The Microsoft Exchange Server Monitoring Log Enablement Package (LEP) is a Windows Performance Monitor Template which contains Performance Counters. These counters provide basic threshold monitoring of Microsoft Exchange Server Performance Objects like Outlook Web App(OWA) and MSExchange Availability Service. All threshold data are sent to the Application Event Logs where the K1's Agent or Agentless component can manage performance data extraction. K1 then displays this data in a single page UI which tracks the overall health of the endpoints being monitored. The Threshold column below displays a Criteria Level of Critical, Warning, or Error. This column should have two values, a Default value and a Threshold value, for records without both, only a Default value of 10000 is set which needs to be reset to an appropriate Threshold value. For instructions related to LEP's check out How to Edit Windows Monitoring Log Enablement Package (LEP)How to Import Windows Monitoring Log Enablement Package (LEP) and Troubleshooting Windows Monitoring Log Enablement Package (LEP). Detailed instructions on how to configure the K1 to monitor Application or Threshold Monitoring on devices can be found in the Dell KACE K1000 System Management Appliance 6.3 Administrator Guide. 


Client Access Server/Outlook Web App

Performance CounterDescriptionThreshold Values
Average Search Time

Average Search Time is the average time that elapsed while waiting for a search to complete.

Default>5000

Critical>5000



Client Access Server/ASP.Net

Performance CounterDescriptionThreshold Values
Application Restarts
Number of times the application has been restarted during the web server's lifetime.

Default>0

Critical>0

Worker Process Restarts
Number of times a worker process has restarted on the machine.

Default>0

Critical>0

Request Wait Time
The number of milliseconds the most recent request was waiting in the queue.

Default>0

Critical>0

Requests In Application Queue
The number of requests in the application request queue.

Default>0

Critical>0



Client Access Server/Availability Service

Performance Counter
Description
Threshold Values
Average Time to Process a Free Busy Request
Average Time to Process a Free Busy Request is the average time to process a free busy request in seconds. One request may contain multiple mailboxes. Free busy responses do not have meeting suggestions.

Default>5

Critical>5



Client Access Server/ActiveSync Service

Performance CounterDescriptionThreshold Values
Ping Commands Pending
Ping Commands Pending is the number of Ping commands that are currently pending on the server. Ping Commands Pending should be close to the number of Direct Push and hanging sync users.
Default>10
Sync Commands Pending
Sync Commands Pending is the number of Sync commands that are currently pending on the server. Sync Commands Pending should be close to the number of Direct Push and hanging sync users.
Default>10
Current Requests
Current Requests is the number of HTTP requests received from ASP.NET.

Default>100

Critical>100



Client Access Server/RPC Client Access

Performance CounterDescription
Threshold Values
RPC Averaged Latency
RPC Averaged Latency is the latency, in milliseconds, averaged for the past 1024 packets.

Default>250

Critical>250

RPC Operations/sec
RPC Operations/sec is the rate at which RPC operations occur, per second.
Default>10
RPC Requests
RPC Requests is the number of client requests that are currently being processed by the RPC Client Access service.

Default>40

Critical>40



Client Access Server/Address Book

Performance Counter
Description
Threshold Values
NSPI RPC Browse Requests Average Latency
NSPI RPC Browse Requests Average Latency is the average time, in milliseconds, that NSPI browse requests took to complete during the sampling period.

Default>1000

Critical>1000

NSPI RPC Requests Average Latency
NSPI RPC Requests Average Latency is the average time, in milliseconds, that NSPI requests took to complete during the sampling period.

Default>1000

Critical>1000

Referral RPC Requests Average Latency
Referral RPC Requests Average Latency is the average time, in milliseconds, that referral requests took to complete during the sampling period.

Default>1000

Critical>1000



Client Access Server/Control Panel

Performance CounterDescriptionThreshold Values
Outbound Proxy Requests - Average Response Time
Outbound Proxy Requests - Average Response Time is the average time (in milliseconds) that requests sent to a secondary Client Access server took to complete during the sampling period.

Default>6000

Critical>6000

Requests - Average Response Time
Requests - Average Response Time is the average time (in milliseconds) the Exchange Control Panel took to respond to a request during the sampling period.

Default>6000

Critical>6000



Client Access Server/Client Access Server OAB

Performance Counter DescriptionThreshold Values
Download Task Queued
Download Task Queued is '1' if task is queued for execution, otherwise '0.'

Default>0

Critical>0

Download Tasks Completed
Download Tasks Completed is the number of OAB download tasks completed. Not to exceed 3 per day.

Default>3

Critical>3



Client Access Server/Client Activity

Performance CounterDescriptionThreshold Values
RPC Client Backoff/sec
RPC Client Backoff/sec is the rate that a server notifies a client to back off.
Default>10


Client Access Server/ Client Access Server

Performance CounterDescriptionThreshold Values
Requests/sec
Requests/sec is the number of HTTP requests that are received from the client via ASP.NET per second.
Default>10000
Ping Commands Pending
Ping Commands Pending is the number of Ping commands that are currently pending on the server.
Default>10000
Sync Commands/sec
Sync Commands/sec is the number of Sync commands that are processed per second. Clients use this command to synchronize items within a folder.
Default>10000
Availability Requests (sec)
Availability Requests per second is the number  of requests serviced per second. The request can be only for free busy or include suggestions. One request may contain multiple mailboxes.
Default>10000
Current Unique Users
Current Unique Users is the number of unique users currently signed in to Outlook Web App. This value monitors the number of unique active user sessions, so that users are only removed from this count after they sign out or their session times out.
Default>10000
Requests/sec
Requests/sec is the number of requests handled by Outlook Web App per second.
Default>10000
Requests/sec
Requests/sec is the number of Autodiscover requests that are processed each second.
Default>10000
Requests/sec
Requests per second is the number of requests processed each second.
Default>10000
Current Connections
Current Connections is the current number of connections established with the Web service.
Default>10000
Connection Attempts/sec
The rate that connections to the Web service are being attempted.
Default>10000
ISAPI Extension Requests/sec
The rate that ISAPI Extension requests are received by the Web service.
Default>10000
Other Request Methods/sec
The rate HTTP requests are made that do not use the OPTIONS, GET, HEAD, POST, PUT, DELETE, TRACE, MOVE, COPY, MKCOL, PROPFIND, PROPPATCH, SEARCH, LOCK or UNLOCK methods.
Default>10000


Client Access Server/Exchange Control Panel

Performance CounterDescriptionThreshold Values
ASP.Net Request Failures/sec
ASP.Net Request Failures/sec is the number of failures per second detected by ASP.Net in the Exchange Control Panel.
Default>10000
Explicit Sign-On Inbound Proxy Requests/sec
Explicit Sign-On Inbound Proxy Requests/sec is the number of Explicit Sign-On requests received from a primary Client Access server per second.
Default>10000
Explicit Sign-On Inbound Proxy Sessions/sec
Explicit Sign-On Inbound Proxy Sessions/sec is the number of Explicit Sign-On Inbound Proxy sessions that are loaded per second in the Exchange Control Panel.
Default>10000
Explicit Sign-On Outbound Proxy Requests/sec
Explicit Sign-On Outbound Proxy Requests/sec is the number of Explicit Sign-On requests sent to a secondary Client Access server per second.
Default>10000
Explicit Sign-On Outbound Session 
Explicit Sign-On Outbound Proxy Sessions is the current number of Explicit Sign-On sessions loaded in the Exchange Control Panel that are sent to a secondary Client Access server.
Default>10000
Explicit Sign-On Standard RBAC Requests/sec
Explicit Sign-On Standard RBAC Requests/sec is the number of requests received per second  by an Explicit Sign-On Standard RBAC session.
Default>10000
Explicit Sign-On Standard RBAC Sessions/sec
Explicit Sign-On Standard RBAC Sessions/sec is the number of Explicit Sign-On Standard RBAC sessions that are loaded per second in the Exchange Control Panel.
Default>10000
Inbound Proxy Requests/sec
Inbound Proxy Requests/sec is the number of requests received from a primary Client Access server per second.
Default>10000
Inbound Proxy Sessions/sec
Inbound Proxy Sessions/sec is the number of Inbound Proxy sessions that are loaded per second in the Exchange Control Panel.
Default>10000
Outbound Proxy Requests - Average Response Time
Outbound Proxy Requests - Average Response Time is the average time (in milliseconds) that requests sent to a secondary Client Access server took to complete during the sampling period.

