Processor Privileged Time

Microsoft.Office.Sharepoint.Server.2007.Processor_Privileged_Time (Rule)

This rule uses the \% Privileged Time counter to measure the percentage of elapsed time that the process threads spent executing code in Privileged mode. When a Windows system service is called, the service will often run in Privileged mode to gain access to system private data. Such data is protected from access by threads executing in User mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some early operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of User and Privileged modes. Some work done by Windows on behalf of the application in addition to the privileged time in the process might appear in other subsystem processes.

Knowledge Base article:

Summary

This rule uses the % Privileged Time counter to measure the percentage of elapsed time that the process threads spent executing code in Privileged mode. When a Windows system service is called, the service will often run in Privileged mode to gain access to system private data. Such data is protected from access by threads that execute in User mode. Calls to the system can be explicit or implicit, such as page faults or interrupts. Unlike some earlier operating systems, Windows uses process boundaries for subsystem protection in addition to the traditional protection of User and Privileged modes. Some work that Windows performs on behalf of the application in addition to the privileged time in the process might appear in other subsystem processes.

Element properties:

Target	Microsoft.Office.Sharepoint.Server.2007.MOSS.Server
Category	PerformanceCollection
Enabled	True
Instance Name	Processor
Counter Name	\% Privileged Time
Frequency	3600
Alert Generate	False
Remotable	True

Member Modules:

ID	Module Type	TypeId	RunAs
DS	DataSource	System.Performance.OptimizedDataProvider	Default
CollectData	WriteAction	Microsoft.SystemCenter.CollectPerformanceData	Default
DataWarehousePublishData	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData	Default

Source Code:

<Rule ID="Microsoft.Office.Sharepoint.Server.2007.Processor_Privileged_Time" Enabled="onEssentialMonitoring" Target="Microsoft.Office.Sharepoint.Server.2007.MOSS.Server" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>PerformanceCollection</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Performance!System.Performance.OptimizedDataProvider">

      <ComputerName>$Target/Host/Property[Type="MSWL!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <CounterName>% Privileged Time</CounterName>

      <ObjectName>Processor</ObjectName>

      <InstanceName>_Total</InstanceName>

      <AllInstances>false</AllInstances>

      <Frequency>3600</Frequency>

      <Tolerance>10</Tolerance>

      <ToleranceType>Percentage</ToleranceType>

      <MaximumSampleSeparation>2</MaximumSampleSeparation>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="CollectData" TypeID="SystemCenter!Microsoft.SystemCenter.CollectPerformanceData"/>

    <WriteAction ID="DataWarehousePublishData" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>

  </WriteActions>

</Rule>