You are here

Active Directory Security Accounts

Requires Opsview Cloud or Opsview Monitor 6.3

This Host Template is part of the Active Directory Agentless Monitoring Opspack

check_circle
Opsview Supported

Host Template: Application - Active Directory - Security Accounts Manager

Monitor an Active Directory Security Accounts Manager

This Host Template includes the following Service Checks:

Service Check Name Description Default Thresholds (Warning, Critical) UOM
Active Directory - SAM - Reads/Writes Shows the percentage of reads performed by the Security Authentication Server (SAM) on the directory. N/A %
Active Directory - SAM - Successful Computer Creations Shows the number of successful computer accounts created per second. N/A per_second
Active Directory - SAM - Machine Creation Attempts Rate Shows the number of attempts per second to create computer accounts. N/A per_second
Active Directory - SAM - Password Changes Rate Shows the number of Security Authentication Manager (SAM) password changes per second. N/A per_second
Active Directory - SAM - Successful User Creations Rate Shows the number of user accounts successfully created per second. N/A per_second
Active Directory - SAM - Global Catalog Evaluations Rate Shows the number of universal group membership evaluations per second on a global catalog domain controller from non-global catalog domain controllers N/A per_second
Active Directory - SAM - User Creation Attempts Rate Shows the number of attempts per second to create user accounts. N/A per_second

Usage Instructions

Step 1: Add this Host Template

Add the Application - Active Directory - Security Accounts Manager Host Template to your Opsview Monitor host. If the resource you're monitoring has no hostname or public IP, then open the Advanced settings pane and change Host Check Command to Always assumed to be UP.

For more information, refer to Opsview Knowledge Center - Adding Host Templates to Hosts.

Step 2: Add and configure variables required for this Host Template

The Service Checks in this Host Template use the following variables, and they will be added to your Opsview Monitor instance when you import the Opspack:

Authentication variables

AD_CREDENTIALS

Parameter Position in Variable Name Description
--Username Arg1 Username Username for remote windows host e.g user@DOMAIN.COM
--Password Arg2 Password Password for remote windows host
--Authentication Arg3 Authentication Type Authentication type to use

KERBEROS_REALM

Only required if authenticating using Kerberos. If Kerberos authentication is not working add a default_realm value in the krb5.conf file located in '/opt/opsview/krb5/etc/'

Parameter Position in Variable Name Description
Opsview UI only Value Kerberos Realm Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only Arg1 KDC 1 Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only Arg2 KDC 2 Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only Arg3 KDC 3 Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file
Opsview UI only Arg4 KDC 4 Kerberos realm. This value is not used by the plugin, it is used to automatically configure your 'krb5.conf' configuration file

For more information, refer to Opsview Knowledge Center - Adding Variables to Hosts.

For mode-specific help, run the plugin with the -h -m <mode> flags. This will list the required and optional Variable Arguments for that mode. The appropriate mode for each Service Check is listed here:

Service Check Name Mode
Active Directory - SAM - Reads/Writes AD.SAM.ReadsWrites
Active Directory - SAM - Successful Computer Creations AD.SAM.ComputerCreationsRate
Active Directory - SAM - Machine Creation Attempts Rate AD.SAM.MachineCreationAttemptsRate
Active Directory - SAM - Password Changes Rate AD.SAM.PasswordChangesRate
Active Directory - SAM - Successful User Creations Rate AD.SAM.UserCreationsRate
Active Directory - SAM - Global Catalog Evaluations Rate AD.SAM.GlobalCatalogEvaluationsRate
Active Directory - SAM - User Creation Attempts Rate AD.SAM.UserCreationAttemptsRate

Step 3: Apply changes and the system will now be monitored

Active Directory Security Accounts Service Checks