zabbix_export: version: '6.0' date: '2021-11-21T21:40:09Z' groups: - uuid: b9390195ecad4986968746a2a9b56354 name: 'My Templates' templates: - uuid: 01548d1b601f4732b8b26c229305e5bf template: 'AD DS Health and Performance' name: 'AD DS Health and Performance' description: | ## Overview Performance counters * DRA Inbound Bytes Total/Sec * DRA Inbound Object Updates Remaining in Packet * DRA Outbound Bytes Total/Sec * DRA Pending Replication Synchronizations * Kerberos Authentications/Sec * LDAP Bind Time * LDAP Client Sessions * LDAP Searches/Sec * LDAP Successful Binds/Sec * LDAP Active Threads * LDAP Writes/Sec * NTLM Authentications Events * Active Directory Web Service (Error, Warning) * DFS Replication (Error, Warning) * Directory Service (Error, Warning) * DNS Server (Error, Warning) Service * Distributed File System Enables * DNS Server * DFS Replication * groups: - name: 'My Templates' items: - uuid: 510bed9780f54dbc94521c1afbd668b0 name: 'Active Directory Web Services Events' type: ZABBIX_ACTIVE key: 'eventlog[Active Directory Web Services,,"Warning|Error"]' delay: 5m history: 1w trends: '0' value_type: LOG tags: - tag: Application value: 'AD DS Events' triggers: - uuid: 09121ac7fa8a4b64b8b6f45acdd64b4d expression: 'logseverity(/AD DS Health and Performance/eventlog[Active Directory Web Services,,"Warning|Error"])>1 and nodata(/AD DS Health and Performance/eventlog[Active Directory Web Services,,"Warning|Error"],1800s)=0' name: 'Active Directory Web Services Error on {HOST.NAME}' - uuid: 6e038f783e4b44dc81038d0e3c3c7baf name: 'DFS Replication Events' type: ZABBIX_ACTIVE key: 'eventlog[DFS Replication,,"Warning|Error"]' delay: 5m history: 1w trends: '0' value_type: LOG tags: - tag: Application value: 'AD DS Events' triggers: - uuid: bf64470533d0470895cdebd814a37dc2 expression: 'logseverity(/AD DS Health and Performance/eventlog[DFS Replication,,"Warning|Error"])>1 and nodata(/AD DS Health and Performance/eventlog[DFS Replication,,"Warning|Error"],1800s)=0' name: 'DFS Replication Events Error on {HOST.NAME}' - uuid: 3bc63708ad4340b08d7d50f3d7af7129 name: 'Directory Service Events' type: ZABBIX_ACTIVE key: 'eventlog[Directory Service,,"Warning|Error"]' delay: 5m history: 1w trends: '0' value_type: LOG tags: - tag: Application value: 'AD DS Events' triggers: - uuid: 79e002ed7b0c4bff92ca5461083c0ba0 expression: 'logseverity(/AD DS Health and Performance/eventlog[Directory Service,,"Warning|Error"])>1 and nodata(/AD DS Health and Performance/eventlog[Directory Service,,"Warning|Error"],1800s)=0' name: 'Directory Service Events Error on {HOST.NAME}' - uuid: 318dcb7c692947e08f126e056f77827f name: 'DNS Server Events' type: ZABBIX_ACTIVE key: 'eventlog[DNS Server,,"Warning|Error"]' delay: 5m history: 1w trends: '0' value_type: LOG tags: - tag: Application value: 'AD DS Events' triggers: - uuid: a600b41075964c11a5ddccd0989e3192 expression: 'logseverity(/AD DS Health and Performance/eventlog[DNS Server,,"Warning|Error"])>1 and nodata(/AD DS Health and Performance/eventlog[DNS Server,,"Warning|Error"],1800s)=0' name: 'DNS Server Events Error on {HOST.NAME}' - uuid: 91dc10e30b9244cc8584124a159d303c name: 'LDAP Port is running' type: SIMPLE key: 'net.tcp.service[ldap]' history: 1w valuemap: name: 'Service state' tags: - tag: Application value: 'AD DS Network ports' triggers: - uuid: 261faef601b54be4acc42985f5f3d88f expression: 'max(/AD DS Health and Performance/net.tcp.service[ldap],#3)=0' name: 'LDAP service is down on {HOST.NAME}' priority: AVERAGE - uuid: 74f30bad16e44877a869105e6f8bcc52 name: 'LSASS Processor Time' key: 'perf_counter[\230(lsass)\4676]' history: 1w value_type: FLOAT units: '%' description: | Metric Process % Processor Time of LSASS perf_counter[\Process(lsass)\% Processor Time] tags: - tag: Application value: 