Just don't tell Dave's Legal Dept that..... -----Original Message----- From: [EMAIL PROTECTED] [mailto:ActiveDir-owner@;mail.activedir.org] On Behalf Of Andries Thijssen Sent: Tuesday, November 12, 2002 10:18 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD
Agreed, except that it is not free for commercial use. -----Original Message----- From: Thornley, Dave H [mailto:D.H.Thornley@;shu.ac.uk] Sent: Tuesday, November 12, 2002 4:02 PM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Well following on from this I'll mention Big Brother - we use it on 100 plus servers, Windows and Unix. Its Open Source and its free. There's a fairly rich set of scripts that have been developed and shared by the user community to cater for those things not monitored by the basic product. dave -----Original Message----- From: Schwartz, Jim [mailto:JSchwartz@;BBandT.com] Sent: 12 November 2002 14:24 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Well, you beat me to my response to Roger about the big Framework providers. In order to get true cross platform monitoring you'll need to look at BMC, Tivoli, CA or HPOV. NetIQ is quickly moving into that arena, but I am not aware of any plans for them to monitor the OS/390 or ZOS. What do all four of the big monitoring products have in common? They all stink. All four have spent a great deal of time and money trying to be all things to all people that they've failed horribly to do any actual monitoring. While they may tout their flexibility to monitor everything, they've sacrificed ease of deployment. BMC, Tivoli and CA are especially guilty of this. Industry analysts [1] estimate that the actual cost of deployment is 4-6 times the cost of the product and these products aren't cheap.. They also require a great deal of development time and expertise to get working properly. Two of my favorite quotes about Tivoli are: "Tivoli, everything is just a script away. You of course have to write your own script." and "Tivoli sells you a product and tell you it's a beautiful house. Then they hand you some acorns and a pile of sh!t and expect you to build it yourself." I think you've got the right idea Marco. The so called niche players in the field have done a much better job gathering detailed performance and pro-active monitoring. This data can be used by the people running the servers. I don't need a "ping test" to tell me if the server is down. A mail server goes out and my phone is ringing before the alert gets to me. The critical errors or failures get fed up to the framework. Here's where the framework folks need to do their job by correlating events. Mail server in site A is "down". Is it the server, the network, or another service that has failed? The frameworks (with a ton of work) can take the information fed to it from down level monitoring applications and correlate that information to let you know where the problem is. If you get real good at this stuff, you can even get into the predictive failure business. For those companies that decide that you can do everything with one vendor, they are severely mistaken. -----Original Message----- From: Bombardi,Marco,GLENDALE,GC AMS - eMAD [mailto:Marco.Bombardi@;us.nestle.com] Sent: Monday, November 11, 2002 11:38 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Does anyone have experience in implementing AD monitoring using Tivoli and NetIQ? What we're planning to do is use NetIQ for the first layer (pro-active monitoring, performance, etc.) of AD monitoring and get NetIQ to forward alerts of certain categories (service impact events) to Tivoli. I'd appreciate if someone with experience in this kind of environment could exchange some information regarding counters/components to monitor and thresholds. I believe this could also be useful for this original posting. Marco Bombardi -----Original Message----- From: Abbiss, Mark [mailto:Mark.Abbiss@;eads.net] Sent: Monday, November 11, 2002 6:54 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Check out eQ by Heroix (www.heroix.com) Bloody good product, bloody excellent support and a fraction of the prce of its bloated competitiors. Mark Abbiss -----Original Message----- From: Roger Seielstad [mailto:roger.seielstad@;inovis.com] Sent: Montag, 11. November 2002 15:01 To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] Monitoring AD Do you actually *read* posts before pimping Sunbelt products? > Well, MOM's out as our mandate is to have a monitoring product that is > cross platform (we also have various flavors of UNIX and some big > iron). To hit this kind of scope, you have to look at probably BMC Patrol, HP OpenView, Tivoli TME or CompAss Unicenter. I don't believe that NetIQ can cover mainframes, although last I checked they do cover some Unix stuff. I'd agree, however, that just straight ping testing isn't enough for most environments. ------------------------------------------------------ Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis - Formerly Harbinger and Extricity Atlanta, GA > -----Original Message----- > From: David N. Precht [mailto:discussions@;entrysecurity.com] > Sent: Saturday, November 09, 2002 10:02 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] Monitoring AD > > > http://www.sunbelt-software.com/search_category.cfm#ADI > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:ActiveDir-owner@;mail.activedir.org] On Behalf Of Mike Baudino > Sent: Saturday, November 09, 2002 09:52 > To: [EMAIL PROTECTED] > Subject: [ActiveDir] Monitoring AD > > > All, > > I've been asked recently to come up with monitoring requirements for > an upcoming AD deployment to roughly 120 offices, all of which will be > individual sites. I don't have experience (yet) with AD this size. > Vendor whitepapers are little more than thinly disguised salespitches. > Those companies that offer monitoring products for AD state that it's > essential and, oh, by the way, we happen to have just the product for > you. I'm not really able to get a clear picture of how critical it is > to actively monitor AD and how granular you need to be. > > One company I spoke with said that it's sufficient to monitor DNS and > DHCP and they will tell you if anything's up. I don't buy that, other > than I believe that availability of DNS and verifying that dynamic > update is working and that the DC's are registering, etc. Another > company states that you need very granular monitoring complete with > custom scripts, automated tasks, and alerts. Microsoft says that all > we need is MOM. > > Well, MOM's out as our mandate is to have a monitoring product that is > cross platform (we also have various flavors of UNIX and some big > iron). Our current product is from the first company I mentioned in > the previous paragraph. > > I believe the truth is somewhere between the two companies. I'm > looking for suggestions based on practical experience though. Anyone > want to share? > > > Thanks, > MIke > > > > ******************* PLEASE NOTE ******************* > This E-Mail/telefax message and any documents accompanying this > transmission may contain privileged and/or confidential information > and is intended solely for the addressee(s) named above. If you are > not the intended addressee/recipient, you are hereby notified that any > use of, disclosure, copying, distribution, or reliance on the contents > of this E-Mail/telefax information is strictly prohibited and may > result in legal action against you. Please reply to the sender > advising of the error in transmission and immediately delete/destroy > the message and any > accompanying documents. Thank you. > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ----------------------------------------------------------------- ATTENTION: No legal consequences can be derived from the content of this e-mail and/or its attachments. Neither is sender committed to these. The content of this e-mail is exclusively intended for addressee(s) and information purposes. Should you receive this message by mistake, you are hereby notified that any disclosure, reproduction, distribution or use of this message is strictly prohibited. Sender accepts no liability for any damage resulting from the use and/or acceptation of the content of this e-mail. Always scan attachments for viruses before opening them. ----------------------------------------------------------------- List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
