4 years ago
Perfmon Counters and NPS
I wanted to fetch data from Microsoft NPS, which appears to be thoroughly exposed via Perfmon. I generally understand how to collect the data by referencing existing Perfmon datasources like SMTP.
...
I think I figured it out. The issue is I'm retrieve "data per second" values, which need to be used as the 'derive' counter type in the datasource. I was confused because when observing Perfmon, or using "typeperf" to get the data, it's already making this conversion for you, and spitting out the rate per second value:
typeperf "\NPS Authentication Server\Packets Received / sec." \NPS Authentication Server\Packets Received / sec." "02/10/2021 17:28:22.795","0.000000" "02/10/2021 17:28:23.810","0.984817" "02/10/2021 17:28:24.810","0.000000" "02/10/2021 17:28:25.811","0.000000" "02/10/2021 17:28:26.811","0.000000" "02/10/2021 17:28:27.826","0.000000" "02/10/2021 17:28:28.842","0.000000" "02/10/2021 17:28:29.857","0.000000" "02/10/2021 17:28:30.873","1.000053"
I noticed when I added other counters for the absolute "Access-Accepts", "Access-Rejects", etc:
The last two columns are Sent and Received per second. For this screenshot, I had the second to last misconfigured, but the last column shows the clue in that the the value matched one of the other counters.
Seems like it's doing what I expect. Based on an article around counter vs derive, I believe derive with a 0 minimum value is the correct setting to use: