Internet Information Services 7 Management

Pack Guide for Operations Manager 2007

Microsoft Corporation
Published: April 2011
Send suggestions and comments about this document to mpgfeed@microsoft.com. Please
include the management pack guide name ith !our feedback.
Copyright
"nformation in this document# including $%& and other "nternet 'eb site references# is sub(ect to
change ithout notice. $nless otherise noted# the companies# organi)ations# products# domain
names# e*mail addresses# logos# people# places# and e+ents depicted in e,amples herein are
fictitious. -o association ith an! real compan!# organi)ation# product# domain name# e*mail
address# logo# person# place# or e+ent is intended or should be inferred. Compl!ing ith all
applicable cop!right las is the responsibilit! of the user. 'ithout limiting the rights under
cop!right# no part of this document ma! be reproduced# stored in or introduced into a retrie+al
s!stem# or transmitted in an! form or b! an! means .electronic# mechanical# photocop!ing#
recording# or otherise/# or for an! purpose# ithout the e,press ritten permission of Microsoft
Corporation.
Microsoft ma! ha+e patents# patent applications# trademarks# cop!rights# or other intellectual
propert! rights co+ering sub(ect matter in this document. 0,cept as e,pressl! pro+ided in an!
ritten license agreement from Microsoft# the furnishing of this document does not gi+e !ou an!
license to these patents# trademarks# cop!rights# or other intellectual propert!.
1 2011 Microsoft Corporation. All rights reser+ed.
Microsoft# MS*23S# 'indos# 'indos Ser+er# and Acti+e 2irector! are either registered
trademarks or trademarks of Microsoft Corporation in the $nited States and4or other countries.
All other trademarks are propert! of their respecti+e oners.
Revision istory
Re!ease "ate Changes
5ebruar! 2006 3riginal release of this guide
5ebruar! 2010 %e+ised for 'indos Ser+er 2007 %2
April 2011 Guide update on!y # no changes to
management pack
Corrected the source names of some e+ents
Contents
"ntroduction to the "nternet "nformation Ser+ices 8 Management Pack for 3perations Manager
2008............................................................................................................................................ 9
'hat:s -e................................................................................................................................. 9
Supported Configurations............................................................................................................ 9
;etting Started................................................................................................................................ <
=efore >ou "mport the Management Pack................................................................................... <
5iles in ?his Management Pack............................................................................................... 8
@o to "mport the "nternet "nformation Ser+ices 8 Management Pack........................................8
Create a -e Management Pack for Customi)ations.................................................................7
3ptional Configuration................................................................................................................. 7
Securit! Considerations.................................................................................................................. 7
&o*Pri+ilege 0n+ironments........................................................................................................ 6
Computer ;roups...................................................................................................................... 1A
$nderstanding Management Pack 3perations.............................................................................1A
3b(ects the Management Pack 2isco+ers................................................................................. 1A
?asks......................................................................................................................................... 19
Classes...................................................................................................................................... 19
@o @ealth %olls $p................................................................................................................. 1<
Be! Monitoring Scenarios.......................................................................................................... 18
Placing Monitored 3b(ects in Maintenance Mode......................................................................18
3+erriding the 2efault 2isco+er! "nter+al.................................................................................. 18
%esetting the @ealth State of $nhealth! $nit Monitors..............................................................17
0nabling %ules and 2isco+eries that are 2isabled b! 2efault...................................................16
Appendi, A: Monitors and %ules for Management Packs.............................................................21
@o to Cie Management Pack 2etails.................................................................................... 22
$nit Monitors for a Management Pack...................................................................................... 22
2ependenc! Monitors for a Management Pack......................................................................... 2<
Performance Collection %ules for a Management Pack............................................................28
0+ent &og %ules for a Management Pack................................................................................. A2
Appendi, =: Application Pool Properties....................................................................................... D0
Introduction to the Internet Information
Services 7 Management Pack for Operations
Manager 2007
?he "nternet "nformation Ser+ices 8 Management Pack pro+ides proacti+e and reacti+e
monitoring of !our "nternet "nformation Ser+ices .""S/ 8 en+ironment.
$ote: "n this guide# the term E"nternet "nformation Ser+ices 8F applies eGuall! to ""S 8.0
.hich shipped ith 'indos Ser+er 2007# 'indos Ser+er 2007 SP1# and 'indos
Ser+er 2007 SP2/# and ""S 8.9 .hich shipped ith 'indos Ser+er 2007 %2/.
?his management pack pro+ides an earl! arning to administrators on issues that could affect
ser+ices so that administrators can in+estigate and take correcti+e action# if necessar!. ?he
management pack helps to simplif! the administrati+e en+ironment b! pro+iding a single console
for the administrator to perform a number of useful management tasks. ?o help troubleshoot
common issues# the management pack contains helpful product knoledge and a a! to e,tend
this knoledge through adding !our on compan! or organi)ation knoledge related to an issue.
"ocument %ersion
?his guide as ritten based on the <.0.8<00.0000 +ersion of the "nternet "nformation Ser+ices 8
Management Pack.
Getting the &atest Management Pack and
"ocumentation
>ou can find the "nternet "nformation Ser+ices 8 Management Pack in the S!stem Center
3perations Manager 2008 Catalog .http:44go.microsoft.com4flink4H&ink"dI72109/.
'hat(s $e)
Microsoft has updated the Management Pack for "nternet "nformation Ser+ices 8 to support
'indos Ser+er 2007 SP2 and ""S 8.9 on 'indos Ser+er 2007 %2.
Supported Configurations
?he "nternet "nformation Ser+ices 8 Management Pack supports monitoring "nternet "nformation
Ser+ices .""S/ 8 on 'indos Ser+er 2007 and 'indos Ser+er 2007 %2 and supports both A2*
and <D*bit platforms.
?his management pack is supported in stand*alone en+ironments and in netork load balancing
clusters. ?his management pack is not supported on failo+er clusters in 'indos Ser+er 2007 or
'indos Ser+er 2007 %2.
Getting Started
?his section describes the actions !ou should take before !ou import the management pack# an!
steps !ou should take after !ou import the management pack# and information about
customi)ations.
*efore +ou Import the Management Pack
=efore !ou import the "nternet "nformation Ser+ices 8 Management Pack# note the folloing
limitation of the management pack:
Agentless monitoring is not supported. >ou must deplo! an agent on e+er! "nternet
"nformation Ser+ices .""S/ 8 ser+er that !ou ant to manage.
5or 3perations Manager agents that manage ""S 8 ser+ers ith more than D00 sites and
application pools# !ou must o+erride the ea!th Service Private *ytes ,hresho!d monitor
that is targeted to the ea!th Service. 3+erride the -gent Performance Monitor ,ype.
,hresho!d parameter to set it to 20/701200 .the number of b!tesI200 M=/. "f !ou do not
o+erride this threshold monitor# the agent might consume more than 100 M= of memor! and
be restarted automaticall!.
=efore !ou import the "nternet "nformation Ser+ices 8 Management Pack# take the folloing
actions:
0nsure that 3perations Manager 2008 Ser+ice Pack 1 .SP1/ or 3perations Manager 2008
%2 is installed.
0nsure that all hotfi,es that enable 3perations Manager 2008 to run on 'indos
Ser+er 2007 are installed. "f !ou are using 'indos Ser+er 2007 %2# !ou do not need to
install these hotfi,es. 5or more information about# and to donload the hotfi,es# see the
article# ESupport for running S!stem Center 3perations Manager 2008 Ser+ice Pack 1 and
S!stem Center 0ssentials 2008 Ser+ice Pack 1 on a 'indos Ser+er 2007*based computer#F
at http:44go.microsoft.com4flink4H&ink"dI1A<906.
0nsure that !ou ha+e installed hotfi, B=697<<1 on all ""S 8 ser+ers. 'ithout this hotfi, the
3perations Manager 2008 agent leaks memor!. 5or more information and to donload this
hotfi,# see the article# E5"J: Small memor! leaks ma! occur hen !ou use %SCA to Guer!
runtime statistics in ""S 8.0#F at http:44go.microsoft.com4flink4H&ink"dI1AA86D. >ou can also
donload this hotfi, from the donload center at http:44go.microsoft.com4flink4H
&ink"dI1A961D.
0nsure that !ou ha+e installed the hotfi, discussed in the article B=69812A on all ""S 8
ser+ers. 'ithout this hotfi,# !ou ill see 0+ent D908 from the @ealth Ser+ice in the 3perations
<
Manager 2008 e+ent log on ser+ers here ""S 8 is installed# and disco+er! and monitoring of
the ""S 8 ser+ers ill not ork.
"nstall the 'indos 2007 =ase 3perating S!stem Management Pack.
"mport the 'indos Ser+er "nternet "nformation Ser+ices &ibrar! Management Pack
.Microsoft.'indos."nternet"nformationSer+ices.Common&ibrar!.mp/.
2i!es in ,his Management Pack
?o monitor "nternet "nformation Ser+ices .""S/ 8 on 'indos Ser+er 2007# !ou must first
donload the "nternet "nformation Ser+ices 8 Management Pack from the Management Pack
Catalog# located at http:44go.microsoft.com4flink4H&ink"dI72109.
?he donload package includes the folloing files:
Microsoft.'indos."nternet"nformationSer+ices.2000.mp
Microsoft.'indos."nternet"nformationSer+ices.200A.mp
Microsoft.'indos."nternet"nformationSer+ices.2007.mp
Microsoft.'indos."nternet"nformationSer+ices.Common&ibrar!.mp
?hese files enable !ou to monitor ""S 8 .on 'indos Ser+er 2007 and 'indos Ser+er 2007 %2/#
""S 9.0 .on 'indos 2000 Ser+er/# and ""S <.0 .on 'indos Ser+er 200A/.
?he management pack guide that includes ""S 9.0 and ""S <.0 is separate from this guide. ?his
guide documents information specific to the "nternet "nformation Ser+ices 8 Management Pack for
'indos Ser+er 2007 and 'indos Ser+er 2007 %2. All +ersions of the ""S Management Pack
guide can be donloaded from http:44go.microsoft.com4flink4H&ink"dI172<D6.
"f !ou are onl! interested in monitoring ""S 8 ser+ers# !ou ill need to import:
Microsoft.'indos."nternet"nformationSer+ices.2007.mp
Microsoft.'indos."nternet"nformationSer+ices.Common&ibrar!.mp
o) to Import the Internet Information Services 7
Management Pack
5or instructions about importing a management pack# see @o to "mport a Management Pack in
3perations Manager 2008 .http:44go.microsoft.com4flink4H&ink"2I67AD7/.
After the "nternet "nformation Ser+ices 8 Management Pack is imported# create a ne
management pack in hich !ou store o+errides and other customi)ations.
Create a $e) Management Pack for
Customi3ations
Most +endor management packs are sealed so that !ou cannot change an! of the original
settings in the management pack file. @oe+er# !ou can create customi)ations# such as o+errides
or ne monitoring ob(ects# and sa+e them to a 2ifferent Management Pack. =! default#
3perations Manager 2008 sa+es all customi)ations to the default management pack. As a best
8
practice# !ou should instead create a separate management pack for each sealed management
pack !ou ant to customi)e.
Creating a ne management pack for storing o+errides has the folloing ad+antages:
"t simplifies the process of e,porting customi)ations that ere created in !our test and
preproduction en+ironments to !our production en+ironment. 5or e,ample# instead of
e,porting a 2efault Management Pack that contains customi)ations from multiple
management packs# !ou can e,port (ust the management pack that contains customi)ations
of a single management pack.
>ou can delete the original management pack ithout first needing to delete the 2efault
Management Pack. A management pack that contains customi)ations is dependent on the
original management pack. ?his dependenc! reGuires !ou to delete the management pack
ith customi)ations before !ou can delete the original management pack. "f all of !our
customi)ations are sa+ed to the 2efault Management Pack# !ou must delete the 2efault
Management Pack before !ou can delete an original management pack.
"t is easier to track and update customi)ations to indi+idual management packs.
5or more information about sealed and unsealed management packs# see Management Pack
5ormats .http:44go.microsoft.com4flink4H&ink"dI107A99/. 5or more information about
management pack customi)ations and the default management pack# see About Management
Packs in 3perations Manager 2008 .http:44go.microsoft.com4flink4H&ink"dI107A9</.
Optiona! Configuration
"nformation about performance collection rules that are disabled b! default in this management
pack is pro+ided in Appendi, A. Since the action of collecting data about performance has a
performance cost itself# enable onl! the performance collection rules that !ou care about.
Security Considerations
>ou ma! need to customi)e !our management pack. Certain accounts cannot be run in a lo*
pri+ilege en+ironment or must ha+e minimum permissions. "f !ou operate in a lo*pri+ilege
computing en+ironment# !ou ma! need to ele+ate the le+el of permissions assigned to the
accounts !ou use for running management pack rules# monitors# disco+eries# reco+eries# and
diagnostic tasks. ?hese accounts must ha+e minimum permissions in order for management pack
components to run properl!.
&o)4Privi!ege 5nvironments
?he "nternet "nformation Ser+ices 8 Management Pack reGuires local administrator pri+ileges in
order to disco+er# monitor# and e,ecute tasks. 5or the management pack disco+eries# monitors#
tasks# and diagnostics that reGuire administrati+e pri+ileges# the management pack uses the
Pri+ileged Monitoring %un As profile# configured b! default to use the &ocal S!stem account. ?he
folloing tables identif! the management pack elements that are configured to use the Pri+ileged
7
Monitoring %un As profile. ?hese management pack tasks cannot be run using a lo*pri+ilege
account.
"iscoveries Configured to 6se the Privi!eged Monitoring
-ccount Run -s Profi!e
$ame ,arget
""S 8 =uilt*in 5?P Ser+er Site 2isco+er! ""S 8 =uilt*in 5?P Ser+er
""S 8 5?P Site 2isco+er! ""S 8 5?P Ser+er
""S 8 =uilt*in 5?P Ser+er Site 2isco+er! ""S 8 Ser+er %ole
""S 8 5?P Ser+er 2isco+er! ""S 8 Ser+er %ole
""S 8 Ser+er %ole Cersion 2isco+er! ""S 8 Ser+er %ole
""S 8 'eb Ser+er 2isco+er! ""S 8 Ser+er %ole
'indos Ser+er 2007 SM?P Ser+er 2isco+er! ""S 8 Ser+er %ole
""S 8 Application Pool 2isco+er! .0*19 percent/ ""S 8 'eb Ser+er
""S 8 Application Pool 2isco+er! .19*A0
percent/
""S 8 'eb Ser+er
""S 8 Application Pool 2isco+er! .A0*D9
percent/
""S 8 'eb Ser+er
""S 8 Application Pool 2isco+er! .D9*<0
percent/
""S 8 'eb Ser+er
""S 8 Application Pool 2isco+er! .<0*89
percent/
""S 8 'eb Ser+er
""S 8 Application Pool 2isco+er! .89*60
percent/
""S 8 'eb Ser+er
""S 8 Application Pool 2isco+er! .60*100
percent/
""S 8 'eb Ser+er
""S 8 'eb Application 2isco+er! .0*20 percent/ ""S 8 'eb Ser+er
""S 8 'eb Application 2isco+er! .20*D0
percent/
""S 8 'eb Ser+er
""S 8 'eb Application 2isco+er! .D0*<0
percent/
""S 8 'eb Ser+er
""S 8 'eb Application 2isco+er! .<0*70
percent/
""S 8 'eb Ser+er
6
$ame ,arget
""S 8 'eb Application 2isco+er! .70*100
percent/
""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .0*7 percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .1<*2D percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .2D*A2 percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .A2*D0 percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .D0*D7 percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .D7*9< percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .9<*<D percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .<D*82 percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .82*70 percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .70*77 percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .7*1< percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .77*6< percent/ ""S 8 'eb Ser+er
""S 8 'eb Site 2isco+er! .6<*100 percent/ ""S 8 'eb Ser+er
'indos Ser+er 2007 SM?P Cirtual Ser+er
2isco+er!
'indos 2007 SM?P Ser+er
""S 8 Ser+er %ole 2isco+er! 'indos Ser+er 2007 Computer
Monitors Configured to 6se the Privi!eged Monitoring -ccount
Run -s Profi!e
$ame ,arget
Application Pool a+ailabilit! ""S 8 Application Pool
5?P ser+ice a+ailabilit! ""S 8 =uilt*in 5?P Ser+er
5?P Site a+ailabilit! ""S 8 =uilt*in 5?P Ser+er Site
5?P ser+ice a+ailabilit! ""S 8 5?P Ser+er
5?P Site a+ailabilit! ""S 8 5?P Site
""S Admin Ser+ice a+ailabilit! ""S 8 Ser+er %ole
'eb Management ser+ice a+ailabilit! ""S 8 Ser+er %ole
10
$ame ,arget
'indos Process Acti+ation ser+ice a+ailabilit! ""S 8 'eb Ser+er
'orld 'ide 'eb Publishing ser+ice a+ailabilit! ""S 8 'eb Ser+er
'eb Site a+ailabilit! ""S 8 'eb Site
SM?P Ser+ice a+ailabilit! 'indos 2007 SM?P Ser+er
SM?P Cirtual Ser+er a+ailabilit! 'indos 2007 SM?P Cirtual Ser+er
,asks Configured to 6se the Privi!eged Monitoring -ccount Run
-s Profi!e
$ame ,arget
&ist 'orker Processes ""S 8 Application Pool
%ec!cle Application Pool ""S 8 Application Pool
Start Application Pool ""S 8 Application Pool
Stop Application Pool ""S 8 Application Pool
Pause 5?P Ser+ice ""S 8 =uilt*in 5?P Ser+er
%esume 5?P Ser+ice ""S 8 =uilt*in 5?P Ser+er
Start 5?P Ser+ice ""S 8 =uilt*in 5?P Ser+er
Stop 5?P Ser+ice ""S 8 =uilt*in 5?P Ser+er
&ist 5?P Sites ""S 8 5?P Ser+er
Pause 5?P Ser+ice ""S 8 5?P Ser+er
%esume 5?P Ser+ice ""S 8 5?P Ser+er
Start 5?P Ser+ice ""S 8 5?P Ser+er
Stop 5?P Ser+ice ""S 8 5?P Ser+er
&ist status for all ""S Ser+ices ""S 8 Ser+er %ole
%estart all ""S Ser+ices ""S 8 Ser+er %ole
Start all ""S Ser+ices ""S 8 Ser+er %ole
Start ""SA2M"- ser+ice ""S 8 Ser+er %ole
Start 'eb Management ser+ice ""S 8 Ser+er %ole
Stop all ""S Ser+ices ""S 8 Ser+er %ole
11
$ame ,arget
Stop ""SA2M"- Ser+ice ""S 8 Ser+er %ole
Stop 'eb Management Ser+ice ""S 8 Ser+er %ole
&ist All ""S Applications ""S 8 'eb Ser+er
&ist All ""S 'orker Processes ""S 8 'eb Ser+er
&ist All 'eb Sites ""S 8 'eb Ser+er
&ist Application Pools ""S 8 'eb Ser+er
Start 'ASCC Ser+ice ""S 8 'eb Ser+er
Start 'AS Ser+ice ""S 8 'eb Ser+er
Stop 'ASCC Ser+ice ""S 8 'eb Ser+er
2isable 5ailed %eGuest ?racing ""S 8 'eb Site
0nable 5ailed %eGuest ?racing ""S 8 'eb Site
&ist 'eb Site Properties ""S 8 'eb Site
Start 'eb Site ""S 8 'eb Site
Stop 'eb Site ""S 8 'eb Site
Pause SM?P Ser+ice 'indos 2007 SM?P Ser+er
%esume SM?P Ser+ice 'indos 2007 SM?P Ser+er
Start SM?P Ser+ice 'indos 2007 SM?P Ser+er
Stop SM?P Ser+ice 'indos 2007 SM?P Ser+er
"iagnostics Configured to 6se the Privi!eged Monitoring
-ccount Run -s Profi!e
$ame ,arget Monitor $ame
&ist 'eb Site Properties ""S 8 'eb Site "n+alid 'eb Site =indings
Computer Groups
>ou can delegate authorit! to a precise le+el ith user roles. 5or more information about user
roles# see the KAbout $ser %oles in 3perations Manager 2008K topic in the 3perations
Manager 2008 @elp .http:44go.microsoft.com4flink4H&ink"dI107A98/.
?he folloing computer groups can be used for scoping and roles authori)ation:
12
""S 8 Computer ;roup
""S 8 Ser+er %ole "nstance ;roup
6nderstanding Management Pack
Operations
?he "nternet "nformation Ser+ices 8 Management Pack manages the logical parts of ""S 8 that an
operator or administrator is interested in# such as monitoring# configuring# and reporting. ?he
management pack monitors the health of the ""S 8 ser+er role and pro+ides the administrator ith
a state +ie of the role.
O78ects the Management Pack "iscovers
?he "nternet "nformation Ser+ices 8 Management Pack disco+ers the ob(ect t!pes described in
the folloing table. All ob(ects are automaticall! disco+ered if the underl!ing ser+ice startup t!pe
is set to Automatic. $se o+errides to disco+er ob(ects that are not disco+ered automaticall!
.underl!ing ser+ice startup t!pe is set to Manual/. 5or information about disco+ering ob(ects# see
the K3b(ect 2isco+eries in 3perations Manager 2008K topic in 3perations Manager 2008 @elp
.http:44go.microsoft.com4flink4H&ink"dI107909/.
O78ect ,ype -utomatica!!y "iscovered9
""S 8 Computer ;roup >es
""S 8 Ser+er %ole >es
""S 8 Ser+er %ole "nstance ;roup >es
""S 8.0 =uilt*in 5?P Ser+er >esL
""S 8 5?P Ser+er >esL
""S 8 5?P Site >es
'indos Ser+er 2007 SM?P Ser+er >es
'indos Ser+er 2007 SM?P Cirtual Ser+er >es
""S 8 'eb Ser+er >es
""S 8 'eb Site >es
""S 8 Application Pool >es
""S 8 ASP.-0? Application 0ndpoint >es
""S 8 ASP.-0? 'eb Ser+ice 0ndpoint >es
1A
L?he difference beteen the ""S 8.0 =uilt*in 5?P Ser+er and the ""S 8 5?P Ser+er is that the
""S 8.0 =uilt*in 5?P Ser+er shipped in 'indos Ser+er 2007 and is installed using Ser+er
Manager. ?he ""S 8 5?P Ser+er is a neer +ersion that shipped after 'indos Ser+er 2007 and
reGuires separate installation. "n 'indos Ser+er 2007 %2# the ""S 8 5?P Ser+er is alread!
included and is installed using Ser+er Manager.
Overrides to 5na7!e "iscovery
?he disco+eries in the table belo ha+e a parameter that controls the disco+er! of the ob(ect
hen the associated ser+ice startup t!pe is Automatic. =! default# the parameter +alue is ?rue so
that the ob(ect is disco+ered if the associated ser+ice startup t!pe is Automatic. "f the associated
ser+ice startup t!pe is Manual# the ob(ect is not disco+ered.
$se the folloing 2isco+er! information to o+erride the default parameter +alue for ob(ects !ou
ant the management pack to disco+er hen the underl!ing ser+ice startup t!pe is Manual.
"iscovery $ame "iscovered ,ype Parameter $ame
""S 8.0 =uilt*in 5?P Ser+er
2isco+er!
""S 8.0 =uilt*in 5?P Ser+er 2isco+er 5?P Ser+er hen the
ser+ice startup t!pe is
Automatic
""S 8 5?P Ser+er 2isco+er! ""S 8 5?P Ser+er 2isco+er 5?P Ser+er hen the
ser+ice startup t!pe is
Automatic
'indos Ser+er 2007 SM?P
Ser+er 2isco+er!
'indos Ser+er 2007 SM?P
Ser+er
2isco+er SM?P Ser+er hen
the ser+ice startup t!pe is
Automatic
'arning
=! default# this management pack ill onl! disco+er the 5?P Ser+er# =uilt*in 5?P Ser+er#
and SM?P Ser+er ob(ects if the underl!ing ser+ice startup t!pe for each is Automatic.
"f the underl!ing ser+ice startup t!pe for the ob(ects is Manual# e recommend that !ou
create an o+erride for the Ser+ice Status monitor for the ob(ects and that !ou o+erride the
disco+eries to disco+er the ob(ects e+en though the ser+ice is not started b! default. "f the
ob(ect ser+ice startup t!pe is Manual and !ou do not create an o+erride for the Ser+ice
Status monitor# the management pack ill not generate alerts if the ser+ice stops.
,asks
?he administrator can perform a set of basic management tasks ithout sitching to another
console. ?he table displa!s the predefined tasks included in this management pack.
1D
'e7 site -pp!ication poo! IIS server
Start or stop Start# stop# or rec!cle &ist status of ser+ices
0nable or disable failed
reGuest tracing
&ist orker processes Start or stop 'eb management
ser+ices
&ist 'eb site properties Start# stop# pause ""S Admin
ser+ice
LStart# stop# restart all ""S
ser+ices
L?he Start All ""S Ser+ices task does not start the 5?P or SM?P ser+ices. ?his task uses the
""S%0S0?.e,e command# hich starts onl! those ""S ser+ices ith a Startup t!pe set to
Automatic. =! default# the Startup t!pe for 5?P and SM?P ser+ices is Manual.
C!asses
?he folloing diagram shos the classes defined in this management pack.
o) ea!th Ro!!s 6p
?he folloing diagram shos ho the health states of components roll up in this management
pack.
19
:ey Monitoring Scenarios
?he list belo describes common monitoring scenarios.
Monitor the 'eb Ser+er status and the status of the folloing ser+ices: 'eb management#
5?P# SM?P# 'indos Process Acti+ation Ser+ice .'AS/.
Monitor that the folloing are running and a+ailable: 'eb site# Application Pool# 5?P Site#
SM?P Cirtual Ser+er.
2etect an alert on configuration and resource errors logged b! ""S 8 components.
Monitor application pool rec!cling e+ents to detect application pools hich ma! be e,ecuting
code that is generating memor! leaks or other memor! usage problems# and then change the
health state accordingl!.
P!acing Monitored O78ects in Maintenance Mode
'hen a monitored ob(ect# such as a computer or distributed application# goes offline for
maintenance# 3perations Manager 2008 detects that no agent heartbeat is being recei+ed and#
as a result# might generate numerous alerts and notifications. ?o pre+ent alerts and notifications#
place the monitored ob(ect into maintenance mode. "n maintenance mode# alerts# notifications#
rules# monitors# automatic responses# state changes# and ne alerts are suppressed at the agent.
5or general instructions on placing a monitored ob(ect in maintenance mode# see @o to Put a
Monitored 3b(ect into Maintenance Mode in 3perations Manager 2008
.http:44go.microsoft.com4flink4H&ink"dI107A97/.
1<
Overriding the "efau!t "iscovery Interva!
?he default inter+al for disco+ering ""S management pack ob(ects is four hours. >ou can o+erride
this inter+al depending on !our business en+ironment. ?o do so# use the folloing steps:
1. "n the 3perations Console# click the -uthoring button.
2. 0,pand Management Pack O78ects# and then click O78ect "iscoveries.
A. "n the O78ect "iscoveries pane# e,pand the targets until !ou reach the desired
2isco+er! orkflo.
D. "n the -ctions pane# click Overrides.
9. Select Override O78ect "iscovery# and then choose the scope for the o+erride from the
list of options. .-ote: 5or some options !ou ma! be reGuired to identif! the instances or
groups to o+erride./
<. Click the Override checkbo, for the parameter that specifies the time inter+al for the
2isco+er!.
8. 0nter the +alue in seconds in the Override Setting column. 5or e,ample# to run the
2isco+er! e+er! hour# !ou ould enter A<00.
7. Click O:.
Resetting the ea!th State of 6nhea!thy 6nit
Monitors
?he folloing $nit Monitors do not automaticall! reset their @ealth State after the s!stem has
returned to a health! state. 5or e,ample# if one of the folloing $nit Monitors reports an
unhealth! state# it ill not update its state to health! after the problem has been resol+ed.
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.@??P.&istening.?o.?oo.Man!.Ports.
Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite."n+alidApplicationPool.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.?he.identit!.of.the.application.pool.is.in+alid.
Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'AS.5ailed.?o.Process.Configuratio
n%eGuest.5or.'ebSite.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'AS.has.encountered.an.error.during.the.S"
2.mapping.for.the.application.pool.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'AS.did.not.process.changes.that.a
ffect.the.eb.site.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.Application.Pool.disabled.due.to.orker.proce
ss.failure.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite."n+alid=indings.Monitor
18
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.5ailed.?o."nitiali)e.&ogging.5or.'eb
Site.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite."n+alid$%&.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'AS.2id.-ot.Create.Site.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.%ootApplication2efined.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.2uplicate=inding.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.ApplicationPool.Memor!&eak.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.Application.pool.disabled.due.to.'AS.reGuest
.failure.Monitor
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite."P.Address.-ot."n.@??P.S!s."P.&iste
n.&ist.Monitor
?o reset the health state for one of these $nit Monitors# use the folloing steps:
1. "n the 3perations Console# click the Monitoring button.
2. "n the Monitoring pane# e,pand the Microsoft 'indo)s Internet Information Services
folder.
A. Click on the -ctive -!erts alert +ie.
D. "n the -ctive -!erts pane# select the =$;=$;.
9. "n the -ctions pane# click ea!th 5;p!orer.
<. "n the ea!th 5;p!orer dialog bo,# select the health monitor that is reporting an
unhealth! state.
8. Click Reset ea!th on the toolbar.
7. Click +es hen prompted to reset the health monitor.
5na7!ing Ru!es and "iscoveries that are "isa7!ed
7y "efau!t
?he folloing %ules and 2isco+eries are disabled b! default:
Microsoft.'indos."nternet"nformationSer+ices.2007.ApplicationPool.@ttpSer+ice%eGuestMueuesC
urrentMueueSi)e
Microsoft.'indos."nternet"nformationSer+ices.2007.ApplicationPool.@ttpSer+ice%eGuestMueues%
e(ection%ate
Microsoft.'indos."nternet"nformationSer+ices.2007.2ot-etC&%Memor!Percentage3f?ime"n;C
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed.?o.Perform."nitiali)ation.3f.""S.2isco+e
r!.Module
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed.?o.Perform.'eb.Application.2isco+er!
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed.?o.Perform.'eb.Ser+er.Properties.2is
co+er!
17
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed.?o.Perform.'eb.Site.2isco+er!
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?o5indApplicationPool'hile%etrie+ingS
tate
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?o5indSite'hileAttempting?o%etrie+eS
tate
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?oPerformApplicationPool2isco+er!
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?oPerform5?PSer+er2isco+er!
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?oPerform5?PSite2isco+er!
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?oPerform""SComponent2isco+er!2ue"
nsufficientPri+s
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?oPerform"nitiali)ation3f""SStateMonito
ringModule
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailed?o%etrie+eSiteState
Microsoft.'indos."nternet"nformationSer+ices.2007.5ailled?o%etrie+eApplicationPoolState
Microsoft.'indos."nternet"nformationSer+ices.2007.5?PSer+er.5?PSer+ice=!tes%ecei+edSec.Co
llection
Microsoft.'indos."nternet"nformationSer+ices.2007.5?PSer+er.5?PSer+ice=!tesSentSec.Collecti
on
Microsoft.'indos."nternet"nformationSer+ices.2007.5?PSite.5?PSer+ice=!tes%ecei+edSec.Colle
ction
Microsoft.'indos."nternet"nformationSer+ices.2007.5?PSite.5?PSer+ice=!tesSentSec.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.5?PSite.5?PSer+ice=!tes?otalSec.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.5?PSite.5?PSer+iceCurrentConnections.Coll
ection
Microsoft.'indos."nternet"nformationSer+ices.2007.&egac!5?PSer+er.5?PSer+ice=!tes%ecei+ed
Sec.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.&egac!5?PSer+er.5?PSer+ice=!tesSentSec.
Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.&egac!5?PSite.5?PSer+ice=!tes%ecei+edSe
c.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.&egac!5?PSite.5?PSer+ice=!tesSentSec.Co
llection
Microsoft.'indos."nternet"nformationSer+ices.2007.&egac!5?PSite.5?PSer+ice=!tes?otalSec.Co
llection
Microsoft.'indos."nternet"nformationSer+ices.2007.&egac!5?PSite.5?PSer+iceCurrentConnectio
ns.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.$nable?o&oadModules
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.Acti+eSer+erPages%eGuests-ot5
ound.Collection
16
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.Acti+eSer+erPages%eGuestsMue
ued.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.Acti+eSer+erPages%eGuestsSec.
Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.Acti+eSer+erPages%eGuest'ait?i
me.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.ASP.-0?Applications0rrors?otalS
ec.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.ASP.-0?Applications%eGuests"n
ApplicationMueue.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.ASP.-0?Applications%eGuestsSe
c.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.ASP.-0?%eGuestsCurrent.Collect
ion
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.ASP.-0?%eGuestsMueued.Collec
tion
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.ASP.-0?%eGuest'ait?ime.Collec
tion
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.ASP.-0?'orkerProcess%estarts.
Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.2ot-etC&%Memor!"nduced;C
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.-umber3f2ot-et0,ceptions?hro
nPerSecond
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.'ebSer+iceCurrent"SAP"0,tensio
n%eGuests.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSer+er.'ebSer+ice"SAP"0,tension%eGu
estsSec.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'ebSer+ice=!tes%ecei+edSec.Coll
ection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'ebSer+ice=!tesSentSec.Collectio
n
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'ebSer+ice=!tes?otalSec.Collectio
n
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'ebSer+iceCurrentConnections.Coll
ection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'ebSer+iceCurrent"SAP"0,tension
%eGuests.Collection
Microsoft.'indos."nternet"nformationSer+ices.2007.'ebSite.'ebSer+ice"SAP"0,tension%eGuest
sSec.Collection
20
?o enable one of these %ules or 2isco+eries# use the folloing steps:
1. "n the 3perations Console# click the -uthoring button.
2. 0,pand Management Pack O78ects# and then click Ru!es.
A. Select the rule that !ou ant to enable in the Ru!es pane.
D. "n the -ctions pane# click 5na7!e.
-ppendi; -< Monitors and Ru!es for
Management Packs
?his section pro+ides detailed procedures and scripts that allo !ou to displa! rules and other
information about the management packs !ou import.
o) to %ie) Management Pack "etai!s
5or more information about a monitor and the associated o+erride +alues# see the knoledge for
the monitor.
,o vie) kno)!edge for a monitor
1. "n the 3perations Console# click the -uthoring button.
2. 0,pand Management Pack O78ects# and then click Monitors.
A. "n the Monitors pane# e,pand the targets until !ou reach the monitor le+el. Alternati+el!#
!ou can use the Search bo, to find a particular monitor.
D. Click the monitor# and in the Monitors pane# click %ie) kno)!edge.
9. Click the Product :no)!edge tab.
6nit Monitors for a Management Pack
>ou can displa! unit monitors for "nternet "nformation Ser+ices 8 components# for a set of
'indos -? ser+ices# and for e+ents in the e+ent log.
?he folloing applies to all unit monitors listed in the tables belo:
All are enabled b! default
All generate an alert b! default .unless otherise noted/. ?his can be changed b! creating an
o+erride.
6nit monitors< IIS Components
21
$ame ,arget Interva! =sec> Severity -uto Reso!ve
Application pool
a+ailabilit!
""S 8 application
pool
<0 0rror ?rue
5?P site
a+ailabilit!
""S 8.0 =uilt*in 5?P
ser+er site
<0 0rror ?rue
5?P site
a+ailabilit!
""S 8 5?P site <0 0rror ?rue
'eb site
a+ailabilit!
""S 8 'eb site <0 0rror ?rue
SM?P Cirtual
Ser+er a+ailabilit!
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
<0 0rror ?rue
6nit monitors< 'indo)s $, Services
$ame ,arget Service Interva!
=sec>
Severity -uto
Reso!ve
5?P ser+ice
a+ailabilit!
""S 8.0 built*in
5?P ser+er
MS5?PSCC <0 0rror ?rue
5?P ser+ice
a+ailabilit!
""S 8 5?P ser+er 5?PSCC <0 0rror ?rue
""SAdmin ser+ice
a+ailabilit!
""S 8 ser+er role ""SA2M"- <0 0rror ?rue
'eb
Management
Ser+ice
a+ailabilit!
""S 8 ser+er role 'MSCC <0 'arning ?rue
'indos
Process
Acti+ation
Ser+ice
a+ailabilit!L
""S 8 'eb
ser+er
'AS <0 0rror ?rue
'orld 'ide 'eb
Publishing
Ser+ice
a+ailabilit!
""S 8 'eb
ser+er
'ASCC <0 0rror ?rue
22
$ame ,arget Service Interva!
=sec>
Severity -uto
Reso!ve
SM?P Ser+ice
a+ailabilit!
'indos
Ser+er 2007
SM?P ser+er
SM?PSCC <0 0rror ?rue
L?his ser+ice is monitored e+en though the default Startup t!pe is Manual.
6nit monitors< 5vent &og
$ame ,arget &og Source 5vent Severity -uto
Reso!ve
Application
pool disabled
due to
'indos
Process
Acti+ation
Ser+ice .'AS/
reGuest failure.
""S 8
application
pool
S!stem Microsoft*
'indos*
'AS
91DD 0rror ?rue
Application
pool disabled
due to orker
process failure.
""S 8
application
pool
S!stem Microsoft*
'indos*
'AS
9002#
9096
0rror ?rue
Application
pool identit! is
in+alid.
""S 8
application
pool
S!stem Microsoft*
'indos*
'AS
9021#
9098
0rror ?rue
Potential
memor! leak in
'eb
application
code.
""S 8
application
pool
S!stem Microsoft*
'indos*
'AS
9118#
9088
'arning ?rue
'indos
Process
Acti+ation
Ser+ice .'AS/
has
encountered an
error during the
securit!
""S 8
application
pool
S!stem Microsoft*
'indos*
'AS
9160 0rror ?rue
2A
$ame ,arget &og Source 5vent Severity -uto
Reso!ve
identifier .S"2/
mapping for the
application
pool.
Configuration
reGuest for
'eb site failed.
""S 8 'eb
site
S!stem Microsoft*
'indos*
'AS
9190 0rror ?rue
Could not
initiali)e the
logging module
for 'eb site.
""S 8 'eb
site
Application Microsoft*
'indos*
""S*'ASCC*
'P
2281 0rror ?rue
@??P.s!s has
been
configured to
listen to too
man! ports.
""S 8 'eb
site
S!stem Microsoft*
'indos*
""S*'MSCC
11A1 0rror ?rue
"n+alid
application
path.
""S 8 'eb
site
S!stem Microsoft*
'indos*
'AS
909<#
91<1
0rror ?rue
"n+alid 'eb
site bindings.
""S 8 'eb
site
S!stem Microsoft*
'indos*
""S*'ASC
1026#
100D#
1182#
10D0
0rror ?rue
"n+alid 'eb
site $%&.
""S 8 'eb
site
S!stem Microsoft*
'indos*
""S*'MSCC
100A 0rror ?rue
"P address for
the site is not in
the @??P.s!s
"P listen list.
""S 8 'eb
site
S!stem Microsoft*
'indos*
""S*'MSCC
1126#
11A0
0rror ?rue
'eb site
binding is
alread! in use.
""S 8 'eb
site
S!stem Microsoft*
'indos*
""S*'MSCC
1008 0rror ?rue
'eb site is
configured to
use in+alid
application
""S 8 'eb
site
S!stem Microsoft*
'indos*
'AS
9099 0rror ?rue
2D
$ame ,arget &og Source 5vent Severity -uto
Reso!ve
pool.
'indos
Process
Acti+ation
Ser+ice .'AS/
did not create
site.
""S 8 'eb
site
S!stem Microsoft*
'indos*
'AS
9102 0rror ?rue
'indos
Process
Acti+ation
Ser+ice .'AS/
did not process
changes that
affect the 'eb
site.
""S 8 'eb
site
S!stem Microsoft*
'indos*
'AS
91DA 0rror ?rue
"ependency Monitors for a Management Pack
?he folloing table displa!s the dependenc! monitors enabled b! default in the "nternet
"nformation Ser+ices .""S/ 8 management pack.
"ependency monitors
$ame ,arget -!gorithm Generate -!ert
""S a+ailabilit! health
state depends on built*in
5?P Ser+ice.
""S 8 ser+er role 'orst3f 5alse
""S a+ailabilit! health
state depends on 5?P
Ser+ice.
""S 8 ser+er role 'orst3f 5alse
""S a+ailabilit! health
state depends on SM?P
Ser+ice.
""S 8 ser+er role 'orst3f 5alse
""S a+ailabilit! health
state depends on 'orld
'ide 'eb Publishing
Ser+ice.
""S 8 ser+er role 'orst3f 5alse
29
$ame ,arget -!gorithm Generate -!ert
'eb site a+ailabilit!
health state depends on
application pool.
""S 8 'eb site 'orst3f 5alse
'eb site configuration
health depends on
application pool.
""S 8 'eb site 'orst3f 5alse
Performance Co!!ection Ru!es for a Management
Pack
?he folloing tables displa! information about the performance collection rules in the "nternet
"nformation Ser+ices .""S/ 8 management pack. ?he folloing applies to all performance
collection rules listed belo:
2efault inter+al .in seconds/: A00
Alerts are not generated.
Performance Co!!ection Ru!es 5na7!ed 7y "efau!t
?he performance collection rules in the list are enabled b! default in this management pack.
$ame ,arget O78ect Counter
5?P Ser+iceN=!tes
?otal4sec
""S 8.0 built*in 5?P
ser+er
5?P Ser+ice =!tes ?otal4sec
5?P Ser+iceNCurrent
Connections
""S 8.0 built*in 5?P
ser+er
5?P Ser+ice Current Connections
5?P Ser+iceN=!tes
?otal4sec
""S 8 5?P ser+er Microsoft 5?P
Ser+ice
=!tes ?otal4sec
5?P Ser+iceNCurrent
Connections
""S 8 5?P ser+er Microsoft 5?P
Ser+ice
Current Connections
'eb Ser+iceN=!tes
%ecei+ed4sec
""S 8 'eb ser+er 'eb Ser+ice =!tes %ecei+ed4sec
'eb Ser+iceN=!tes
Sent4sec
""S 8 'eb ser+er 'eb Ser+ice =!tes Sent4sec
'eb Ser+iceN=!tes
?otal4sec
""S 8 'eb ser+er 'eb Ser+ice =!tes ?otal4sec
'eb Ser+iceNConnection ""S 8 'eb ser+er 'eb Ser+ice Connection
2<
$ame ,arget O78ect Counter
Attempts4sec Attempts4sec
'eb Ser+iceNCurrent
Connections
""S 8 'eb ser+er 'eb Ser+ice Current Connections
'eb Ser+iceN?otal Method
%eGuests4sec
""S 8 'eb ser+er 'eb Ser+ice ?otal Method
%eGuests4sec
SM?P Ser+erN=!tes
%ecei+ed4sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er =!tes %ecei+ed4sec
SM?P Ser+erN=!tes
Sent4sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er =!tes Sent4sec
SM?P Ser+erN=!tes
?otal4sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er =!tes ?otal4sec
SM?P Ser+erN"nbound
Connections Current
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er "nbound Connections
Current
SM?P Ser+erNMessage
=!tes %ecei+ed4Sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er Message =!tes
%ecei+ed4sec
SM?P Ser+erNMessage
=!tes Sent4Sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er Message =!tes
Sent4sec
SM?P Ser+erNMessages
2eli+ered4Sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er Messages
2eli+ered4sec
SM?P Ser+erNMessages
%ecei+ed4Sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er Messages
%ecei+ed4sec
SM?P Ser+erNMessages
Sent4Sec
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er Messages Sent4sec
SM?P Ser+erN3utbound
Connections Current
'indos
Ser+er 2007 SM?P
ser+er
SM?P Ser+er 3utbound Connections
Current
SM?P Ser+erN?otal 'indos SM?P Ser+er ?otal Messages
28
$ame ,arget O78ect Counter
Messages Submitted Ser+er 2007 SM?P
ser+er
Submitted
SM?P Ser+erN=!tes
%ecei+ed4sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er =!tes %ecei+ed4sec
SM?P Ser+erN=!tes
Sent4sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er =!tes Sent4sec
SM?P Ser+erN=!tes
?otal4sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er =!tes ?otal4sec
SM?P Ser+erN"nbound
Connections Current
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er "nbound Connections
Current
SM?P Ser+erNMessage
=!tes %ecei+ed4Sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er Message =!tes
%ecei+ed4sec
SM?P Ser+erNMessage
=!tes Sent4Sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er Message =!tes
Sent4sec
SM?P Ser+erNMessages
2eli+ered4Sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er Messages
2eli+ered4sec
SM?P Ser+erNMessages
%ecei+ed4Sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er Messages
%ecei+ed4sec
SM?P Ser+erNMessages
Sent4Sec
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er Messages Sent 4sec
SM?P Ser+erN3utbound
Connections Current
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er 3utbound Connections
Current
SM?P Ser+erN?otal
Messages Submitted
'indos
Ser+er 2007 SM?P
Cirtual Ser+er
SM?P Ser+er ?otal Messages
Submitted
27
Performance Co!!ection Ru!es "isa7!ed 7y "efau!t
?he performance collection rules in the list are disabled b! default in this management pack.
$ame ,arget O78ect Counter
@??P Ser+ice %eGuest
MueuesNCurrent Mueue Si)e
""S 8 application
pool
@??P Ser+ice
%eGuest Mueues
CurrentMueueSi)e
@??P Ser+ice %eGuest
MueuesN%e(ection %ate
""S 8 application
pool
@??P Ser+ice
%eGuest Mueues
%e(ection%ate
5?P Ser+iceN=!tes
%ecei+ed4sec
""S 8.0 built*in
5?P ser+er
5?P Ser+ice =!tes %ecei+ed4sec
5?P Ser+iceN=!tes Sent4sec ""S 8.0 built*in
5?P ser+er
5?P Ser+ice =!tes Sent4sec
5?P Ser+iceN=!tes
%ecei+ed4sec
""S 8.0 built*in
5?P ser+er site
5?P Ser+ice =!tes %ecei+ed4sec
5?P Ser+iceN=!tes Sent4sec ""S 8.0 built*in
5?P ser+er site
5?P Ser+ice =!tes Sent4sec
5?P Ser+iceN=!tes ?otal4sec ""S 8.0 built*in
5?P ser+er site
5?P Ser+ice =!tes ?otal4sec
5?P Ser+iceNCurrent
Connections
""S 8.0 built*in
5?P ser+er site
5?P Ser+ice Current Connections
5?P Ser+iceN=!tes
%ecei+ed4sec
""S 8 5?P ser+er Microsoft 5?P
Ser+ice
=!tes %ecei+ed4sec
5?P Ser+iceN=!tes Sent4sec ""S 8 5?P ser+er Microsoft 5?P
Ser+ice
=!tes Sent4sec
5?P Ser+iceN=!tes
%ecei+ed4sec
""S 8 5?P site Microsoft 5?P
Ser+ice
=!tes %ecei+ed4sec
5?P Ser+iceN=!tes Sent4sec ""S 8 5?P site Microsoft 5?P
Ser+ice
=!tes Sent4sec
5?P Ser+iceN=!tes ?otal4sec ""S 8 5?P site Microsoft 5?P
Ser+ice
=!tes ?otal4sec
5?P Ser+iceNCurrent
Connections
""S 8 5?P site Microsoft 5?P
Ser+ice
Current Connections
.-0? C&% 0,ceptionsNO
0,ceptions ?hron4sec
""S 8 'eb ser+er .-0? C&%
0,ceptions
O of 0,ceps ?hron4sec
.-0? C&% Memor!NO "nduced
;C
""S 8 'eb ser+er .-0? C&%
Memor!
O "nduced ;C
26
$ame ,arget O78ect Counter
.-0? C&% Memor!NP ?ime in
;C
""S 8 'eb ser+er .-0? C&%
Memor!
P ?ime in ;C
Acti+e Ser+er PagesN%eGuest
'ait ?ime
""S 8 'eb ser+er Acti+e Ser+er
Pages
%eGuest 'ait ?ime
Acti+e Ser+er PagesN%eGuests
-ot 5ound
""S 8 'eb ser+er Acti+e Ser+er
Pages
%eGuests -ot 5ound
Acti+e Ser+er PagesN%eGuests
Mueued
""S 8 'eb ser+er Acti+e Ser+er
Pages
%eGuests Mueued
Acti+e Ser+er
PagesN%eGuests4Sec
""S 8 'eb ser+er Acti+e Ser+er
Pages
%eGuests4Sec
ASP.-0? ApplicationsN0rrors
?otal4Sec
""S 8 'eb ser+er ASP.-0?
Applications
0rrors ?otal4Sec
ASP.-0?
ApplicationsN%eGuests "n
Application Mueue
""S 8 'eb ser+er ASP.-0?
Applications
%eGuests "n Application
Mueue
ASP.-0?
ApplicationsN%eGuests4Sec
""S 8 'eb ser+er ASP.-0?
Applications
%eGuests4Sec
ASP.-0?N%eGuest 'ait ?ime ""S 8 'eb ser+er ASP.-0? %eGuest 'ait ?ime
ASP.-0?N%eGuests Current ""S 8 'eb ser+er ASP.-0? %eGuests Current
ASP.-0?N%eGuests Mueued ""S 8 'eb ser+er ASP.-0? %eGuests Mueued
ASP.-0?N'orker Process
%estarts
""S 8 'eb ser+er ASP.-0? 'orker Process
%estarts
'eb Ser+iceNCurrent "SAP"
0,tension %eGuests4sec
""S 8 'eb ser+er 'eb Ser+ice Current "SAP" 0,tension
%eGuests
'eb Ser+iceN"SAP" 0,tension
%eGuests4sec
""S 8 'eb ser+er 'eb Ser+ice "SAP" 0,tension
%eGuests4sec
'eb Ser+iceN=!tes
%ecei+ed4sec
""S 8 'eb site 'eb Ser+ice =!tes %ecei+ed4sec
'eb Ser+iceN=!tes Sent4sec ""S 8 'eb site 'eb Ser+ice =!tes Sent4sec
'eb Ser+iceN=!tes ?otal4sec ""S 8 'eb site 'eb Ser+ice =!tes ?otal4sec
'eb Ser+iceNCurrent
Connections
""S 8 'eb site 'eb Ser+ice Current Connections
'eb Ser+iceNCurrent "SAP"
0,tension %eGuests
""S 8 'eb site 'eb Ser+ice Current "SAP" 0,tension
A0
$ame ,arget O78ect Counter
%eGuests
'eb Ser+iceN"SAP" 0,tension
%eGuests4sec
""S 8 'eb site 'eb Ser+ice "SAP" 0,tension
%eGuests4sec
5vent &og Ru!es for a Management Pack
?he folloing tables displa! information about the e+ent log rules in the "nternet "nformation
Ser+ices .""S/ 8 management pack.
5vent &og Ru!es 5na7!ed 7y "efau!t
?he e+ent log rules in the table belo are enabled b! default and generate alerts b! default.
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
Application pool has an
"dle?imeout eGual to or greater
than the Periodic%estart time.
""S 8
application
pool
9192 Microsoft*
'indos*
'AS
S!stem 'arning
Application pool orker process is
unresponsi+e.
""S 8
application
pool
9010#
9011#
9012#
901A
Microsoft*
'indos*
'AS
S!stem 'arning
Application pool orker process
terminated une,pectedl!.
""S 8
application
pool
9006 Microsoft*
'indos*
'AS
S!stem 'arning
Qob ob(ect associated ith the
application pool encountered an
error.
""S 8
application
pool
9077#
90<1#
90<0
Microsoft*
'indos*
'AS
S!stem 'arning
'indos Process Acti+ation
Ser+ice .'AS/ did not appl!
configuration changes to
application pool.
""S 8
application
pool
9079 Microsoft*
'indos*
'AS
S!stem 'arning
'indos Process Acti+ation
Ser+ice .'AS/ did not run the
automatic shutdon e,ecutable
for application pool.
""S 8
application
pool
909D#
9061
Microsoft*
'indos*
'AS
S!stem 0rror
'indos Process Acti+ation
Ser+ice .'AS/ encountered a
""S 8
application
9097 Microsoft*
'indos*
S!stem 'arning
A1
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
failure hile setting the affinit!
mask of an application pool.
pool 'AS
'indos Process Acti+ation
Ser+ice .'AS/ encountered an
internal error hile managing a
orker process.
""S 8
application
pool
901D Microsoft*
'indos*
'AS
S!stem 'arning
'indos Process Acti+ation
Ser+ice .'AS/ failed to create
application pool.
""S 8
application
pool
9101 Microsoft*
'indos*
'AS
S!stem 0rror
'indos Process Acti+ation
Ser+ice .'AS/ failed to issue
rec!cle reGuest to application
pool.
""S 8
application
pool
9080#
906A
Microsoft*
'indos*
'AS
S!stem 'arning
'orker process for application
pool encountered an error hile
tr!ing to read global module
configuration.
""S 8
application
pool
2268 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
'orker process ser+ing an
application pool reported a failure.
""S 8
application
pool
90A6 Microsoft*
'indos*
'AS
S!stem 'arning
'orker process ser+ing
application pool as orphaned.
""S 8
application
pool
9019 Microsoft*
'indos*
'AS
S!stem 'arning
'orker process ser+ing the
application pool is no longer
trusted b! 'indos Process
Acti+ation Ser+ice .'AS/.
""S 8
application
pool
9128 Microsoft*
'indos*
'AS
S!stem 'arning
'orld 'ide 'eb Publishing
Ser+ice encountered an error
hen it tried to secure the handle
of the application pool.
""S 8
application
pool
102< Microsoft*
'indos*
""S*
'ASCC
S!stem 'arning
'orld 'ide 'eb Publishing
Ser+ice failed to properl!
configure the application pool
Gueue length.
""S 8
application
pool
1078 Microsoft*
'indos*
""S*
'ASCC
S!stem 'arning
A2
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
'orld 'ide 'eb Publishing
Ser+ice failed to properl!
configure the load balancer
capabilities on application pool.
""S 8
application
pool
107< Microsoft*
'indos*
""S*
'ASCC
S!stem 'arning
A script has not responded ithin
the configured time*out period.
""S 8 'eb
ser+er
221< Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
A ser+er*side*include file has
included itself# or the ma,imum
depth of ser+er*side include files
has been e,ceeded.
""S 8 'eb
ser+er
2221 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
An attempt as made to load an
"SAP" filter on a ser+er instance#
but because it reGuires the
S5R-3?"5>R%0A2R%A'R2A?A
filter notification# it must be loaded
as a global filter.
""S 8 'eb
ser+er
2222 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
ASP application error occurred. ""S 8 'eb
ser+er
900#
D66#
2A# 22#
21# 20#
16# 17#
18# 1<#
6# 7# 8#
<# 9
Acti+e
Ser+er
Pages
Application 'arning
@??P control channel for the
'orld 'ide 'eb Publishing
Ser+ice did not open.
""S 8 'eb
ser+er
10A8 Microsoft*
'indos*
""S*
'ASCC
S!stem 'arning
@??P Ser+er could not create a
client connection ob(ect for user.
""S 8 'eb
ser+er
2207 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
@??P Ser+er could not create the ""S 8 'eb 220< Microsoft* Application 'arning
AA
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
main connection socket. ser+er 'indos*
""S*
'ASCC*
'P
@??P Ser+er could not initiali)e
its securit!.
""S 8 'eb
ser+er
2201 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
@??P Ser+er could not initiali)e
the socket librar!.
""S 8 'eb
ser+er
220A Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
@??P Ser+er as unable to
initiali)e because of a shortage of
a+ailable memor!.
""S 8 'eb
ser+er
220D Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
"SAP" application error detected. ""S 8 'eb
ser+er
228D#
22<7#
2220#
2216#
221D
Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
Module has an in+alid
precondition.
""S 8 'eb
ser+er
226< Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
Module registration error detected
.failed to find %egisterModule
entr! point/.
""S 8 'eb
ser+er
2269 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
Module registration error detected
.module returned an error during
registration/.
""S 8 'eb
ser+er
226A Microsoft*
'indos*
""S*
'ASCC*
Application 'arning
AD
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
'P
3nl! one t!pe of logging can be
enabled at a time.
""S 8 'eb
ser+er
11AA Microsoft*
'indos*
""S*
'ASCC
S!stem 'arning
S5R-3?"5>R%0A2R%A'R2A?A
filter notification is not supported
in ""S 8.
""S 8 'eb
ser+er
22<1 Microsoft*
'indos*
""S*
'ASCC*
'P.
Application 'arning
?he configuration manager for
'indos Process Acti+ation
Ser+ice .'AS/ did not initiali)e.
""S 8 'eb
ser+er
90A< Microsoft*
'indos*
'AS
S!stem 0rror
?he director! specified for
caching compressed content is
in+alid.
""S 8 'eb
ser+er
22<D Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
?he ;lobal Modules list is empt!. ""S 8 'eb
ser+er
2267 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
?he @??P ser+er encountered an
error processing the ser+er*side
include file.
""S 8 'eb
ser+er
2217 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
?he ser+er failed to close client
connections to $%&s during
shutdon.
""S 8 'eb
ser+er
2297 Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
?he ser+er as unable to acGuire
a license for an SS& connection.
""S 8 'eb
ser+er
2228 Microsoft*
'indos*
""S*
'ASCC*
Application 'arning
A9
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
'P
?he ser+er as unable to allocate
a buffer to read a file.
""S 8 'eb
ser+er
22AA Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
?he ser+er as unable to read a
file.
""S 8 'eb
ser+er
222<#
22A0#
22A1#
22A2
Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
'indos Process Acti+ation
Ser+ice .'AS/ detected in+alid
configuration data.
""S 8 'eb
ser+er
918D#
9186#
9170
Microsoft*
'indos*
'AS
S!stem 'arning
'indos Process Acti+ation
Ser+ice .'AS/ encountered a
failure reGuesting ""S configuration
store change notifications.
""S 8 'eb
ser+er
90<A Microsoft*
'indos*
'AS
S!stem 'arning
'indos Process Acti+ation
Ser+ice .'AS/ encountered an
error attempting to configure
centrali)ed logging.
""S 8 'eb
ser+er
90<< Microsoft*
'indos*
'AS
S!stem 0rror
'indos Process Acti+ation
Ser+ice .'AS/ encountered an
error attempting to look up the
built*in ""SR"$S%S group.
""S 8 'eb
ser+er
919A Microsoft*
'indos*
'AS
S!stem 'arning
'indos Process Acti+ation
Ser+ice .'AS/ encountered an
error tr!ing to read configuration.
""S 8 'eb
ser+er
9182#
918A
Microsoft*
'indos*
'AS
S!stem 'arning
'indos Process Acti+ation
Ser+ice .'AS/ is stopping
because it encountered an error.
""S 8 'eb
ser+er
9009 Microsoft*
'indos*
'AS
S!stem 0rror
'indos Process Acti+ation
Ser+ice .'AS/ recei+ed a change
notification but as unable to
process it correctl!.
""S 8 'eb
ser+er
909A Microsoft*
'indos*
'AS
S!stem 'arning
A<
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
'indos Process Acti+ation
Ser+ice .'AS/ terminated
une,pectedl!# and the s!stem as
not configured to restart it.
""S 8 'eb
ser+er
90A0 Microsoft*
'indos*
'AS
S!stem 0rror
'orker process encountered an
error during initiali)ation.
""S 8 'eb
ser+er
2286#
2287#
2288
Microsoft*
'indos*
""S*
'ASCC*
'P
Application 'arning
'orker process failed to initiali)e
communication ith the 'orld
'ide 'eb Publishing Ser+ice and
therefore could not be started.
""S 8 'eb
ser+er
2271 Microsoft*
'indos*
""S*
'MSCC
Application 'arning
'orld 'ide 'eb Publishing
Ser+ice did not initiali)e the @??P
dri+er and as unable start.
""S 8 'eb
ser+er
118A Microsoft*
'indos*
""S*
'ASCC
S!stem 0rror
'orld 'ide 'eb Publishing
Ser+ice failed to configure the
centrali)ed 'orld 'ide 'eb
Consortium .'AC/ logging
properties.
""S 8 'eb
ser+er
11A9#
11AD
Microsoft*
'indos*
""S*
'MSCC
S!stem 'arning
'orld 'ide 'eb Publishing
Ser+ice failed to configure the
@??P.S>S control channel
propert!.
""S 8 'eb
ser+er
1020 Microsoft*
'indos*
""S*
'MSCC
S!stem 'arning
'orld 'ide 'eb Publishing
ser+ice failed to configure the
logging properties for the @??P
control channel.
""S 8 'eb
ser+er
10<2 Microsoft*
'indos*
""S*
'MSCC
S!stem 'arning
'orld 'ide 'eb Publishing
Ser+ice failed to cop! a change
notification for processing.
""S 8 'eb
ser+er
112< Microsoft*
'indos*
""S*
'ASCC
S!stem 'arning
'orld 'ide 'eb Publishing
Ser+ice failed to enable end point
sharing for the @??P control
""S 8 'eb
ser+er
1189 Microsoft*
'indos*
""S*
S!stem 'arning
A8
$ame ,arget 5vent
I"
5vent
Source
5vent &og -!ert
Severity
channel. 'ASCC
'orld 'ide 'eb Publishing
Ser+ice failed to enable global
bandidth throttling.
""S 8 'eb
ser+er
1081#
108A
Microsoft*
'indos*
""S*
'ASCC
S!stem 'arning
'orld 'ide 'eb Publishing
Ser+ice propert! failed range
+alidation.
""S 8 'eb
ser+er
90<8 Microsoft*
'indos*
'AS
S!stem 'arning
5vent &og Ru!es "isa7!ed 7y "efau!t
?he folloing rules are designed to detect errors that are logged b! the 3perations Manager
2008 modules that perform disco+er! and monitoring of ""S 8. ?he rules are disabled b! default
because their purpose is to run onl! on ser+ers on hich ""S 8 is installed rather than running on
e+er! ser+er that has an 3perations Manager agent.
?o ensure that these rules run onl! on ser+ers on hich ""S 8 is actuall! installed# the rules are
disabled b! default. ?he management pack contains a set of o+errides that enable the rules to
run onl! on ser+ers ith ""S 8 installed.
$ote
?he 3perations Manager administrator does not need to take an! action such as creating
o+errides in order to enable these rules to run on ""S 8 ser+ers as the necessar!
o+errides are alread! included in the ""S 8 management pack and are applied
automaticall! hen !ou import the management pack.
?he folloing settings appl! to all the e+ent log rules in the table belo.
Alerts are generated b! default. ?his can be changed b! creating an o+erride.
0+ent Source: @ealth Ser+ice Modules
0+ent &og: 3perations Manager
$ame ,arget 5vent I" -!ert Severity
5ailed to find application
pool hile attempting to
retrie+e state.
@ealth Ser+ice AA79< 'arning
5ailed to find site hile
attempting to retrie+e
state.
@ealth Ser+ice AA799 'arning
5ailed to perform @ealth Ser+ice AA00<# AA0A1# 'arning
A7
$ame ,arget 5vent I" -!ert Severity
application pool
disco+er!.
AA0A2# AA0AA
5ailed to perform 5?P
ser+er disco+er!.
@ealth Ser+ice AA008 'arning
5ailed to perform 5?P
site disco+er!.
@ealth Ser+ice AA007 'arning
5ailed to perform
initiali)ation of ""S
disco+er! module.
@ealth Ser+ice AA001# AA01D#
AA018# AA017#
AA0A0# AA0AD# AA0A9
'arning
5ailed to perform
initiali)ation of ""S state
monitoring module.
@ealth Ser+ice AA791# AA79A#
AA79D# AA7<8# AA7<7
'arning
5ailed to perform 'eb
application disco+er!.
@ealth Ser+ice AA026 'arning
5ailed to perform 'eb
ser+er properties
disco+er!.
@ealth Ser+ice AA00D 'arning
5ailed to perform 'eb
site disco+er!.
@ealth Ser+ice AA009# AA016#
AA020# AA021#
AA0A<# AA0A8# AA0A7
'arning
5ailed to retrie+e
application pool state.
@ealth Ser+ice AA797# AA796# AA7<2 'arning
5ailed to retrie+e site
state.
@ealth Ser+ice AA792# AA798#
AA7<0# AA7<A#
AA7<D# AA7<9# AA7<<
'arning
""S component disco+er!
failed due to insufficient
pri+ileges.
@ealth Ser+ice AA019 'arning
Agent update that is
reGuired for ""S 8
monitoring is not
installed.
@ealth Ser+ice D908 0rror
A6
-ppendi; *< -pp!ication Poo! Properties
"n "nternet "nformation Ser+ices .""S/ 8 running on 'indos Ser+er 2007 or 'indos Ser+er 2007
%2# Application Pool ob(ects include properties that define the configuration settings for +arious
Application Pool processes. ?he "dentit! ?!pe propert! determines the account t!pe under hich
the application pool runs.
-pp!ication Poo! Identity ,ype Property %a!ues
?he folloing table contains the possible +alues and account t!pes for the Application Pool
"dentit! ?!pe propert!. ?he default "dentit! ?!pe is 2 .-etork Ser+ice/.
%a!ue -ccount type
0 &ocal S!stem
1 &ocal Ser+ice
2 -etork Ser+ice
A Specific $ser
D Application Pool "dentit!
,he -pp!ication Poo! Recyc!ing Monitor
?he Application Pool %ec!cling Monitor tracks the number of times an application pool rec!cling
e+ent occurs during a gi+en time period. "f the number of application pool rec!cling e+ents
e,ceeds the number alloed in the specified time period# the management pack changes the
component health state to 'arning .!ello/.
?he table belo shos the configurable parameters that trigger the monitor to change the health
state to 'arning .!ello/.
Parameter "escription
-umber of occurrences Controls the alloable number of times an
application pool rec!cling e+ent can occur
during a specified time period.
?ime inter+al .in seconds/ Sets the length of time alloed for the
configured number of occurrences.
D0