Re: RE : RE: RE : RE: [ActiveDir] AD LDAP Logging.
Check out the TechNet Webcast: Active Directory Performance
Measurement and Troubleshooting—Level 300 at
http://www.microsoft.com/events/series/adaug.mspx.
On 6/10/06, Yann <[EMAIL PROTECTED]> wrote:
Hello,
Gil, very very very usefull informations that u provided at DEC ad
performance session. I just finished to study it. I highly recommend it
because of videos that well explanied how to use spa, logman,etc..!. I'm
eager to test your troubleshooting on monday ! :)
A few questions...
1) Will spa comsumes lots of resources when starting analyze and generating
reports ?
2) Can spa analyzes other DCs from one w2k3 box dedicated spa ? or must i
install spa on each boxes that i want to trend ?
3) Could I see possible LDAP problem connectivities ("dirty" LDAP
disconnections...) between my DC and a client ?
3) Can i schedule the analyzes for a few days to be sure to track ldap pb?
and will it consumes hight resources ?
Thanks,
Yann
Gil Kirkpatrick <[EMAIL PROTECTED]> a écrit :
You can use SPA, or you can use logman and tracerpt to get detailed LDAP
stats. SPA does a lot of analysis for you and diagnoses several classes of
AD perf problems. Tracerpt will give you a fairly raw look at all the LDAP
traffic. I covered all three in my DEC AD Performance session (which I
didn't actually deliver at DEC :). Its available on the NetPro website at
http://www.netpro.com/community/medialibrary.cfm.
-gil
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Steve Linehan
Sent: Friday, June 09, 2006 11:50 AM
To: ActiveDir@mail.activedir.org
Subject: RE: RE : RE: [ActiveDir] AD LDAP Logging.
It is true that SPA is not localized but I believe the French version will
be ok. The problem comes about with the localization of the perfmon data.
If you have problems post back and we can try a few work arounds because we
are only really interested in the trace data at this point which should not
be impacted.
Thanks,
-Steve
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Yann
Sent: Friday, June 09, 2006 11:31 AM
To: ActiveDir@mail.activedir.org
Subject: RE : RE: [ActiveDir] AD LDAP Logging.
Thank you for your answer Steve. I will install spa on monday and see if i
can log some ldpa activities (errors, connections pb,etc...).
Will this version of spa work on a w2k3 sp1 French version ?
Regards,
Yann
Steve Linehan <[EMAIL PROTECTED]> a écrit :
I would suggest taking a look at Server Performance Advisor (SPA), assuming
these are Windows Server 2003 DCs and using it to collect and analyze the
data for the DCs in question. This tool combines performance counters and
the tracing data that Joe is referring to which will allow you to get very
detailed information on what is occurring. This tool will give you a peak
into the new performance and monitoring capabilities that we are adding into
the next versions of the OS. It will also give you hints on what we believe
the performance problems are. One of these days when I get a chance I will
try to write a blog entry on all of the things you can do with SPA. By the
way it also collects information for other server roles as well such as IIS
giving you tremendous amounts of detail found no where else. Yes event
tracing is the future of not only performance monitoring but debugging
difficult issues.
You can download SPA from here:
http://www.microsoft.com/downloads/details.aspx?FamilyID=09115420-8c9d-46b9-a9a5-9bffcd237da2&DisplayLang=en
Thanks,
-Steve
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
joe
Sent: Friday, June 09, 2006 9:35 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] AD LDAP Logging.
Unfortunately the logging is very basic, it will not log LDAP errors from
anything I have seen. This is something I have asked for from MSFT as well,
very detailed LDAP logging like you can enable with some of the other
directories. Usually I hear a response of use event tracing but I haven't
gotten had a chance to really dig deep into that yet to see how useful it
will be.
It depends on the code is displaying error messages bit possibly a query
timed out? That could be indicative of a very poor query. By default, if a
query goes more than 2 minutes, it will get dropped.
--
O'Reilly Active Directory Third Edition -
http://www.joeware.net/win/ad3e.htm
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Yann
Sent: Friday, June 09, 2006 9:42 AM
To: ActiveDir@mail.activedir.org
Subject: Re : [ActiveDir] AD LDAP Logging.
Good point Joe.
I will use perfmon to monitor the health of my DC.
