Dynatrace Hub

Extend the platform,
empower your team.

Active Directory services

Monitor the health and performance of Microsoft Active Directory services.

Extension by Dynatrace

Free trial Documentation

Product information
Release notes

Overview

This Dynatrace extension leverages the WMI protocol to gather all relevant data to constantly monitor the health and performance of Microsoft Active Directory services. While combining all relevant data into pre-configured dashboards, this extension also enables alerting and event tracking.

Use cases

Intended for users who want to:

Monitor Microsoft Active Directory services
Get a dedicated out-of-the-box dashboard
Use Dynatrace for integrated analysis

Enables you to:

Monitor Active Directory services: DHCP, DNS, DFS, LDAP, ATQ, Kerberos and NTLM
Monitors AD Network and AD/LSA Database use
Enable alerting based on detected anomalies

Get started

Please find detailed steps on how to get started in Dynatrace Documentation:

Details

The Active Directory services extension is built on top of the Extension Framework.

Extension package contains:

WMI data source configuration
dashboard template
unified-analysis page template
topology definition
entity extraction rules

Further information about the extension can be found in the Dynatrace Product News Blog:

Compatibility information

Supported distributions

Only on-premises Active Directory deployments are supported.
Azure AD is not supported.
Windows Server 2016 or 2019

Resources

Documentation

More Information

Support

Built and supported by Dynatrace

Dynatrace support center

Subscribe to new releases

copy to clipboard

Extension content

Content typeNumber of items included

screen entities lists

metric metadata

generic type

screen properties

screen injections

screen chart groups

generic relationship

dashboards

metric query

screen layout

Feature sets

Below is a complete list of the feature sets provided in this version. To ensure a good fit for your needs, individual metrics can be activated and deactivated by your administrator during configuration.

Feature setsNumber of metrics included

Metric name	Metric key	Description	Unit
ESENT Database I/O reads rate (Local Security Authority)	com.dynatrace.extension.active-directory.lsass.esent.database.io.reads.persec.count	Number of ESENT Database I/O reads per second for the Local Security Authority	PerSecond
ESENT Database I/O read latency (Local Security Authority)	com.dynatrace.extension.active-directory.lsass.esent.database.io.reads.latency.avg.count	ESENT Database I/O read latency for the Local Security Authority	MilliSecond
ESENT Database I/O writes rate (Local Security Authority)	com.dynatrace.extension.active-directory.lsass.esent.database.io.writes.persec.count	Number of ESENT Database I/O writes per second for the Local Security Authority	PerSecond
ESENT Database I/O write latency (Local Security Authority)	com.dynatrace.extension.active-directory.lsass.esent.database.io.writes.latency.avg.count	ESENT Database I/O write latency for the Local Security Authority	MilliSecond
ESENT Log I/O reads rate (Local Security Authority)	com.dynatrace.extension.active-directory.lsass.esent.log.io.reads.persec.count	Number of ESENT Database log I/O reads per second for the Local Security Authority	PerSecond
ESENT Log I/O read latency (Local Security Authority)	com.dynatrace.extension.active-directory.lsass.esent.log.io.reads.latency.avg.count	ESENT Log I/O read latency for the Local Security Authority	MilliSecond
ESENT Log I/O writes rate (Local Security Authority)	com.dynatrace.extension.active-directory.lsass.esent.log.io.writes.persec.count	Number of ESENT Database log I/O writes per second for the Local Security Authority	PerSecond
ESENT Log I/O writes latency (Local Security Authorityy)	com.dynatrace.extension.active-directory.lsass.esent.log.io.writes.latency.avg.count	ESENT Log I/O writes latency for the Local Security Authority	MilliSecond

Metric name	Metric key	Description	Unit
DFS received bytes/s	com.dynatrace.extension.active-directory.dfs.server.replicationconnections.bytesreceived.persec	Average number of received bytes per second	BytePerSecond
DFS bytes received on connection	com.dynatrace.extension.active-directory.dfs.server.replicationconnections.bytesreceived.total	Total number of bytes received on the connection	Byte
DFS files received on connection	com.dynatrace.extension.active-directory.dfs.server.replicationconnections.filesreceived.total	Number of files that were received on the connection	Count

