MOAC 70-687 L23 Performance

8/10/2019 MOAC 70-687 L23 Performance

1/66

Lesson 23: Monitoring

System PerformanceMOAC 70-687: Configuring Windows 8


2/66

Monitoring and DiagnosingPerformance

Lesson 23: Monitoring System Performance

2013 John Wiley & Sons, Inc. 2


3/66

Using Event Viewer Beginning in Windows Vista, the Event Viewer

console has been enhanced to provide easieraccess to a more comprehensive array of

event logs. A log is a list of events that can track the

activity of the software, document errors, andprovide analytical information to administrators.

Windows has maintained the same three basiclogs throughout several versions: a System log, aSecurity log, and an Application log.



4/66

Launching the EventViewer Console

You can launch the Event Viewer console in avariety of ways, including:o WinKey + w > search for ev and then select View

Event Logso

Start Screen > type View Event Logs (note the ViewEvent Logs is a Settings result)o Start Screen > type MMC and then add the Event

Viewer snap-ino Start Screen > Control Panel > System and Security >

Administrative Tools > Event Viewer

o Start Screen > type eventvwr.exeo Open the Computer Management console and then

expand the Event Viewer node



5/66

Using the Overview andSummary Display

When the Event Viewer console appears, you seethe Overview and Summary display.

When you double-click one of the event IDs, theconsole creates a filtered custom view that displays

only the events having that ID. The Summary of Administrative Events displays the

total number of events recorded in the last hour,day, and week, sorted by event type.

This panel serves as a source for a quick diagnosticor performance check of your system health.

When you expand an event type, the list is brokendown by event ID.



6/66

Using the Overview andSummary Display

The Overview and Summary screen in the

Event Viewer console



7/66

Viewing Windows Logs When you expand the Windows Logs folder,

you see these logs:

o Application

o Securityo Setup

o System

o Forwarded Events

Selecting one of the logs causes a list of theevents it contains to appear in the detailspane, in reverse chronological order.



8/66

Viewing Windows Logs

Contents of a log in the Event Viewer console


Events appear in reverse

chronological order


9/66

Viewing Component Logs The Event Viewer console comes preconfigured

with a large collection of component logs forWindows 8.

These are the events in the component logs:o Admin: Information, warning, error, and critical event

status.

o Operational: Operational status and configurationissues that might lead to problems.

o Analytical and Debug: Intended more for use introubleshooting long-term problems and for softwaredevelopers seeking debugging information.



10/66

Viewing Component Logs

Windows component logs in the Event Viewer console



11/66

Scheduling a Task to Runin Response to an Event

Event Viewer offers the opportunity to associatean event with the Task Scheduler. Navigate tothe Event Viewer log, which contains an eventthat you want to monitor. Select the event and

right-click to Attach Task to This Event. Identify the event source by providing the Log

File, Source, and Event ID. You can thenassociate one of three Actions with the event:

o Start a Programo Send an email

o Display a Message



12/66

Creating Custom Views A custom view is a filtered version of a

particular log, configured to display onlycertain events.

The Event Viewer console now has aCustom Views folder in which you cancreate filtered views and save them for lateruse.



13/66

Create a Custom View

The Create Custom View dialog box



14/66

Subscribing to Events The Windows 8 Event Viewer console

provides a better solution for enterpriseadministrators in the form of subscriptions.

Subscriptions enable administrators toreceive events from other computers (calledsources) in the Event Viewer console on theirown computers (called collectors).

Windows Eventing supports two types ofsubscriptions:o Source computer initiated

o Collector initiated



15/66

Subscribing to Events

The Event Viewer snap-in



16/66

Create an Event Subscription

The Subscription Properties dialog box



17/66

Using PowerShell 3.0 toEnumerate Event Logs

Launch PowerShell 3.0 from the Start Screen.

This is a simple PowerShell script to viewEvent Viewer logs:

Clear-Host

Get-WinEvent Listlog * | Format-Table

LogName



18/66

Using PerformanceInformation and Tools

The Performance Information and Toolswindow breaks the computer into fivecomponents:o Processor

o Memory (RAM)

o Graphics

o Gaming graphics

o Primary hard disk

The tool assigns to each of these areas anumerical score that gauges itsperformance.



19/66

View and Run the WindowsExperience Index Assessment

Performance Information and Tools panel


h h


20/66

The Comprehensive Listof Performance Tools

Most of the performance, configuration, anddiagnostics tools can be found on a singleControl Panel list:

1. At the Start Screen, type Control Panel and

view all control panel items by selecting thesmall icon view.2. Then select Performance Information and

Tools. This is the same panel that displays theWindows Experience Index.

3. From the list of links on the left, selectAdvanced Tools. The Advanced Tools panelappears.


U h f


21/66

Using the PerformanceMonitor Console

Like Event Viewer, the Performance Monitorconsole is an MMC snap-in that you can launchin a variety of ways, including:o On the Start Screen, type Control Panel. Select

Control Panel > System and Security > AdministrativeTools > Performance Monitor.

o On the Start Screen, type MMC. Add thePerformance Monitor snap-in.

o On the Start Screen, type Perfmon. Select thePerfmon.exe tile.

o Open the Computer Management console by right-clicking on Computer, either within Windows Exploreror from the Start Screen, and then selectingPerformance.



