IBM Tivoli Composite Application Manager for Microsoft Applications, Version 6.3

Situation descriptions

Each situation description provides information about the situation that you can use to monitor the condition of systems in your network.

The situation descriptions provide the following information:

Description: Information about the conditions that the situation tests.
Formula: Syntax that contains one or more logical expressions describing the conditions for the situation to monitor. The information center topic that corresponds to this situation contains the formula for this agent.

EX_DB_Log_Record_Stalls_Warn

Indicates the Database Log Record Stalls/Sec is high. Use the following formula:

Log_Record_Stalls/Sec GT 0

EX_DB_Log_Threads_Waiting_Warn

Indicates the Database Log Threads waiting is high. Use the following formula:

Log_Threads_Waiting GT 25

EX_IS_Pri_Avg_Delvry_Warn

Indicates the IS Mailbox Average Delivery time is high. Use the following formula:

Average_Delivery_Time GT 3000

EX_IS_Pri_Avg_Local_Delvry_Warn

Indicates the IS Mailbox Average Local Delivery time is high. Use the following formula:

Average_Local_Delivery_Time GT 1000

Note: This situation applies only to Microsoft Exchange Server 2000.

EX_IS_Pri_Message_Delvrd_Crit

Indicates the IS Mailbox Messages Delivered/min is very high. Use the following formula:

Messages_Delivered/min GT 3000

Note: This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_Pri_Message_Delvrd_Warn

Indicates the IS Mailbox Messages Delivered/min is high. Use the following formula:

Messages_Delivered/min GT 1000

Note: This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_Pri_Receive_Queue_Warn

Indicates the IS Mailbox Receive Queue size is high. Use the following formula:

Receive_Queue_Size GT 50

EX_IS_Pri_Send_Queue_Warn

Indicates the IS Mailbox Send Queue size is high. Use the following formula:

Send_Queue_Size GT 100

Note: This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_Pub_Receive_Queue_Warn

Indicates the IS Public Receive Queue size is high. Use the following formula:

Receive_Queue_Size GT 250

EX_IS_Pub_Send_Queue_Warn

Indicates the IS Public Send Queue size is high. Use the following formula:

Send_Queue_Size GT 1000

Note: This situation applies only to Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_IS_RPC_Operations_Warn

Indicates a high number of RPC Operations per second. Use the following formula:

RPC_Operations/Sec GT 100

EX_IS_RPC_Requests_Warn

Indicates a high number of RPC Request. Use the following formula:

RPC_Requests GT 50

EX_MTA_Conn_Queue_Warn

Indicates the MTA Connections Queue size is high. Use the following formula:

Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_MTA_Work_Queue_Warn

Indicates the MTA Work Queue size is high. Use the following formula:

Work_Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_Server_Down

Indicates Microsoft Exchange Server is down or unavailable. Use the following formula:

Server_Status EQ DOWN

EX_SMTP_Local_Queue_Warn

Indicates the SMTP Local Queue size is high. Use the following formula:

Local_Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_SMTP_Remote_Queue_Warn

Indicates the SMTP Remote Queue size is high. Use the following formula:

Remote_Queue_Length GT 50

This situation is only applicable on Microsoft Exchange Server 2000 and Microsoft Exchange Server 2003.

EX_Cache_Pg_Stall_Sec_Warn

Indicates that the number of Cache Page Stalls/Sec is high. Use the following formula:

MS_Exchange_DB.Cache_Page_Fault_Stalls/Sec GT 0.0

EX_Cache_Pg_Fault_Sec_Warn

Indicates that the number of Cache Page Faults/Sec is high. Use the following formula:

MS_Exchange_DB.Cache_Page_Faults/Sec GT 10.0

EX_Cache_Pg_Fault_Sec_Crit

Indicates that the number of Cache Page Faults/Sec is very high. Use the following formula:

MS_Exchange_DB.Cache_Page_Faults/Sec GT 20.0

EX_DB_Log_Rec_Stall_Sec_Warn

Indicates that the Database Log Record Stalls/Sec is high. Use the following formula:

MS_Exchange_DB.Log_Record_Stalls/Sec GT 50.0

EX_DB_Log_Rec_Stall_Sec_Crit

Indicates that the Database Log Record Stalls/Sec is very high. Use the following formula:

MS_Exchange_DB.Log_Record_Stalls/Sec GT 100.0

EX_Server_Status_Critical

Indicates that the Microsoft Exchange Server is down or unavailable. Use the following formula:

MS_Exchange_Server.Server_Status EQ down

EX_Server_Attendant_Stat_Crit

Indicates that the Microsoft Exchange Server System Attendant Service is down or unavailable. Use the following formula:

MS_Exchange_Server.System_Attendant_Svc_Status EQ Stopped

EX_Server_MTA_Status_Critical

Indicates that the Microsoft Exchange Server MTA service is down or unavailable. Use the following formula:

MS_Exchange_Server.Exchg_MTA_Status EQ Stopped

EX_Server_IS_Status_Critical

Indicates that the Microsoft Exchange Server Information Store service is down or unavailable. Use the following formula:

MS_Exchange_Server.Server_Status EQ down

EX_Server_Res_Status_Critical

Indicates that the Microsoft Exchange Routing Engine service is down or unavailable. Use the following formula:

MS_Exchange_Server.Res_Status EQ Stopped

EX_Server_SMTP_Status_Cirtical

Indicates that the Microsoft Exchange Server SMTP service is down or unavailable. Use the following formula:

MS_Exchange_Server.SMTP_Status EQ Stopped

EX_Server_WWW_Status_Critical

Indicates that the World Wide Web service is down or unavailable. Use the following formula:

MS_Exchange_Server.WWW_Status EQ Stopped

EX_Server_App_Pct_Free_Warn

Indicates the disk size and the free disk space that is available on the Microsoft Exchange Application.

MS_Exchange_Server.Application_Percent_Free_Space LE 20.0 AND MS_Exchange_Server
.Application_Percent_Free_Space GT 10.0

EX_Server_App_Pct_Free_Critical

Indicates the disk size and the free disk space that is available on the Microsoft Exchange Application.

MS_Exchange_Server.Application_Percent_Free_Space LE 10.0

EX_Server_Log_Pct_Free_Warn

Indicates the name and the location of the Microsoft Exchange Server log files. The agent also provides information about the free space that is available for each log file.

MS_Exchange_Server.Log_Percent_Free_Space GT 10.0 AND MS_Exchange_Server.Log_Percent
_Free_Space LE 20.0

EX_Server_Log_Pct_Free_Critical

Indicates the name and the location of the Microsoft Exchange Server log files. The agent also provides information about the free space that is available for each log file.

MS_Exchange_Server.Log_Percent_Free_Space GE 0 AND MS_Exchange_Server.Log_Percent
_Free_Space LE 10.0

EX_SMTP_Dir_PickupQ_Warn

Indicates that the Directory Pickup Queue Length is high. Use the following formula:

SMTP.Directory_Pickup_Queue_Length GT 25

EX_SMTP_Queue_Len_Warn

Indicates that the Local Queue Length is high. Use the following formula:

SMTP.Local_Queue_Length GT 25

EX_SMTP_Retry_QLen_Warn

Indicates that the Local Retry Queue Length is high. Use the following formula:

SMTP.Local_Retry_Queue_Length GT 25

EX_SMTP_Remote_RetryQ_Warn

Indicates that the Remote Retry Queue Length is high. Use the following formula:

SMTP.Remote_Retry_Queue_Length GT 25

EX_SMTP_Categorizer_QLen_Warn

Indicates that the Categorizer Queue Length is high. Use the following formula:

SMTP.Categorizer_Queue_Length GT 25

EX_DB_Log_Gen_CkPt_Depth_Warn

Indicates that the Log Generation Checkpoint Depth is high. Use the following formula:

MS_Exchange_DB_Instance.Log_Generation_Checkpoint_Depth GT 50000

EX_DB_Log_Gen_CkPt_Depth_Crit

Indicates that the Log Generation Checkpoint Depth is very high. Use the following formula:

MS_Exchange_DB_Instance.Log_Generation_Checkpoint_Depth GT 60000

EX_SMTP_Mess_Pend_Rt_Warn

Indicates that the Messages Pending Routing is high. Use the following formula:

SMTP.Messages_Pending_Routing GT 500 AND SMTP.Messages_Pending_Routing LE 750

EX_SMTP_Mess_Pend_Rt_Critical

Indicates that the Messages Pending Routing is very high. Use the following formula:

SMTP.Messages_Pending_Routing GT 750

EX_TQ_Act_RD_QLen_Warn

Indicates the number of messages in the Remote Delivery Queue. It also indicates that the Remote Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Remote_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Active_Remote_Delivery_Queue_Length LE 750

EX_TQ_Act_RD_QLen_Crit

Indicates the number of messages in the Remote Delivery Queue. It also indicates that the Remote Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Remote_Delivery_Queue_Length GT 750