Metric name	Metric key	Description	Unit
DHCP received requests/s	com.dynatrace.extension.active-directory.dhcp.server.requests.persec	Rate of DHCP requests received by the DHCP server	PerSecond
DHCP received releases/s	com.dynatrace.extension.active-directory.dhcp.server.releases.persec	Rate of DHCP releases received by the DHCP server	PerSecond
DHCP received declines/s	com.dynatrace.extension.active-directory.dhcp.server.declines.persec	Rate of DHCP declines received by the DHCP server	PerSecond
DHCP failover ack messages received/s	com.dynatrace.extension.active-directory.dhcp.server.failover.bndack.received.persec	Number of DHCP failover Binding Ack messages received	PerSecond
DHCP failover ack messages sent/s	com.dynatrace.extension.active-directory.dhcp.server.failover.bndack.sent.persec	Number of DHCP failover Binding Ack messages sent	PerSecond
DHCP binding updates dropped	com.dynatrace.extension.active-directory.dhcp.server.failover.bndupd.dropped	Number of binding updates dropped	Count
DHCP failover update pending messages	com.dynatrace.extension.active-directory.dhcp.server.failover.bndupd.pendinginoutbound.queue	Number of pending outbound DHCP failover Binding Update messages	Count
DHCP failover update messages received/s	com.dynatrace.extension.active-directory.dhcp.server.failover.bndupd.received.persec	Number of DHCP failover Binding Update messages received	PerSecond
DHCP failover update messages sent/s	com.dynatrace.extension.active-directory.dhcp.server.failover.bndupd.sent.persec	Number of DHCP failover Binding Update messages sent	PerSecond

Metric name	Metric key	Description	Unit
Network Login Profile logons	com.dynatrace.extension.active-directory.network.login.logons.count	Number of network logons on the network login profile	Count
Number of logons	com.dynatrace.extension.active-directory.network.logons.total.count	Number of network logons	Count
Logons per second	com.dynatrace.extension.active-directory.network.logons.persec.count	Number of network logons per second	PerSecond

Metric name	Metric key	Description	Unit
Kerberos authentications	com.dynatrace.extension.active-directory.lsass.server.kerberos.authentications.count	Number of Kerberos authentications	Count

Metric name	Metric key	Description	Unit
ATQ Outstanding queued requests total	com.dynatrace.extension.active-directory.atq.server.atqoutstandingqueuedrequests.total	Current number of requests in the queue	Count
ATQ Estimated queue delay	com.dynatrace.extension.active-directory.atq.server.atqestimatedqueuedelay.persec	How long a request has to wait in the queue	Second
ATQ Request latency	com.dynatrace.extension.active-directory.atq.server.atqrequestlatency.persec	Time it takes to produce a request	Second
ATQ Threads LDAP total	com.dynatrace.extension.active-directory.atq.server.atqthreadsldap.total	The number of threads used by the LDAP server as determined by LDAP policy	Count
ATQ Threads total	com.dynatrace.extension.active-directory.atq.server.atqthreadstotal.total	All Threads currently allocated	Count

Metric name	Metric key	Description	Unit
DHCP received renews/s v6	com.dynatrace.extension.active-directory.dhcp.server.v6.renews.persec	Rate of DHCP renews received by the DHCP Server v6	PerSecond
DHCP received releases/s v6	com.dynatrace.extension.active-directory.dhcp.server.v6.releases.persec	Rate of DHCP releases received by the DHCP Server v6	PerSecond
DHCP received declines/s v6	com.dynatrace.extension.active-directory.dhcp.server.v6.declines.persec	Rate of DHCP declines recevied by the DHCP Server v6	PerSecond
DHCP received requests/s v6	com.dynatrace.extension.active-directory.dhcp.server.v6.requests.persec	Rate of DHCP requests received by the DHCP Server v6	PerSecond
DHCP received solicits/s v6	com.dynatrace.extension.active-directory.dhcp.server.v6.solicits.persec	Rate of DHCP solicits received by the DHCP Server v6	PerSecond
DHCP received rebinds/s v6	com.dynatrace.extension.active-directory.dhcp.server.v6.rebinds.persec	Rate of DHCP rebinds received by the DHCP Server v6	PerSecond

Metric name	Metric key	Description	Unit
DRA Successful synch requests total	com.dynatrace.extension.active-directory.dra.server.drasynchrequestssuccessful.total	Number of successful DRA synchronization requests	Count
DRA Synch requests total	com.dynatrace.extension.active-directory.dra.server.drasynchrequestsmade.total	Number of total DRA synchronization requests made	Count

