Active Directory Security Accounts

Host Template: Application - Active Directory - Security Accounts Manager

Monitor an Active Directory Security Accounts Manager

This Host Template includes the following Service Checks:

Service Check Name	Description	Default Thresholds (Warning, Critical)	UOM
Active Directory - SAM - Reads/Writes	Shows the percentage of reads performed by the Security Authentication Server (SAM) on the directory.	N/A	%
Active Directory - SAM - Successful Computer Creations	Shows the number of successful computer accounts created per second.	N/A	per_second
Active Directory - SAM - Machine Creation Attempts Rate	Shows the number of attempts per second to create computer accounts.	N/A	per_second
Active Directory - SAM - Password Changes Rate	Shows the number of Security Authentication Manager (SAM) password changes per second.	N/A	per_second
Active Directory - SAM - Successful User Creations Rate	Shows the number of user accounts successfully created per second.	N/A	per_second
Active Directory - SAM - Global Catalog Evaluations Rate	Shows the number of universal group membership evaluations per second on a global catalog domain controller from non-global catalog domain controllers	N/A	per_second
Active Directory - SAM - User Creation Attempts Rate	Shows the number of attempts per second to create user accounts.	N/A	per_second

Usage Instructions

Step 1: Add this Host Template

Add the Application - Active Directory - Security Accounts Manager Host Template to your Opsview Monitor host. If the resource you're monitoring has no hostname or public IP, then open the Advanced settings pane and change Host Check Command to Always assumed to be UP.

For more information, refer to Opsview Knowledge Center - Adding Host Templates to Hosts.

Step 2: Add and configure variables required for this Host Template

The Service Checks in this Host Template use the following variables, and they will be added to your Opsview Monitor instance when you import the Opspack:

Authentication variables

AD_CREDENTIALS

Parameter	Position in Variable	Name	Description
--Username	Arg1	Username	Username for remote windows host e.g user@DOMAIN.COM
--Password	Arg2	Password	Password for remote windows host
--Authentication	Arg3	Authentication Type	Authentication type to use

KERBEROS_REALM

Only required if authenticating using Kerberos. If Kerberos authentication is not working add a default_realm value in the krb5.conf file located in '/opt/opsview/krb5/etc/'

Parameter	Position in Variable	Name	Description
Opsview UI only	Value	Kerberos Realm	Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only	Arg1	KDC 1	Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only	Arg2	KDC 2	Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only	Arg3	KDC 3	Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only	Arg4	KDC 4	Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file

For more information, refer to Opsview Knowledge Center - Adding Variables to Hosts.

For mode-specific help, run the plugin with the -h -m <mode> flags. This will list the required and optional Variable Arguments for that mode. The appropriate mode for each Service Check is listed here:

Service Check Name	Mode
Active Directory - SAM - Reads/Writes	`AD.SAM.ReadsWrites`
Active Directory - SAM - Successful Computer Creations	`AD.SAM.ComputerCreationsRate`
Active Directory - SAM - Machine Creation Attempts Rate	`AD.SAM.MachineCreationAttemptsRate`
Active Directory - SAM - Password Changes Rate	`AD.SAM.PasswordChangesRate`
Active Directory - SAM - Successful User Creations Rate	`AD.SAM.UserCreationsRate`
Active Directory - SAM - Global Catalog Evaluations Rate	`AD.SAM.GlobalCatalogEvaluationsRate`
Active Directory - SAM - User Creation Attempts Rate	`AD.SAM.UserCreationAttemptsRate`