Windows

Collects the number of virtual desktop sessions (TSE sessions) on a Windows device, by collecting the number of instances of the rdpclip.exe process via SNMP. Changes state when a threshold is crossed. Configuration: SNMP connection information (community, port and version), alert threshold, critical threshold.

View the status of the DHCP server by getting information on the number of used addresses, the number of free addresses. Switches to "Alert" status when lease requests are pending. Goes to "Critical" status when the DHCP service is not working or when the service can no longer provide addresses on at least one served subnet. Condition: to be used on the DHCP server Configuration: specify SNMP community  

Checks if there are any updates to be made. In this case, the status of the unit service is the one configured. Configuration: the SNMP community, the SNMP port, the status that the unit service should have when updates are due: ok, warning, critical.

Collects the equipment time, the time of a reference NTP server, and calculates the difference between the two times. Changes state if the difference exceeds the configured thresholds. Configuration: user ID, password and domain (optional) of the WMI user, domain name of the reference NTP server, alert threshold, critical threshold.

Measures swap space usage on Microsoft Windows and notifies when it exceeds the threshold. Configuration: SNMP community 

Scans the status of print job queues on a Windows server. Switches to ALERT status if at least x jobs (configurable threshold) are waiting for at least one print queue. Switches to CRITICAL if at least y (configurable threshold) jobs are waiting for at least one print queue. The control indicates queues above the defined thresholds. A print queue can be specified, in which case the check is performed only for that print queue. Configuration: the name and password of a user having access to the remote performance counters, the alert threshold, the critical threshold, the name of the print queue.

Measures the number of open connections to one or more Windows shared folders. Alerts if the number of connections to at least one of the monitored folders is outside a specified value range. Configuration: Windows Admin monitoring account, alert and critical thresholds as a range of allowed values, list of shares to monitor, list of shares to exclude from monitoring.

Collects the number of active Windows services in a list given as an argument, and compares it to a target number of active services. The control returns OK if the list exactly matches the target number of active services. The control returns WARNING if the number of active services is greater than this number. The control returns CRITICAL if the number of active services is less than this number. Configuration: SNMP community, Windows services list, number of active services, check execution time.

Checks the status of the services of a Microsoft Windows server specified in the parameter and switches to the CRITICAL state when at least one service of this list is not started. Configuration: account, password and optionally domain of a user with remote access via WMI, list of services to be included in the check (displayed names, system names).

Checks the status of Microsoft Windows services that should be started except those set as parameters and notifies when a service is not started.
This is a powershell control, not WMI.

Checks the status of Microsoft Windows services that should be started except those set as parameters and notifies when a service is not started. Configuration : WMI + admin account + services not to be monitored 

Measures RAM usage under Microsoft Windows and notifies when thresholds are exceeded. Configuration: Domain, WMI account, alert and critical thresholds.

Analyzes the result of planned tasks over a given period of time.
Switches to the CRITICAL state if any of the scheduled tasks never ran on the control range, or if its last run in the control range was not successful.
This is the powershell version of this control.
Configuration: Windows supervision account, scheduled tasks to be monitored, monitoring period, date format.

Checks if the DNS service is started on the server, and notifies if it is not. Configuration: SNMP community 

Measures RAM usage under Microsoft Windows and notifies when thresholds are exceeded. Configuration: SNMP community 

Connects to the target system using various protocols, executes a Powershell command, and looks for a string in the command output. Returns a status to specify if the string is present or absent. Configuration: account, password, user's domain, command to execute, string to search for, status and message to return if the string is missing, status and message to return if the string is present, number of occurrences of the string to find before the control returns the corresponding status, execution time, remote connection method (winexe, winrm, winrms), Powershell console to launch before the command is executed.

Analyzes a Windows event log (e.g. system, application...) over a given period.
This control searches for events based on different filter criteria (e.g. message content, source, ID).
Switches to ALERT status if at least n events (configurable threshold) of type INFORMATION or WARNING are found in the event log.
Goes to CRITICAL status if at least n events (configurable threshold) of type ERROR are found in the event log.
Switches to OK status if no events are found in the log or if all Error, Warning or Information events are below the respective thresholds.
Configuration: windows monitoring account, the name of the event log, the filter criteria: the content of the event message, the source of the event, the event identifier, the analysis period, the threshold of alert type events expressing the number of events, the threshold of error type events expressing the number of events, the threshold of information type events expressing the number of events, the remote connection method to the powershell console.

Runs a Powershell script on the target Windows system, and retrieves its output. Returns a status and possibly performance data. Configuration: account, password, user's domain, script to execute with or without parameters, freshness of the result file of the executed script in seconds, remote connection method (winexe, winrm, winrms).

Checks the status of a specific Microsoft Windows process, and the number of instances of this process, and notifies when it is not started or when the number of instances exceeds the alert/critical thresholds. Configuration: Community, SNMP version and port, process name, alert threshold (number of instances), critical threshold (number of instances).

