Extend the platform,
empower your team.
Enhance Active Directory services monitoring with advanced metrics
ExtensionThis Dynatrace extension is a companion to the Active Directory services monitoring extension and provides an extended set of AD metrics, obtained through dedicated PowerShell cmdlets. This extension is not intended to work alone - it should be activated as a companion to the Active Directory services monitoring extension.
This is intended for users, who: Want to enhance the Active Directory services monitoring already implemented, with additional metrics that characterize:
Enhance Active Directory services monitoring with advanced metrics.
Start with activating the Active Directory services monitoring extension. Then activate this extension, as it is intended to enhance the the Active Directory services monitoring.
When enabling this extension, you will be prompted for
HKLM\SYSTEM\CurrentControlSet\Services\\NTDS\Parameters
Settings > Integrations > Access tokens
) and copy-paste this token into the extension configurationThis extension is intended to work locally on the AD server. It executes:
The extension package contains:
Further information about the Windows extensions can be found in the Dynatrace Product News Blog:
A: The formula for DDU consumption of the extension is:
( 10
+ (17 * number of Domain Controllers)
+ (11 * number of DHCP servers)
+ ( 2 * number of LDAP instances)
) * 525.6 DDUs/year
Typical consumption for a single-domain AD server, hosting one DHCP server and one LDAP instance, amounts to 21,024 DDUs/year
DDU cost above does not include any possible Log events or Custom events triggered by the extension. For more information on this, please visit the DDU log event cost and DDU custom event cost pages.
A: All in all - equivalents of the DCDIAG KPIs are available in Dynatrace:
A: An account with additional permissions is required to run this extension due to the kind of metrics it collects. The LocalService account has the minimum privileges on the local computer which is why the extension requires an account with enough permissions to read a few registry keys and run cmdlets like repadmin
and dcdiag
.
Below is a complete list of the feature sets provided in this version. To ensure a good fit for your needs, individual feature sets can be activated and deactivated by your administrator during configuration.
Metric name | Metric key | Description | Unit |
---|---|---|---|
DHCP Scope Delay v4 | active-directory.dhcp.server.scope.delay | DHCP Scope Delay v4 in milliseconds | MilliSecond |
DHCP Scope Addresses Free v4 | active-directory.dhcp.server.scope.addresses.free | Number of DHCPv4 scope addresses free | Count |
DHCP Scope Addresses Used v4 | active-directory.dhcp.server.scope.addresses.used | Number of DHCPv4 scope addresses used | Count |
DHCP Scope Addresses Reserved v4 | active-directory.dhcp.server.scope.addresses.reserved | Number of DHCPv4 scope addresses reserved | Count |
Percent of DHCP Scope Addresses Used v4 | active-directory.dhcp.server.scope.addresses.used.pct | Percent of DHCPv4 scope addresses used | Percent |
DHCP Scope Pending Offers v4 | active-directory.dhcp.server.scope.pending.offers | Number of DHCPv4 scope pending offers | Count |
Metric name | Metric key | Description | Unit |
---|---|---|---|
Disk Free Space | active-directory.database.diskfree.total | Free disk space of the disk containing the database file. | Byte |
Total Disk Space | active-directory.database.disk.total | Total disk space of the disk containing the AD database file. | Byte |
Disk Free Space Percentage | active-directory.database.diskfree | Percent of free disk space of the disk containing the database file. | Percent |
Metric name | Metric key | Description | Unit |
---|---|---|---|
Kerberos Replication Partner Count | active-directory.replication.partner.count | Kerberos replication partners count in Active Directory domain | Count |
Replication Queue Count | active-directory.replication.queue.count | Count of items in replication queue by Active Directory Domain Controller monitor | Count |
Global Catalog Search Response Time | active-directory.globalcatalog.searchtime.millis | Global catalog search response time of Domain Controller | MilliSecond |
Replication Consistency Status | active-directory.replication.consistency.status | Whether or not strict replication consistency is enabled | Count |
Shared Resource Available | active-directory.replication.shared.available | - | Percent |
Replication - Destination Delta | active-directory.replication.destination.delta | - | Second |
Replication - Source Delta | active-directory.replication.source.delta | - | Second |
Replication - Destination Errors | active-directory.replication.destination.errors | - | Count |
Replication - Source Errors | active-directory.replication.source.errors | - | Count |
Time Skew in seconds | active-directory.timeskew.secs | Time difference between the local domain controller and a target domain controller | Second |
Lost and Found Objects | active-directory.lostandfound.object.count | Count of lost and found objects by Active Directory Domain monitor | Count |
FSMO Role Holder Consistency | active-directory.fsmoroleholder.consistency | Whether or not the domain controllers agree on who the FSMO role holders are | Count |
FSMO Check | active-directory.fsmo.check | Contains a 'message' dimension about whether or not the correct services can be found from the domain controller | Count |
SYSVOL Health | active-directory.sysvol.health | The SYSVOL share's health | Count |
Trust Status | active-directory.trust.status | The trust status of the domain controller | Count |
Metric name | Metric key | Description | Unit |
---|---|---|---|
DHCP Scope Addresses Free v6 | active-directory.dhcp.server.v6.scope.addresses.free | Number of DHCPv6 scope addresses free | Count |
DHCP Scope Addresses Used v6 | active-directory.dhcp.server.v6.scope.addresses.used | Number of DHCPv6 scope addresses used | Count |
DHCP Scope Addresses Reserved v6 | active-directory.dhcp.server.v6.scope.addresses.reserved | Number of DHCPv6 scope addresses reserved | Count |
Percent of DHCP Scope Addresses Used v6 | active-directory.dhcp.server.v6.scope.addresses.used.pct | Percent of DHCPv6 scope addresses used | Percent |
DHCP Scope Pending Advertises v6 | active-directory.dhcp.server.v6.scope.pending.advertises | Number of DHCPv6 scope pending advertises | Count |
Metric name | Metric key | Description | Unit |
---|---|---|---|
Good Network Adapter Count | active-directory.network.goodadapter.total | The number of enabled network adapters that can ping the Domain DNS Server. | Count |
Bad Network Adapter Count | active-directory.network.badadapter.total | The number of enabled network adapters that cannot ping the Domain DNS Server. | Count |
Total Network Adapter Count | active-directory.network.adapter.total | The total number of enabled network adapters. | Count |
Metric name | Metric key | Description | Unit |
---|---|---|---|
LDAP Bind Time | active-directory.ldap.server.bindtime.millis | Time taken to bind to the fsmo role holder using LDAP | MilliSecond |
LDAP Bind Availability | active-directory.ldap.bind.availability | Whether or not the domain controller can bind to the domain DNS server | Count |
Metric name | Metric key | Description | Unit |
---|---|---|---|
ATQ Average Thread Usage | active-directory.atq.server.average.thread.usage | Average usage of threads in Domain Controller ATQ | Percent |
Now the extension supports running it on the AD non-server nodes, e.g. a separate DHCP server.
Fixed irregularities when accessing specific Registry keys required to obtain ReplicationConsistencyMetrics and DatabaseFileDiskSpaceMetrics.
Enhance Active Directory services monitoring with advanced metrics.