EX_TQ_Retry_RD_QLen_Warn

Indicates that the Retry Remote Delivery Queue is holding messages that are in the retry state. It also indicates that the Retry Remote Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Remote_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Retry_Remote_Delivery_Queue_Length LE 750

EX_TQ_Retry_RD_QLen_Crit

Indicates that the Retry Remote Delivery Queue is holding messages that are in the retry state. It also indicates that the Retry Remote Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Remote_Delivery_Queue_Length GT 750

EX_TQ_ActMail_Delivey_Q_Warn

Indicates the number of messages in Mailbox Delivery Queue. It also indicates that the Mailbox Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Mailbox_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Active_Mailbox_Delivery_Queue_Length LE 750

EX_TQ_ActMail_Delivey_Q_Crit

Indicates the number of messages in Mailbox Delivery Queue. It also indicates that the Mailbox Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Mailbox_Delivery_Queue_Length GT 750

EX_TQ_RtryMailDeliver_QLen_Warn

Indicates that the Retry Mailbox Delivery Queue is holding messages that are in the retry state. It also indicates that the Mailbox Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Mailbox_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Retry_Mailbox_Delivery_Queue_Length LE 750

EX_TQ_RtryMailDeliver_QLen_Crit

Indicates that the Retry Mailbox Delivery Queue is holding messages that are in the retry state. It also indicates that the Mailbox Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Mailbox_Delivery_Queue_Length GT 750

EX_TQ_Act_nSMTP_Q_Len_Warn

Indicates the number of messages in the Non-SMTP Delivery Queue. It also indicates that the Non-SMTP Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Non-SMTP_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Active_Non-SMTP_Delivery_Queue_Length LE 750

EX_TQ_Act_nSMTP_Q_Len_Crit

Indicates the number of messages in the Non-SMTP Delivery Queue. It also indicates that the Non-SMTP Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Active_Non-SMTP_Delivery_Queue_Length GT 750

EX_TQ_Rtry_nSMTP_Q_Len_Warn

Indicates that the Retry Non-SMTP Delivery Queue is holding messages that are in a retry state. It also indicates that the Retry Non-SMTP Delivery Queue length is greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Non-SMTP_Delivery_Queue_Length GT 500 AND MS
_Exchange_Transport_Queues.Retry_Non-SMTP_Delivery_Queue_Length LE 750

EX_TQ_Rtry_nSMTP_Q_Len_Crit

Indicates that the Retry Non-SMTP Delivery Queue is holding messages that are in a retry state. It also indicates that the Retry Non-SMTP Delivery Queue length is greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Retry_Non-SMTP_Delivery_Queue_Length GT 750

EX_TQ_Agg_Delivery_Q_Len_Warn

Indicates the total number of items that are in queue for delivery in all the queues. It also indicates that the total number of messages in all queues are greater than 500 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Aggregate_Delivery_Queue_Length GT 500 AND MS_Exchange
_Transport_Queues.Aggregate_Delivery_Queue_Length LE 750

EX_TQ_Agg_Delivery_Q_Len_Crit

Indicates the total number of items that are in queue for delivery in all the queues. It also indicates that the total number of messages in all queues are greater than 750 for the last 3 sample intervals.

MS_Exchange_Transport_Queues.Aggregate_Delivery_Queue_Length GT 750

EX_Service_State_Critical

Indicates the state of the service. A service can be in one of the following states:

Stopped
Start Pending
Stop Pending
Running
Continue Pending
Pause Pending
Paused
Unknown

MS_Exchange_Services_Detail.Service_State NE Running

EX_Service_Status_Critical

Indicates the status of the service. A service can have one of the following status:

Ok
Error
Degraded
Unknown
Pred Fail
Starting
Stopping
Service

MS_Exchange_Services_Detail.Service_Status NE Starting

EX_Service_Start_Critical

Indicates that the service will either be started automatically when the system starts or manually by the user.

MS_Exchange_Services_Detail.Service_Start_Mode NE Automatic

EX_IS_Mail_Store_State_Critical

Indicates the Information Mailbox Store state. You can mount or demount the Information Mailbox Store.

MS_Exchange_IS_Private.Mailbox_Store_State EQ Dismounted

EX_Rep_Failed_Warn

Indicates that the Replica Instance has failed.

Replication_Failed EQ 1

EX_Rep_Suspended_Warn

Indicates that the Replica Instance is suspended.

Replication_Suspended EQ 1

Messages_Bypassed_Scan_Crit

Indicates the number of messages that have bypassed scanning are 50 or more.

Messages_Bypassed_Scanning GE 50

Messages_Bypassed_Scan_Warn

Indicates the number of messages that have bypassed scanning are 40 or more, but less than 50.

