Monitor Microsoft Exchange Server™ for higher performance and availability with WildMetrix™

Maximize Exchange Server performance, availability, and reliability with WildMetrix Exchange Server monitoring solutions. 

Businesses today rely on their mail and messaging systems more than any other piece of infrastructure. Seasoned Exchange administrators know that it is absolutely important to monitor Exchange 24X7, not only to prevent downtime and quickly fix problems after they arise, but also to know the health of individual components and to identify potential problems and performance degradations before they turn into costly downtime.

 Benefits of Monitoring Microsoft Exchange with WildMetrix

  • Helps administrators detect problems in their Exchange environment
  • Quickly diagnose exactly where and what the problems are
  • Resolves the problems from a single easy-to-use interface
  • Gain understanding of entire Exchange system inside and out

Request a Demo or Get Evaluation Software
 

Microsoft Exchange Server Monitoring
Exchange Server's architecture consists of many components and dependencies. This expansive surface makes it more important than ever to monitor. Some of the Exchange Architecture Components include:
  • Simple Mail Transfer Protocol (SMTP) that transports electronic mail across the network.
  • Exchange Information Store (IS) that manages Microsoft Exchange Information Storage.
  • Exchange MTA Stacks that provide Microsoft Exchange X.400 services.
  • Exchange Routing Engine that processes Microsoft Exchange routing information.
  • Exchange System Attendant that provides system related services for Microsoft Exchange.

Monitoring Exchange Server complexity requires continually looking at all elements involved to know and understand if health and performance is optimal. Each Exchange Server aspect is important including:

  • Connections & Queues
  • Database Size
  • SMTP Availability
  • Process Utilization
  • Services states and events
  • Eventlog Errors, Warnings, and Informational Events
  • Underlying Platform Performance
  • Dependent Infrsutructure Performance
Customizable Microsoft Exchange Server Dashboards
Live performance dashboards give you the performance metrics,  and events of Microsoft Exchange Server in a single view with quick link access to powerful analytical charting. Dashboards include:
  • Exchange Server Database
  • Exchange Server Processes
  • Exchange Server Queues
  • Exchange Server SMTP
  • Exchange Server Spam
  • Exchange Server Summary

Powerful Analytics

 
The tools make the difference when finding the root-cause of performance bottlenecks, application faults, and performing trend analysis. Analytical Charting features include:
  • Correlation of Live or Historical Data
  • Drill-Down, Zoom, and Statistic Lines
  • OpenGL 3D Surface Analysis
  • Live, Second, Minute, Hourly, and Monthly Data Periods
Powerful Monitoring Solutions
Deployment of pre-built monitoring solutions is as simple as Drag-n-Drop. Policies are customizable by adding performance counters and setting your desired collection and retention intervals as well as alerting rules.

The Microsoft Exchange Server monitoring policy includes:
(click nodes to drill down)  
WildMetrix Monitoring Policies
  Microsoft Exchange Server
  Intelligent Message Filter
  \Extended:Server\EventLog
 
  The EventLog extended counter is a real-time provider of event log data. The counter captures all events from the event logs.
 
  Exchange Intelligent Message Filter Failure
 
  Exchange Intelligent Message Filter Update or Enable Failure
  \MSExchange Intelligent Message Filter()\% UCE out of Total Messages Scanned
 
  The percentage of the total number of messages scanned that were determined to be Unsolicited Commercial Email (UCE)
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 0
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 0
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 1
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 1
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 2
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 2
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 3
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 3
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 4
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 4
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 5
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 5
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 6
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 6
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 7
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 7
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 8
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 8
  \MSExchange Intelligent Message Filter()\Total Messages Assigned an SCL Rating of 9
 
  The total number of messages scanned by Intelligent Message Filter and assigned a spam confidence level (SCL) rating of 9
  \MSExchange Intelligent Message Filter()\Total Messages Scanned for UCE
 
  The total number of messages scanned by Content Filtering.
  \MSExchange Intelligent Message Filter()\Total UCE Messages Acted Upon
 
  The total number of messages marked as Unsolicited Commercial Email (UCE) and acted upon based on the gateway threshold.
  Logging
  \Extended:Server\EventLog
 
  The EventLog extended counter is a real-time provider of event log data. The counter captures all events from the event logs.
 
  (Cluster) Error connecting to the AD
 
  (Corruption) Unable to start the Microsoft Exchange Information Store
 
  (DB size) Maximum allowed size for Database
 
  (Disk space) A fatal MTA database server error
 
  (Disk space) Less than 10 MB warning
 
  (Disk space) Message processing failed
 
  (Disk space) MTA error disk may be full
 
  (Disk space) MTA error occurred
 
  (Disk space) MTA has encountered an error because of the disk space
 
  (Disk space) MTA service may be terminated
 
  (Disk space) MTA stopped
 
  (Disk space) operation on server returned an error
 
  (Disk space) Site replication error
 
  (Disk space) The log disk is full
 
  (Disk space) Unable to initialize Exchange IS service
 
  (Disk space) Unable to start the Exchange IS
 
  (Disk space) Unsuccessful LDAP search result on directory
 
  (ISinteg) Administrator intervention is required
 
  (Memory) Message processing failed
 
  (Service Memory) Unable to start IS service
 
  (Service) ADC service threw an unexpected exception
 
  (Service) ADC service was stopped
 
  (Service) Restart replictaion service
 
  (Service) The service threw an out of memory exception
 
  (Service,Disk space) The Information Store service will not start
 
  (Service,Disk space) Unable to start the Microsoft Exchange Information Store
 
  (TCP/IP error) Cannot start Exchange IS
 
  (User permissions) operation failed user did not have rights
 
  (Virtual MEM) IS service Out of memory
 
  ADC will not replicate entry
 
  Attempting to stop the Exchange IS
 
  Database error occurred while accessing the database
 
  Database maximum size reached
 
  Domain server unavailable
 
  DRA error check exchange server Memory
 
  Error when performing online defragment of Site Replication Service database
 
  Incorrect client permissions to access ADC password interface
 
  Intersite replication warning
 
  Invalid update-replica message for naming context
 
  Logon Failure on Exchange IS Database
 
  Mail server can not handle the influx of mail
 
  Mailbox storage limits and permissions
 
  MSExchange Transport
 
  MSExchangeIS
 
  MSExchangeIS Mailbox Store
 
  MSExchangeIS Public Store
 
  MSExchangeSA
 
  Out of memory exception
 
  Restart server Site replication service has hung the machine
 
  Site replication performance issues
 
  Site replication service needs an exchange server restart
 
  Site replication service needs to be restated
 
  Stop and restart the site replication service
 
  The database has reached the maximum allowed size
 
  Unable to allocate memory
 
  Unable to open LDAP session on directory
 
  Unsuccessful LDAP Unbind on directory
  \Extended:Server\ServiceLog
 
  The ServiceLog extended counter is a query to check for status changes of registered services. Status changes include Running, Stopping, Stopped, and Starting.
 
  ASP.NET State Service has Started
 
  ASP.NET State Service has Stopped
 
  Microsoft Exchange Event has Started
 
  Microsoft Exchange Event has Stopped
 
  Microsoft Exchange IMAP4 has Started
 
  Microsoft Exchange IMAP4 has Stopped
 
  Microsoft Exchange Information Store has Started
 
  Microsoft Exchange Information Store has Stopped
 
  Microsoft Exchange MTA Stacks has Started
 
  Microsoft Exchange MTA Stacks has Stopped
 
  Microsoft Exchange POP3 has Started
 
  Microsoft Exchange POP3 has Stopped
 
  Microsoft Exchange Routing Engine has Started
 
  Microsoft Exchange Routing Engine has Stopped
 
  Microsoft Exchange Site Replication Service has Started
 
  Microsoft Exchange Site Replication Service has Stopped
 
  Microsoft Exchange System Attendant has Started
 
  Microsoft Exchange System Attendant has Stopped
 
  Microsoft Search has Started
 
  Microsoft Search has Stopped
 
  Network News Transfer Protocol (NNTP) has Started
 
  Network News Transfer Protocol (NNTP) has Stopped
 
  Simple Mail Transfer Protocol (SMTP) has Started
 
  Simple Mail Transfer Protocol (SMTP) has Stopped
  Memory
  \MSExchangeIS\Exchmem: Number of Additional Heaps
 
  The number of Exchmem heaps created by MSExchangeIS after startup.
  \MSExchangeIS\Exchmem: Number of heaps with memory errors
 
  The total number of Exchmem heaps that failed allocations due to insufficient available memory.
  \MSExchangeIS\Exchmem: Number of memory errors
 