Metric name	Metric key	Description	Unit
DNS recursive queries	com.dynatrace.extension.active-directory.dns.server.recursive.queries	Total number of recursive queries received by DNS server	Count
DNS dynamic update queued requests	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.queued.total.count	Total number of dynamic update requests queued by the DNS server	Count
DNS queries received	com.dynatrace.extension.active-directory.dns.server.totalquery.received	Total number of queries received by DNS server	Count
DNS reponses sent	com.dynatrace.extension.active-directory.dns.server.totalresponse.sent	Total number of reponses sent by DNS server	Count
DNS caching memory	com.dynatrace.extension.active-directory.dns.server.caching.memory.total	Total caching memory used by DNS server	Byte
DNS database node memory	com.dynatrace.extension.active-directory.dns.server.databasenode.memory.total	Total database node memory used by DNS server	Byte
DNS Nbstat memory	com.dynatrace.extension.active-directory.dns.server.nbstat.memory.total	Total Nbstat memory used by DNS server	Byte
DNS TCP message memory	com.dynatrace.extension.active-directory.dns.server.tcpmessage.memory.total	Total TCP message memory used by DNS server	Byte
DNS dynamic update requests	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.received.total.count	Total number of dynamic update requests received by the DNS server	Count
DNS rejected dynamic updates	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.rejected.total.count	Total number of dynamic updates rejected by the DNS server	Count
DNS dynamic update timeouts	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.timeouts.total.count	Total number of dynamic update timeouts of the DNS server	Count
DNS written dynamic updates	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.writtentodatabase.total.count	Total number of dynamic updates written to the database by the DNS server	Count
DNS empty dynamic update requests/s	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.nooperation.persec	Average number of No-operation/Empty dynamic update requests per second	PerSecond
DNS dynamic update requests/s	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.received.persec	Average number of dynamic update requests received by the DNS server per second	PerSecond
DNS written dynamic updates/s	com.dynatrace.extension.active-directory.dns.server.dynamicupdate.writtentodatabase.persec	Average number of dynamic updates written to the database by the DNS server per second	PerSecond
DNS recursive queries/s	com.dynatrace.extension.active-directory.dns.server.recursive.queries.persec	Average number of recursive queries received by DNS server per second	PerSecond
DNS recursive query failures/s	com.dynatrace.extension.active-directory.dns.server.recursive.queryfailure.persec	Average number of recursive query failures per second	PerSecond
DNS recursive query timeouts/s	com.dynatrace.extension.active-directory.dns.server.recursive.timeout.persec	Average number of recursive query sending timeouts per second	PerSecond
DNS secure update requests	com.dynatrace.extension.active-directory.dns.server.secureupdate.received.total	Total number of secure update requests received by the DNS server	Count
DNS failed secure updates	com.dynatrace.extension.active-directory.dns.server.secureupdate.failure.total	Total number of secure updates failed of the DNS server	Count
DNS secure update requests/s	com.dynatrace.extension.active-directory.dns.server.secureupdate.received.persec	Average number of secure update requests received by the DNS server per second	PerSecond
DNS TCP reponses/s	com.dynatrace.extension.active-directory.dns.server.tcpresponse.sent.persec	Average number of TCP reponses sent by DNS server per second	PerSecond
DNS queries received/s	com.dynatrace.extension.active-directory.dns.server.totalquery.received.persec	Average number of queries received by DNS server per second	PerSecond
DNS reponses sent/s	com.dynatrace.extension.active-directory.dns.server.totalresponse.sent.persec	Average number of reponses sent by DNS server per second	PerSecond
DNS UDP queries received/s	com.dynatrace.extension.active-directory.dns.server.udpquery.received.persec	Average number of UDP queries received by DNS server per second	PerSecond
DNS UDP reponses sent/s	com.dynatrace.extension.active-directory.dns.server.udpresponse.sent.persec	Average number of UDP reponses sent by DNS server per second	PerSecond
DNS unmatched response packets received	com.dynatrace.extension.active-directory.dns.server.unmatchedresponses.received.total	Total number of response packets received by the DNS server that do not match any outstanding remote query	Count
DNS failed zone transfers	com.dynatrace.extension.active-directory.dns.server.zonetransfer.failure.total	Total number of failed zone transfers of the master DNS server	Count
DNS successful zone transfers	com.dynatrace.extension.active-directory.dns.server.zonetransfer.success.total	Total number of successful zone transfers of the master DNS server	Count

Metric name	Metric key	Description	Unit
DFS Replication conflict files size	com.dynatrace.extension.active-directory.dfs.server.replicatedfolders.conflictspaceinuse.bytes.total	Total byte size of DFS replication service of conflict files	Byte
DFS Replication deleted files size	com.dynatrace.extension.active-directory.dfs.server.replicatedfolders.deletedspaceinuse.bytes.total	Total byte size of DFS replication service of the deleted files	Byte
DFS Replication staging folder size	com.dynatrace.extension.active-directory.dfs.server.replicatedfolders.stagingspaceinuse.bytes.total	Total byte size of DFS replication service of staging folder	Byte
DFS redundant file replication update records	com.dynatrace.extension.active-directory.dfs.server.replicatedfolders.updates.dropped	Number of redundant file replication update records	Count
DFS retried file installs	com.dynatrace.extension.active-directory.dfs.server.replicatedfolders.fileinstalls.retried	Number of retried file installs	Count

