{ "annotations": { "list": [ { "datasource": { "type": "loki", "uid": "${loki_datasource}" }, "enable": true, "expr": "{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\", channel=\"System\", level=\"Critical\"} | json", "hide": true, "iconColor": "light-purple", "name": "Critical system event", "tagKeys": "job,instance,level", "textFormat": "{{message}}", "titleFormat": "Critical system event" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "enable": true, "expr": "windows_system_system_up_time{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}*1000 > $__from < $__to", "hide": true, "iconColor": "light-yellow", "name": "Reboot", "tagKeys": "job,instance", "titleFormat": "Reboot", "useValueForTime": "on" }, { "datasource": { "type": "loki", "uid": "${loki_datasource}" }, "enable": true, "expr": "{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\", source=\"Service Control Manager\", level=\"Error\"} |= \"terminated\" | json", "hide": true, "iconColor": "light-orange", "name": "Service failed", "tagKeys": "job,instance,level", "textFormat": "{{message}}", "titleFormat": "Service failed" } ] }, "links": [ { "asDropdown": true, "includeVars": true, "keepTime": true, "tags": [ "active-directory" ], "title": "All Windows Active Directory dashboards", "type": "dashboards" } ], "panels": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "The number of replication operations that are pending in Active Directory.\nThese operations could include a variety of tasks, such as updating directory objects, processing changes made on other domain controllers, or applying new schema updates.\n", "fieldConfig": { "defaults": { "color": { "fixedColor": "text", "mode": "fixed" } } }, "gridPos": { "h": 3, "w": 6, "x": 0, "y": 0 }, "id": 1, "options": { "colorMode": "fixed", "graphMode": "none", "reduceOptions": { "calcs": [ "lastNotNull" ] } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "sum(windows_ad_replication_pending_operations{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"})", "legendFormat": "Operations" } ], "title": "Replication pending operations", "type": "stat" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "The current number of active threads in the directory service.\n", "fieldConfig": { "defaults": { "color": { "fixedColor": "text", "mode": "fixed" } } }, "gridPos": { "h": 3, "w": 6, "x": 6, "y": 0 }, "id": 2, "options": { "colorMode": "fixed", "graphMode": "none", "reduceOptions": { "calcs": [ "lastNotNull" ] } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "sum(windows_ad_directory_service_threads{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"})", "legendFormat": "Directory service threads" } ], "title": "Directory service threads", "type": "stat" }, { "datasource": { "type": "datasource", "uid": "-- Mixed --" }, "gridPos": { "h": 6, "w": 12, "x": 12, "y": 0 }, "id": 3, "options": { "alertInstanceLabelFilter": "job=~\"${job:regex}\",instance=~\"${instance:regex}\"" }, "pluginVersion": "v10.0.0", "title": "Windows Active Directory alerts", "type": "alertlist" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "The number of synchronization requests that are pending in Active Directory. Synchronization in AD refers to the process of ensuring that changes (like updates to user accounts, group policies, etc.) are consistently applied across all domain controllers.\n", "fieldConfig": { "defaults": { "color": { "fixedColor": "text", "mode": "fixed" } } }, "gridPos": { "h": 3, "w": 12, "x": 0, "y": 3 }, "id": 4, "options": { "colorMode": "fixed", "graphMode": "none", "reduceOptions": { "calcs": [ "lastNotNull" ] } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "sum(windows_ad_replication_pending_synchronizations{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"})", "legendFormat": "Operations" } ], "title": "Replication pending synchronizations", "type": "stat" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "The rate at which LDAP bind requests are being made.\n", "fieldConfig": { "defaults": { "custom": { "fillOpacity": 30, "gradientMode": "opacity", "lineInterpolation": "smooth", "lineWidth": 2, "showPoints": "never" }, "unit": "ops" } }, "gridPos": { "h": 6, "w": 12, "x": 12, "y": 3 }, "id": 5, "options": { "legend": { "calcs": [ ], "displayMode": "list" }, "tooltip": { "mode": "multi", "sort": "desc" } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_binds_total{bind_method=~\"ldap\", job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "legendFormat": "{{instance}}" } ], "title": "LDAP bind requests", "type": "timeseries" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "The rate of LDAP read, search, and write operations.