Foglight for Active Directory 5.7.2 - User and Reference Guide

To display this view, enable the USN Records Group in the FRS section of the Metrics Management dashboard. When this collection group is enabled, this view is added to the FRS navigation tab for the selected DC in the Active Directory Explorer dashboard.


	NOTE: Either a DFS-R or an FRS tab will be displayed on the Active Directory Explorer dashboard, depending on the file replication service set up for the SYSVOL on the selected DC.

Table 86. USN Records view

Description

This view displays metrics related to Update Sequence Number (USN) records on the selected DC which are gathered when the USN Records collection group is enabled.

Data displayed

USN Records. This graph charts the following metrics over the specified time interval:

•

USN Reads. Shows the number of times FRS has initiated a read on the NTFRS change log.

•

USN Records Examined. Shows the number of times the NTFRS change log records have been examined by FRS.

•

USN Records Rejected. Shows the number of times the NTFS change log records have been skipped by FRS.

Where to go next

Drill down on:

•

Clicking a graph in this view displays a metrics popup that describes the counters, provides more detailed data points, and lists current alarms for the selected metric.

Foglight for Active Directory rules

Foglight for Active Directory includes a number of predefined rules to monitor all critical components of Active Directory® on a continuous basis to ensure that the directory is functioning properly. The rules included in this cartridge alert you to key conditions that may affect the health of Active Directory. Foglight allows you to modify these predefined rules or create your own rules to ensure you are monitoring statistics and alerting on conditions specific to your Active Directory environment.

Foglight for Active Directory provides an additional dashboard that can be used to manage the cartridge’s rules. That is, Foglight for Active Directory rules can be managed using one of the following dashboards:

•

Rules dashboard (Dashboards > Administration > Rules >All)

•

Active Directory Rule Management dashboard (Dashboards > Active Directory > Rule Management)


	NOTE: All original rules in each cartridge are reset when the cartridge is upgraded; therefore if you applied custom conditions to any original rules these modifications will be lost. It is recommended that when modifying rules you make a copy of the original, disable the original and enable the copy with the new condition. Use the copy rule icon to the far right of a rule on the Manage Rules dashboard to copy a rule.

This section describes the Active Directory Rule Management dashboard and explains the tasks that can be performed from this dashboard:

•

Rules dashboard

•

Active Directory Rule Management dashboard

•

Managing Foglight for Active Directory rules

•

Rules reference

Rules dashboard

The Rules dashboard lists all rules that exist in your environment and allows you to drill down to rule definitions. From this dashboard you can copy, edit, and remove Foglight rules.


	NOTE: Predefined rules may be modified during regular software updates. To avoid losing changes to these rules, we recommend copying a rule and making edits to the copy. Enable the copy and disable the original rule. You may want to identify your custom rules with a unique prefix to make them easy to find.

To review and edit rules:

In the navigation panel, under Homes, click Administration.

In the Administration dashboard, click Rules > All.

The Rules dashboard opens.

From the Cartridge list, select Active-Directory.

The dashboard refreshes to display only the Foglight for Active Directory rules.

From here, you can perform the following tasks:

•

Review a short description of the rule.

•

Review and edit threshold values.


	TIP: For rules that reference registry variables for threshold values, modify the threshold in the registry variable, rather than modifying the rule. For help finding and editing registry variables, search for “Registry Variable” in the online help.

•

Copy rules.

•

Edit rule conditions.

•

Associate actions with rules.

•

Create user-defined rules.

For help with these tasks, open the online help from the Rules dashboard.

Active Directory Rule Management dashboard

The Active Directory Rule Management dashboard contains a sortable list of all the conditional severity rules used by Foglight for Active Directory. From this dashboard you can quickly see which conditional rules are enabled/disabled, the states (fatal, critical or warning) with active conditions, predefined alarm threshold values, rules with current alarms, and a brief description of each rule.


	NOTE: The Rule Management dashboard does not display simple rules that do not have user-definable conditions defining when to raise an alarm. To edit the simple rules, use the Manage Rules dashboard.

Figure 41. Active Directory Rule Management dashboard

The Active Directory Rule Management dashboard displays the following information about Foglight for Active Directory rules.

Table 87. Active Directory Rule Management dashboard information

Column

Description

Use the selection check box column to select one or more rules in the list. Once selected, you can enable or disable the selected rules using the buttons at the top of the table.

To select or clear all of the rules in the list, click on the check box in the heading row.

Enabled

Displays one of the following icons indicating whether the rule is enabled or disabled:

- Enabled

- Disabled

Clicking the icon in this column will either disable or enable the selected rule.

Rule

Displays the name of the rule.

Selecting the rule name launches the rule editor where you can view or edit the selected rule.

Fatal Condition:

•

The set rule icon

indicates that a fatal condition is not yet defined for this rule. Selecting this icon displays a dialog allowing you to specify a value for the rule or launches the rule editor allowing you to define a fatal condition for this rule.

•

The icon

indicates multiple registry values. Clicking this icon displays a dialog that allows you to view the fatal condition threshold for these variables.

•

The edit icon

indicates that you can define a fatal condition for this rule. Clicking this icon launches the rule editor allowing you to define a fatal condition for this rule.

Critical Condition:

•

The set rule icon

indicates that a critical condition is not yet defined for this rule. Selecting this icon displays a dialog allowing you to specify a value for the rule or launches the rule editor allowing you to define a critical condition for this rule.

•

The icon

indicates multiple registry values. Clicking this icon displays a dialog that allows you to view the fatal condition threshold for these variables.

•

The edit icon

indicates that you can define a fatal condition for this rule. Clicking this icon launches the rule editor allowing you to define a fatal condition for this rule.

Warning Condition:

•

The set rule icon

indicates that a warning condition is not yet defined for this rule. Selecting this icon displays a dialog allowing you to specify a value for the rule or launches the rule editor allowing you to define a warning condition for this rule.

•

The icon

indicates multiple registry values. Clicking this icon displays a dialog that allows you to view the fatal condition threshold for these variables.

•

The edit icon

indicates that you can define a fatal condition for this rule. Clicking this icon launches the rule editor allowing you to define a fatal condition for this rule.

Alarms

Indicates the number of outstanding alarms for each rule.

Selecting the number in this column displays the alarms popup. From the alarm list on this popup:

•

Clicking the alarm message, time or severity icon for an individual alarm displays the Alarm Details dialog from which you can acknowledge or clear the alarm.

•