Microsoft Active Directory monitoring extension
- Latest Dynatrace
- Extension
- Published Oct 27, 2025
Monitor health and performance of the Microsoft Active Directory, all-on-one.
Get started
Overview
Monitor Microsoft Active Directory health and performance with Dynatrace extension.
This extension is designed to run locally on your AD servers. It doesn't offer remote monitoring of your AD servers. Additionally, compared to typical extensions, which run as LOCAL SERVICE , this one requires privileges elevated to LOCAL SYSTEM, in order to obtain AD metrics that can only be obtained through execution of the PowerShell scripts.
Get insights into performance and usage of the Microsoft ActiveDirectory services:
- DHCP, DNS, DFS, LDAP, ATQ, Kerberos and NTLM
- AD Network adapters and AD/LSA database
- AD replication status
- LDAP BIND performance, FSMO consistency, AD database disk usage
- System-dependent services status like time synchronization, volume health and network adapter health
This extension obtains signals through WMI queries and execution of the PowerShell snippets, depending on where is the source of specific metric. It is designed to work on the AD hosts where the OneAgent is already deployed.
⚠️ Note: important change. This extension replaces previously available Active Directory monitoring extensions This Dynatrace extension supersedes both Active Directory services and Active Directory extended monitoring extensions.
- Please remove both Active Directory services and Active Directory extended monitoring extensions
- Revisit any metric alerts and dashboards you've created using AD metrics provided by the previously used extensions. You may need to replace previously used metrics with the new ones, as some metrics might have their IDs changed.
Use cases
- Operational monitoring of your Active Directory services, tenant, for usage, performance and availability
- Analyze trends and baselines of the Active Directory services usage
- Raise alerts on anomalies detected
- Monitor vital AD log signals in Dynatrace
Compatibility information
- Only on-premises Active Directory deployments are supported
- OneAgent 1.305+ is required (elevated user permissions support is required)
- Azure AD is not supported
- This extension has been verified with Windows Server 2016, 2019, 2022
- Activate this extension locally on your AD hosts. Remote AD monitoring is not supported.
Activation and setup
To start using this extension:
- Install OneAgent on your AD servers.
- Configure the Dynatrace OneAgent EEC to run this extension with elevated
LOCAL SYSTEMaccount privileges:
- In the
C:ProgramData\dynatrace\oneagent\agent\config\extensionsuser.conffile on AD servers where the extension is intended to run, add the following line:elevated_privileges_extensions=[com.dynatrace.extension.active-directory-python-unabridged:*]- This line specifies a comma-separated list of extensions to run as
LOCAL SYSTEM(instead of the defaultLOCAL SERVICE). The format is:<extensionName>:<extensionVersion>. - See the Q&A section for more details on why privileged mode is required.
- Activate this extension using the in-product Dynatrace Hub.
- In the extension configuration, enable it on your Active Directory hosts.
- When prompted on the extension's Active Directory Configuration screen, provide an API token with
entities.read,settings.read, andsettings.writescopes:
- Generate the token on your Dynatrace tenant in Menu > Access Tokens, ensuring it has the required scopes.
- Insert the Access Token into the
API keyconfiguration field. - Choose which feature sets you want to activate:
- Disable feature sets that are not relevant to your environment.
- This helps avoid errors in the extension log when metrics are unavailable.
- See the Q&A section for more details.
- Ensure that log monitoring is enabled for efficient troubleshooting.
- Remove both Active Directory services and Active Directory extended monitoring extensions:
- The new extension delivers all metrics previously offered by these extensions.
- Keeping the previous extensions may result in duplicate metric values.
Details
This extension is intended to work locally on the AD server. It executes:
- WMI queries to obtain metrics from the local WMI metrics store on the AD server where the extension runs.
- PowerShell snippets to access Windows registry and specific AD metrics available only through PowerShell. Several of these metrics map to metrics available through commonly used DCDIAG tool.
