tim laqua dot com » performance counters http://timlaqua.com Thoughts and Code from Tim Laqua Fri, 16 Mar 2012 16:48:05 +0000 en hourly 1 http://wordpress.org/?v=3.3.2 Monitoring, Starting, and Stopping Perfmon Performance Counter Logs using VBScript http://timlaqua.com/2008/11/monitoring-starting-and-stopping-perfmon-performance-counter-logs-using-vbscript/ http://timlaqua.com/2008/11/monitoring-starting-and-stopping-perfmon-performance-counter-logs-using-vbscript/#comments Wed, 26 Nov 2008 20:52:09 +0000 Tim http://timlaqua.com/?p=53 Performance counters are great - unless they're not running. ;-) So this script illustrates one approach to monitoring the Performance Counter Logs on a given machine, starting them when they stop (for whatever reason) and letting someone know about it.

UPDATE For 2008+ Data Collector Sets: Monitoring and Starting Data Collector Sets with Powershell

I check the registry to determine the current state of a counter log, and use the logman command line utility to start the log when needed. Logman can also tell you the state of the counters, but it's crazy slow. I've been unable to locate a way to do all of this using WMI and the interweb has been less helpful than usual on this issue. So here's my solution:

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92

Const HKLM = &H80000002
Set arrRunningCounterLogs = CreateObject( "System.Collections.ArrayList" )
Set arrStoppedCounterLogs = CreateObject( "System.Collections.ArrayList" )
Set dictCounterLogs = CreateObject( "Scripting.Dictionary" )
 
' ================= START Configuration Settings

strComputer = "."
arrCounterLogExclusionList = Array("System Overview","PerfWiz")
strExchangeServer = "smtpServer"
strScriptEmailIdentity = """PerfMonMon.vbs"" <tim@timlaqua.com>"
strLogStartEmailRecipients = "tim@timlaqua.com"
 
' ================= END Configuration Settings

strBasePath ="SYSTEM\CurrentControlSet\Services\SysmonLog\Log Queries"
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _ 
    strComputer & "\root\default:StdRegProv")
 
oReg.EnumKey HKLM, strBasePath, arrSubKeys
For Each subkey In arrSubKeys
	strLogKeyPath = strBasePath & "\" & subkey
	oReg.GetStringValue HKLM, strLogKeyPath, "Collection Name", strCollectionName
 
	If Not InArray(strCollectionName, arrCounterLogExclusionList) Then
		dictCounterLogs.Add strCollectionName, strLogKeyPath
		If IsLogRunning(strCollectionName) Then
			arrRunningCounterLogs.Add(strCollectionName)
		Else
			arrStoppedCounterLogs.Add(strCollectionName)
		End If
	End If
Next
 
If arrStoppedCounterLogs.Count > 0 Then
	Set oShell = WScript.CreateObject("WScript.Shell")
	boolErrors = False
 
	For Each strCounterLog in arrStoppedCounterLogs
		oShell.Run "logman start """ & strCounterLog & """ -s " & strComputer, 0, True
 
		If IsLogRunning(strCounterLog) Then
			strMessage = strMessage & "  " & strCounterLog & _
						 " was stopped - started log at " & Now & vbCrLf
		Else
			strMessage = strMessage & _
						 "  ERROR: Unable to start " & strCounterLog & vbCrLf
			boolErrors = True
		End If
	Next
 
	If boolErrors Then
		strSubject = "Stopped Counter Log Alert - Some counters could not be started"
	Else
		strSubject = "Stopped Counter Logs Detected - Counter Logs Started"
	End If
 
	SendEmail strExchangeServer, strScriptEmailIdentity, strLogStartEmailRecipients, strSubject, strMessage
End If
 
Function InArray(needle, haystack) 'As Boolean
	InArray = False
	For Each item In haystack
		If needle = item Then : InArray = True : Exit Function : End If
	Next
End Function
 
Function IsLogRunning(logName) 'As Boolean
	IsLogRunning = False
	oReg.GetDWORDValue HKLM, dictCounterLogs(logName), "Current State", dwCurrentState
	If dwCurrentState Then
		IsLogRunning = True
	End If
End Function
 
Sub SendEmail(server, sender, recipient, subject, textbody)
	Set objMessage = CreateObject("CDO.Message") 
	objMessage.Subject = subject 
	objMessage.From = sender 
	objMessage.To = recipient 
	objMessage.TextBody = textbody
 
	objMessage.Configuration.Fields.Item _
		("http://schemas.microsoft.com/cdo/configuration/sendusing") = 2 
	objMessage.Configuration.Fields.Item _
		("http://schemas.microsoft.com/cdo/configuration/smtpserver") = server
	objMessage.Configuration.Fields.Item _
		("http://schemas.microsoft.com/cdo/configuration/smtpserverport") = 25 
	objMessage.Configuration.Fields.Update
 
	objMessage.Send 
End Sub
]]> http://timlaqua.com/2008/11/monitoring-starting-and-stopping-perfmon-performance-counter-logs-using-vbscript/feed/ 12