PERFORMANCE MONITOR (Pre-Windows Vista)
Description: One of the most useful tools in diagnosing system performance issues is Performance Monitor (Perfmon) logging. Perfmon allows the user to turn on performance counters for various objects relating to system performance, such as: Memory, Network Interface, Physical Disk, Processor, Process, etc.
Scoping the Issue: Perfmon logs can be gathered on any Windows system to aid in troubleshooting poor system performance. If you suspect a performance related issue on the system, capturing Performance Monitor logs during the time the problem is happening on the system may help to determine the cause of the problem.
Data Gathering: In all instances, collecting either MPS Reports with the General, Internet and Networking, Business Networks and Server Components diagnostics, or a Performance-oriented MSDT manifest must be done.
Perfmon logs should include the timeframe when the problem is happening on the system. You can create the log parameters manually , or by using the Performance Monitor Wizard . You can capture the logs locally on the system, or remotely from another computer. The Perfmon capture interval is determined by the length of time it takes the server to go from a normal state, to a problem state. Please use the table below to set the capture interval.
|
If the average time to issue is: |
The capture interval should be: |
|
Weekly |
14 minutes |
|
Daily |
120 seconds |
|
Hourly |
5 seconds |
Troubleshooting / Resolution:
When using Performance Monitor, you may find that some counters are missing or do not contain any counter data. In this scenario, the counters may need to be re-enabled or rebuilt. There are three ways to accomplish this.
- Rebuild the counters manually by referencing the following KB article: Microsoft KB Article 300956: How to manually rebuild Performance Counter Library values
- Download the Windows 2000 Resource Kit tool, Extensible Performance Counter List (ExCtrLst.exe) . Use the “ Performance Counters Enabled” checkbox to first disable, then re-enable the problematic counters.
- Rebuild the counters by using the Performance Counter Rebuild Wizard (PCRW). This tool is not available for public download, you will need to contact Microsoft Support to obtain PCRW. This wizard automates the steps outlined in KB 300956 referenced above.
A common problem encountered when attempting to collect Perfmon logs remotely is that by default, the Performance Logs and Alerts service is started under the local computer’s “System” account. For steps on how to enable a network account to have permissions on the Performance Logs and Alerts service, please refer to Microsoft KB Article 240389: Log is not started when you try to start a log with remote counters in System Monitor .
Additional Resources:
- Microsoft KB Article 246758: How to Monitor Performance of a Remote Computer Without Logging on to It
- Microsoft KB Article 299059: You receive Application Center Event ID: 1008 Perflib error messages on Performance Data Counters
- Microsoft KB Article 969639: Error message when you try to access the Performance Monitor (Perfmon.exe) on a remote computer: "Access Is Denied"
- Microsoft KB Article 888989: A Performance Monitor counter for the Physical Disk performance object may not be displayed in Windows 2000
- Microsoft KB Article 185349: Problems Remotely Accessing W3 or FTP Perfmon Counters
- Microsoft KB Article 248993: PRB: Performance Object Is Not Displayed in Performance Monitor
- AskPerf Blog: Windows Cluster Servers and Logical Disk Counters
Microsoft