Optional Configuration
Betrifft: Office Communications Server, Operations Manager 2007, Operations Manager 2007 R2
There is no additional configuration for the Office Communications Server 2007 MP Management Pack.
Enabling Performance Threshold Rules
It is very difficult to deliver a performance threshold rule that is suitable for most environments; therefore, most performance threshold rules are initially disabled. The following table lists the performance threshold rules that we recommend you enable. Before you enable a performance threshold rule, you should baseline the relevant performance counters, and then apply the appropriate overrides to define and enable a suitable threshold for your environment.
The following rule threshold ranges and intervals represent the recommended minimum and maximum values for most environments.
| Rule Name | Rule Group Path |
|---|---|
A/V Edge - 01 - TCP Counters\- 016 - Client SetActiveDestination Request Errors/sec\_Total |
AV Edge Server |
A/V Edge - 01 - TCP Counters\- 008 - Connections Reset (TCP Parsing Error)/Sec\_Total |
|
A/V Edge - 01 - TCP Counters\- 014 - Client Send Request Errors/sec\_Total |
|
A/V Edge - 00 - UDP Counters\- 015 - Session Idle Timeouts/sec\_Total |
|
A/V Edge - 01 - TCP Counters\- 012 - Client Request Errors/sec (4xx Responses/sec)\_Total |
|
A/V Edge - 00 - UDP Counters\- 012 - Client Send Request Errors/sec\_Total |
|
A/V Edge - 01 - TCP Counters\- 017 - Session Idle Timeouts/sec\_Total |
|
A/V Edge - 00 - UDP Counters\- 014 - Client SetActiveDestination Request Errors/sec\_Total |
|
A/V Edge - 00 - UDP Counters\- 010 - Client Request Errors/sec (4xx Responses/sec)\_Total |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 067 - External Messages/sec Dropped Due To Multiple Incompatible DNS SRV Results\ |
Access Edge Server |
LC:SIP - 09 - Access Edge Server Messages\SIP - 053 - Messages/sec From Users Not Enabled For Federation\ |
|
No secure transport is configured for Mutual Authentication. |
|
A registry specified configuration value is invalid. |
|
The Access Edge Server detected a clock skew |
|
A request received a final response but timed-out without the response being sent out. |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 025 - External Messages/sec Dropped Due To Federation Disabled\ |
|
The password expiration checking mechanism failed to initialize. The service will not be able to mo |
Archiving Server |
LC:SIP - 08 - Access Edge Server Connections\SIP - 017 - Rejected IM Service Provider Connections/sec.\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 055 - Messages/sec From Users Not Enabled For Public IM Providers\ |
|
The password expiration checking mechanism failed to initialize. The service will not be able to mo |
|
LC:SIP - 08 - Access Edge Server Connections\SIP - 017 - Rejected IM Service Provider Connections/sec.\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 055 - Messages/sec From Users Not Enabled For Public IM Providers\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 061 - External Messages/sec Dropped Due To Unauthorized IM Service Provider Domain\ |
|
The attempt to rollback the initial directory update failed during the move user operation. |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 059 - External Messages/sec Dropped Due To Blocked IM Service Provider Domain\ |
|
LC:SIP - 02 - Protocol\SIP - 009 - Incoming Responses Dropped/sec\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 063 - External Messages/sec Dropped Due To Unauthorized Allowed or Discovered Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 031 - Remote User Client Messages/sec Dropped Due To Access Disabled\ |
|
The attempt to rollback the initial directory update failed during the move conference directory op |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 065 - External Messages/sec Dropped Due To Incompatible DNS SRV Result for Allowed Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 033 - Anonymous User Client Messages/sec Dropped Due To Access Disabled\ |
|
A registry specified configuration value is invalid. |
|
An unexpected authentication challenge response (401/407) was received from a non-server source. T |
|
At least one replayed message was detected. |
|
Move user operation failed. |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 073 - Messages/sec Dropped Due To Incompatible Boss Domain\ |
|
LC:SIP - 08 - Access Edge Server Connections\SIP - 013 - Rejected External Edge Server Connections/sec\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 071 - Messages/sec Dropped Due To Incompatible Asserted Identity\ |
|
Some requests were rejected as they exhausted the Max-Forwards limit. |
|
The CRL could not be downloaded for certificate: |
|
Active Directory operation failed while verifying validity of service account password |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 069 - External Messages/sec Dropped Due To Incompatible Message Domain\ |
|
LC:SIP - 02 - Protocol\SIP - 005 - Incoming Requests Dropped/sec\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 029 - Client Messages/sec Dropped Due To Unsupported Internal Domain\ |
|
At least one invalid authentication signature was detected. |
|
At least one attempt to reference stale (non-existent or deleted) security association was detected |
|
At least one authentication challenge response could not be sent back to a client. |
|
No password expiration checking will be done for the service account. |
|
The password expiration checking mechanism failed to initialize. The service will not be able to mo |
|
Active Directory operation failed while verifying validity of service account password |
|
No password expiration checking will be done for the service account. |
|
AVMCU - 02 - Informational\AVMCU - 003 - Total SIP REINVITE Rejected\ |
Audio Video Conferencing Server |
AVMCU - 01 - Planning\AVMCU - 002 - Total Users Added\ |
|
AVMCU - 02 - Informational\AVMCU - 001 - Total SIP INVITE Sent\ |
|
AVMCU - 02 - Informational\AVMCU - 002 - Total SIP REINVITE Accepted\ |
|
AVMCU - 01 - Planning\AVMCU - 004 - Total RtpConferences Created\ |
|
AVMCU - 02 - Informational\AVMCU - 004 - Total Picture Freeze/Fast Update Request Sent\ |