\n", "fieldConfig": { "defaults": { "custom": { "fillOpacity": 30, "gradientMode": "opacity", "lineInterpolation": "smooth", "lineWidth": 2, "showPoints": "never" }, "unit": "ops" } }, "gridPos": { "h": 6, "w": 12, "x": 0, "y": 9 }, "id": 6, "options": { "legend": { "calcs": [ ], "displayMode": "list" }, "tooltip": { "mode": "multi", "sort": "desc" } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_directory_operations_total{origin=~\"ldap\", job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "legendFormat": "{{instance}} - {{ operation }}" } ], "title": "LDAP operations", "type": "timeseries" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "Distribution of different types of operations performed on the Active Directory database.\n", "fieldConfig": { "overrides": [ { "matcher": { "id": "byName", "options": "Digest" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "DS_client" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "DS_server" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "External" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "Fast" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "LDAP" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "Negotiate" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "NTLM" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "Simple" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] } ] }, "gridPos": { "h": 6, "w": 24, "x": 0, "y": 15 }, "id": 7, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_binds_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "legendFormat": "{{instance}} - {{ operation }}" } ], "title": "Bind operations overview", "transformations": [ { "id": "joinByLabels", "options": { "join": [ "instance" ], "value": "bind_method" } }, { "id": "groupBy", "options": { "fields": { "digest": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "ds_client": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "ds_server": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "external": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "fast": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "instance": { "aggregations": [ ], "operation": "groupby" }, "ldap": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "negotiate": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "ntlm": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "simple": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" } } } }, { "id": "filterFieldsByName", "options": { "include": { "pattern": "instance|digest|ds_client|ds_server|external|fast|ldap|negotiate|ntlm|simple" } } }, { "id": "organize", "options": { "renameByName": { "digest (lastNotNull)": "Digest", "ds_client (lastNotNull)": "DS_client", "ds_server (lastNotNull)": "DS_server", "external (lastNotNull)": "External", "fast (lastNotNull)": "Fast", "instance (lastNotNull)": "Instance", "ldap (lastNotNull)": "LDAP", "negotiate (lastNotNull)": "Negotiate", "ntlm (lastNotNull)": "NTLM", "simple (lastNotNull)": "Simple" } } } ], "type": "table" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "Rate of replication traffic between servers within the same site.\n", "fieldConfig": { "defaults": { "custom": { "fillOpacity": 30, "gradientMode": "opacity", "lineInterpolation": "smooth", "lineWidth": 2, "showPoints": "never" }, "decimals": 1, "unit": "bps" } }, "gridPos": { "h": 6, "w": 12, "x": 0, "y": 21 }, "id": 8, "options": { "legend": { "calcs": [ "min", "max", "mean" ], "displayMode": "table", "placement": "bottom" }, "tooltip": { "mode": "multi", "sort": "desc" } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_replication_data_intrasite_bytes_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval]) * 8", "legendFormat": "{{instance}} - {{ direction }}" } ], "title": "Intrasite replication traffic", "type": "timeseries" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "Rate of replication traffic between servers across different sites.\n", "fieldConfig": { "defaults": { "custom": { "fillOpacity": 30, "gradientMode": "opacity", "lineInterpolation": "smooth", "lineWidth": 2, "showPoints": "never" }, "decimals": 1, "unit": "bps" } }, "gridPos": { "h": 6, "w": 12, "x": 12, "y": 21 }, "id": 9, "options": { "legend": { "calcs": [ "min", "max", "mean" ], "displayMode": "table", "placement": "bottom" }, "tooltip": { "mode": "multi", "sort": "desc" } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_replication_data_intersite_bytes_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval]) * 8", "legendFormat": "{{instance}} - {{ direction }}" } ], "title": "Intersite replication traffic", "type": "timeseries" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "The rate of traffic received from other replication partners.