An nother question.
The Web app timed out with this generic error "the serveur is down", where
"the server" = mydc.
At the time of the web app timed out, i saw no errors about ldap connections
between my dc and the zope server.
With th
RE : RE: RE : RE: [ActiveDir] AD LDAP Logging.
Hello, Gil, very very very usefull informations that u provided at DEC ad performance session. I just finished to study it. I highly recommend it because of videos that well explanied how to use spa, logman,etc..!. I'm eager to test your troubleshooting on monday ! :) A few questions... 1) Will spa comsumes lots of resources when starting analyze and generating reports ? 2) Can spa analyzes other DCs from one w2k3 box dedicated spa ? or must i install spa on each boxes that i want to trend ? 3) Could I see possible LDAP problem connectivities ("dirty" LDAP disconnections...) between my DC and a client ? 3) Can i schedule the analyzes for a few days to be sure to track ldap pb? and will it consumes hight resources ? Thanks, Yann Gil Kirkpatrick
<[EMAIL PROTECTED]> a écrit : You can use SPA, or you can use logman and tracerpt to get detailed LDAP stats. SPA does a lot of analysis for you and diagnoses several classes of AD perf problems. Tracerpt will give you a fairly raw look at all the LDAP traffic. I covered all three in my DEC AD Performance session (which I didn't actually deliver at DEC :). Its available on the NetPro website at http://www.netpro.com/community/medialibrary.cfm. -gil From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve LinehanSent: Friday, June 09, 2006 11:50 AMTo: ActiveDir@mail.activedir.orgSubject: RE: RE : RE: [ActiveDir] AD LDAP Logging. It is true that SPA is not localized but I believe
the French version will be ok. The problem comes about with the localization of the perfmon data. If you have problems post back and we can try a few work arounds because we are only really interested in the trace data at this point which should not be impacted. Thanks, -Steve From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of YannSent: Friday, June 09, 2006 11:31 AMTo: ActiveDir@mail.activedir.orgSubject: RE : RE: [ActiveDir] AD LDAP Logging. Thank you for your answer Steve. I will install spa on monday and see if i can log some ldpa activities (errors, connections pb,etc...). Will this version of spa work on a w2k3 sp1 French version ? Regards, YannSteve Linehan <[EMAIL PROTECTED]> a écrit : I would suggest taking a look at Server Performance Advisor (SPA), assuming these are Windows Server 2003 DCs and using it to collect and analyze the data for the DCs in question. This tool combines performance counters and the tracing data that Joe is referring to which will allow you to get very detailed information on what is occurring. This tool will give you a peak into the new performance and monitoring capabilities that we are adding into the next versions of the OS. It will also give you hints on what we believe the performance problems are. One of these days when I get a chance I will try to write a blog entry on all of the things you can do with SPA. By the way it also collects information for other server roles as well such as IIS giving you tremendous amounts of detail found no
where else. Yes event tracing is the future of not only performance monitoring but debugging difficult issues. You can download SPA from here:http://www.microsoft.com/downloads/details.aspx?FamilyID=09115420-8c9d-46b9-a9a5-9bffcd237da2&DisplayLang=en Thanks, -SteveFrom: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of joeSent: Friday, June 09, 2006 9:35 AMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] AD LDAP Logging. Unfortunately the logging is very basic, it will not
log LDAP errors from anything I have seen. This is something I have asked for from MSFT as well, very detailed LDAP logging like you can enable with some of the other directories. Usually I hear a response of use event tracing but I haven't gotten had a chance to really dig deep into that yet to see how useful it will be. It depends on the code is displaying error messages bit possibly a query timed out? That could be indicative of a very poor query. By default, if a query goes more than 2 minutes, it will get dropped. --O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of YannSent: Friday, June 09, 2006 9:42 AMTo: ActiveDir@mail.activedir.orgSubject: Re : [ActiveDir] AD LDAP Logging.Good point Joe. I will use perfmon to monitor the health of my DC. An nother question. The Web app timed out with this generic error "the serveur is down", where "the server" = mydc. At the time of the web app timed out, i saw no errors about ldap connections between my dc and the zope server. With the Field Engineering set to 5 and if the web app timed-out, will a LDAP error appear in my eventlogs that stated a disconnection occured ? Thanks for taking time to rep