- API calls against the OS Service Monitoring, to report AD services availability
- Log ingestion of the AD services logs
Additionally, it delivers:
- Alert templates for time skew monitoring, database file space, ATQ thread usage and replication consistency
- Topology rules and screen definitions that weave this extension metrics into the host entities instantiated by the OneAgent that runs on AD servers
- Log ingest rules, applied on AD hosts, which further enable alerting on AD services-related issues logged into Windows logs system
- Log processing rules, which enrich logs ingested with a field that flag AD-related context where content pertains to AD services
- Log event extraction rules, which scan logs ingested for AD-related context and trigger alerts when log information carries potential AD issue or error information
Log ingest configured by this extension
By default, this extension sets up log ingestion rules on hosts where it is installed. Note that log monitoring must be enabled on these hosts, as the extension delivers rules, but relies on OneAgent to follow them. AD services logs are used to generate events and further alert on service anomalies and malfunctions.
You can disable log ingestion with a settings toggle in the extension configuration screen. Note that this setting does not control any other log ingestion rules that might have been configured on hosts where this extension has been activated.
Following log ingestion rules are being set up by this extension:
- Windows Event Log
- source is
- Active Directory Web Services
- DFS Replication
- Directory Service
- DNS Server
- and log record level is in (ERROR WARN CRITICAL SEVERE)
- or source is
- Directory Service
- and event id is in [1311, 1644, 1864, 1865, 2042, 2087, 2089, 13508]
- source is
- Windows Log
- source is
- Windows Application Log
- Windows System Log,
- Security
- source is
And the following events from each event provider.
| Event Provider | Event IDs |
|---|---|
| Microsoft-Windows-ADFS | 102, 104, 111, 356, 385, 509, 546, 549, 1034, 1036 |
| Microsoft-Windows-Directory-Services-SAM | 12299, 16643 |
| Microsoft-Windows-Time-Service | 21, 34, 36 |
| DNSAPI | 11150, 11162, 11151, 11155, 11163, 11167, 11154, 11166, 11152, 11153, 11164, 11165 |
| Microsoft-Windows-Kerberos-Key-Distribution-Center | 6, 15, 17 |
| Microsoft-Windows-Security-Auditing | 1102, 4616, 4621, 4649, 4660, 4675, 4707, 4710, 4712, 4715, 4716, 4730, 4740, 4743, 4764, 4766, 4771, 4866, 4867, 4935, 5025, 5030, 5034, 5035, 5037, 5139, 5141, 5483, 5484, 6008, 6145 |
| Microsoft-Windows-CertificationAuthority | 0, 3, 5, 9, 16, 17, 19, 20, 21, 22, 23, 28, 33, 34, 35, 38, 39, 40, 42, 43, 44, 48, 49, 51, 59, 60, 63, 65, 74, 75, 78, 82, 83, 86, 87, 90, 92, 94, 95, 96, 98, 99, 100, 102, 106, 107, 130, 132 |
| Microsoft-Windows-OnlineResponder | 39, 60, 92 |
| Microsoft-Windows-DNS-Server | 512, 513, 515, 516, 518, 4013 |
| Microsoft-Windows-DHCP-Server | 73, 74, 1001, 1002, 1003, 1004, 1021, 1025, 1027, 1050, 1051, 1052, 1053, 1054, 1055, 1056, 1057, 1058 |
Licensing and cost
There is no charge for obtaining the extension, only for the data that the extension ingests. The details of license consumption will depend on which licensing model you are using. This will either be Dynatrace classic licensing or the Dynatrace Platform Subscription (DPS) model.
Metrics
License consumption is based on the number of metric data points ingested. The following formula will provide approximate annual data points ingested assuming all feature sets are enabled.
(((77 * Number of Domain Controllers)+ (3 * Number of Replication Partners per host)+ (3 * Number of Network Adapters per host)+ (26 * Number of DNS Servers)+ (11 * Number of DHCPv6 Servers)+ (15 * Number of DHCPv4 Servers)) / <Metrics Collection Interval>) * 60 minutes * 24 hours * 365 days data points per year
Classic licensing
In the classic licensing model, metric ingestion will consume Davis Data Units (DDUs) at the rate of .001 DDUs per metric data point. Multiply the above formula for annual data points by .001 to estimate annual DDU usage.