Default>6000

Critical>6000

Outbound Proxy Requests/sec
Outbound Proxy Requests/sec is the number of requests sent to a secondary Client Access server per second.
Default>10000
Outbound Proxy Sessions/sec
Outbound Proxy Sessions/sec is the number of Outbound Proxy sessions that are loaded per second in the Exchange Control Panel.
Default>10000
PowerShell Runspaces - Activations/sec
PowerShell Runspaces - Activations/sec is the number of Windows PowerShell runspaces that are activated per second in the Exchange Control Panel.
Default>10000
PowerShell Runspaces - Average Active Time
PowerShell Runspaces - Average Active Time is the average time (in seconds)  that a Windows PowerShell runspace stays active while executing cmdlets in the Exchange Control Panel during the sampling period.
Default>10000
PowerShell Runspaces/sec
PowerShell Runspaces/sec is the number of Windows PowerShell runspaces that are created per second in the Exchange Control Panel.
Default>10000
RBAC Sessions/sec
RBAC Sessions/sec is the number of RBAC sessions that are loaded per second in the Exchange Control Panel.
Default>10000
Requests - Activations/sec
Requests - Activations/sec is the number of requests that are activated per second in the Exchange Control Panel.
Default>10000
Requests - Average Response Time
Requests - Average Response Time is the average time (in milliseconds) the Exchange Control Panel took to respond to a request during the sampling period.

Default>6000

Critical>6000



Client Access Server/Availability Service Load

Performance CounterDescriptionThreshold Values
Availability Requests 
Availability Requests per second is the number  of requests serviced per second. The request can be only for free busy or include suggestions. One request may contain multiple mailboxes.
Default>10000



Client Access Server/RPC Client Access Load

Performance Counter DescriptionThreshold Values
Active User Count
Active User Count is the number of unique users that have shown some activity in the last 2 minutes.
Default>10000
Connection Count
Connection Count is the total number of client connections maintained.
Default>10000
RPC Operations/sec
RPC Operations/sec is the rate at which RPC operations occur, per second.
Default>10000
User Count
User Count is the number of users that are connected to the service.
Default>10000



Mailbox Server/Active Database Copy I/O Latency Requirements

Performance CounterDescriptionThreshold Values
I/O Database Reads (Attached) Average Latency
I/O Database Reads (Attached) Average Latency is the average length of time,  in milliseconds, per database read operation.

Default>20

Critical>20

I/O Database Writes (Attached) Average Latency
I/O Database Writes (Attached) Average Latency is the average length of time,  in milliseconds, per database write operation.

Default>20

Critical>20

Database Page Fault Stalls/sec
Database Page Fault Stalls/sec is the rate of page faults that cannot be serviced because there are no pages available for allocation from the database cache.  If this counter is non-zero most of the time, the clean threshold may be too low.

Default>0

Critical>0



Mailbox Server/Passive Database Copy I/O Latency Requirements

Performance CounterDescriptionThreshold Values
I/O Database Reads (Recovery) Average Latency
I/O Database Reads (Recovery) Average Latency is the average length of time,  in milliseconds, per database read operation.

Default>200

Critical>200

I/O Database Writes (Recovery) Average Latency
I/O Database Writes (Recovery) Average Latency is the average length of time,  in milliseconds, per database write operation.

Default>200

Critical>200

Database Page Fault Stalls/sec
Database Page Fault Stalls/sec is the rate of page faults that cannot be serviced because there are no pages available for allocation from the database cache.  If this counter is non-zero most of the time, the clean threshold may be too low.

Default>200

Critical>200



Mailbox Server/Replay Log I/O Latency Requirements

Performance CounterDescription Threshold Values
IO Log Read Average Latency
I/O Log Reads Average Latency is the average length of time, in milliseconds, per logfile read operation.

Default>200

Critical>200



Mailbox Server/Information Store RPC Processing

Performance Counter
Description
Threshold Values
RPC Requests
RPC Requests is the number of client requests that are currently being processed by the Exchange store

Default>70

Critical>70

RPC Averaged Latency
RPC latency in milliseconds averaged for the past 1024 packets.

Default<10

Critical<10

RPC Averaged Latency
RPC Average Latency is a database RPC latency in milliseconds averaged for the past 1024 packets.

Default<100

Critical<100

RPC Average Latency
RPC Average Latency is a server RPC latency in milliseconds averaged for the past 1024 packets.

Default>50

Critical>50



Mailbox Server/RPC Client Throttling

Performance CounterDescriptionThreshold Values
RPC Average Latency
RPC Average Latency is a server RPC latency in milliseconds averaged for the past 1024 packets.

Default>50

Critical>50

Client: RPCs Failed/sec
The client-reported rate of failed RPCs (since the store was started).

Default>0

Critical>0

Client: RPCs Failed
The client-reported number of failed RPCs (since the store was started).

Default>0

Critical>0



Mailbox Server/Message Queue

Performance CounterDescriptionThreshold Values
Messages Queued for Submission
Messages Queued For Submission is the current number of submitted messages which are not yet processed by transport.

Default>50

Critical>50

Messages Queued for Submission
Messages Queued For Submission is the current number of submitted messages which are not yet processed by transport.

Default>20

Critical>20



Mailbox Server/Database

Performance CounterDescriptionThreshold Values
Log Generation Checkpoint Depth
Log Generation Checkpoint Depth represents the amount of work, in count of log files, that will need to be redone or undone to the database file(s) if the process crashes.

Default>500

Critical>500

Database Page Fault Stalls/sec
Database Page Fault Stalls/sec is the rate of page faults that cannot be serviced because there are no pages available for allocation from the database cache.  If this counter is nonzero most of the time, the clean threshold may be too low.

Default>0

Critical>0

Log Record Stalls/sec
Log Record Stalls/sec is the number of log records that cannot be added to the log buffers per second because they are full.  If this counter is non-zero most of the time, the log buffer size may be a bottleneck.

Default>10

Critical>10

Log Threads Waiting
Log Threads Waiting is the number of threads waiting for their data to be written to the log in order to complete an update of the database.  If this number is too high, the log may be a bottleneck.

Default>10

Critical>10

Version buckets allocated
Version Buckets Allocated is the total number of version buckets allocated.

Default>12000

Critical>12000

I/O Database Reads Average Latency
I/O Database Reads Average Latency is the average length of time,  in milliseconds, per database read operation.

Default>20

Critical>20

I/O Database Writes Average Latency
I/O Database Reads Average Latency is the average length of time,  in milliseconds, per database read operation.

Default>50

Critical>50

Database Cache Size (MB)
Database Cache Size (MB) is the amount of system memory (in megabytes) used by the database cache manager to hold commonly used information from the database file(s) to prevent file operations.  If the database cache size seems to be too small for optimal performance and there is very little available memory on the system (see Memory/Available Bytes), adding more memory to the system may increase performance.  If there is a lot of available memory on the system and the database cache size is not growing beyond a certain point, the database cache size may be capped at an artificially low limit.  Increasing this limit may increase performance.

Default>2000

Critical>2000

Database Cache % Hit
Database Cache % Hit is the percentage of database file page requests that were fulfilled by the database cache without causing a file operation.  If this percentage is too low, the database cache size may be too small.

Default<20

Critical<20

Log Bytes Write/sec
Log Bytes Write per second is the rate bytes are written to the log.

Default>10,000,000

Critical>10,000,000



Transport Server/Transport Queue

Performance CounterDescriptionThreshold Values
Aggregate Delivery Queue Length
Aggregate Delivery Queue Length (All Queues) is the number of items queued for delivery in all queues.

Default>3000

Critical>3000

Active Remote Delivery Queue Length
Active Remote Delivery Queue Length is the number of items in the active remote delivery queues.

Default>250

Critical>250

Active Mailbox Delivery Queue Length
Active Mailbox Delivery Queue Length is the number of items in the active mailbox queues.

Default>250

Critical>250

Submission Queue Length
Submission Queue Length is the number of items in the submission queue.

Default>100

Critical>100

Active Non-Smtp Delivery Queue Length
Active Non-Smtp Delivery Queue Length is the number of items in the active Non-Smtp queues.

Default>250

Critical>250

Retry Mailbox Delivery Queue Length
Retry Mailbox Delivery Queue Length is the number of items in retry in the retry mailbox queues.

Default>100

Critical>100

Retry Non-Smtp Delivery Queue Length
Retry Non-SMTP Delivery Queue Length is the number of items in retry in the Non-SMTP queues.

Default>100

Critical>100

Retry Remote Delivery Queue Length
Retry Remote Delivery Queue Length is the number of items in retry in the remote delivery queues.

Default>100

Critical>100

Unreachable Queue Length
Unreachable Queue Length is the number of items in the unreachable queues.

Default>100

Critical>100

Largest Delivery Queue Length
Largest Delivery Queue Length is the number of items in the largest delivery queue.

Default>200

Critical>200



Transport Server/Transport Database

Performance CounterDescriptionThreshold Values
Version buckets allocated
Total number of version buckets allocated

Default>200

Critical>200

Log Record Stalls/sec
Log Record Stalls/sec is the number of log records that cannot be added to the log buffers per second because they are full.  If this counter is non-zero most of the time, the log buffer size may be a bottleneck

Default>10

Critical>10

Log Threads Waiting
Log Threads Waiting is the number of threads waiting for their data to be written to the log in order to complete an update of the database.  If this number is too high, the log may be a bottleneck.

Default>10

Critical>10