Shows the total CPU utilization across all processors in the machine, categorized into User Time and Privileged Time.

• User Time is the total time the processor(s) spends in user mode. This is a restricted processing mode designed for applications, environment subsystems, and integral subsystems.
• Privileged Time is the time the processor(s) spends in privileged mode. This is designed for operating system components and allows direct access to hardware and all memory.

Note: The User Time and Privileged Time series are each represented by a single line, and by an item in the legend at the right of the chart.

Shows the rate at which pages are being swapped in and out of memory.

• The Paging Rate (In) (or Page Reads) value includes hard pages (paging requests that have to go to the paging file on disk) - not soft pages (requests for memory pages that are not in the program's working set, but still in memory).
• The Paging Rate (Out) (or Page Writes) value provides the rate of write requests to the paging file on disk.

A sustained high rate of paging can cause problems with overall system degradation due to disk thrashing and CPU load.

Note: Each Paging Rate series is represented by a single line, and by an item in the legend at the right of the chart.

Shows the incoming and outgoing packet rates as an aggregate across all network cards in the system.

Note: The Packets Sent and Packets Received series are each represented by a single line, and by an item in the legend at the right of the chart.

Shows the total number of threads (program execution units) that are waiting to be run on ALL processors. A sustained processor queue length greater than three times the number of processors can indicate processor congestion.

Note: To view Server Work Queues for the individual CPUs in the system, see the CPUs Page in the CPU drilldown.

Shows the number of I/O requests that were queued for each logical disk.

Disk Queue Length indicates how heavily loaded a disk subsystem is. High queue lengths mean the disks are struggling to process the I/O load being put on them.

Note: Each logical disk on the system is represented by a single line on the chart, and by an item in the legend at the right of the chart.

Select an event log to show in the Event Grid. Depending on the monitored system, the logs to select from may include:

• Any — Combine all event logs.
• Application log — General application events and some system service messages.
• Directory Service log — Directory service events (only for Windows domain controllers).
• DNS Server log — DNS server events (only for Windows DNS servers).
• File Replication Service log — File replication service events (only for Windows domain controllers).
• Security log — Operating system audit events. Logged according to the audit settings that have been configured on the system.
• System log — Operating System and most system service messages.

The time when the entry was entered into the Windows event log, not when it was brought into Spotlight on Windows.

A code that identifies the event.

A description of the event.

The software that logged the event.

The type of event:

• Warning — There is something out of the ordinary but not an outright failure.
• Error — Something has failed.
• Information — General information on what is happening on the system.
• Security — There are numerous security based message types. These come from the security log and the system auditing that has been configured on the system.

The category of the event. This is used in auditing, and is primarily used by the security log.

Where the error message was generated:

• Application log — General application events and some system service messages.
• Directory Service log — Directory service events (only for Windows domain controllers).
• DNS Server log — DNS server events (only for Windows DNS servers).
• File Replication Service log — File replication service events (only for Windows domain controllers).
• Security log — Operating system audit events. Logged according to the audit settings that have been configured on the system.
• System log — Operating System and most system service messages.

Note: The Directory Service and File Replication Service event logs are available only for Windows domain controllers. The DNS Server event log is available only for DNS servers.

Shows information on alarms associated with the event log item. This is assigned by the Spotlight on Windows event log rules (available through the Windows Event Log Metrics in Spotlight on Windows Options).

Select to acknowledge the event and return its status to Normal.

The name of the machine where the event occurred.

Introductory material to Spotlight on Windows.

Spotlight alerts you to problems with your system by issuing an alarm. You can configure Spotlight in the level of severity that constitutes an alarm, to disable an alarm, and the actions Spotlight takes on raising the alarm.