Windows Policies

Tip

Policy names are prefixed with Windows -

Policy name

Duration

Condition 1

(and) Condition 2

(and) Condition 3

Cat.

Description

Elevated Disk Latency

15 min

physical_disk._Total.avg_sec_per_read has an upper baseline deviation

physical_disk._Total.avg_sec_per_write has an upper baseline deviation

WARNING

This policy will generate a WARNING event when both disk read and write times are higher than their expected baselines

Elevated MemoryUtilization

10 min

netuitive.winsrv.memory.utilizationpercent has an upper baseline deviation + an upper contextual deviation

WARNING

This policy will generate a WARNING event when memory utilization on the Windows server is higher than expected.

Heavy CPU Load

15 min

netuitive.winsrv.system.processor_queue_length_normalized has a static threshold > 2

processor._Total.percent_processor_time has an upper baseline deviation + an upper contextual deviation

system.context_switches_per_sec has an upper baseline deviation + an upper contextual deviation

CRITICAL

High CPU values by themselves are not always a good indicator of server being under heavy load. This policy looks for upper deviations not only in CPU, but in run queue size (system.processor_queue_length) and context switches as well. Taken together, upper deviations in all three of these key metrics are a good indication of an overloaded server.

Heavy Disk Load

15 min

physical_disk._Total.avg_queue_length has an upper baseline deviation + an upper contextual deviation

WARNING

This policy will generate a WARNING event if the average disk queue length for the server is higher than expected, indicating a potential problem with heavy disk load.