Predefined Situations: Activated at Startup

IBM Tivoli Monitoring: Windows OS Agent includes three types of predefined situations:


Descriptions and Formulas

NT_Invalid_Logon_Attempt monitors for logon attempts with an invalid account or password.

NT_Event_Log.Event_ID EQ 529

 

NT_Log_Space_Low determines whether one of the NT Logs is close to capacity.

NT_Monitored_Logs_Report.%_Usage GE 95

 

NT_Paging_File_Critical monitors the percent of Page File in use.

NT_Paging_File.%_Usage GE 80

 

NT_Paging_File_Warning monitors the percent of Page File in use.

NT_Paging_File.%_Usage GE 75
AND
NT_Paging_File.%_Usage LT 80

 

NT_Physical_Disk_Busy_Critical monitors the percent of time the disk drive is busy.

NT_Physical_Disk.%_Disk_Time GT 90

 

NT_Physical_Disk_Busy_Warning monitors the percent of time the disk drive is busy.

NT_Physical_Disk.%_Disk_Time GT 80
AND
NT_Physical_Disk.%_Disk_Time LE 90

 

NT_Process_CPU_Critical monitors the percent of processor time used by a specific process.

NT_Process.%_Processor_Time GE 65
AND
NT_Process.Priority_Base NE 0

 

NT_Process_CPU_Warning monitors the percent of processor time used by a specific process.

NT_Process.%_Processor_Time GE 50 AND NT_Process.%_Processor_Time LT 65
AND
NT_Process.Priority_Base NE 0

 

NT_Service_Error monitors the reporting of a service error.

NT_Event_Log.Source EQ 'Service Control Manager'
AND
NT_Event_Log.Type EQ Error

 

NT_System_File_Critical monitors the rate of operations to file system devices per second.

NT_System.File_Data_Operations/Sec GE 100000

 

NT_System_File_Warning monitors the rate of operations to file system devices per second.

NT_System.File_Data_Operations/Sec GE 10000
AND
NT_System.File_Data_Operations/Sec LT 100000