Collects the memory usage of a Windows process, and goes to alert if the overall memory usage of the process exceeds a threshold. Configuration: the percentage of memory above which the state changes to ALERT, the percentage of memory above which the state changes to CRITICAL.

Collects the global memory usage by all instances of a process, and goes to alert if the global memory usage by at least one instance exceeds a threshold. Configuration: memory alert threshold in MB, critical memory threshold in MB, process name, SNMP community, SNMP port, SNMP version.

Checks the status of a specific Microsoft Windows service and notifies when it is not started. Configuration: SNMP community and name of the process to monitor. 

Collects global memory usage by all instances of a process, and
goes into alert if the global memory usage by at least one instance exceeds
a threshold. Configuration: the percentage of memory above which the
changes to ALERT, the percentage of memory above which the state changes to
CRITICAL, process name, SNMP community, SNMP port, version
SNMP.

Collects the global CPU usage by all instances of a process, and alerts if the global CPU resource usage by at least one instance exceeds a threshold. In the case of a multiprocessor architecture this percentage includes the resources of all processors.
Configuration: the percentage of CPU resources above which the status changes to ALERT, the percentage of CPU resources above which the status changes to CRITICAL, the process name, the SNMP community, the SNMP port, the SNMP version.

Collects the overall CPU usage by a process, and goes to alert if the overall CPU usage by that process exceeds a threshold. Configuration: the percentage of the processor above which the state changes to ALERT, the percentage of the processor above which the state changes to CRITICAL.

Analyzes the result of a scheduled task over a given period of time. Switches to CRITICAL status if the scheduled task never ran on the control range, or if the last execution of the scheduled task on the control range was not successful. Configuration: Windows user, Windows password and domain, scheduled task name, control range.

Measures network traffic usage for a Microsoft Windows interface. Indicates the throughput and volume of data transmitted/received since the last system boot. Notifies when thresholds are exceeded. Configuration: SNMP community 

Searches for a list of strings in log files associated with each CRITICAL/WARNING/OK status, parsed in that order. Does not handle file names with special or accented characters. Configuration: Windows supervision account, name of the file(s) to be analyzed, directory of the log files, list of character strings defined as regular expressions to be searched for each of the CRITICAL/WARNING/OK statuses, time range for taking the files into account, minimum number of occurrences of the string to be found, location on the equipment of the check_logfiles.exe executable. This executable can be recovered on the server hosting the supervision website in /root/supervision/.

Searches for a list of strings or regular expressions in log files. Does not handle file names with special or accented characters. Configuration: name of the file(s) to analyze, directory of the log files, list of strings or regular expressions to search, period of time the files are considered, number of occurrences of the string to find, location on the device of the logfiles executable, user and password of connection to the device.

Returns the status of the print queue under MS Windows. Configuration: SNMP community 

Collects the total remaining space for each online "CSVfs" of a HyperV cluster, and notifies when thresholds are exceeded. Configuration: Windows - Admin monitoring account with Powershell remote execution authorization, alert/critical thresholds. Ability to include or exclude disks. PowerShell FailoverClusters module must be installed.

Measures the variation in the size of a directory between two measurements. Alerts if this variation exceeds a threshold. The directory is defined by its local path. The threshold is expressed in absolute value (number of bytes more/less). Configuration : Windows supervision account, alert and critical threshold, path to analyze, unit used for the measurement.

Measures the size of a directory and notifies if the threshold is exceeded. Configuration: login domain, login username, password, directory path, alert threshold, critical threshold.

Scans a Windows event log for specific events identified by the event source application, over a given period of time. Switches to ALERT state if at least n ALERT messages (configurable threshold) are collected in the event log. Switches to CRITICAL state if at least n CRITICAL messages (configurable threshold) are collected in the event log. The control indicates the number of occurrences for each source in the most critical state. Configuration: the name and password of a user having access to the event log, the name of the event log, the analysis period, the list of event sources separated by a comma, the alert threshold expressing the number of events, the critical threshold expressing the number of events.

Scans a Windows event log for specific events identified by the pair "SOURCE AND ID", over a given period of time.

Switches to ALERT status if at least n messages of type ALERT or INFORMATION or COMMENT (configurable threshold) are collected in the event log.

Switches to CRITICAL status if at least n CRITICAL messages (configurable thresholds) are collected in the event log.

Switches to OK state if no events are found in the log. The control indicates the number of occurrences for the SOURCE AND ID pair, in the most critical state.

Scans a Windows event log for specific events identified over a period of time, and tracks the number of repetitions of these events. Switches to ALERT and then CRITICAL status when thresholds are crossed. Configuration: the name of the event log, the analysis period, the list of event numbers separated by a comma, the number of repetitions above which the state changes to ALERT, the number of repetitions above which the state changes to CRITICAL.

Scans a Windows event log for specific events identified over a period of time. Switches to the ALERT state if for at least one event in the list, at least one message of type ALERT is collected in the event log. Switches to CRITICAL status if for at least one event in the list, at least one CRITICAL message is collected in the event log. The control indicates the number of occurrences for each event, in the most critical state for the event. Configuration: the name and password of a user with access to the event log, the name of the event log, the analysis period, the list of event numbers separated by commas.