  The total number of Exchmem allocations that could not be satisfied by available memory.
  \MSExchangeIS\VM Largest Block Size
 
  Size of the largest free virtual memory block.
  \MSExchangeIS\VM Total 16MB Free Blocks
 
  Total number of free Virtual Memory blocks larger than or equal to 16MB.
  \MSExchangeIS\VM Total Free Blocks
 
  Total number of free Virtual Memory blocks.
  \MSExchangeIS\VM Total Large Free Block Bytes
 
  Total number of bytes in free Virtual Memory blocks larger than or equal to 16MB.
  Other I/O
  \Database()\Database Cache % Hit
 
  Database Cache % Hit is the percentage of database file page requests that were fulfilled by the database cache without causing a file operation. If this percentage is too low, the database cache size may be too small.
  \Database()\Database Cache Size
 
  Database Cache Size is the amount of system memory used by the database cache manager to hold commonly used information from the database file(s) to prevent file operations. If the database cache size seems to be too small for optimal performance and there is very little available memory on the system (see Memory/Available Bytes), adding more memory to the system may increase performance. If there is a lot of available memory on the system and the database cache size is not growing beyond a certain point, the database cache size may be capped at an artificially low limit. Increasing this limit may increase performance.
  \Database()\Database Page Faults/sec
 
  Database Page Faults/sec is the rate that database file page requests require the database cache manager to allocate a new page from the database cache.
  \Database()\I/O Database Reads/sec
 
  I/O Database Reads/sec is the rate of database read operations completed.
  \Database()\I/O Database Writes/sec
 
  I/O Database Writes/sec is the rate of database write operations completed.
  \Database()\I/O Log Reads/sec
 
  I/O Log Reads/sec is the rate of logfile read operations completed.
  \Database()\I/O Log Writes/sec
 
  I/O Log Writes/sec is the rate of logfile write operations completed.
  \Database()\Log Record Stalls/sec
 
  Log Record Stalls/sec is the number of log records that cannot be added to the log buffers per second because they are full. If this counter is non-zero most of the time, the log buffer size may be a bottleneck.
  \Database()\Log Threads Waiting
 
  Log Threads Waiting is the number of threads waiting for their data to be written to the log in order to complete an update of the database. If this number is too high, the log may be a bottleneck.
  \MSExchangeIS\Active Connection Count
 
  Number of connections that have shown some activity in the last 10 minutes.
  \MSExchangeIS\RPC Averaged Latency
 
  RPC latency in milliseconds averaged for the past 1024 packets.
  \MSExchangeIS\RPC Requests
 
  RPC Requests is the number of client requests that are currently being processed by the information store.
 
  High RPC Requests
  Processes
  \Process(emsmta)\% Processor Time
 
  % Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
  \Process(emsmta)\Handle Count
 
  The total number of handles currently open by this process. This number is equal to the sum of the handles currently open by each thread in this process.
  \Process(emsmta)\IO Read Bytes/sec
 
  The rate at which the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(emsmta)\IO Write Bytes/sec
 
  The rate at which the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(emsmta)\Page Faults/sec
 
  Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
  \Process(emsmta)\Private Bytes
 
  Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes.
  \Process(emsmta)\Thread Count
 
  The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
  \Process(emsmta)\Virtual Bytes
 
  Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
  \Process(emsmta)\Working Set
 
  Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
  \Process(exmgmt)\% Processor Time
 
  % Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
  \Process(exmgmt)\Handle Count
 
  The total number of handles currently open by this process. This number is equal to the sum of the handles currently open by each thread in this process.
  \Process(exmgmt)\IO Read Bytes/sec
 
  The rate at which the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(exmgmt)\IO Write Bytes/sec
 
  The rate at which the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(exmgmt)\Page Faults/sec
 
  Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
  \Process(exmgmt)\Private Bytes
 
  Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes.
  \Process(exmgmt)\Thread Count
 
  The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
  \Process(exmgmt)\Virtual Bytes
 
  Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
  \Process(exmgmt)\Working Set
 
  Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
  \Process(inetinfo)\% Processor Time
 
  % Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
  \Process(inetinfo)\Handle Count
 
  The total number of handles currently open by this process. This number is equal to the sum of the handles currently open by each thread in this process.
  \Process(inetinfo)\IO Read Bytes/sec
 