FAQ
A: Verify whether you have specific services running on your AD server. If a service is not running - disable feature set describing that service in the extension configuration. Example error text you may encounter:
**Cannot execute query: DHCPServerv6 on device ******** err:Exception occurred. (Invalid class )**
means you should disable the DHCPv6 feature set because your AD server does not run DHCPv6 service, so extension won't be able to obtain metrics for this service.
A: Windows Server 2022 brought a change to the metrics set returned by the Win32_PerfRawData_Lsa_SecuritySystemWideStatistics class. Because of this change, the AD extension is unable to report on "NTLM Authentications" and "Kerberos Authentications" metrics and these metrics have been removed from the extension. Consequently, these metrics won't be reported also when this extension is activated on earlier Windows servers. More information on this change and reasons behind it can be found on Microsoft KB pages.
A: Equivalents of the DCDIAG KPIs are available in Dynatrace:
- NTDS Service - monitored through OneAgent OS Service Monitoring
- Services - monitored through OneAgent OS Service Monitoring
- Replications - similar data is available through parsing of the
repadminoutputs, in this extension - FSMO KnowsOfRoleHolders - can be found as part of the FSMO role holder ping/LDAP metrics
- Advertising - delivered by the FSMO role holder consistency metric
A: Although OneAgent typically runs as LocalSystem account, Python extensions run as LocalService. The LocalService account has the minimum privileges on the local computer, which means it can't run PowerShell snippets that read AD performance counters, access WMI objects that store AD metrics, or run AD-specific cmdlets like repadmin and dcdiag. Therefore, OneAgent needs to be explicitly instructed to run this extension with LocalSystem privileges.
A: API token is required to enable integration of the AD-related log ingestion and the OS service monitoring with out of the box host-level reporting. No metrics are ingested using the API token. API token is used to allow the services to be seen on the Dynatrace Host UA screen and the logs on the AD Instance UA screen.
A: The extension utilizes the API token to add entries into the OneAgent's OS Service Monitoring. The OneAgent will ingest availibility metrics and alerts so you know when a critical service is down. In some cases log events can refer to the OS Service which emitted the event.
A: Complete replication status reporting requires information on the SYSVOL share availability on the domain controller. SYSVOL is where all the GPOs (Group Policy Objects) and on-event scripts are located to be shared by all DCs in the domain. If SYSVOL wasn't mounted the DC wouldn't be able to pull GPOs and if users have any on-logon scripts they also wouldn't be run. Extension runs net view command to check availability of the SYSVOL share, which is reported in the SYSVOL Health metric.
Feature sets
When activating your extension using monitoring configuration, you can limit monitoring to one of the feature sets. To work properly the extension has to collect at least one metric after the activation.
In highly segmented networks, feature sets can reflect the segments of your environment. Then, when you create a monitoring configuration, you can select a feature set and a corresponding ActiveGate group that can connect to this particular segment.
All metrics that aren't categorized into any feature set are considered to be the default and are always reported.
A metric inherits the feature set of a subgroup, which in turn inherits the feature set of a group. Also, the feature set defined on the metric level overrides the feature set defined on the subgroup level, which in turn overrides the feature set defined on the group level.
