Home
  •  

Windows 2012 R2 DNS SEC - AXFR Zone Transfers Monitor

Microsoft.Windows.Server.DNS.2012R2.Monitor.DNSSEC.ZoneTransfers.AXFR (UnitMonitor)

This monitor checks the performance data for AXFR Zone Transfers in Windows Server 2012 R2 computer.

Knowledge Base article:

Summary

This monitor checks AXFR Transfers of Zones in Windows Server 2012 R2 computers using a powershell commandlet

Configuration

Receive Threshold: Number of Minimum Receive errors before change state to Error.

Response Threshold: Number of Minimum Response errors before change state to Error.

Interval Seconds: How frequently (in seconds) the value should be checked.

Sync Time: Synchronization time for the module execution.

Timeout Seconds: How much time (in seconds) to wait for the module to finish execution.

Causes

Error State: Response Received And Success Received greater than Receive Threshold AND Request Received And Success Sent greater than Response Threshold

Success State: Response Received And Success Received less than Receive Threshold AND Request Received And Success Sent less than Response Threshold

Resolutions

Check the status of the zone to see if it is on line using the DNS management tool.

Element properties:

TargetMicrosoft.Windows.Server.DNS.Zone
Parent MonitorSystem.Health.PerformanceState
CategoryPerformanceHealth
EnabledFalse
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.Server.DNS.2012.R2.ZoneTransfers.MonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Windows 2012 R2 DNS SEC - AXFR Zone Transfers Errors are high
Zone {0} in Server {1} got AXFR Zone Transfers Errors greater than defined Threshold.
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.Server.DNS.2012R2.Monitor.DNSSEC.ZoneTransfers.AXFR" Accessibility="Public" Enabled="false" Target="Microsoft.Windows.Server.DNS.Zone" ParentMonitorID="Health!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="Microsoft.Windows.Server.DNS.2012.R2.ZoneTransfers.MonitorType" ConfirmDelivery="true">

  <Category>PerformanceHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Server.DNS.2012R2.Monitor.DNSSEC.ZoneTransfers.AXFR.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Target/Property[Type="Microsoft.Windows.Server.DNS.Zone"]/ZoneName$</AlertParameter1>

      <AlertParameter2>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</AlertParameter2>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="ErrorState" MonitorTypeStateID="Error" HealthState="Error"/>

    <OperationalState ID="SuccessState" MonitorTypeStateID="Success" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <ZoneName>$Target/Property[Type="Microsoft.Windows.Server.DNS.Zone"]/ZoneName$</ZoneName>

    <TransferType>AXFR</TransferType>

    <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>

    <ReceiveThreshold>100</ReceiveThreshold>

    <ResponseThreshold>500</ResponseThreshold>

    <IntervalSeconds>900</IntervalSeconds>

    <SyncTime/>

    <TimeoutSeconds>300</TimeoutSeconds>

  </Configuration>

</UnitMonitor>