'AD DS Performance' - uuid: 23535be77abd4eb5a262f9953978cf80 name: 'NTLM Authentications' key: 'perf_counter[\1570\1572]' history: 1w value_type: FLOAT units: /s description: 'perf_counter[\Security system-wide statistics\NTLM Authentications]' tags: - tag: Application value: 'AD DS Performance' - uuid: 398955ae5e6745ba84b275862bca1031 name: 'Kerberos Authentications' key: 'perf_counter[\1570\1574]' history: 1w value_type: FLOAT units: /s description: 'perf_counter[\Security system-wide statistics\Kerberos Authentications]' tags: - tag: Application value: 'AD DS Performance' - uuid: 7c33e63e882a48148348477a866a7545 name: 'I/O Database Reads Average Latency' key: 'perf_counter[\3054(lsass/NTDSA)\2664]' history: 1w value_type: FLOAT units: ms description: 'perf_counter[\Database ==> Instances(lsass/NTDSA)\I/O Database Reads Average Latency]' tags: - tag: Application value: 'AD DS Performance' triggers: - uuid: 4ba50e9ab3c548ed9f7670aaf2d9fc64 expression: 'min(/AD DS Health and Performance/perf_counter[\3054(lsass/NTDSA)\2664],#3)>15' name: 'I/O Database Reads Average Latency > 15ms on {HOST.NAME}' priority: WARNING - uuid: 3db6e037983940d9be2c778c5d4bfade name: 'I/O Database Reads/sec' key: 'perf_counter[\3054(lsass/NTDSA)\3632]' history: 1w value_type: FLOAT units: /s description: 'perf_counter[\Database ==> Instances(lsass/NTDSA)\I/O Database Reads/sec]' tags: - tag: Application value: 'AD DS Performance' triggers: - uuid: 71807bb6e6d0416fbaa68fb74833be03 expression: 'min(/AD DS Health and Performance/perf_counter[\3054(lsass/NTDSA)\3632],#3)>10' name: 'I/O Database Reads/sec > 10 on {HOST.NAME}' priority: WARNING - uuid: a0714f8bb24a482481d5c84f77962b80 name: 'I/O Log Writes/sec' key: 'perf_counter[\3054(lsass/NTDSA)\3712]' history: 1w value_type: FLOAT units: /s description: 'perf_counter[\Database ==> Instances(lsass/NTDSA)\I/O Log Writes/sec]' tags: - tag: Application value: 'AD DS Performance' - uuid: e95e676378d24f9cb5cfe58da9e24218 name: 'I/O Log Writes Average Latency' key: 'perf_counter[\3054(lsass/NTDSA)\3714]' history: 1w value_type: FLOAT units: ms description: 'perf_counter[\Database ==> Instances(lsass/NTDSA)\I/O Log Writes Average Latency]' tags: - tag: Application value: 'AD DS Performance' triggers: - uuid: 611b5fa4963348ac8e79dae0bce0233f expression: 'min(/AD DS Health and Performance/perf_counter[\3054(lsass/NTDSA)\3714],#3)>10' name: 'I/O Log Writes Average Latency > 10ms on {HOST.NAME}' priority: WARNING - uuid: ec722579ddf44498ae228a54231f0c5f name: 'DRA Pending Replication Synchronizations' key: 'perf_counter[\6956\17266]' history: 1w value_type: FLOAT description: 'perf_counter[\NTDA\DRA Pending Replication Synchronizations]' tags: - tag: Application value: 'AD DS Performance' - uuid: edd8fbbf1dd449d495c03a6c895cbdb9 name: 'DRA Inbound Object Updates Remaining in Packet' key: 'perf_counter[\6956\17268]' history: 1w value_type: FLOAT description: 'perf_counter[\NTDA\DRA Inbound Object Updates Remaining in Packet]' tags: - tag: Application value: 'AD DS Performance' - uuid: fd3c312d6c944f4c8455a258dbb0ecd5 name: 'LDAP Client Sessions' key: 'perf_counter[\6956\17274]' history: 1w value_type: FLOAT description: 'perf_counter[\NTDS\LDAP Client Sessions]' tags: - tag: Application value: 'AD DS Performance' - uuid: fe58cbd89ba94e34a70e09603bfda810 name: 'LDAP Active Threads' key: 'perf_counter[\6956\17276]' history: 1w status: DISABLED value_type: FLOAT description: 'perf_counter[\NTDS\LDAP Active Threads]' tags: - tag: Application value: 'AD DS Performance' - uuid: fb193d229d3b4757b289c8ad40f09b1a name: 'LDAP Writes/sec' key: 'perf_counter[\6956\17278]' history: 1w value_type: FLOAT units: /s tags: - tag: Application value: 'AD DS Performance' - uuid: 0a0508bd91f146669482a2bdc45749a7 name: 'LDAP Searches/sec' key: 