|
AVMCU - 01 - Planning\AVMCU - 000 - Total Conferences Created\ |
|
AVMCU - 01 - Planning\AVMCU - 001 - Total Conferences Deleted\ |
|
AVMCU - 02 - Informational\AVMCU - 000 - Total SIP BYE Sent\ |
|
AVMCU - 01 - Planning\AVMCU - 003 - Total Users Removed\ |
|
The Communicator Web Access authentication module was unloaded. |
Communicator Web Access |
The Communicator Web Access authentication module started successfully. |
|
The Communicator Mobile for Java session service was stopped. |
|
The Communicator Mobile for Java session service was started. |
|
Active Directory operation failed while verifying validity of service account password |
Enterprise Edition |
A deprecated method was called while moving a user. |
|
At least one authentication challenge response could not be sent back to a client. |
|
A request received a final response but timed-out without the response being sent out. |
|
A registry specified configuration value is invalid. |
|
Move user operation failed. |
|
The password expiration checking mechanism failed to initialize. The service will not be able to mo |
|
An unexpected authentication challenge response (401/407) was received from a non-server source. T |
|
LC:SIP - 02 - Protocol\SIP - 005 - Incoming Requests Dropped/sec\ |
|
A registry specified configuration value is invalid. |
|
No password expiration checking will be done for the service account. |
|
The attempt to rollback the initial directory update failed during the move conference directory op |
|
A registry specified configuration value is invalid. |
|
No secure transport is configured for Mutual Authentication. |
|
At least one attempt to reference stale (non-existent or deleted) security association was detected |
|
LC:USrv - 18 - Directory Search\USrv - 005 - Search Latency (ms)\_Total |
|
The CRL could not be downloaded for certificate: |
|
At least one invalid authentication signature was detected. |
|
The Access Edge Server detected a clock skew. |
|
Some requests were rejected as they exhausted the Max-Forwards limit. |
Proxy Server |
At least one replayed message was detected. |
|
The attempt to rollback the initial directory update failed during the move user operation. |
|
A registry specified configuration value is invalid. |
|
LC:SIP - 02 - Protocol\SIP - 009 - Incoming Responses Dropped/sec\ |
|
Active Directory operation failed while verifying validity of service account password |
|
No password expiration checking will be done for the service account. |
|
The password expiration checking mechanism failed to initialize. The service will not be able to mo |
|
Some requests were rejected as they exhausted the Max-Forwards limit. |
|
The attempt to rollback the initial directory update failed during the move conference directory op |
|
The Access Edge Server detected a clock skew. |
|
At least one invalid authentication signature was detected. |
|
Active Directory operation failed while verifying validity of service account password |
|
Move user operation failed. |
|
No password expiration checking will be done for the service account. |
|
The CRL could not be downloaded for certificate: |
|
At least one authentication challenge response could not be sent back to a client. |
|
An unexpected authentication challenge response (401/407) was received from a non-server source. T |
|
At least one replayed message was detected. |
|
The attempt to rollback the initial directory update failed during the move user operation. |
|
A request received a final response but timed-out without the response being sent out. |
|
A registry specified configuration value is invalid. |
|
The password expiration checking mechanism failed to initialize. The service will not be able to mo |
|
At least one attempt to reference stale (non-existent or deleted) security association was detected |
|
No secure transport is configured for Mutual Authentication. |
|
A registry specified configuration value is invalid. |
|
At least one replayed message was detected. |
|
A registry specified configuration value is invalid. |
|
A registry specified configuration value is invalid. |
|
At least one attempt to reference stale (non-existent or deleted) security association was detected |
|
No password expiration checking will be done for the service account. |
|
A registry specified configuration value is invalid. |
|
The attempt to rollback the initial directory update failed during the move conference directory op |
|
LC:USrv - 18 - Directory Search\USrv - 005 - Search Latency (ms)\_Total |
|
At least one invalid authentication signature was detected. |
|
An unexpected authentication challenge response (401/407) was received from a non-server source. T |
|
LC:SIP - 02 - Protocol\SIP - 009 - Incoming Responses Dropped/sec\ |
|
A request received a final response but timed-out without the response being sent out. |
|
The attempt to rollback the initial directory update failed during the move user operation. |
|
Active Directory operation failed while verifying validity of service account password |
|
A deprecated method was called while moving a user. |
|
The password expiration checking mechanism failed to initialize. The service will not be able to mo |
|
The CRL could not be downloaded for certificate: |
|
At least one authentication challenge response could not be sent back to a client. |
|
No secure transport is configured for Mutual Authentication. |
|
LC:SIP - 02 - Protocol\SIP - 005 - Incoming Requests Dropped/sec\ |
|
Some requests were rejected as they exhausted the Max-Forwards limit. |
|
A registry specified configuration value is invalid. |
|
The Access Edge Server detected a clock skew. |
|
Move user operation failed. |
Enabling Performance Monitors
It is very difficult to deliver a performance threshold monitors that is suitable for most environments; therefore, some performance threshold rules are initially disabled. The following table lists the performance threshold rules that we recommend you enable. Before you enable a performance threshold rule, you should baseline the relevant performance counters, and then apply the appropriate overrides to define and enable a suitable threshold for your environment.
LC:SIP - 02 - Protocol\SIP - 005 - Incoming Requests Dropped/sec\ |
Access Edge Server |
LC:SIP - 02 - Protocol\SIP - 009 - Incoming Responses Dropped/sec\ |
|
LC:SIP - 08 - Access Edge Server Connections\SIP - 013 - Rejected External Edge Server Connections/sec\ |
|
LC:SIP - 08 - Access Edge Server Connections\SIP - 013 - Rejected External Edge Server Connections/sec\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 029 - Client Messages/sec Dropped Due To Unsupported Internal Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 029 - Client Messages/sec Dropped Due To Unsupported Internal Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 031 - Remote User Client Messages/sec Dropped Due To Access Disabled\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 031 - Remote User Client Messages/sec Dropped Due To Access Disabled\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 033 - Anonymous User Client Messages/sec Dropped Due To Access Disabled\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 033 - Anonymous User Client Messages/sec Dropped Due To Access Disabled\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 053 - Messages/sec From Users Not Enabled For Federation\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 053 - Messages/sec From Users Not Enabled For Federation\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 055 - Messages/sec From Users Not Enabled For Public IM Providers\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 055 - Messages/sec From Users Not Enabled For Public IM Providers\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 059 - External Messages/sec Dropped Due To Blocked IM Service Provider Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 059 - External Messages/sec Dropped Due To Blocked IM Service Provider Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 061 - External Messages/sec Dropped Due To Unauthorized IM Service Provider Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 061 - External Messages/sec Dropped Due To Unauthorized IM Service Provider Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 063 - External Messages/sec Dropped Due To Unauthorized Allowed or Discovered Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 063 - External Messages/sec Dropped Due To Unauthorized Allowed or Discovered Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 065 - External Messages/sec Dropped Due To Incompatible DNS SRV Result for Allowed Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 065 - External Messages/sec Dropped Due To Incompatible DNS SRV Result for Allowed Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 067 - External Messages/sec Dropped Due To Multiple Incompatible DNS SRV Results\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 067 - External Messages/sec Dropped Due To Multiple Incompatible DNS SRV Results\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 069 - External Messages/sec Dropped Due To Incompatible Message Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 071 - Messages/sec Dropped Due To Incompatible Asserted Identity\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 071 - Messages/sec Dropped Due To Incompatible Asserted Identity\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 073 - Messages/sec Dropped Due To Incompatible Boss Domain\ |
|
LC:SIP - 09 - Access Edge Server Messages\SIP - 073 - Messages/sec Dropped Due To Incompatible Boss Domain\ |
|
LC:SIP - 02 - Protocol\SIP - 005 - Incoming Requests Dropped/sec\ |
Enterprise Edition |
LC:SIP - 02 - Protocol\SIP - 009 - Incoming Responses Dropped/sec\ |
|
LC:USrv - 18 - Directory Search\USrv - 005 - Search Latency (ms)\_Total |
|
LC:SIP - 02 - Protocol\SIP - 005 - Incoming Requests Dropped/sec\ |
Standard Edition |
LC:SIP - 02 - Protocol\SIP - 009 - Incoming Responses Dropped/sec\ |
|
LC:USrv - 18 - Directory Search\USrv - 005 - Search Latency (ms)\_Total |
Tuning Performance Threshold Rules
There are no rules that we recommend tuning out of the box.
Enabling Advanced Trending and Diagnostics Performance Rules
There are no optional advanced trending rules.
Slow WAN Links or Large Branch Office Deployments
There is no additional configuration necessary.