Metric name	Metric key	Description	Unit
Database adds per second	com.dynatrace.extension.active-directory.database.adds.persec.count	Number of Active Directory Database adds per second	PerSecond
Database modifies per second	com.dynatrace.extension.active-directory.database.modifies.persec.count	Number of Active Directory Database modifies per second	PerSecond
Database deletes per second	com.dynatrace.extension.active-directory.database.deletes.persec.count	Number of Active Directory Database deletes per second	PerSecond
Database recycles per second	com.dynatrace.extension.active-directory.database.recycles.persec.count	Number of Active Directory Database recycles per second	PerSecond

Metric name	Metric key	Description	Unit
LDAP Binds	com.dynatrace.extension.active-directory.ldap.server.ldapbindtime.binds.persec	Time spent to complete LDAP bindings	MilliSecond
LDAP Successful Binds	com.dynatrace.extension.active-directory.ldap.server.ldapsuccessfulbinds.persec	Successful binds per second	PerSecond
LDAP Writes per second	com.dynatrace.extension.active-directory.ldap.server.ldapwrites.persec	The rate at which LDAP clients perform write operations	PerSecond
LDAP UDP Operations per second	com.dynatrace.extension.active-directory.ldap.server.ldapudpoperations.persec	The number of User Datagram Protocol (UDP) operations that the LDAP server is processing per second	PerSecond
LDAP Active threads total	com.dynatrace.extension.active-directory.ldap.server.ldapactivethreads.total	The current number of threads in use by the LDAP subsystem of the local directory service	Count
LDAP Client Sessions	com.dynatrace.extension.active-directory.ldap.server.ldapclientsessions.total	The number of sessions of connected LDAP clients	Count
LDAP Searches per second	com.dynatrace.extension.active-directory.ldap.server.ldapsearches.persec	The number of search operations per second performed by LDAP clients	PerSecond

Metric name	Metric key	Description	Unit
NTLM Authentications	com.dynatrace.extension.active-directory.lsass.server.ntlm.authentications.count	Number of total NTLM authentications	Count
NTLM Binds per second	com.dynatrace.extension.active-directory.lsass.server.ntlm.binds.persec.count	Average NTLM binds per second	PerSecond

Full version history

To have more information on how to install the downloaded package, please follow the instructions on this page.

ReleaseDate

Fixed a bug where Kerberos and NTLM queries were being run even if their feature sets were disabled.

Removed the following metrics, which had wrong definitions:

com.dynatrace.extension.active-directory.esent.database.io.reads.persec.count
com.dynatrace.extension.active-directory.esent.database.io.reads.latency.avg.count
com.dynatrace.extension.active-directory.esent.database.io.writes.persec.count
com.dynatrace.extension.active-directory.esent.database.io.writes.latency.avg.count
com.dynatrace.extension.active-directory.esent.log.io.reads.persec.count
com.dynatrace.extension.active-directory.esent.log.io.reads.latency.avg.count
com.dynatrace.extension.active-directory.esent.log.io.writes.persec.count
com.dynatrace.extension.active-directory.esent.log.io.writes.latency.avg.count

Added new metrics for AD DB:

com.dynatrace.extension.active-directory.database.adds.persec.count
com.dynatrace.extension.active-directory.database.modifies.persec.count
com.dynatrace.extension.active-directory.database.deletes.persec.count
com.dynatrace.extension.active-directory.database.recycles.persec.count

Modified the custom topology and out-of-the-box dashboard to reflect the above changes.

Fixed the included Overview Dashboard. These metrics were removeed from the dashboard:

Kerberos requests
Domain Trust Status

These metrics now show up correctly in the dashboard:

NTLM binds
NTLM Authentications
Kerberos Authentications
Network Login Profile logons
Active Directory Read Latency
Active Directory Write Latency
LSA Read Latency
LSA Write Latency

bugfix: Network Logons metric group

Added metrics for:

LDAP
ATQ
DRA
Kerberos
NTLM
AD Network
AD DB
LSA DB

Added the relevant entities, relationships and screens.

Metrics are now split into more feature sets.

Dynamic Updates' metrics changed from gauge to count

fixed metric descriptions

No release notes