'perf_counter[\6956\17280]' history: 1w value_type: FLOAT units: /s description: 'perf_counter[\NTDS\LDAP Searches/sec]' tags: - tag: Application value: 'AD DS Performance' - uuid: e3063ed6bcb242d6ba43b4f3ca117ced name: 'DRA Inbound Bytes Total/sec' key: 'perf_counter[\6956\17444]' history: 1w value_type: FLOAT units: /s description: 'perf_counter[\NTDA\DRA Inbound Bytes Total/sec]' tags: - tag: Application value: 'AD DS Performance' - uuid: c372fa1cf8404fff9ffcdf1c86497171 name: 'DRA Outbound Bytes Total/sec' key: 'perf_counter[\6956\17452]' history: 1w value_type: FLOAT units: /s description: 'perf_counter[\NTDA\DRA Outbound Bytes Total/sec]' tags: - tag: Application value: 'AD DS Performance' - uuid: f3ecb9e253c6461ea76380065038691a name: 'State of service "DFSR" (DFS Replication)' key: 'service.info[DFSR,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: d24b0eacadee48d489d32a01f17dd08f name: 'State of service "DNS" (DNS Server)' key: 'service.info[DNS,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: 4e64610f63084ea4848725a0dbad3e1c name: 'State of service "Dnscache" (DNS Client)' key: 'service.info[Dnscache,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: 3b2c1878d0d0457cacd23e66bb03372f name: 'State of service "IsmServ" (Intersite Messaging)' key: 'service.info[IsmServ,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: 471d8f66c77440c688130a9bdda37237 name: 'State of service "Kdc" (Kerberos Key Distribution Center)' key: 'service.info[Kdc,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: abe4419278df46919650a2c7fb2529dc name: 'State of service "LanmanServer" (Server)' key: 'service.info[LanmanServer,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: d7703e9177ed4bb3b39a26ffd4a05d01 name: 'State of service "LanmanWorkstation" (Workstation)' key: 'service.info[LanmanWorkstation,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: b4211d9f04584ecd82347bd0d6b2f8a2 name: 'State of service "Netlogon" (Netlogon)' key: 'service.info[Netlogon,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: 8117eba15a204854b3ac605add3ee3ec name: 'State of service "RpcSs" (Remote Procedure Call (RPC))' key: 'service.info[RpcSs,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: 05f4a569578c407cb0b23e52eba2f866 name: 'State of service "SamSs" (Security Accounts Manager)' key: 'service.info[SamSs,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: bd16befae95d43e88908648d833e1b83 name: 'State of service "W32Time" (Windows Time)' key: 'service.info[W32Time,state]' history: 1d valuemap: name: 'Windows service state' tags: - tag: Application value: 'AD DS Services' - uuid: ba3ea33ddbe0483aa1dd88c68b1e517b name: 'Database Size' key: 'vfs.file.size["{$ADDBPATH}"]' delay: 1h history: 1w status: DISABLED units: Bytes tags: - tag: Application value: 'AD DS Storage' - uuid: dc3cc0c66aa145c1bceab822e32c6556 name: 'Log File Size' key: 'vfs.file.size["{$ADLOGPATH}"]' delay: 1h history: 1w status: DISABLED units: Bytes tags: - tag: Application value: 'AD DS Storage' macros: - macro: '{$ADDB_PATH}' value: 'c:\windows\ntds\ntds.dit' - macro: '{$ADLOG_PATH}' value: 'c:\windows\ntds\edb.log' dashboards: - uuid: 4a4228994faa45e986d06e13aa970d5d name: 'AD DS Health and Performance' pages: - widgets: - type: GRAPH_CLASSIC width: '12' height: '5' fields: - type: INTEGER name: source_type value: '0' - type: GRAPH name: graphid value: name: 'AD DS DB and Log Size' host: 'AD DS Health and Performance' - type: GRAPH_CLASSIC x: '12' width: '12' height: '5' fields: - type: INTEGER name: source_type value: '0' - type: GRAPH name: graphid value: name: 'LSASS Processor Time' host: 'AD DS Health and Performance' - type: GRAPH_CLASSIC 'y': '5' width: '12' height: '5' fields: - type: INTEGER name: source_type value: '0' - type: GRAPH name: graphid value: name: 'AD DS Authentications' host: 'AD DS Health and Performance' - type: GRAPH_CLASSIC x: '12' 'y': '5' width: '12' height: '5' fields: - type: INTEGER name: source_type value: '0' - type: GRAPH name: graphid value: name: 'LDAP Statistics' host: 'AD DS Health and Performance' - type: GRAPH_CLASSIC 'y': '10' width: '12' height: '5' fields: - type: INTEGER name: source_type value: '0' - type: GRAPH name: graphid value: name: 'Database ==> Instances Statistics' host: 'AD DS Health and Performance' - type: GRAPH_CLASSIC x: '12' 'y': '10' width: '12' height: '5' fields: - type: INTEGER name: source_type value: '0' - type: GRAPH name: graphid value: name: 'DRA Statistics' host: 'AD DS Health and Performance' valuemaps: - uuid: 7d7a9ff770b0415781bbc49c400a60ed name: 'Service state' mappings: - value: '0' newvalue: Down - value: '1' newvalue: Up - uuid: 533232df55a847d4861fd1dd95d73baa name: 'Windows service state' mappings: - value: '0' newvalue: Running - value: '1' newvalue: Paused - value: '2' newvalue: 'Start pending' - value: '3' newvalue: 'Pause pending' - value: '4' newvalue: 'Continue pending' - value: '5' newvalue: 'Stop pending' - value: '6' newvalue: Stopped - value: '7' newvalue: Unknown - value: '255' newvalue: 'No such service' graphs: - uuid: e0e4a9ff9ece4fa6b353ea55412f6763 name: 'AD DS Authentications' ymin_type_1: FIXED graph_items: - color: 1A7C11 item: host: 'AD DS Health and Performance' key: 'perf_counter[\1570\1574]' - sortorder: '1' color: F63100 item: host: 'AD DS Health and Performance' key: 'perf_counter[\1570\1572]' - uuid: bc99aef7310540cfa51279096b10d1ec name: 'AD DS DB and Log Size' ymin_type_1: FIXED graph_items: - color: 1A7C11 item: host: 'AD DS Health and Performance' key: 'vfs.file.size["{$ADDBPATH}"]' - sortorder: '1' color: F63100 item: host: 'AD DS Health and Performance' key: 'vfs.file.size["{$ADLOGPATH}"]' - uuid: d2bf271b0e4d4a33af6ffb19f8e289f2 name: 'Database ==> Instances Statistics' ymin_type_1: FIXED graph_items: - color: 1A7C11 yaxisside: RIGHT item: host: 'AD DS Health and Performance' key: 'perf_counter[\3054(lsass/NTDSA)\3632]' - sortorder: '1' color: F63100 item: host: 'AD DS Health and Performance' key: 'perf_counter[\3054(lsass/NTDSA)\2664]' - sortorder: '2' color: 2774A4 yaxisside: RIGHT item: host: 'AD DS Health and Performance' key: 'perf_counter[\3054(lsass/NTDSA)\3712]' - sortorder: '3' color: A54F10 item: host: 'AD DS Health and Performance' key: 'perf_counter[\3054(lsass/NTDSA)\3714]' - uuid: 8abeb5f241e14635a3ba13d12fed6b07 name: 'DRA Statistics' ymin_type_1: FIXED graph_items: - color: 1A7C11 item: host: 'AD DS Health and Performance' key: 'perf_counter[\6956\17268]' - sortorder: '1' color: F63100 item: host: 'AD DS Health and Performance' key: 'perf_counter[\6956\17266]' - sortorder: '2' color: 2774A4 yaxisside: RIGHT item: host: 'AD DS Health and Performance' key: 'perf_counter[\6956\17444]' - sortorder: '3' color: A54F10 yaxisside: RIGHT item: host: 'AD DS Health and Performance' key: 'perf_counter[\6956\17452]' - uuid: 2833f9419ee542f794a3d78a22761661 name: 'LDAP Statistics' ymin_type_1: FIXED graph_items: - color: 1A7C11 item: host: 'AD DS Health and Performance' key: 'perf_counter[\6956\17274]' - sortorder: '1' color: F63100 yaxisside: RIGHT item: host: 'AD DS Health and Performance' key: 'perf_counter[\6956\17280]' - sortorder: '2' color: 2774A4 yaxisside: RIGHT item: host: 'AD DS Health and Performance' key: 'perf_counter[\6956\17278]' - uuid: 884320ad4d09490bafa58242da0fdc9a name: 'LSASS Processor Time' show_work_period: 'NO' show_triggers: 'NO' show_legend: 'NO' ymin_type_1: FIXED ymax_type_1: FIXED graph_items: - drawtype: FILLED_REGION color: 1A7C11 item: host: 'AD DS Health and Performance' key: 'perf_counter[\230(lsass)\4676]'