Chat now with support
Chat with Support

Foglight for Active Directory 7.1.0 - User Guide

Navigation basics Exploring Foglight for Active Directory dashboards Managing Active Directory agents Reporting on your Active Directory enterprise Foglight for Active Directory views
Forest views Domain views Site views Domain Controller views Description of embedded views
Address Book view Agent State view Asynchronous Thread Queue view Core Services view Database Access view Database Cache view Database Log Access view Database Performance Health view Defragmentation Tasks view DFS Namespace Service API Queue view DFS Namespace Service API Requests view DFS Namespace Service Referrals view DFS Replicated Folders view DFS Replication Connections view DFS Replication Service Volumes view DFS-R Performance Health view Directory Replication Inbound view Directory Replication Outbound view Directory Replication Sync view Directory Replication USN view Directory Services General view Directory Services Performance Health view Directory Services Reads view Directory Services Searches view Directory Services Writes view Domain Controller Details view Domain Controllers view FileReplicaConn Authentications/Bindings view FileReplicaConn Change Orders view FileReplicaConn Fetch view FileReplicaSet Authentications/Bindings view FileReplicaSet Change Orders view FileReplicaSet DS Communications view FileReplicaSet Files view FileReplicaSet Local Change Orders view FileReplicaSet Packets view FileReplicaSet Remote Change Orders view FRS Performance Health view FRS Replica Sets view FRS Staging Files view FSMO Roles view (Domain) FSMO Roles view (Forest) Host Monitor view Inter-Site Transports view Inventory By Category view IP Subnets view Key Distribution Center view LDAP view Memory view Network view Processor view Replication Performance Health view Resource Utilization view Security Accounts Manager view Server Health view Statistics view Storage view Summary and Resource Information view Top AD Metrics view Top 3 Consumers view Top 3 CPU Consumers view Top 3 DS Directory Reads/sec view Top 3 LDAP Bind Times view Top 3 Memory Consumers view Top 3 Network Consumers view Top 3 Replication Queue Length view Top 3 Storage Consumers view Trusts view USN Records view
Foglight for Active Directory rules Running diagnostic tests Managing Active Directory metrics

Time Differential diagnostic

Compares the time of the selected domain controllers to the PDC Emulator and then compares this to the specified threshold. If the threshold is exceeded, the test will return as a failure. This test shows you child DCs whose time is not synchronized with their parent time server within a user-defined margin.

* 
NOTE: The credentials for the domain controller(s) selected on the Test Targets page will be used to query the PDC Emulator. Therefore, the user account used by the selected target server(s) must also have access to the PDC Emulator.

To run this test enter a time differential that represents an acceptable threshold.

 
Table 94. Time Differential diagnostic
Test Input
Description

Acceptable Time Difference (seconds)

Enter the time differential (in seconds) that represents an acceptable threshold for you environment. By default, the acceptable time difference is 2 seconds.

If this test fails, you should:
•
Ensure that the server is operational.
•
Check to make sure your time differential threshold is set to the correct setting (default is 2 seconds).
•
Check the properties of the server to see which computer is its time sync partner. If necessary, change the Time Sync parameters of the server to point to a different server.

Time Parent Sync diagnostic

Ensures that the selected domain controllers are using the PDC Emulator from their domain as their time source. The root PDC Emulator cannot be tested against external time sources. This test shows you any DC that is not synchronizing time with the Windows® default time server. The Windows default time server is the PDC Emulator in its domain. If the selected DC is the PDC Emulator for the domain, the Windows default time server is the PDC Emulator of the root domain.

* 
NOTE: The credentials for the domain controller(s) selected on the Test Targets page will be used to query the PDC Emulator. Therefore, the user account used by the selected target server(s) must also have access to the PDC Emulator.
* 
NOTE: If the DC is running on a guest OS (is virtual), it is possible it synchronizes with external hardware. Foglight for Active Directory will notify if VMware® services are running to aid in recognizing this possibility.
If this test fails, you should:
•
Ensure that the server is operational.
•
Verify that you have administrative access to the file system. The test attempts to connect to the file system on the remote server.
•
Ensure that you have access to query the registry on the remote server. The test requires access to the registry to determine the server’s time sync settings.
•
Check to make sure you have access to query the domain object for that server. The test attempts to find the Windows 2000 default parent for a particular server by binding to objects in Active Directory® (starting with the object for the domain the server is in).
•
If required, change the parameters of the server to point to the Windows 2000 default Time Sync server (for example, Resolve | Time Sync - | Set Parameters).

Track Replication diagnostic

Tracks as the selected object is replicated to all outgoing replication partners. This test determines if appropriate servers in the forest have the selected copy of an Active Directory® object. The Update Sequence Number (USN)/source computer pair for each property on the selected object is recorded from the source computer. This ensures that the tested computer has received all changes made to the object on the source computer.

* 
NOTE: Select only one target server when running this test.

To run this test select the replication partners in the test input panel.

 
Table 95. Track Replication diagnostic
Test Input
Description

Select Replication Partners

Select this button to select the servers where tests should compare the most recent update with that of the target server. Selecting this button displays the Select Targets dialog which provides a list of replication partners to choose from.

NOTE: The credentials for the domain controller selected on the Test Targets page will be used to query the replication partner servers selected here. Therefore, the user account used by the selected target server must also have access to these replication partners.
NOTE: Be sure to select servers (both the target servers and replication partners) that are within the same forest. Selecting servers that reside in different forests will result in communication errors.
 
* 
NOTE: When tracking an object in the domain naming context, Global Catalog servers outside the domain might fail the test. Any Global Catalog server in the forest will fail the test if it does not have the selected copy of an Active Directory object.

 

Managing Active Directory metrics

Active Directory® agents collect metrics by default which are then displayed throughout the Foglight for Active Directory views. In addition, Active Directory agents can be configured to collect other metrics in addition to those being collected by default.

* 
IMPORTANT: Enabling optional metric collections may impact performance. Therefore, it is recommended to only enable the collection groups required to pinpoint a specific issue and then disable the metric collections for these collection groups once the issue is found/resolved.

Foglight for Active Directory provides a new dashboard, Active Directory Metrics Management dashboard, which allows you to view and manage the metrics that can be optionally collected by an Active Directory agent. Optional Active Directory metrics can only be enabled or disabled using this new dashboard. However, data collection schedules can be modified using any of the following dashboards.

•
Agent Status dashboard (Dashboards > Administration > Agents > Agent Status)
•
Agent Properties dashboard (Dashboards > Administration > Agents > Agent Properties)
•
Active Directory Metrics Management Dashboard (Dashboards > Active Directory Environment > Administration tab> Metrics Management)
 
* 
NOTE: When using the default data collection schedule (defaultSchedule), you can use the Agent Status, Agent Properties or Metrics Management dashboard to modify a data collection interval. However, when using a user-defined data collection schedule, you must use the Agent Status or Agent Properties dashboard to modify a data collection interval.

This section describes the components on the Active Directory Metrics Management dashboard. It also provides procedures for enabling and disabling metric collections and for modifying the data collection interval to be used to collect metrics:

•
Agent Status and Agent Properties dashboards
•
Active Directory Metrics Management dashboard
•
Managing Active Directory metrics
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating