-
Title
Monitoring Active Roles performance -
Description
Active Roles includes Windows Performance Monitor (PerfMon) counters which can be used to monitor and assess the health of an Active Roles service instance.
As health metrics are unique to each environment, One Identity Support is unable to provide health thresholds. Instead, it is recommended to gather a baseline by monitoring a normal business week when the server is under an average load, and noting daily patterns.
-
Resolution
The following is a comprehensive list of PerfMon counters which can be found on the server hosting an Active Roles service instance.
Primary health metrics are noted with an asterisk *
For instructions on adding PerfMon counters please see this Microsoft reference: Windows Performance Monitor
Active Roles External changes
AD changes processed/sec *
The number of changes received from Active Directory and processed by the ActiveRoles Service per second.
Changes queue length (AD + Database)
The number of unprocessed changes received from Active Directory and from the ActiveRoles database.
Database changes processed/sec *
The number of changes received from the ActiveRoles database and processed by the ActiveRoles Service per second.Active Roles LDAP Operations
LDAP operation average time *
Average execution time of a LDAP operation by the ActiveRoles Service.
LDAP operation count
The total number of LDAP operations executed by the ActiveRoles Service.
LDAP operations in progress
The current number of ActiveRoles Service LDAP operations in progress.
LDAP operations/sec
The number of LDAP operations executed by the ActiveRoles Service per second.Active Roles Miscellaneous
Connected clients
The current number of connected clients to the ActiveRoles Service.
Queued post-processing policies
The number of queued post-policy processing operations.
Active Roles Permission Propagation
Permission propagation: objects modified/sec
The number of objects modified as a result of permission propagation per second.
Permission propagation: objects pending
The number of objects to be evaluated for permission propagation.
Permission propagation: total objects modified
The total number of objects modified as a result of permission propagation.Active Roles Requests
Request average execution time *
The average execution time of a request.Requests failed
The total number of failed requests.
Requests failed (Access Denied)
The total number requests failed due to insufficient permissions.
Requests failed (Other)
The total number of requests failed due to other errors.
Requests failed (Policy Violation)
The total number requests failed due to ActiveRoles policy violation.
Requests in progress
The current number of requests being processed.
Requests total
The total number of requests.
Requests/sec *
The number of requests received by the ActiveRoles Service per second.Active Roles Script Modules
Script module average execution time
The average execution time of the script module.
Script module execution count
The number of times the script module was executed.
Script modules executing
The current number of script module instances being executed.