Using Performance Monitor

All versions of Microsoft Windows Server include the basic set of tools required for successful performance monitoring. The most valuable native tool at your disposal is the Performance tool, which provides a core set of monitoring functions. The Performance tool can be found either by clicking on Start > All Programs > Administrative Tools > Performance, or from the Run prompt by typing perfmon.exe and ENTER. The default view of the Performance tool is System Monitor. When it opens you see the three default counters: Pages/Second, Average Disk Queue, and % of Processor Time.

System Monitor is the first view of the Performance tool and its most commonly used element. Figure 15-1 shows an example of the default view.

Figure 15-1: The default view of Windows System Monitor with Performance Logs And Alerts expanded.

Monitoring Performance Objects

1. To monitor a performance object, click on the "+" symbol on the tool bar and a new window will then open.

2. In the new window define the computer, object, counter, and instance properties for the performance counter. The instance property is not required. Many items do not have an instance or have only a default instance that will be chosen and grayed out.

3. Click Add to monitor the newly defined counter.

4. Repeat steps 1 and 2 to add multiple counters.

5. Click the Close button to return to the System Monitor window. There is no limit to the number of counters that can be added to System Monitor, but after six to eight counters the view becomes difficult to interpret.

Counter Logs

Counter Logs are located beneath the Performance Logs And Alerts heading of the Performance Monitor, as seen in Figure 15-2.

Figure 15-2: The Performance tool displayed with options for Counter Logs.

The Counter Logs are similar to the System Monitor, except that the output is sent to a file, rather than the screen. The same counters can be used, and it is possible to have multiple sets of counters monitoring at the same time. Monitoring Counter Logs adds several options, as explained in the following procedure.

Configuring Counter Logs

1. Click on Counter Logs in the left pane of the Perfmon.exe window.

2. Right-click on one of the items in the right pane and select New Log Settings.… Type in a name of your choice and click OK.

3. Click the Add Counters button.

4. Select the computer, object, counter, and instance properties for the counter. The instance property is not required.

5. Under the Log Files tab, specify the type of log file you want to use, such as text or binary. Binary is typically more size efficient, but can only be read by the Performance tool. Logging to a SQL Server can be very useful because it allows for queries on your log data and is the most space-efficient option.

6. Under the Schedule tab, you can set a schedule for the logging operation.

Trace Logs

Windows Server 2003 Trace Logs are not as configurable as counters and are therefore a less frequently used feature of the Performance tool. Trace Logs are meant to gather information from the system after the occurrence of a specific event. The events that trigger writing to a Trace Log are set by the system.

Trace Logs are typically used when there is a serious system problem that the Counter Logs are unable to record. Trace Logs use a lower level method of recording data that is less subject to system function interference. For example, if a certain type of network traffic is causing the system to crash, Counter Logs would not be able to gather data, but Trace Logs would.

SharePoint Products and Technologies provide rich trace logging, which is covered later in this chapter.

Alerts

Alerts help you know when servers are reaching high levels of utilization. Alerts can be set on any number of counter thresholds, and once those thresholds are met, Alerts can inform administrators in a variety of ways. If a counter or set of counters reaches a threshold, several actions can occur. Figure 15-3 shows the types of actions available to the systems administrator.

Figure 15-3: Alerts can send messages, start performance logging, and run programs.