| Metric name | Metric key | Description |
|---|---|---|
| Kerberos Replication Partner Count | active-directory.replication.partner.count.total | Kerberos replication partners count in Active Directory domain |
| Replication Queue Count | active-directory.replication.queue.count.total | Count of items in replication queue by Active Directory Domain Controller monitor |
| Global Catalog Search Response Time | active-directory.globalcatalog.searchtime.millis | Global catalog search response time of Domain Controller |
| Replication Consistency Status | active-directory.replication.consistency.status | Whether or not strict replication consistency is enabled |
| Time Skew in seconds | active-directory.timeskew.secs | Time difference between the local domain controller and a target domain controller |
| Lost and Found Objects | active-directory.lostandfound.object.count.total | Count of lost and found objects by Active Directory Domain monitor |
| FSMO Role Holder Consistency | active-directory.fsmoroleholder.consistency | Whether or not the domain controllers agree on who the FSMO role holders are |
| FSMO Check | active-directory.fsmo.check | Contains a 'message' dimension about whether or not the correct services can be found from the domain controller |
| SYSVOL Health | active-directory.sysvol.health | The SYSVOL share's health |
| Metric name | Metric key | Description |
|---|---|---|
| Used processor time | active-directory.server.host.cpu.time.processor | Percent of used processor time |
| Idle processor time | active-directory.server.host.cpu.time.idle | Percent of idle processor time |
| User processor time | active-directory.server.host.cpu.time.user | Percent of user processor time |
| Number of Logical Processors | active-directory.server.host.cpu.logical.processors | Number of Logical Processors |
| Service processor time | active-directory.service.cpu.time | Percent of processor time spend on a service |
| Metric name | Metric key | Description |
|---|---|---|
| DRA Successful synch requests total | active-directory.dra.server.drasynchrequestssuccessful.total | Number of successful DRA synchronization requests |
| DRA Synch requests total | active-directory.dra.server.drasynchrequestsmade.total | Number of total DRA synchronization requests made |
| Metric name | Metric key | Description |
|---|---|---|
| NTLM Binds per second | active-directory.lsass.server.ntlm.binds.persec.count | Average NTLM binds per second |
| Metric name | Metric key | Description |
|---|---|---|
| Network Login Profile logons | active-directory.network.login.logons.count | Number of network logons on the network login profile |
| Number of logons | active-directory.network.logons.total.count | Number of network logons |
| Logons per second | active-directory.network.logons.persec.count | Number of network logons per second |
| Metric name | Metric key | Description |
|---|---|---|
| Database adds per second | active-directory.database.adds.persec.count | Number of Active Directory Database adds per second |
| Database modifies per second | active-directory.database.modifies.persec.count | Number of Active Directory Database modifies per second |
| Database deletes per second | active-directory.database.deletes.persec.count | Number of Active Directory Database deletes per second |
| Database recycles per second | active-directory.database.recycles.persec.count | Number of Active Directory Database recycles per second |
| Metric name | Metric key | Description |
|---|---|---|
| DHCP Scope Addresses Free v6 | active-directory.dhcp.server.v6.scope.addresses.free | Number of DHCPv6 scope addresses free |
| DHCP Scope Addresses Used v6 | active-directory.dhcp.server.v6.scope.addresses.used | Number of DHCPv6 scope addresses used |
| DHCP Scope Addresses Reserved v6 | active-directory.dhcp.server.v6.scope.addresses.reserved | Number of DHCPv6 scope addresses reserved |
| Percent of DHCP Scope Addresses Used v6 | active-directory.dhcp.server.v6.scope.addresses.used.pct | Percent of DHCPv6 scope addresses used |
| DHCP Scope Pending Advertises v6 | active-directory.dhcp.server.v6.scope.pending.advertises | Number of DHCPv6 scope pending advertises |
| Metric name | Metric key | Description |
|---|---|---|
| Disk Free Space | active-directory.database.diskfree.total | Free disk space of the disk containing the database file. |
| Total Disk Space | active-directory.database.disk.total | Total disk space of the disk containing the AD database file. |
| Disk Free Space Percentage | active-directory.database.diskfree | Percent of free disk space of the disk containing the database file. |
