Contents
\n-
\n\t
- Monitoring the Network \n\t
- Monitoring Exchange \n\t
- Monitoring the Host Server \n\t
- Next Steps \n
Monitoring the Network
\nThe most critical component of any application is the network that surrounds it. To ensure that your network is available and running smoothly, we suggest monitoring the following components around your Exchange server: \n
-
\n\t
- Monitor the network switches, routers and firewalls that are between your users and your Exchange services. \n\t
- Use the DNS service monitor to ensure your mail server name is resolving correctly. \n\t
- Use the PING service monitor to ensure that your mail server is responding to network requests. \n
Monitoring Exchange
\nIn this section we will review the monitors that are generally recommended to fully monitor your services.
\n \nMonitoring Exchange Performance
\nWe recommend using the service monitors listed below to monitor the internal application performance of your Exchange Server. \n
-
\n
Exchange Service Monitor. The Exchange service monitor provides detailed internal performance information from your Exchange Server. We recommend adding this service to your Exchange server (note: click the Save for Graphing checkbox beside each statistic in the service monitor if you want to be able to graph or report on internal performance at a later date). Please see the Microsoft Exchange Performance Metrics article for a full list of metrics available from the Exchange service monitor. The following graph shows an example of Exchange performance statistics collected from an existing Exchange service monitor:
\n \n \nAn example of some important Exchange Monitor settings and thresholds:
\n \n \n \nNOTE: Many thresholds within the Exchange service monitor will depend on the size and usage of your Exchange server. We suggest enabling the Save for Graphing option on each statistic and then letting the monitor collect data for 2 to 3 days. After that time, review the collected data to see how each statistic has trended over time, and pick thresholds that seem appropriate to your installation.
\n
\n
\nPerformance Service Monitor. The Performance service monitor allows you to monitor the average CPU consumption of your critical Exchange processes over time. We suggest that each Exchange process have a Performance monitor dedicated to it. Each process should not consume more than an average of 70% of system CPU for a period greater than 15 minutes. Here are some example settings for the Performance service monitor:
\n\t \n\t
Monitoring Exchange Services
\n-
\n
Windows Service Check Monitor. This monitor can be used to ensure that all required Exchange services are up and running on your server. In some cases you will not require all of these checks but we recommend configuring a Windows Service Check for each service named below. Each service should be in the running state. \n
\n\n \n\n\t
\n\t\t \n\tWindows Service Name \n\t\tApplication \n\t\n\t\t \n\t\tMicrosoft Exchange Event \n\t\tExchange Event Controller \n\t\n\t\t \n\t\tMicrosoft Exchange IMAP4 \n\t\tIMAP Email Service \n\t\n\t\t \n\t\tMicrosoft Exchange Information Store \n\t\tPrimary mailbox store service \n\t\n\t\t \n\t\tMicrosoft Exchange Management \n\t\tExchange WMI Managemnt Interface \n\t\n\t\t \n\t\tMicrosoft Exchange MTA Stacks \n\t\tProvides Exchange X.400 services. \n\t\n\t\t \n\t\tMicrosoft Exchange POP3 \n\t\tProvides POP version 3 services. \n\t\n\t\t \n\t\tMicrosoft Exchange Routing Engine \n\t\tMail Topological Routing Information Service \n\t\n\t\t \n\t\tMicrosoft Exchange Site Replication Service \n\t\tReplicated Mail Server Synchronization Service \n\t\n\t\t \nMicrosoft Exchange System Attendant \n\t\tExchange Maintenance Service \n\tAn example Windows Service Check monitor for the Microsoft Exchange Information Store is provided below. We recommend creating a similar service monitor for each of the Windows services above.
\n \n
\nProcess Count Monitor. The up.time Process Count monitor can be configured to ensure that Exchange processes are present on the host system. We recommend setting thresholds that alert if 0 instances of the processes in the table below are found. \n\t
\n\n\t
\n\t\t \n\tProcess Name \n\t\tApplication \n\t\tDetails \n\t\n\t\t \n\tstore \n\t\tExchange Event Controller \n\t\t'.exe' not required for Windows Processes \n\t\n\t\t \n\texmgmt \n\t\tExchange Management Service \n\t\t'.exe' not required for Windows Processes \n\t\n\t\t \n\tmad \n\t\tGeneral Exchange Service Process \n\t\t'.exe' not required for Windows Processes \n\tHere are some example settings to check for the store.exe process:
\n\t \n\t
\n
\nWindows Event Log Monitor. Exchange forces most error messages to the Application and System event logs. Unfortunately there are over 20 different source categories for Exchange errors. The table below indicates some of the most important event sources to monitor with the Windows Event Log monitor. We recommend configuring a monitor for each source with an event type of Error. We also suggest creating Event Log monitors for the System event log since System errors are very likely to indirectly impact your Exchange services. \n\t
\n\n\t
\n\t\t \n\tLog Type \n\t\tSource Name \n\t\tEvent Type \n\t\n\t\t \n\tApplication \n\t\tMSExchangeAL \n\t\tError \n\t\n\t\t \n\t\tApplication \n\t\tMSExchangeIS \n\t\tError \n\t\n\t\t \n\t\tApplication \n\t\tMSExchangeSA \n\t\tError \n\t\n\t\t \n\t\tApplication \n\t\tMSExchangeTransport \n\t\tError \n\t\n\t\t \n\tApplication \n\t\tPOP3Svc \n\t\tError \n\t
\tHere are some example settings to check for error messages from the MsExchangeAL source:
\n\t \n\t
\n
\t
Other Monitoring Considerations
\n-
\n\t
SMTP, IMAP & POP Service Checks. To ensure basic availability of each of these services, please reference How to monitor e-mail Services (IMAP, POP, SMTP) with up.time.
\n\t
\n\tUser Authentication. up.time includes both Active Directory and LDAP service monitors to help ensure that the central authentication server is available.
\n\t
\n\tExchange Web Mail. If your users depend on Exchange Web Mail, you should also monitor the following components:
\n\t\t-
\n\t\t\t
- Monitor the Web Mail User Interface with the HTTP service monitor. \n\t\t\t
- Monitor the World Wide Web Publishing Service with the Windows Service Check monitor. \n\t\t\t
- Monitor the IIS Admin Service with the Windows Service Check monitor. \n\t\t\t
- Monitor the w3wp.exe process for performance using the Performance monitor, and availability using the Process Count monitor. \n\t\t\t
- Monitor the inetinfo.exe process for peformance using the Performance monitor, and availability using the Process Count monitor. \n\t\t
\n
Monitoring the Host Server
\nDon't forget the value of monitoring the server that is hosting your Exchange Mail Services. Monitoring and alerting on the performance of your servers will be critical to ensure that you maintain server availability and meet capacity demands. Monitoring key performance indicators such as CPU Usage, Disk I/O, Network I/O and Memory usage is essential to ensure your servers are running properly. \n
\n \nNext Steps
\nNow that you are monitoring your Exchange Server, it is time to move on to one of these next steps: \n
-
\n\t
- Report Service Outages & Availability. \n\t
- Group monitors into an Application. \n\t
- Apply monitoring templates to many systems using Service Groups. \n
Monitor Reference
\nThe following service monitors were used in the monitoring example:
\n