Situations

The Monitoring Agent for Microsoft® Exchange Server provides predefined situations that describe system conditions that users typically monitor at a site. Use these situations to begin monitoring any managed object quickly. Furthermore, you can use these situations as models for creating new situations.

Note:
In some cases, the values assigned to the predefined situations are examples. Modify them to reflect the conditions of your distributed system.

The following sections describe each situation and the formula that defines it.

EX_DB_Log_Record_Stalls_Warn

Indicates the Database Log Record Stalls/Sec is high. Use the following formula:

Log_Record_Stalls/Sec GT 0

EX_DB_Log_Threads_Waiting_Warn

Indicates the Database Log Threads waiting is high. Use the following formula:

Log_Threads_Waiting GT 25

EX_IS_Pri_Avg_Delvry_Warn

Indicates the IS Mailbox Average Delivery time is high. Use the following formula:

Average_Delivery_Time GT 3000

EX_IS_Pri_Avg_Local_Delvry_Warn

Indicates the IS Mailbox Average Local Delivery time is high. Use the following formula:

Average_Local_Delivery_Time GT 1000
Note:
This situation applies only to Microsoft Exchange Server 2000.

EX_IS_Pri_Message_Delvrd_Crit

Indicates the IS Mailbox Messages Delivered/min is very high. Use the following formula:

Messages_Delivered/min GT 3000
Note:
This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_Pri_Message_Delvrd_Warn

Indicates the IS Mailbox Messages Delivered/min is high. Use the following formula:

Messages_Delivered/min GT 1000
Note:
This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_Pri_Receive_Queue_Warn

Indicates the IS Mailbox Receive Queue size is high. Use the following formula:

Receive_Queue_Size GT 50

EX_IS_Pri_Send_Queue_Warn

Indicates the IS Mailbox Send Queue size is high. Use the following formula:

Send_Queue_Size GT 100
Note:
This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_Pub_Receive_Queue_Warn

Indicates the IS Public Receive Queue size is high. Use the following formula:

Receive_Queue_Size GT 250

EX_IS_Pub_Send_Queue_Warn

Indicates the IS Public Send Queue size is high. Use the following formula:

Send_Queue_Size GT 1000
Note:
This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_RPC_Operations_Warn

Indicates a high number of RPC Operations per second. Use the following formula:

RPC_Operations/Sec GT 100

EX_IS_RPC_Requests_Warn

Indicates a high number of RPC Request. Use the following formula:

RPC_Requests GT 50

EX_MTA_Conn_Queue_Warn

Indicates the MTA Connections Queue size is high. Use the following formula:

Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_MTA_Work_Queue_Warn

Indicates the MTA Work Queue size is high. Use the following formula:

Work_Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_Server_Down

Indicates Microsoft Exchange Server is down or unavailable. Use the following formula:

Server_Status EQ DOWN

EX_SMTP_Local_Queue_Warn

Indicates the SMTP Local Queue size is high. Use the following formula:

Local_Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_SMTP_Remote_Queue_Warn

Indicates the SMTP Remote Queue size is high. Use the following formula:

Remote_Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_Cache_Pg_Stall_Sec_Warn

Indicates that the number of Cache Page Stalls/Sec is high. Use the following formula:

MS_Exchange_DB.Cache_Page_Fault_Stalls/Sec GT 0.0

EX_Cache_Pg_Fault_Sec_Warn

Indicates that the number of Cache Page Faults/Sec is high. Use the following formula:

MS_Exchange_DB.Cache_Page_Faults/Sec GT 10.0

EX_Cache_Pg_Fault_Sec_Crit

Indicates that the number of Cache Page Faults/Sec is very high. Use the following formula:

MS_Exchange_DB.Cache_Page_Faults/Sec GT 20.0

EX_DB_Log_Rec_Stall_Sec_Warn

Indicates that the Database Log Record Stalls/Sec is high. Use the following formula:

MS_Exchange_DB.Log_Record_Stalls/Sec GT 50.0

EX_DB_Log_Rec_Stall_Sec_Crit

Indicates that the Database Log Record Stalls/Sec is very high. Use the following formula:

MS_Exchange_DB.Log_Record_Stalls/Sec GT 100.0

EX_Server_Status_Critical

Indicates that the Microsoft Exchange Server is down or unavailable. Use the following formula:

MS_Exchange_Server.Server_Status EQ down

EX_Server_Attendant_Stat_Crit

Indicates that the Microsoft Server System Attendant Service is down or unavailable. Use the following formula:

MS_Exchange_Server.System_Attendant_Svc_Status EQ Stopped

EX_Server_MTA_Status_Critical

Indicates that the Microsoft Server MTA service is down or unavailable. Use the following formula:

MS_Exchange_Server.Exchg_MTA_Status EQ Stopped

EX_Server_IS_Status_Critical

Indicates that the Microsoft Server Information Store service is down or unavailable. Use the following formula:

MS_Exchange_Server.Server_Status EQ down

EX_Server_Res_Status_Critical

Indicates that the Microsoft Server Replication service is down or unavailable. Use the following formula:

MS_Exchange_Server.Res_Status EQ Stopped

EX_Server_SMTP_Status_Cirtical

Indicates that the Microsoft Server SMTP service is down or unavailable. Use the following formula:

MS_Exchange_Server.SMTP_Status EQ Stopped

EX_Server_WWW_Status_Critical

Indicates that the World Wide Web service is down or unavailable. Use the following formula:

MS_Exchange_Server.WWW_Status EQ Stopped

EX_Server_App_Pct_Free_Warn

Indicates the disk size and the free disk space that is available on the Microsoft Exchange Application.

MS_Exchange_Server.Application_Percent_Free_Space LE 20.0 AND MS_Exchange_Server
.Application_Percent_Free_Space GT 10.0

EX_Server_App_Pct_Free_Critical

Indicates the disk size and the free disk space that is available on the Microsoft Exchange Application.

MS_Exchange_Server.Application_Percent_Free_Space LE 10.0

EX_Server_Log_Pct_Free_Warn

Indicates the name and the location of the Microsoft Exchange Server log files. The agent also provides information about the free space that is available for each log file.

MS_Exchange_Server.Log_Percent_Free_Space GT 10.0 AND MS_Exchange_Server.Log_Percent
_Free_Space LE 20.0

EX_Server_Log_Pct_Free_Critical

Indicates the name and the location of the Microsoft Exchange Server log files. The agent also provides information about the free space that is available for each log file.

MS_Exchange_Server.Log_Percent_Free_Space LE 10.0

EX_SMTP_Dir_PickupQ_Warn

Indicates that the Directory Pickup Queue Length is high. Use the following formula:

SMTP.Directory_Pickup_Queue_Length GT 25

EX_SMTP_Queue_Len_Warn

Indicates that the Local Queue Length is high. Use the following formula:

SMTP.Local_Queue_Length GT 25

EX_SMTP_Retry_QLen_Warn

Indicates that the Local Retry Queue Length is high. Use the following formula:

SMTP.Local_Retry_Queue_Length GT 25

EX_SMTP_Remote_RetryQ_Warn

Indicates that the Remote Retry Queue Length is high. Use the following formula:

SMTP.Remote_Retry_Queue_Length GT 25

EX_SMTP_Categorizer_QLen_Warn

Indicates that the Categorizer Queue Length is high. Use the following formula:

SMTP.Categorizer_Queue_Length GT 25

EX_DB_Log_Gen_CkPt_Depth_Warn

Indicates that the Log Generation Checkpoint Depth is high. Use the following formula:

MS_Exchange_DB_Instance.Log_Generation_Checkpoint_Depth GT 50000

EX_DB_Log_Gen_CkPt_Depth_Crit

Indicates that the Log Generation Checkpoint Depth is very high. Use the following formula:

MS_Exchange_DB_Instance.Log_Generation_Checkpoint_Depth GT 60000

EX_SMTP_Mess_Pend_Rt_Warn

Indicates that the Messages Pending Routing is high. Use the following formula:

SMTP.Messages_Pending_Routing GT 500 AND SMTP.Messages_Pending_Routing LE 750

EX_SMTP_Mess_Pend_Rt_Critical

Indicates that the Messages Pending Routing is very high. Use the following formula:

SMTP.Messages_Pending_Routing GT 750

EX_TQ_Act_RD_QLen_Warn

Indicates the number of messages in the Remote Delivery Queue. It also indicates that the Remote Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Remote_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Active_Remote_Delivery_Queue_Length LE 750

EX_TQ_Act_RD_QLen_Crit

Indicates the number of messages in the Remote Delivery Queue. It also indicates that the Remote Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Remote_Delivery_Queue_Length GT 750