| Metric name | Metric key | Description |
|---|---|---|
| DFS received bytes/s | active-directory.dfs.server.replicationconnections.bytesreceived.persec | Average number of received bytes per second |
| DFS bytes received on connection | active-directory.dfs.server.replicationconnections.bytesreceived.total | Total number of bytes received on the connection |
| DFS files received on connection | active-directory.dfs.server.replicationconnections.filesreceived.total | Number of files that were received on the connection |
| Metric name | Metric key | Description |
|---|---|---|
| ATQ Outstanding queued requests total | active-directory.atq.server.atqoutstandingqueuedrequests.total | Current number of requests in the queue |
| ATQ Estimated queue delay | active-directory.atq.server.atqestimatedqueuedelay.persec | How long a request has to wait in the queue |
| ATQ Request latency | active-directory.atq.server.atqrequestlatency.persec | Time it takes to produce a request |
| ATQ Threads LDAP total | active-directory.atq.server.atqthreadsldap.total | The number of threads used by the LDAP server as determined by LDAP policy |
| ATQ Threads Other total | active-directory.atq.server.atqthreadsother.total | The number of threads used by the other services |
| ATQ Threads total | active-directory.atq.server.atqthreadstotal.total | All Threads currently allocated |
| ATQ Average Thread Usage | active-directory.atq.server.average.thread.usage | Average usage of threads in Domain Controller ATQ |
| Metric name | Metric key | Description |
|---|---|---|
| DNS dynamic update queued requests | active-directory.dns.server.dynamicupdate.queued.total.count | Total number of dynamic update requests queued by the DNS server |
| DNS caching memory | active-directory.dns.server.caching.memory.total | Total caching memory used by DNS server |
| DNS database node memory | active-directory.dns.server.databasenode.memory.total | Total database node memory used by DNS server |
| DNS Nbstat memory | active-directory.dns.server.nbstat.memory.total | Total Nbstat memory used by DNS server |
| DNS TCP message memory | active-directory.dns.server.tcpmessage.memory.total | Total TCP message memory used by DNS server |
| DNS dynamic update requests | active-directory.dns.server.dynamicupdate.received.total.count | Total number of dynamic update requests received by the DNS server |
| DNS rejected dynamic updates | active-directory.dns.server.dynamicupdate.rejected.total.count | Total number of dynamic updates rejected by the DNS server |
| DNS dynamic update timeouts | active-directory.dns.server.dynamicupdate.timeouts.total.count | Total number of dynamic update timeouts of the DNS server |
| DNS written dynamic updates | active-directory.dns.server.dynamicupdate.writtentodatabase.total.count | Total number of dynamic updates written to the database by the DNS server |
| DNS empty dynamic update requests/s | active-directory.dns.server.dynamicupdate.nooperation.persec | Average number of No-operation/Empty dynamic update requests per second |
| DNS dynamic update requests/s | active-directory.dns.server.dynamicupdate.received.persec | Average number of dynamic update requests received by the DNS server per second |
| DNS written dynamic updates/s | active-directory.dns.server.dynamicupdate.writtentodatabase.persec | Average number of dynamic updates written to the database by the DNS server per second |
| DNS recursive queries/s | active-directory.dns.server.recursive.queries.persec | Average number of recursive queries received by DNS server per second |
| DNS recursive query failures/s | active-directory.dns.server.recursive.queryfailure.persec | Average number of recursive query failures per second |
| DNS recursive query timeouts/s | active-directory.dns.server.recursive.timeout.persec | Average number of recursive query sending timeouts per second |
| DNS secure update requests | active-directory.dns.server.secureupdate.received.total | Total number of secure update requests received by the DNS server |
| DNS failed secure updates | active-directory.dns.server.secureupdate.failure.total | Total number of secure updates failed of the DNS server |
| DNS secure update requests/s | active-directory.dns.server.secureupdate.received.persec | Average number of secure update requests received by the DNS server per second |
| DNS TCP responses/s | active-directory.dns.server.tcpresponse.sent.persec | Average number of TCP responses sent by DNS server per second |
| DNS queries received/s | active-directory.dns.server.totalquery.received.persec | Average number of queries received by DNS server per second |
| DNS responses sent/s | active-directory.dns.server.totalresponse.sent.persec | Average number of responses sent by DNS server per second |
| DNS UDP queries received/s | active-directory.dns.server.udpquery.received.persec | Average number of UDP queries received by DNS server per second |
| DNS UDP responses sent/s | active-directory.dns.server.udpresponse.sent.persec | Average number of UDP responses sent by DNS server per second |
| — | active-directory.dns.server.unmatchedresponses.received.count | — |
| DNS failed zone transfers | active-directory.dns.server.zonetransfer.failure.total | Total number of failed zone transfers of the master DNS server |
| DNS successful zone transfers | active-directory.dns.server.zonetransfer.success.total | Total number of successful zone transfers of the master DNS server |
| Metric name | Metric key | Description |
|---|---|---|
| DFS Replication conflict files size | active-directory.dfs.server.replicatedfolders.conflictspaceinuse.bytes.total | Total byte size of DFS replication service of conflict files |
| DFS Replication deleted files size | active-directory.dfs.server.replicatedfolders.deletedspaceinuse.bytes.total | Total byte size of DFS replication service of the deleted files |
| DFS Replication staging folder size | active-directory.dfs.server.replicatedfolders.stagingspaceinuse.bytes.total | Total byte size of DFS replication service of staging folder |
| DFS redundant file replication update records | active-directory.dfs.server.replicatedfolders.updates.dropped | Number of redundant file replication update records |
| DFS retried file installs | active-directory.dfs.server.replicatedfolders.fileinstalls.retried | Number of retried file installs |
| Metric name | Metric key | Description |
|---|---|---|
| DHCP received requests/s | active-directory.dhcp.server.requests.persec | Rate of DHCP requests received by the DHCP server |
| DHCP received releases/s | active-directory.dhcp.server.releases.persec | Rate of DHCP releases received by the DHCP server |
| DHCP received declines/s | active-directory.dhcp.server.declines.persec | Rate of DHCP declines received by the DHCP server |
| DHCP failover ack messages received/s | active-directory.dhcp.server.failover.bndack.received.persec | Number of DHCP failover Binding Ack messages received |
| DHCP failover ack messages sent/s | active-directory.dhcp.server.failover.bndack.sent.persec | Number of DHCP failover Binding Ack messages sent |
| DHCP binding updates dropped | active-directory.dhcp.server.failover.bndupd.dropped | Number of binding updates dropped |
| DHCP failover update pending messages | active-directory.dhcp.server.failover.bndupd.pendinginoutbound.queue | Number of pending outbound DHCP failover Binding Update messages |
| DHCP failover update messages received/s | active-directory.dhcp.server.failover.bndupd.received.persec | Number of DHCP failover Binding Update messages received |
| DHCP failover update messages sent/s | active-directory.dhcp.server.failover.bndupd.sent.persec | Number of DHCP failover Binding Update messages sent |
| Metric name | Metric key | Description |
|---|---|---|
| ESENT Database I/O reads rate (Local Security Authority) | active-directory.lsass.esent.database.io.reads.persec.count | Number of ESENT Database I/O reads per second for the Local Security Authority |
| ESENT Database I/O read latency (Local Security Authority) | active-directory.lsass.esent.database.io.reads.latency.avg.count | ESENT Database I/O read latency for the Local Security Authority |
| ESENT Database I/O writes rate (Local Security Authority) | active-directory.lsass.esent.database.io.writes.persec.count | Number of ESENT Database I/O writes per second for the Local Security Authority |
| ESENT Database I/O write latency (Local Security Authority) | active-directory.lsass.esent.database.io.writes.latency.avg.count | ESENT Database I/O write latency for the Local Security Authority |
| ESENT Log I/O reads rate (Local Security Authority) | active-directory.lsass.esent.log.io.reads.persec.count | Number of ESENT Database log I/O reads per second for the Local Security Authority |
| ESENT Log I/O read latency (Local Security Authority) | active-directory.lsass.esent.log.io.reads.latency.avg.count | ESENT Log I/O read latency for the Local Security Authority |
| ESENT Log I/O writes rate (Local Security Authority) | active-directory.lsass.esent.log.io.writes.persec.count | Number of ESENT Database log I/O writes per second for the Local Security Authority |