22/66

Adding Counters To add counters to the Performance Monitor

display, click the Add button in the toolbar,or press Ctrl+I to display the Add Countersdialog box.

In this dialog box, specify these four piecesof information to add a counter to thedisplay:o Computer

o Performance object

o Performance counter

o Instance


M dif i h


23/66

Modifying theGraph View

Once you select multiple performance objects andadd them to the active Performance Monitor, thetool will display a real-time graph.

The legend beneath the Performance Monitorgraph specifies the line color for the counter, thescale of values for the counter, and otheridentifying information.

When you select a counter in the legend, its currentvalues appear in numerical form at the bottom ofthe graph.

Click the Highlight button in the toolbar (or pressCtrl+H) to change the selected counter to a broadline that is easier to distinguish in the graph.



24/66

Modifying the Graph View

Performance Monitor real-time display



25/66

Using Other Views In addition to the line graph, Performance

Monitor has two other views of the samedata: a histogram view and a report view.

You can change the display to one of theseviews by clicking the Change Graph Typetoolbar button.

You can also use Ctrl+G to scroll through thethree report views.



26/66

Using Other Views

The Performance Monitor histogram view



27/66

Using Other Views

The Performance Monitor report view


C ti


28/66

Creating anEffective Display

Consider these tips when selecting counters:

Limit the number of counters.

Modify the counter display properties.

Choose counters with comparable values.


C ti D t


29/66

Creating DataCollector Sets

To capture counter statistics in the PerformanceMonitor console for later review, create a datacollector set.

Once you capture data using the collector set,

display the data by double-clicking thePerformance Monitor file in the folder you specifiedduring its creation. This opens a PerformanceMonitor window containing a graph of thecollected data instead of real-time activity.

You can also choose to look at a formatted reportgenerated by an analysis of the results, or the foldercontaining all the XML components generatingduring the report generation period.



30/66

Create a Data Collector Set

The Properties sheet for a data collector set



31/66

Creating Data Collector Sets

Performance Monitor information collected using adata collector set



32/66

Creating Data Collector Sets

Performance MonitorReport generated from a datacollector set


C ti S t


33/66

Creating a SystemDiagnostics Report

The System Diagnostic and System Performancecollector set can be found by expanding theData Collector Sets\System node, selecting areport, and then clicking the Start button in the

toolbar. After allowing the program about 60 seconds to

gather data, browse to theReports\System\System Diagnostics node to

view the report. The same View options exist for pre-configured

reports as for user-generated collector sets.



34/66

Using Reliability MonitorReliability Monitor:

Is a stability-tracking tool that extends thecapabilities of the Event Viewer andWindows Experience Index enhancing bothbaseline comparison and problemresolution.

Can be launched several ways:

o From the Start Screen, type Reliability Monitor.o From the Start Screen open Control Panel >

System and Security > Action Center >Maintenance > View Reliability History.



35/66

Using Reliability Monitor

The Reliability Monitor window


Performance is monitored hourly

R li bili A C


36/66

Reliability Access Component

Agent (RACAgent) Reliability Monitor gathers information using

a hidden scheduled task called RACAgent.

The agent collects data from the event logs

every hour and updates the ReliabilityMonitor display every 24 hours.


R li bilit A C t


37/66

Reliability Access Component

Agent (RACAgent) (cont.) The stability index is a number from 0 to 10

(with 0 representing the least and 10 themost stability) that is calculated using

information about these types of events:o Software (Un)Installs

o Application Failures

o Hardware Failures

o Windows Failureso Miscellaneous Failures

o System Clock Changes



38/66

Managing PerformanceLesson 23: Monitoring System Performance



39/66

Working with Processes Microsoft provides a variety of tools that simplify

configuration identification, modification, orautomated correction.

Task Manager remains the most prominent

process analysis tool. One of the challenges historically associated

with use of the Task Manager has been theability to identify process relationships calledprocess trees.

The revised layout and presentation of TaskManager now groups processes togetheraccording to the process tree of which they area member.



40/66

Using Task Manager To access Task Manager, use one of these

procedures:o Use CTL+ALT+DEL and select Task Manager from the

list of available options.

o Microsoft has added a more user-friendly hot-keycombination, CTL+SHIFT-ESC, that performs the samefunction.

o Right-click the taskbar when on the desktop andselect Task manager.

o From the Start Screen, type Taskmgr, although only taare actually required to raise the Task Manager tile.

o Task Manager is also available from Comprehensivelist of Performance Tools.