Messages_Bypassed_Scanning GE 40 and LT 50

Cluster_Mailbox_State_Crit

Indicates that the server is offline.

Mailbox_State EQ OFFLINE

EX_NLB_Status_Crit

Indicates that cluster operations have stopped on at least one node.

NLB_Status EQ 'Stopped'

EX_Replication_Failed_Warn

Indicates that replication has failed.

Replication_Failed EQ Replication_Failed

EX_Replication_Suspended_Warn

Indicates that replication has been suspended.

Replication_Suspended EQ Replication_Suspended

EX_Error_Event

Indicates that an error type event has occurred.

Event_Type EQ Failure_Audit OR Error

EX_Asst_Avg_Evt_Proc_Time_Crit

Indicates that the average processing time of the selected events has exceeded the critical threshold.

Average_Event_Processing_Time_In_seconds GE 2

EX_ASync_Request_Queued_Crit

Indicates that the number of HTTP requests that are received from the client through ASP.NET has exceeded the critical threshold.

Requests_Queued GE 100

EX_ASync_Request_Queued_Warn

Indicates that the number of HTTP requests that are received from the client through ASP.NET has exceeded the warning threshold.

Requests_Queued GE 95 and LT 100

EX_DB_Log_Write_Avg_Lat_Crit

Indicates that the average latency (in milliseconds) of database log write operations has exceeded the critical threshold.

IO_Log_Writes_Average_Latency GE 10

EX_IS_Cli_RPC_Avg_Lat_Crit

Indicates that the average latency (in milliseconds) of RPC requests has exceeded the critical threshold.

RPC_Average_Latency GE 50

EX_IS_Cli_RPC_Fail_ServBsy_Crit

Indicates that some RPC requests have failed because the RPC server is too busy.

Client_RPCs_Failed_Server_Too_Busy GT 0

EX_IS_Pri_Msg_Queue_Sub_Crit

Indicates that the number of messages in the mailbox store have been queued for submission to the Transport Server and have exceeded the critical threshold.

Messages_Queued_For_Submission GE 50

EX_IS_Pri_Search_Task_Rate_Crit

Indicates that the number of search tasks that are created per second has exceeded the critical threshold.

Search_Task_Rate GE 10

EX_IS_Pri_Slow_FdRw_Rate_Crit

Indicates that the Slow FindRow Rate in the mailbox store has exceeded the critical threshold.

Slow_Findrow_Rate GT 10

EX_IS_Pub_Msg_Queue_Sub_Crit

Indicates that the number of replication messages in the public store that have been queued for submission to the Transport Server and have exceeded the critical threshold.

Messages_Queued_For_Submission GE 20

EX_IS_RPC_Avg_Latency_Crit

Indicates that the RPC average latency (in milliseconds) for the information store has exceeded the critical threshold.

RPC_Averaged_Latency GT 10

EX_IS_RPC_Requests_Crit

Indicates that the number of client requests in the information store process has exceeded the critical threshold.

RPC_Requests GE 70

EX_IS_Slow_QP_Threads_Crit

Indicates that the number of query processor threads, which contain queries that are not optimized, has exceeded the critical threshold.

Slow_QP_Threads GE 10

EX_IS_Slow_Search_Threads_Crit

Indicates that the number of search threads, which contain queries that are not optimized, has exceeded the critical threshold.

Slow_Search_Threads GE 10

EX_RBAC_OBPrxy_Avg_RTime_Crit

Indicates that the average completion time (in milliseconds) for the requests that are sent to the secondary Client Access Server during the sampling period has exceeded the critical threshold.

Average_Response_Time_of_Outbound_Proxy_Requests GE 6000

EX_OWA_Avg_Search_Time_Crit

Indicates that the average search time (in milliseconds) has exceeded the critical threshold.

Average_Search_Time GE 5000

EX_Rep_Copy_Queue_Length_Crit

Indicates that the copy queue length has exceeded the critical threshold.

Copy_Queue_Length GE 1

EX_RBAC_Req_Avg_Resp_Time_Crit

Indicates that the average time (in milliseconds) for the Exchange Control Panel to respond to a request during the sampling period has exceeded the critical threshold.

Average_Request_Response_Time GE 6000

EX_Rsc_Book_Requests_Failed_Crit

Indicates that the Resource Booking Attendant has failed to process meeting requests.

Meetings_Requests_Failed GT 0

EX_Store_Int_RPC_Avg_Lat_Crit

Indicates that the average latency of RPC requests (in milliseconds) has exceeded the critical threshold. The average is calculated for all the RPC requests since the exrpc32.dll process has been loaded.

