Home
  •  

AD DC 성능 수집 - 메트릭 NTDS Kerberos 인증

Microsoft.Windows.Server.2012.AD.DomainController.KerberosAuth.Collection (Rule)

Knowledge Base article:

요약

이 규칙은 클라이언트가 도메인 컨트롤러에 대한 티켓을 사용하여 도메인 컨트롤러에 인증하는 초당 횟수를 수집합니다.

이 성능 수집을 통해 도메인 컨트롤러의 부하에 문제가 있는지를 확인할 수 있습니다.

Element properties:

TargetMicrosoft.Windows.Server.2012.AD.DomainControllerRole
CategoryPerformanceCollection
EnabledTrue
Instance NameSecurity System-Wide Statistics
Counter NameKerberos Authentications
Frequency900
Alert GenerateFalse
RemotableFalse

Member Modules:

ID Module Type TypeId RunAs 
PerformanceDS DataSource System.Performance.OptimizedDataProvider Default
WriteToDB WriteAction Microsoft.SystemCenter.CollectPerformanceData Default
WriteToDW WriteAction Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData Default

Source Code:

<Rule ID="Microsoft.Windows.Server.2012.AD.DomainController.KerberosAuth.Collection" Enabled="true" Target="AD2012Core!Microsoft.Windows.Server.2012.AD.DomainControllerRole" ConfirmDelivery="false" Remotable="false" Priority="Normal" DiscardLevel="100">

  <Category>PerformanceCollection</Category>

  <DataSources>

    <DataSource ID="PerformanceDS" TypeID="SystemPerf!System.Performance.OptimizedDataProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <CounterName>Kerberos Authentications</CounterName>

      <ObjectName>Security System-Wide Statistics</ObjectName>

      <InstanceName/>

      <AllInstances>false</AllInstances>

      <Frequency>900</Frequency>

      <Tolerance>5</Tolerance>

      <ToleranceType>Percentage</ToleranceType>

      <MaximumSampleSeparation>4</MaximumSampleSeparation>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectPerformanceData"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>

  </WriteActions>

</Rule>