[Check_mk (english)] Monitoring per process memory on windows

Archive checkmk-en
1

Hi all,

I’m sure I have missed something very simply here, but I cannot seem to find the correct syntax, or method to monitor per process memory usage on windows. I have placed the psperf.bat plugin in the windows plugin agent folder and I am receiving process information from the agent;-

<<ps:sep(44)>>

[wmic process]

Node,HandleCount,KernelModeTime,Name,PageFileUsage,ProcessId,ThreadCount,UserModeTime,VirtualSize,WorkingSetSize

DLONINNAGS10,0,15074667968750,System Idle Process,0,0,1,0,65536,4096

DLONINNAGS10,631,9226406250,System,108,4,96,0,3465216,294912

DLONINNAGS10,52,1093750,smss.exe,276,216,2,0,4325376,1056768

DLONINNAGS10,399,430468750,csrss.exe,1888,344,9,83281250,47419392,4759552

DLONINNAGS10,87,4687500,csrss.exe,1216,396,8,1250000,40337408,3710976

…………

……

…

So all looks fine here. But how do I now create a check that monitors if the “WorkingSetSize” should exceed a certain threshold…….

I have looked at ps.perf, but this does not appear to support this type of check.

When I try to use wmic_proces as in the documentation (albeit this is stated as being obsolete), ie

checks += [

( “dloninnags10”, “wmic_process”, “SNMP”, ( “snmp.exe”, 20, 30, 10, 15, 80, 90)),

]

Then I get the following error;-

WARN - Missing agent sections: wmic_process - execution time 2.5 sec|execution_time=2.472 user_time=0.660 system_time=0.040 children_user_time=0.000 children_system_time=0.000

Can someone please help me as I have wasted far too much time on this already…… L

Thank in advance

Mark

Mark Dollemore

Global Operations

mark.dollemore@man.com

Tel +44 20 7144 3749

Mob 07762893260

image001.gif

Man Group UK Limited |
Registered address: Riverbank House, 2 Swan Lane, London EC4R 3AD, United Kingdom

Registered in England and Wales no. 5856654
Visit us at: www.man.com

This email has been sent by a member of the Man group (“Man”). Man’s parent company, Man Group plc, is registered in England and Wales (company number 08172396) at Riverbank House, 2 Swan Lane, London, EC4R 3AD.
The contents of this email are for the named addressee(s) only. It contains information which may be confidential and privileged. If you are not the intended recipient, please notify the sender immediately, destroy this email and any attachments and do not otherwise disclose or use them. Email transmission is not a secure method of communication and Man cannot accept responsibility for the completeness or accuracy of this email or any attachments. Whilst Man makes every effort to keep its network free from viruses, it does not accept responsibility for any computer virus which might be transferred by way of this email or any attachments. This email does not constitute a request, offer, recommendation or solicitation of any kind to buy, subscribe, sell or redeem any investment instruments or to perform other such transactions of any kind. Man reserves the right to monitor, record and retain all electronic and telephone communications through its network in accordance with applicable laws and regulations. --UwQe9f5k7pI3vplngP

2

Would that be Parameters for discovered services -> Application, Processes & Services -> State and Count of Processes ?

See screenshot: http://snag.gy/53ZQq.jpg

image001.gif

···

Thank you,

Lance Tost

lance.tost@key-stone.com

Sr. Network Administrator

Keystone Automotive Operations, Inc.

From: checkmk-en-bounces@lists.mathias-kettner.de checkmk-en-bounces@lists.mathias-kettner.de on behalf of Dollemore, Mark (London)© Mark.Dollemore@man.com
Sent: Tuesday, July 7, 2015 10:47 AM
To: checkmk-en@lists.mathias-kettner.de
Subject: [Check_mk (english)] Monitoring per process memory on windows

Hi all,

I’m sure I have missed something very simply here, but I cannot seem to find the correct syntax, or method to monitor per process memory usage on windows. I have placed the psperf.bat plugin in the windows plugin agent folder and I am receiving
process information from the agent;-

<<ps:sep(44)>>

[wmic process]

Node,HandleCount,KernelModeTime,Name,PageFileUsage,ProcessId,ThreadCount,UserModeTime,VirtualSize,WorkingSetSize

DLONINNAGS10,0,15074667968750,System Idle Process,0,0,1,0,65536,4096

DLONINNAGS10,631,9226406250,System,108,4,96,0,3465216,294912

DLONINNAGS10,52,1093750,smss.exe,276,216,2,0,4325376,1056768

DLONINNAGS10,399,430468750,csrss.exe,1888,344,9,83281250,47419392,4759552

DLONINNAGS10,87,4687500,csrss.exe,1216,396,8,1250000,40337408,3710976

…………

……

…

So all looks fine here. But how do I now create a check that monitors if the “WorkingSetSize” should exceed a certain threshold…….

I have looked at ps.perf, but this does not appear to support this type of check.

When I try to use wmic_proces as in the documentation (albeit this is stated as being obsolete), ie

checks += [

( “dloninnags10”, “wmic_process”, “SNMP”, ( “snmp.exe”, 20, 30, 10, 15, 80, 90)),

]

Then I get the following error;-

WARN - Missing agent sections: wmic_process - execution time 2.5 sec|execution_time=2.472 user_time=0.660 system_time=0.040 children_user_time=0.000 children_system_time=0.000

Can someone please help me as I have wasted far too much time on this already……
L

Thank in advance

Mark

Mark Dollemore

Global Operations

mark.dollemore@man.com

Tel +44 20 7144 3749

Mob 07762893260

Man Group UK Limited |

Registered address: Riverbank House, 2 Swan Lane, London EC4R 3AD, United Kingdom

Registered in England and Wales no. 5856654

Visit us at:
www.man.com

This email has been sent by a member of the Man group (“Man”). Man’s parent company, Man Group plc, is registered in England and Wales (company number
08172396) at Riverbank House, 2 Swan Lane, London, EC4R 3AD.

