Preface
Who Should Read This Reference
What is New in this Release
What This Reference Contains
Publications
IBM Tivoli Monitoring Library
Prerequisite and Related Publications
Accessing Publications Online
Ordering Publications
Providing Feedback about Publications
Contacting Customer Support
Conventions Used in This Guide
Typeface Conventions
Operating System-dependent Variables and Paths
Resource Models for Windows
Event Log Resource Model
Overview
Indications and Events
Event ID 9
Event ID 11
Event ID 15
Event ID 2011
Event ID 2511
Event ID 3013
Event ID 7023
Indication Properties
Thresholds
Built-in Actions
Logical Disk Resource Model
Overview
Prerequisites
Indications and Events
High Read Bytes per Second
High Write Bytes per Second
High Transfer Rate
High Percentage Disk Time
Logical Disk Possible Fragmentation
Low Disk Space
Slow Logical Drive
Thresholds
Logging
Memory Resource Model
Overview
Indications and Events
High Paging
Low Available Memory
Low Available Memory Causing Hard Paging
Low Available Memory Causing Soft Paging and Pagefile Resizing
Low Available Memory Is Causing Excessive Soft Paging
Low Available Memory Causing Many Problems
Low Available Memory with High Cache
Low Available Memory with a High Working Set
Low Available Memory with a Small Pagefile
Low Copy Read Hits
Low Data Map Hits
Low MDL Read Hits
Low Pin Read Hits
Pagefile Is Resizing
Memory Leak In Private Bytes
Memory Leak In System Code
Memory Leak In System Drivers
Thresholds
Logging
Network Interface Card Resource Model
Prerequisites
Overview
Indications and Events
Adjust Work Items
High Broadcast Frames
High Current Commands
High Errored Ratio
Network Interface Card Overworked
Network Interface Card Too Slow
Redirector Affecting Server
Redirector Overloaded
Redirector Overloaded Affecting Segment
Segment Affecting Redirector
Segment Affecting Server
Server Affecting Redirector
Server Overloaded
Server Overloaded Affecting Segment
Thresholds
Built-in Actions
Logging
Parametric Event Log Resource Model
Overview
Indications and Events
Windows Event Logged
Thresholds
Parameters
Parametric Services Resource Model
Overview
Indications and Events
Services Failing Service
Services Stopped Service
Parameters
Logging
Parametric TCP/IP Ports Resource Model
Overview
Prerequisites
Indications and Events
State of the Defined Port
Parameters
Logging
Physical Disk Resource Model
Overview
Prerequisites
Indications and Events
High Percent Disk Time
High Read Bytes per Second
High Transfer Rate
High Write Bytes per Second
Physical Disk Possible Fragmentation
Slow Physical Drive
Thresholds
Logging
Printer Resource Model
Overview
Indications and Events
High Current Percent Time
High Job Errors
High Job Errors Per Day
High Not Ready Errors
High Not Ready Errors Per Day
High Out Of Paper Errors
High Out Of Paper Errors Per Day
Thresholds
Logging
Process Resource Model
Overview
Indications and Events
Process Handle Leak
Process High CPU
Thresholds
Logging
Processor Resource Model
Overview
Indications and Events
Busy Hardware
CPU Cannot Keep up with Hardware
Hardware Keeping CPU Busy
High Percent Usage Delta
High Processes
Processor Busy
Thresholds
Logging
Server Performance Prediction Resource Model
Overview
Parameters
Logging
Services Resource Model
Overview
Indications and Events
Services Failing Service
Services Stopped Service
Thresholds
Built-in Actions
TCP/IP Resource Model
Overview
Prerequisites
Indications and Events
High Fragment Ratio
High Ping
Segments ReXmit
Thresholds
Logging
Resource Models for UNIX/Linux
CPU Resource Model
Overview
Indications and Events
High CPU Overload
High CPU Usage by System
Thresholds
Logging
File Resource Model
Overview
Indications and Events
File Changed
File Attributes Changed
File not Present
Parameters
Logging
File System Resource Model
Overview
Indications and Events
Low Space Available
Fragmented File System
Low Percentage of Available I-nodes
Thresholds
Logging
Memory Resource Model
Overview
Indications and Events
Low Storage Space
Low Swap Space
System Thrashing
Thresholds
Logging
Network Interface Resource Model
Overview
Indications and Events
High Input Packets in Error
High Output Packets in Error
High Percentage Packet Collisions
Interface Not Enabled
Interface Not Operational
Network Interface Card Not Supported
Unknown Interface Status
Thresholds
Logging
Network RPC-NFS Resource Model
Overview
Indications and Events
High NFS Buffer Size
High NFS Server Get-attribute Operations
High NFS Server Read Operations
High NFS Server Readlink Operations
High NFS Server Write Operations
High Duplicate RPC Server Calls
High Retransmitted Calls
High RPC Bad Calls
High Timeouts and Badxids
High Network Traffic
Slow Network
Thresholds
Logging
Process Resource Model
Overview
Indications and Events
High Number of Zombie Processes
Process Consuming High CPU
Process Killed or Nonexistent
Process Stopped
Thresholds
Parameters
Logging
Security Resource Model
Overview
Indications and Events
Duplicate Account
Nonexistent File
High Log-in Number for User
Illegal Group
Illegal Owner
Account not Valid for Root
Null Password
Suspect Supergroup
Suspect Superuser
Wrong File Mode
Parameters
Logging
Server Performance Prediction Resource Model
Overview
Parameters
Logging
Appendixes
Appendix A. Return Codes for Built-in Actions (Windows)
All Built-in Actions
Built-in Actions of the Event Log Resource Model
Enlarge IRP Stack Size Action
Delete Registry Action
Raise Session Time Out Action
Built-in Actions of the Network Interface Card Resource Model
Adjust Initial Work Items Action
Adjust Maximum Work Items Action
Built-in Actions of the Service Resource Model
Restart Service Action
Appendix B. Correlated Events (Windows)
Busy Drive from High Paging
Busy Drive from Low Avail
Congested TCP Network
Critically Low Disk Space
Critical Memory Leak
Faulty Disk Subsystem
High Disk Read Bytes per Second
High Disk Write Bytes per Second
High Drive Transfer Rate
High Percent Disk Time
Possible Disk Fragmentation
Process Hogging CPU
Slow Hard Drive
Glossary
Index
Preface