RPC_Latency_Average GE 100

EX_Store_Int_RPC_Req_OutSt_Crit

Indicates that some RPC requests are outstanding. The number of outstanding RPC requests must always be 0.

RPC_Requests_outstanding GT 0

EX_Store_Int_RPC_Req_Fail_Crit

Indicates the percentage of RPC requests that have failed. The failed RPC requests are the requests with error codes and exceptions.

Percent_of_RPC_Requests_Failed GT 0

EX_Store_Int_RPC_Slow_Req_Crit

Indicates that the processing time for some RPC requests has exceeded the specified threshold. An RPC request with a processing time of more than 500 ms is called a slow RPC request.

Percent_of_Slow_RPC_Requests GE 1

EX_TQ_Lar_Dlv_Q_Len_Crit

Indicates that the number of messages in the largest delivery queue has exceeded the critical threshold.

Largest_Delivery_Queue_Length GE 200

EX_TQ_Lar_Dlv_Q_Len_Warn

Indicates that the number of messages in the largest delivery queue has exceeded the warning threshold.

Largest_Delivery_Queue_Length GE 190 and LT 200

EX_TQ_Poison_Q_Len_Crit

Indicates that the poison message queue contains some messages. The poison message queue must always be empty.

Poison_Queue_Length GT 0

EX_TQ_Sub_Queue_Len_Crit

Indicates that the number of messages in the Submission queue has exceeded the critical threshold.

Submission_Queue_Length GE 100

EX_TQ_Sub_Queue_Len_Warn

Indicates that the number of messages in the Submission queue has exceeded the warning threshold.

Submission_Queue_Length GE 95 and LT 100

EX_TQ_Unreach_Q_Len_Crit

Indicates that the number of messages in the Unreachable queue has exceeded the critical threshold.

Unreachable_Queue_Length GE 100

EX_TQ_Unreach_Q_Len_Warn

Indicates that the number of messages in the Unreachable queue has exceeded the warning threshold.

Unreachable_Queue_Length GE 95 and LT 100

EX_CAS_RPC_Avg_Latency_Crit

Indicates that the RPC average latency for the last 1024 packets has exceeded the critical threshold.

RPC_Averaged_Latency GE 250

EX_CAS_RPC_Avg_Latency_Warn

Indicates that the RPC average latency for the last 1024 packets has exceeded the warning threshold.

RPC_Averaged_Latency GE 225 AND RPC_Averaged_Latency LT 250

EX_CAS_RPC_Requests_Crit

Indicates that the number of RPC requests that are processed by the RPC Client Access service has exceeded the critical threshold.

RPC_Requests GE 40

EX_CAS_RPC_Requests_Warn

Indicates that the number of RPC requests that are processed by the RPC Client Access service has exceeded the warning threshold.

RPC_Requests GE 35 AND RPC_Requests LT 40

EX_AB_NSPI_RPC_Br_Avg_Lat_Crit

Indicates that the average latency of the NSPI RPC browse requests has exceeded the critical threshold.

NSPI_RPC_Browse_Requests_Average_Latency GE 1000

EX_AB_NSPI_RPC_Req_Avg_Lat_Crit

Indicates that the average latency of the NSPI RPC requests has exceeded the critical threshold.

NSPI_RPC_Requests_Average_Latency GE 1000

EX_AB_REF_RPC_Req_Avg_Lat_Crit

Indicates that the average latency of the referral RPC requests has exceeded the critical threshold.

Referral_RPC_Requests_Average_Latency GE 1000

EX_FDS_OAB_Dwnld_Task_Que_Warn

Indicates that the number of OAB download tasks that are queued for execution has exceeded the warning threshold.

Download_Task_Queued GT 0

EX_AVSER_Avg_Proc_Free_Bsy_Crit

Indicates that the average time to process a free or a busy request has exceeded the critical threshold.

Average_Time_to_Process_Free_Busy_Request GE 5

EX_HTTP_Pxy_Fail_Bknd_Con_Crit

Indicates that the number of attempts that failed to connect to the back-end server has exceeded the critical threshold.

Number_of_Failed_Back_End_Connection_Attempts_per_Second GT 0

EX_SI_Avg_Doc_Idx_Time_Warn

Indicates that the average document indexing time has exceeded the warning threshold.

Average_Document_Indexing_Time GE 30

EX_SI_Full_Crawl_Mod_Sta_Warn

Indicates that the utilization of server resources has increased because the full-text crawl is currently running on the database.

Full_Crawl_Mode_Status EQ 1

Feedback