\n", "fieldConfig": { "defaults": { "custom": { "fillOpacity": 30, "gradientMode": "opacity", "lineInterpolation": "smooth", "lineWidth": 2, "showPoints": "never" } } }, "gridPos": { "h": 6, "w": 24, "x": 0, "y": 27 }, "id": 10, "options": { "legend": { "calcs": [ "min", "max", "mean" ], "displayMode": "table", "placement": "right" }, "tooltip": { "mode": "multi", "sort": "desc" } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_replication_inbound_objects_updated_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "legendFormat": "{{instance}} objects" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_replication_inbound_properties_updated_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "legendFormat": "{{instance}} properties" } ], "title": "Inbound replication updates", "type": "timeseries" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "Distribution of different types of operations performed on the Active Directory database.\n", "fieldConfig": { "overrides": [ { "matcher": { "id": "byName", "options": "Add" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "Delete" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "Modify" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] }, { "matcher": { "id": "byName", "options": "Recycle" }, "properties": [ { "id": "custom.displayMode", "value": "gradient-gauge" }, { "id": "custom.align", "value": "left" }, { "id": "color", "value": { "mode": "continuous-BlPu" } }, { "id": "unit", "value": "ops" } ] } ] }, "gridPos": { "h": 6, "w": 12, "x": 0, "y": 33 }, "id": 11, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_database_operations_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "legendFormat": "{{instance}} - {{ operation }}" } ], "title": "Database operations overview", "transformations": [ { "id": "joinByLabels", "options": { "join": [ "instance" ], "value": "operation" } }, { "id": "groupBy", "options": { "fields": { "add": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "delete": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "instance": { "aggregations": [ ], "operation": "groupby" }, "modify": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" }, "recycle": { "aggregations": [ "lastNotNull" ], "operation": "aggregate" } } } }, { "id": "organize", "options": { "renameByName": { "add (lastNotNull)": "Add", "delete (lastNotNull)": "Delete", "modify (lastNotNull)": "Modify", "recycle (lastNotNull)": "Recycle" } } } ], "type": "table" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "description": "The rate of database operations.\n", "fieldConfig": { "defaults": { "custom": { "fillOpacity": 30, "gradientMode": "opacity", "lineInterpolation": "smooth", "lineWidth": 2, "showPoints": "never" }, "unit": "ops" } }, "gridPos": { "h": 6, "w": 12, "x": 12, "y": 33 }, "id": 12, "options": { "legend": { "calcs": [ "min", "max", "mean" ], "displayMode": "table", "placement": "right" }, "tooltip": { "mode": "multi", "sort": "desc" } }, "pluginVersion": "v11.0.0", "targets": [ { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "expr": "rate(windows_ad_database_operations_total{job=~\"integrations/windows_exporter\",job=~\"$job\",instance=~\"$instance\"}[$__rate_interval])", "legendFormat": "{{instance}} - {{ operation }}" } ], "title": "Database operations", "type": "timeseries" } ], "refresh": "1m", "schemaVersion": 36, "tags": [ "active-directory" ], "templating": { "list": [ { "label": "Data source", "name": "datasource", "query": "prometheus", "regex": "", "type": "datasource" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "includeAll": true, "label": "Job", "multi": true, "name": "job", "query": "label_values(windows_ad_directory_service_threads{job=~\"integrations/windows_exporter\"}, job)", "refresh": 2, "sort": 1, "type": "query" }, { "datasource": { "type": "prometheus", "uid": "${datasource}" }, "includeAll": true, "label": "Instance", "multi": true, "name": "instance", "query": "label_values(windows_ad_directory_service_threads{job=~\"integrations/windows_exporter\",job=~\"$job\"}, instance)", "refresh": 2, "sort": 1, "type": "query" }, { "hide": 2, "label": "Loki data source", "name": "loki_datasource", "query": "loki", "regex": "", "type": "datasource" } ] }, "time": { "from": "now-1h", "to": "now" }, "timezone": "default", "title": "Windows Active Directory overview", "uid": "activedirectory" }