: Win32_PerfFormattedData_MSExchangeIS_MSExchangeISMailbox
Requires: Exchange 2003
Instance (Name): "_Total"

SendQueueSize
ReceiveQueueSize
MessagesSentPermin
MessagesSubmittedPermin
MessagesDeliveredPermin

Class: Win32_PerfFormattedData_SMTPSVC_SMTPServer
Requires: SMTP Server (Windows 2003)
Instance (Name): "_Total"

InboundConnectionsCurrent
OutboundConnectionsCurrent
DNSQueriesPersec

Class: Win32_PerfFormattedData_W3SVC_WebService
Requires: Web Server (Windows 2003)
Instance (Name): "_Total" or specific web site name from IIS Manager

CurrentConnections
CurrentAnonymousUsers
CurrentNonAnonymousUsers

Class: Win32_Processor
Instance (DeviceId): "CPU0"

LoadPercentage

Class: Win32_LogicalDisk
Instance (Name): "C:"

Size
FreeSpace

Class: Win32_OperatingSystem

TotalVisibleMemorySize
FreePhysicalMemory
TotalVirtualMemorySize
FreeVirtualMemory

Class: Win32_PerfRawData_Tcpip_NetworkInterface

BytesReceivedPersec
BytesSentPersec
PacketsReceivedPersec
PacketsSentPersec

[dev2dev]

seems like you have done good research on WMI
can you suggest me a book on wmi for vb/.net developers (.net is prefered)

i found few books at amazon

[pavankumar.k]

hii cacti, it seems to me that u have gone through each and every wmi-classes. some of the wmi classes present in exchange server 2003 are missing in the exchange server 2007 & few are added. can u tell me the equivalent classes for these wmi classes...


Win32_PerfRawData_MSExchangeIS_MSExchangeISMailbox Win32_PerfRawData_MSExchangeIS_MSExchangeISPublic Win32_PerfRawData_MSExchangeIS_MSExchangeIS Win32_PerfRawData_MSExchangeES_MSExchangeES Win32_PerfRawData_MSExchangeMTA_MSExchangeMTA Win32_PerfRawData_MSExchangeMTA_MSExchangeMTAConnections Win32_PerfRawData_SDStore_MSExchangeISTransportDriver Win32_PerfRawData_SMTPSVC_SMTPServer Win32_PerfRawData_MSExchangeSRS_MSExchangeSRS

it will be more helpful to me if u send me the list of useful wmi-classes in the Exchnage server 2007.

thanks.

[wwwdrich]

I have a project on my plate to start putting some of our Windows servers in Cacti, I'm looking at doing it using WMI and the wbemcli tools. If I can get it working, I'll add those classes here (as well as posting something in the Scripts & Templates forum).