The WRM supports monitoring of the following resource groups:
Disk drives
The WRM raises an alert if the minimum free space on a disk drive falls below a threshold. It automatically clears the alert when the free space exceeds the threshold. The administrator specifies the file disk drives to monitor and usage thresholds for each disk drive.
Services
The WRM raises an alert when a service is in an unexpected state (‘up’ or ‘down’). It automatically clears the alert when the service returns to the expected state. The administrator specifies critical services to monitor and the unexpected state of each service.
Desktop applications
The WRM raises an alert if it detects a hung condition or when a process is in an unexpected state (‘up’ or ‘down’). It automatically clears the alert when the process returns to the expected state. The administrator specifies the applications to monitor and the unexpected state of each process.
CPU
The WRM raises an alert if CPU usage remains above the threshold value for a period of time. The time period is used to avoid alerts for momentary spikes in CPU usage. It automatically clears the alert when CPU usage falls below the threshold.
Memory
The WRM raises an alert if memory usage remains above the threshold value for a period of time. The time period is used to avoid alerts for momentary spikes in memory usage. It automatically clears the alert when memory usage falls below the threshold. The administrator defines the memory usage threshold as a percent in use.
Event logs
The WRM raises an alert if a particular phrase appears in an event log file. It monitors messages that are written to the event logs and raises an alert if a particular phrase appears in the log file. The administrator specifies the log files to monitor and for each log file, phrases to search for in the log file. The phrase can be fixed text or a regular expression.
Custom actions
The Windows Resource Monitor provides custom actions as a method to use scripts or programs to extend the capabilities of the WRM. An administrator defines in the resource monitor policy the name of the script or program, the arguments to pass to the script or program, and whether to cyclically execute the script or program.
Any scripting or programming language can be used to write the scripts and programs. The WRM starts the script or program that monitors the resource. The custom action is configured to start the script or program once or periodically (based on the interval defined in the policy). When the monitoring conditions are met, the script or program posts events to the Operations Sentinel server.
The WRM lets the administrator enable or disable monitoring for the entire policy (to account for scheduled maintenance) or for individual resource groups (for debugging and testing). Changes take effect immediately after the policy is pushed to the managed Windows system. These changes only apply to the affected resource groups and do not disrupt monitoring of other resource groups.