EX_TQ_Retry_RD_QLen_Warn

Indicates that the Retry Remote Delivery Queue is holding messages that are in the retry state. It also indicates that the Retry Remote Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Remote_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Retry_Remote_Delivery_Queue_Length LE 750

EX_TQ_Retry_RD_QLen_Crit

Indicates that the Retry Remote Delivery Queue is holding messages that are in the retry state. It also indicates that the Retry Remote Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Remote_Delivery_Queue_Length GT 750

EX_TQ_ActMail_Delivey_Q_Warn

Indicates the number of messages in Mailbox Delivery Queue. It also indicates that the Mailbox Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Mailbox_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Active_Mailbox_Delivery_Queue_Length LE 750

EX_TQ_ActMail_Delivey_Q_Crit

Indicates the number of messages in Mailbox Delivery Queue. It also indicates that the Mailbox Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Mailbox_Delivery_Queue_Length GT 750

EX_TQ_RtryMailDeliver_QLen_Warn

Indicates that the Retry Mailbox Delivery Queue is holding messages that are in the retry state. It also indicates that the Mailbox Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Mailbox_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Retry_Mailbox_Delivery_Queue_Length LE 750

EX_TQ_RtryMailDeliver_QLen_Crit

Indicates that the Retry Mailbox Delivery Queue is holding messages that are in the retry state. It also indicates that the Mailbox Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Mailbox_Delivery_Queue_Length GT 750

EX_TQ_Act_nSMTP_Q_Len_Warn

Indicates the number of messages in the Non-SMTP Delivery Queue. It also indicates that the Non-SMTP Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Non-SMTP_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Active_Non-SMTP_Delivery_Queue_Length LE 750

EX_TQ_Act_nSMTP_Q_Len_Crit

Indicates the number of messages in the Non-SMTP Delivery Queue. It also indicates that the Non-SMTP Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Non-SMTP_Delivery_Queue_Length GT 750

EX_TQ_Rtry_nSMTP_Q_Len_Warn

Indicates that the Retry Non-SMTP Delivery Queue is holding messages that are in a retry state. It also indicates that the Retry Non-SMTP Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Non-SMTP_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Retry_Non-SMTP_Delivery_Queue_Length LE 750

EX_TQ_Rtry_nSMTP_Q_Len_Crit

Indicates that the Retry Non-SMTP Delivery Queue is holding messages that are in a retry state. It also indicates that the Retry Non-SMTP Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Non-SMTP_Delivery_Queue_Length GT 750

EX_TQ_Agg_Delivery_Q_Len_Warn

Indicates the total number of items that are in queue for delivery in all the queues. It also indicates that the total number of messages in all queues are greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Aggregate_Delivery_Queue_Length GT 500 AND MS_Exchange
_Transport_Queues.Aggregate_Delivery_Queue_Length LE 750

EX_TQ_Agg_Delivery_Q_Len_Crit

Indicates the total number of items that are in queue for delivery in all the queues. It also indicates that the total number of messages in all queues are greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Aggregate_Delivery_Queue_Length GT 750

EX_Service_State_Critical

Indicates the state of the service. A service can be in one of the following states:

MS_Exchange_Services_Detail.Service_State NE Running

EX_Service_Status_Critical

Indicates the status of the service. The status of the service can be one of the following:

MS_Exchange_Services_Detail.Service_Status NE Starting

EX_Service_Start_Critical

Indicates that the service will either be started automatically when the system starts or manually by the user.

MS_Exchange_Services_Detail.Service_Start_Mode NE Automatic

EX_IS_Mail_Store_State_Critical

Indicates the Information Mailbox Store state. You can mount or dismount the Information Mailbox Store.

MS_Exchange_IS_Private.Mailbox_Store_State NE Mounted

EX_Rep_Failed_Warn

Indicates that the Replica Instance has failed.

Replication_Failed EQ 1

EX_Rep_Suspended_Warn

Indicates that the Replica Instance is suspended.

Replication_Suspended EQ 1

Messages_Bypassed_Scan_Crit

Indicates the number of messages that have bypassed scanning are 50 or more.

Messages_Bypassed_Scanning GE 50

Messages_Bypassed_Scan_Warn

Indicates the number of messages that have bypassed scanning are 40 or more, but less than 50.

Messages_Bypassed_Scanning GE 40 and LT 50

Cluster_Mailbox_State_Crit

Indicates that the server is offline.

Mailbox_State EQ OFFLINE

EX_NLB_Status_Crit

Indicates that cluster operations have stopped on at least one node.

NLB_Status EQ 'Stopped'