이 규칙은 Kerberos KDC(키 배포 센터)에서 처리한 초당 AS(인증 서버) 요청의 수를 수집합니다. AS 요청은 클라이언트에서 TGT(Ticket-Granting Ticket)를 가져오는 데 사용됩니다.
이 성능 수집을 통해 도메인 컨트롤러의 부하에 문제가 있는지를 확인할 수 있습니다.
Target | Microsoft.Windows.Server.2012.AD.DomainControllerRole |
Category | PerformanceCollection |
Enabled | True |
Instance Name | Security System-Wide Statistics |
Counter Name | KDC AS Requests |
Frequency | 900 |
Alert Generate | False |
Remotable | False |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
PerformanceDS | DataSource | System.Performance.OptimizedDataProvider | Default |
WriteToDB | WriteAction | Microsoft.SystemCenter.CollectPerformanceData | Default |
WriteToDW | WriteAction | Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData | Default |
<Rule ID="Microsoft.Windows.Server.2012.AD.DomainController.KDCASRequests.Collection" Enabled="true" Target="AD2012Core!Microsoft.Windows.Server.2012.AD.DomainControllerRole" ConfirmDelivery="false" Remotable="false" Priority="Normal" DiscardLevel="100">
<Category>PerformanceCollection</Category>
<DataSources>
<DataSource ID="PerformanceDS" TypeID="SystemPerf!System.Performance.OptimizedDataProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<CounterName>KDC AS Requests</CounterName>
<ObjectName>Security System-Wide Statistics</ObjectName>
<InstanceName/>
<AllInstances>false</AllInstances>
<Frequency>900</Frequency>
<Tolerance>5</Tolerance>
<ToleranceType>Percentage</ToleranceType>
<MaximumSampleSeparation>4</MaximumSampleSeparation>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectPerformanceData"/>
<WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>
</WriteActions>
</Rule>