Checks for errors in the event logs. Switches to Alert status if there is at least one critical event in the event logs. Changes to Critical if there is at least one new critical event in the event logs since the previous check was performed. Configuration: WMI account, event log name, event type, analysis period.

Measures disk space usage on a Windows server in WMI. Alerts when a threshold is exceeded, expressed as a percentage of disk usage. This control also allows to control the use of disks switching to a Microsoft cluster. By default, it controls all the drives present on the server, a list of drives to control can be specified. Configuration : Windows supervision account having access to WMI, alert threshold, critical threshold, list of drives.

Measures the use of a Windows disk space and notifies if the threshold is exceeded. Configuration: SNMP community 

Checks I/O on disks under Microsoft Windows Configuration: WMI + admin account 

Retrieves disk quota status for each user and notifies when a user quota exceeds a threshold. Configuration: SNMP community 

View the status of the DHCP server by getting information on the number of used addresses, the number of free addresses. Switches to "Alert" status when lease requests are pending. Goes into a "Critical" state when the DHCP service is not working or when the service can no longer provide an address on at least one served subnet. Condition to be used on the DHCP server Configuration: specify SNMP community  

Collects the percentage of time the processor uses to run active threads.

Configuration: user ID, password and domain (optional) of a user with WMI remote read access, alert threshold, critical threshold.

Collects the length of the processor queue (threads waiting to be processed by the processor). Configuration: user ID, password and domain (optional) of a user with remote read WMI access, alert threshold, critical threshold. 

Collects the occupancy rate of all disks: percentage of time spent executing read or write requests. Configuration: user ID, password and domain (optional) of a user with remote WMI read access, alert threshold, critical threshold. 

Collects the disk space used by the memory paging file, in MB. Configuration: username, password and domain (optional) of a user with remote WMI read access, alert threshold, critical threshold. 

Collects the number of pages per second read/written to disk when a process' data/instruction access in RAM fails. Configuration: user ID, password and domain (optional) of a user with remote read WMI access, alert threshold, critical threshold. 

Collects queue length across all disks. Configuration: username, password and domain (optional) of a user with remote read WMI access, alert threshold, critical threshold. 

Collects the average data write time on all disks. Configuration: username, password and domain (optional) of a user with remote read WMI access, alert threshold, critical threshold. 

Collects the average data transfer time on all disks, in seconds. Configuration: username, password and domain (optional) of a user with remote read WMI access, alert threshold, critical threshold. 

Collects the average data read time in seconds, across all disks. Configuration: username, password and domain (optional) of a user with WMI remote read access, alert threshold, critical threshold. 

Collects the number of rejected requests from the ASP.NET queue when the queue is full. Configuration: username, password and domain (optional) of a user with remote read WMI access, alert threshold, critical threshold. 

Collects the number of ASP.NET requests waiting to be processed. Configuration: username, password and domain (optional) of a user with remote read WMI access, alert threshold, critical threshold. 

Analyzes on a Windows operating system the files in a directory and alerts if the number of files exceeds thresholds or if the last modification date of one of them is earlier than a given date, obtained by removing the time period configured at the control date. Configuration: Windows session account and password, Active Directory domain, file names to analyze (character '*' supported), alert threshold (time period), critical threshold (time period), alert threshold (number), critical threshold (number).

Counts on a Windows operating system the number of files in a directory and alerts when this number is exceeded. Configuration: Windows session account and password, Active Directory domain, file names to count (character '*' supported), alert threshold, critical threshold.

Scans on a Windows operating system the files in a directory and alerts if the last modification date of one of them is earlier than a given date, obtained by removing the configured time period from the control date. Configuration: Windows session account and password, Active Directory domain, file names to analyze (character '*' supported), alert threshold (time period), critical threshold (time period).

Checks by parsing the filenames that the most recent file in a set of files is later than the date set by removing the thresholds on the check date. Changes the status if the file is older. Configuration: account and password of a user having access to the share, domain, aliases of the searched files, alert and critical thresholds.

Collects the utilization rate of all DHCP zones, or those specified as arguments on a Windows 2012 server, and the number of remaining addresses. This rate is the ratio of the number of used addresses to the sum of used and free addresses in the DHCP lease. This control changes state when thresholds are crossed. Configuration: SNMP community, SNMP version, SNMP port, alert/criticism threshold ranges, request execution time, list of DHCP ranges to consider

Measures swap space (and sometimes RAM) usage in Microsoft Windows and notifies when it exceeds a threshold. This model is operational for Windows 2008 and higher.
Configuration SNMP community, SNMP port

Measures swap space (and sometimes RAM) usage on Microsoft Windows and notifies when it exceeds a threshold. Configuration: SNMP community 

Active directory connection test, notifies if the test fails. Configuration : AD user account