You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
12 KiB
12 KiB
| 1 | index | host | source | sourcetype | _raw | _time |
|---|---|---|---|---|---|---|
| 2 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/06/2015 08:43:05.895 -0800 collection=NTDS object=NTDS counter="SAM Enumerations/sec" instance=0 Value=0.29967345482647922 | 2015-01-06T08:43:05.895-0800 |
| 3 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/07/2015 16:42:35.898 -0800 collection=NTDS object=NTDS counter="LDAP Writes/sec" instance=0 Value=0.099989717057497818 | 2015-01-07T16:42:35.898-0800 |
| 4 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 04:42:55.902 -0800 collection=NTDS object=NTDS counter="Tombstones Visited/sec" instance=0 Value=0.19993737361646211 | 2015-01-08T04:42:55.902-0800 |
| 5 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 04:57:55.911 -0800 collection=NTDS object=NTDS counter="Link Values Cleaned/sec" instance=0 Value=0.099840647338003227 | 2015-01-08T04:57:55.911-0800 |
| 6 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 06:06:35.911 -0800 collection=NTDS object=NTDS counter="ATQ Request Latency" instance=0 Value=1 | 2015-01-08T06:06:35.911-0800 |
| 7 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 07:54:25.909 -0800 collection=NTDS object=NTDS counter="SAM Universal Group Membership Evaluations/sec" instance=0 Value=0.79868269270079395 | 2015-01-08T07:54:25.909-0800 |
| 8 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 07:54:25.909 -0800 collection=NTDS object=NTDS counter="SAM Global Group Membership Evaluations/sec" instance=0 Value=0.39934134635039698 | 2015-01-08T07:54:25.909-0800 |
| 9 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 10:17:45.896 -0800 collection=NTDS object=NTDS counter="DS Server Name Translations/sec" instance=0 Value=0.10001909164421305 | 2015-01-08T10:17:45.896-0800 |
| 10 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 11:35:05.904 -0800 collection=NTDS object=NTDS counter="DS Threads in Use" instance=0 Value=1 | 2015-01-08T11:35:05.904-0800 |
| 11 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 11:35:05.904 -0800 collection=NTDS object=NTDS counter="LDAP Active Threads" instance=0 Value=1 | 2015-01-08T11:35:05.904-0800 |
| 12 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 11:35:05.904 -0800 collection=NTDS object=NTDS counter="ATQ Threads LDAP" instance=0 Value=1 | 2015-01-08T11:35:05.904-0800 |
| 13 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 11:43:05.897 -0800 collection=NTDS object=NTDS counter="LDAP Bind Time" instance=0 Value=16 | 2015-01-08T11:43:05.897-0800 |
| 14 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 12:42:55.900 -0800 collection=NTDS object=NTDS counter="DS Security Descriptor sub-operations/sec" instance=0 Value=0.099958433285102732 | 2015-01-08T12:42:55.900-0800 |
| 15 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 12:42:55.900 -0800 collection=NTDS object=NTDS counter="DS Directory Writes/sec" instance=0 Value=0.099958433285102732 | 2015-01-08T12:42:55.900-0800 |
| 16 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 12:42:55.900 -0800 collection=NTDS object=NTDS counter="SAM GC Evaluations/sec" instance=0 Value=0.099958433285102732 | 2015-01-08T12:42:55.900-0800 |
| 17 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 12:42:55.900 -0800 collection=NTDS object=NTDS counter="Database modifys/sec" instance=0 Value=0.099958433285102732 | 2015-01-08T12:42:55.900-0800 |
| 18 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:05.905 -0800 collection=NTDS object=NTDS counter="SAM Transitive Membership Evaluations/sec" instance=0 Value=0.19990305901056343 | 2015-01-08T13:23:05.905-0800 |
| 19 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:05.905 -0800 collection=NTDS object=NTDS counter="SAM Domain Local Group Membership Evaluations/sec" instance=0 Value=0.19990305901056343 | 2015-01-08T13:23:05.905-0800 |
| 20 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:05.905 -0800 collection=NTDS object=NTDS counter="DS Client Binds/sec" instance=0 Value=0.29985458851584512 | 2015-01-08T13:23:05.905-0800 |
| 21 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:05.905 -0800 collection=NTDS object=NTDS counter="DS Client Name Translations/sec" instance=0 Value=0.19990305901056343 | 2015-01-08T13:23:05.905-0800 |
| 22 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:05.905 -0800 collection=NTDS object=NTDS counter="Subtree searches/sec" instance=0 Value=0.49975764752640855 | 2015-01-08T13:23:05.905-0800 |
| 23 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:05.905 -0800 collection=NTDS object=NTDS counter="Onelevel searches/sec" instance=0 Value=0.49975764752640855 | 2015-01-08T13:23:05.905-0800 |
| 24 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="LDAP Client Sessions" instance=0 Value=6 | 2015-01-08T13:23:15.910-0800 |
| 25 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="LDAP Searches/sec" instance=0 Value=0.19980189043158039 | 2015-01-08T13:23:15.910-0800 |
| 26 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS Monitor List Size" instance=0 Value=23 | 2015-01-08T13:23:15.910-0800 |
| 27 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS Search sub-operations/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 28 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS Name Cache hit rate" instance=0 Value=100 | 2015-01-08T13:23:15.910-0800 |
| 29 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DRA Highest USN Issued (Low part)" instance=0 Value=13754 | 2015-01-08T13:23:15.910-0800 |
| 30 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DRA Highest USN Committed (Low part)" instance=0 Value=13754 | 2015-01-08T13:23:15.910-0800 |
| 31 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Writes from SAM" instance=0 Value=31.824234354194409 | 2015-01-08T13:23:15.910-0800 |
| 32 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Writes from LDAP" instance=0 Value=31.824234354194409 | 2015-01-08T13:23:15.910-0800 |
| 33 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Writes from LSA" instance=0 Value=1.5978695073235687 | 2015-01-08T13:23:15.910-0800 |
| 34 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Writes from KCC" instance=0 Value=0.26631158455392812 | 2015-01-08T13:23:15.910-0800 |
| 35 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Writes Other" instance=0 Value=33.954727030625833 | 2015-01-08T13:23:15.910-0800 |
| 36 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Searches from SAM" instance=0 Value=0.36251921748771537 | 2015-01-08T13:23:15.910-0800 |
| 37 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Searches from LDAP" instance=0 Value=85.941663513366905 | 2015-01-08T13:23:15.910-0800 |
| 38 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Searches from LSA" instance=0 Value=0.82426814779141133 | 2015-01-08T13:23:15.910-0800 |
| 39 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Searches from KCC" instance=0 Value=1.7615258619092855 | 2015-01-08T13:23:15.910-0800 |
| 40 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Searches Other" instance=0 Value=0.9213809600673174 | 2015-01-08T13:23:15.910-0800 |
| 41 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS Directory Searches/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 42 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Reads from SAM" instance=0 Value=8.2577697791929126 | 2015-01-08T13:23:15.910-0800 |
| 43 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Reads from LSA" instance=0 Value=11.123416626289195 | 2015-01-08T13:23:15.910-0800 |
| 44 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Reads from KCC" instance=0 Value=65.795666920467923 | 2015-01-08T13:23:15.910-0800 |
| 45 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Reads Other" instance=0 Value=14.823146674049974 | 2015-01-08T13:23:15.910-0800 |
| 46 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS Directory Reads/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 47 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="LDAP Successful Binds/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 48 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="ATQ Threads Total" instance=0 Value=4 | 2015-01-08T13:23:15.910-0800 |
| 49 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="LDAP New Connections/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 50 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="LDAP Closed Connections/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 51 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Writes from NTDSAPI" instance=0 Value=0.53262316910785623 | 2015-01-08T13:23:15.910-0800 |
| 52 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="DS % Searches from NTDSAPI" instance=0 Value=10.188642299377367 | 2015-01-08T13:23:15.910-0800 |
| 53 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="Negotiated Binds/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 54 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="Base searches/sec" instance=0 Value=0.099900945215790196 | 2015-01-08T13:23:15.910-0800 |
| 55 | perfmon | WIN-6LR3JNJ6LVD | Perfmon:NTDS | Perfmon:NTDS | 01/08/2015 13:23:15.910 -0800 collection=NTDS object=NTDS counter="Approximate highest DNT" instance=0 Value=4106 | 2015-01-08T13:23:15.910-0800 |