10.2 Monitoring Services Protocols

Monitoring services protocols provide mechanisms for monitoring performance, logging events, and reporting errors on remote computers in a distributed network. Monitoring services protocols enable businesses to manage all error reporting information within the organization. Using these protocols, reports generated on a set of client machines can be directed to a local or remote file share for analysis.

Monitoring services protocols aid in reading both live event logs and backup event logs on remote computers. This includes how to get general information on a log, such as the number of records in the log, the oldest records in the log, and whether the log is full and is used for clearing and backing up both types of event logs.

Monitoring services protocols are used for browsing performance counters (performance counters are a simple way of exposing state information that can be sampled or polled), and querying and retrieving performance counter values from a network server. These protocols aid in controlling data collection on a network. The control includes creating, starting, stopping, scheduling, creating alerts, event trace logging, and API trace logging.

The following table lists the monitoring services protocols.

Protocol

Specification short name

Corporate Error Reporting Version 2.0 Protocol

[MS-CER2]

EventLog Remoting Protocol

[MS-EVEN]

EventLog Remoting Protocol Version 6.0

[MS-EVEN6]

Live Remote Event Capture (LREC) Protocol

[MS-LREC]

Performance Counter Query Protocol

[MS-PCQ]

Performance Logs and Alerts Protocol

[MS-PLA]

Additional scenarios in which monitoring services are applicable include the following:

  • To record local security events and application start/stop events.

  • To specify the diagnostic data to be collected and logged on a local or remote computer, as well as to manage and report on the collected data.

  • To specify the data retention and reporting policies for the logged data.