The contents of this email are for the named addressee(s) only. It contains information which may be confidential and privileged. If you are not the intended recipient, please notify the sender immediately, destroy this email and any attachments and do not
otherwise disclose or use them. Email transmission is not a secure method of communication and Man cannot accept responsibility for the completeness or accuracy of this email or any attachments. Whilst Man makes every effort to keep its network free from viruses,
it does not accept responsibility for any computer virus which might be transferred by way of this email or any attachments. This email does not constitute a request, offer, recommendation or solicitation of any kind to buy, subscribe, sell or redeem any investment
instruments or to perform other such transactions of any kind. Man reserves the right to monitor, record and retain all electronic and telephone communications through its network in accordance with applicable laws and regulations.
–UwQe9f5k7pI3vplngP

3

Thanks Lance, we don’t actively use wato, but by using your suggestion it has helped me resolve the syntax needed in the config file, for anyone else that might be interested here it is;-

checks += [

( ‘dloninnags10’, ‘ps’, ‘SNMP’, {

‘process’: ‘snmp.exe’,

‘warnmin’: 1,

‘warnmax’: 5,

‘okmin’: 1,

‘okmax’: 5,

‘virtual_levels’: (115343360, 209715200),

‘resident_levels’: (1048576, 2097152),

}),

]

image001.gif

···

From: Lance Tost [mailto:Lance.Tost@key-stone.com]
Sent: 07 July 2015 18:26
To: Dollemore, Mark (London)©; checkmk-en@lists.mathias-kettner.de
Subject: Re: Monitoring per process memory on windows

Would that be Parameters for discovered services -> Application, Processes & Services -> State and Count of Processes ?

See screenshot: http://snag.gy/53ZQq.jpg

Thank you,
Lance Tost
lance.tost@key-stone.com
Sr. Network Administrator
Keystone Automotive Operations, Inc.

From: checkmk-en-bounces@lists.mathias-kettner.de checkmk-en-bounces@lists.mathias-kettner.de on behalf of Dollemore, Mark (London)© Mark.Dollemore@man.com
Sent: Tuesday, July 7, 2015 10:47 AM
To: checkmk-en@lists.mathias-kettner.de
Subject: [Check_mk (english)] Monitoring per process memory on windows

Hi all,

I’m sure I have missed something very simply here, but I cannot seem to find the correct syntax, or method to monitor per process memory usage on windows. I have placed the psperf.bat plugin in the windows plugin agent folder and I am receiving process information from the agent;-

<<ps:sep(44)>>

[wmic process]

Node,HandleCount,KernelModeTime,Name,PageFileUsage,ProcessId,ThreadCount,UserModeTime,VirtualSize,WorkingSetSize

DLONINNAGS10,0,15074667968750,System Idle Process,0,0,1,0,65536,4096

DLONINNAGS10,631,9226406250,System,108,4,96,0,3465216,294912

DLONINNAGS10,52,1093750,smss.exe,276,216,2,0,4325376,1056768

DLONINNAGS10,399,430468750,csrss.exe,1888,344,9,83281250,47419392,4759552

DLONINNAGS10,87,4687500,csrss.exe,1216,396,8,1250000,40337408,3710976

…………

……

…

So all looks fine here. But how do I now create a check that monitors if the “WorkingSetSize” should exceed a certain threshold…….

I have looked at ps.perf, but this does not appear to support this type of check.

When I try to use wmic_proces as in the documentation (albeit this is stated as being obsolete), ie

checks += [

( “dloninnags10”, “wmic_process”, “SNMP”, ( “snmp.exe”, 20, 30, 10, 15, 80, 90)),

]

Then I get the following error;-

WARN - Missing agent sections: wmic_process - execution time 2.5 sec|execution_time=2.472 user_time=0.660 system_time=0.040 children_user_time=0.000 children_system_time=0.000

Can someone please help me as I have wasted far too much time on this already…… L

Thank in advance

Mark

Mark Dollemore

Global Operations

mark.dollemore@man.com

Tel +44 20 7144 3749

Mob 07762893260

logo

Man Group UK Limited |
Registered address: Riverbank House, 2 Swan Lane, London EC4R 3AD, United Kingdom

Registered in England and Wales no. 5856654
Visit us at: www.man.com

This email has been sent by a member of the Man group (“Man”). Man’s parent company, Man Group plc, is registered in England and Wales (company number 08172396) at Riverbank House, 2 Swan Lane, London, EC4R 3AD.
The contents of this email are for the named addressee(s) only. It contains information which may be confidential and privileged. If you are not the intended recipient, please notify the sender immediately, destroy this email and any attachments and do not otherwise disclose or use them. Email transmission is not a secure method of communication and Man cannot accept responsibility for the completeness or accuracy of this email or any attachments. Whilst Man makes every effort to keep its network free from viruses, it does not accept responsibility for any computer virus which might be transferred by way of this email or any attachments. This email does not constitute a request, offer, recommendation or solicitation of any kind to buy, subscribe, sell or redeem any investment instruments or to perform other such transactions of any kind. Man reserves the right to monitor, record and retain all electronic and telephone communications through its network in accordance with applicable laws and regulations. --UwQe9f5k7pI3vplngP