| ESENT Log I/O writes latency (Local Security Authorityy) | active-directory.lsass.esent.log.io.writes.latency.avg.count | ESENT Log I/O writes latency for the Local Security Authority |
| Metric name | Metric key | Description |
|---|---|---|
| DHCP received renews/s v6 | active-directory.dhcp.server.v6.renews.persec | Rate of DHCP renews received by the DHCP Server v6 |
| DHCP received releases/s v6 | active-directory.dhcp.server.v6.releases.persec | Rate of DHCP releases received by the DHCP Server v6 |
| DHCP received declines/s v6 | active-directory.dhcp.server.v6.declines.persec | Rate of DHCP declines recevied by the DHCP Server v6 |
| DHCP received requests/s v6 | active-directory.dhcp.server.v6.requests.persec | Rate of DHCP requests received by the DHCP Server v6 |
| DHCP received solicits/s v6 | active-directory.dhcp.server.v6.solicits.persec | Rate of DHCP solicits received by the DHCP Server v6 |
| DHCP received rebinds/s v6 | active-directory.dhcp.server.v6.rebinds.persec | Rate of DHCP rebinds received by the DHCP Server v6 |
| Metric name | Metric key | Description |
|---|---|---|
| DHCP Scope Delay v4 | active-directory.dhcp.server.scope.delay | DHCP Scope Delay v4 in milliseconds |
| DHCP Scope Addresses Free v4 | active-directory.dhcp.server.scope.addresses.free | Number of DHCPv4 scope addresses free |
| DHCP Scope Addresses Used v4 | active-directory.dhcp.server.scope.addresses.used | Number of DHCPv4 scope addresses used |
| DHCP Scope Addresses Reserved v4 | active-directory.dhcp.server.scope.addresses.reserved | Number of DHCPv4 scope addresses reserved |
| Percent of DHCP Scope Addresses Used v4 | active-directory.dhcp.server.scope.addresses.used.pct | Percent of DHCPv4 scope addresses used |
| DHCP Scope Pending Offers v4 | active-directory.dhcp.server.scope.pending.offers | Number of DHCPv4 scope pending offers |
| Metric name | Metric key | Description |
|---|---|---|
| Good Network Adapter Count | active-directory.network.goodadapter.total | The number of enabled network adapters that can ping the Domain DNS Server. |
| Bad Network Adapter Count | active-directory.network.badadapter.total | The number of enabled network adapters that cannot ping the Domain DNS Server. |
| Total Network Adapter Count | active-directory.network.adapter.total | The total number of enabled network adapters. |
| Metric name | Metric key | Description |
|---|---|---|
| LDAP Binds | active-directory.ldap.server.ldapbindtime.binds.persec | Time spent to complete LDAP bindings |
| LDAP Successful Binds | active-directory.ldap.server.ldapsuccessfulbinds.persec | Successful binds per second |
| LDAP Writes per second | active-directory.ldap.server.ldapwrites.persec | The rate at which LDAP clients perform write operations |
| LDAP UDP Operations per second | active-directory.ldap.server.ldapudpoperations.persec | The number of User Datagram Protocol (UDP) operations that the LDAP server is processing per second |
| LDAP Active threads total | active-directory.ldap.server.ldapactivethreads.total | The current number of threads in use by the LDAP subsystem of the local directory service |
| LDAP Client Sessions | active-directory.ldap.server.ldapclientsessions.total | The number of sessions of connected LDAP clients |
| LDAP Searches per second | active-directory.ldap.server.ldapsearches.persec | The number of search operations per second performed by LDAP clients |
| LDAP Bind Time | active-directory.ldap.server.bindtime.millis | Time taken to bind to the fsmo role holder using LDAP |
| LDAP Bind Availability | active-directory.ldap.bind.availability | Whether or not the domain controller can bind to the domain DNS server |
| Metric name | Metric key | Description |
|---|---|---|
| Shared Resource Available | active-directory.replication.shared.available | Percentage of replication shared resources that are available |
| Replication - Destination Delta | active-directory.replication.destination.delta | Replication time delta between this server and the destination server. |
| Replication - Source Delta | active-directory.replication.source.delta | Replication time delta between this server and the source server. |
| Replication - Destination Errors | active-directory.replication.destination.errors | Replication errors between this server and the destination server. |
| Replication - Source Errors | active-directory.replication.source.errors | Replication errors between this server and the source server. |