Using Windows Task


41/66

Using Windows TaskManager

The enhanced Windows Task manager hassome useful tabs:

o Processes

o Performanceo App History

o Startup

o Users

o Details

o Services



42/66

Using Windows Task Manager

The Processes tab


Process

grouping

Processeswithin that

grouping


43/66


The Performance tab



44/66


The App History tab



45/66


The Startup tab



46/66


The Users tab



47/66

Using Resource MonitorThe Resource Monitor can be launchedseveral ways:

o From within Task Manager, select thePerformance tab, click the Open Resource

Monitor link at the bottom of the panel.o From the Start Screen, open Control Panel >

System and Security > Administrative Tools >Resource Monitor.

o On the Start Screen or within the Search box,type perfmon.exe /res and select the tile.

o From the Comprehensive list of performancetools discussed previously in this chapter.



48/66

Using Resource Monitor When you click the Resource Monitor button

on the Task Managers Performance tab,

the Resource Monitor window appears,

displaying a more comprehensivebreakdown of process and performancestatistics.



49/66

Using Resource Monitor

The Resource Monitor window


Viewing Advanced System


50/66

Viewing Advanced System

Details in System Information The System Information tool (msinfo32.exe) is

designed to gather and display detailedsystem information to aid with system

analysis and troubleshooting. The Advanced System Information tool is

listed in the Comprehensive Performancetool list.

You can also launch it by typingmsinfo32.exe on the Start Screen.


Viewing System


51/66

Viewing SystemConfiguration Details

When you start the System Configuration tool, yousee the General tab, in which you can temporarilyset the systems default startup sequence to adiagnostic or selective mode.

The Boot tab enables you to manage the bootmode for the system, including selection ofalternate boot partitions on a multi-boot system,and the various Windows RE and Safe Mode bootoptions typically accessed through the F8 key.

The Tools tab provides another comprehensive list ofsystem management tools to aid systemadministrators in more efficiently managing systemperformance.


Viewing System


52/66


The Boot tab in the System Configuration tool


Viewing System


53/66


The Tools tab in the System Configuration tool


Adjusting Performance


54/66

Adjusting PerformanceSettings

You can navigate to the PerformanceOptions dialog box in several ways, all ofwhich require elevated privilege:o Use the Adjust Visual Appearance link on the

Performance Information and Tools panel.o On the Start Screen, type Adjust Visual, and then

from the Settings search set select Adjust theappearance and performance of Windows.

o Right-click on Computer, select Properties, selectthe Change Settings link on the right side of theSystem Panel, which now takes you directly tothe Performance Options panel.



55/66

Adjusting Performance Settings

The Performance Options dialog box


Configuring


56/66

ConfiguringIndex Settings

The Indexing Options panel enables you tomodify indexed locations and to launch anautomated troubleshooter by selecting theTroubleshoot search and indexing link.

The Advanced Options button launches a sub-panel. Advanced options include:o Indexing encrypted files, although only when they are

opened by the file owner or an account withequivalent permissions and access to the fileencryption key (FEK).

o Treating similar words with diacritics as similar words.o Deleting and rebuilding the index.o Relocating the index file.



57/66

Configuring Index Settings

The Indexing Options panel



58/66

Configuring Index Settings

Advanced options



59/66

Modifying Power Settings Power settings in Windows 8 have a direct

effect on system performance, particularly dueto the new Fast Boot option.

Fast Boot uses a modified hiberfil.sys thatcontains only the essential kernel and driverelements of the operating system.

Adjust power settings is also accessed from thePerformance Information and Tools panel.

The Power Options panel enables you to select

a pre-configured power plan for Windows 8, tomodify a default power configuration, or tocreate a custom plan using one of thetemplates as a starting point.



60/66

Troubleshooting

Windows 8Lesson 23: Monitoring System Performance


Using the Windows


61/66

Using the WindowsMemory Diagnostic Tool

To launch the Memory Diagnostic:

On the Start Screen, type memory and fromthe Settings search results, select Diagnose

your computers memory problems. Select Control Panel > System and Security >

Administrative Tools > Windows MemoryDiagnostic.

Select the Memory Diagnostic after bootinginto the Windows 8 Recovery environment.


Using the Windows


62/66

Using the WindowsNetwork Diagnostic Tool

The Windows 8 Network Diagnostics toolautomatically launches if networkconnectivity issues are encountered during

system operation. You can click on the red X that appears

on broken network connections or networkconnected drives to launch the tool.


Using the Windows


63/66

Using the WindowsNetwork Diagnostic Tool

You can manually launch the tool to rundiagnostics at any time:

o From the Start Screen, select Control Panel >Network and Internet > Network and SharingCenter > Troubleshoot Problems.

o From the Start Screen, type Internet Connectionand then from the Settings search results, selectFind and fix networking and connection

problems. The Internet Connections diagnosticWizard appears.


Using the Windows Network


64/66

Using the Windows NetworkDiagnostic Tool

The Windows Network Diagnostic Tool



65/66

Viewing Problem Reports The Action Center panel can be accessed:

o By selecting the Action Center pennant from thetaskbar on the Desktop

o From the Start Screen, by typing and selecting

Action Centero From Control Panel > System and Security >

Action Center

From the Action Center panel, you can:

o Select View Performance Informationo Select Troubleshooting

o Select View Archived Messages



66/66

Viewing Problem Reports

The Action Center panel

Documents

MOAC 70-687 L23 Performance