  The rate at which the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(inetinfo)\IO Write Bytes/sec
 
  The rate at which the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(inetinfo)\Page Faults/sec
 
  Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
  \Process(inetinfo)\Private Bytes
 
  Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
  \Process(inetinfo)\Thread Count
 
  The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
  \Process(inetinfo)\Virtual Bytes
 
  Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
  \Process(inetinfo)\Working Set
 
  Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
  \Process(mad)\% Processor Time
 
  % Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
  \Process(mad)\Handle Count
 
  The total number of handles currently open by this process. This number is equal to the sum of the handles currently open by each thread in this process.
  \Process(mad)\IO Read Bytes/sec
 
  The rate at which the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(mad)\IO Write Bytes/sec
 
  The rate at which the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(mad)\Page Faults/sec
 
  Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
  \Process(mad)\Private Bytes
 
  Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes.
  \Process(mad)\Thread Count
 
  The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
  \Process(mad)\Virtual Bytes
 
  Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
  \Process(mad)\Working Set
 
  Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
  \Process(store)\% Processor Time
 
  % Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
  \Process(store)\Handle Count
 
  The total number of handles currently open by this process. This number is equal to the sum of the handles currently open by each thread in this process.
  \Process(store)\IO Read Bytes/sec
 
  The rate at which the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(store)\IO Write Bytes/sec
 
  The rate at which the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(store)\Page Faults/sec
 
  Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
  \Process(store)\Private Bytes
 
  Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes.
  \Process(store)\Thread Count
 
  The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
  \Process(store)\Virtual Bytes
 
  Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
  \Process(store)\Working Set
 
  Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
  \Process(w3wp)\% Processor Time
 
  % Processor Time is the percentage of elapsed time that all of process threads used the processor to execution instructions. An instruction is the basic unit of execution in a computer, a thread is the object that executes instructions, and a process is the object created when a program is run. Code executed to handle some hardware interrupts and trap conditions are included in this count.
  \Process(w3wp)\Handle Count
 
  The total number of handles currently open by this process. This number is equal to the sum of the handles currently open by each thread in this process.
  \Process(w3wp)\IO Read Bytes/sec
 
  The rate at which the process is reading bytes from I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(w3wp)\IO Write Bytes/sec
 
  The rate at which the process is writing bytes to I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
  \Process(w3wp)\Page Faults/sec
 
  Page Faults/sec is the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. This may not cause the page to be fetched from disk if it is on the standby list and hence already in main memory, or if it is in use by another process with whom the page is shared.
  \Process(w3wp)\Private Bytes
 
  Private Bytes is the current size, in bytes, of memory that this process has allocated that cannot be shared with other processes.
  \Process(w3wp)\Thread Count
 
  The number of threads currently active in this process. An instruction is the basic unit of execution in a processor, and a thread is the object that executes instructions. Every running process has at least one thread.
  \Process(w3wp)\Virtual Bytes
 
  Virtual Bytes is the current size, in bytes, of the virtual address space the process is using. Use of virtual address space does not necessarily imply corresponding use of either disk or main memory pages. Virtual space is finite, and the process can limit its ability to load libraries.
  \Process(w3wp)\Working Set
 
  Working Set is the current size, in bytes, of the Working Set of this process. The Working Set is the set of memory pages touched recently by the threads in the process. If free memory in the computer is above a threshold, pages are left in the Working Set of a process even if they are not in use. When free memory falls below a threshold, pages are trimmed from Working Sets. If they are needed they will then be soft-faulted back into the Working Set before leaving main memory.
  Queues
  \Epoxy()\Client Out Queue Length
 
  Number of requests waiting to be processed by the Exchange store
  \Epoxy()\Store Out Queue Length
 
  Number of requests waiting to be picked up by the Internet Information Services protocol handlers
  \Epoxy(_Total)\Client Out Queue Length
 
  Number of requests waiting to be processed by the Exchange store
  \Epoxy(_Total)\Store Out Queue Length
 
  Number of requests waiting to be picked up by the Internet Information Services protocol handlers
  \MSExchangeIS Mailbox(_Total)\Receive Queue Size
 
  Receive Queue Size is the number of messages in the mailbox store's receive queue.
 
  High number of messages in receive queue.
  \MSExchangeIS Mailbox(_Total)\Send Queue Size
 
  Send Queue Size is the number of messages in the mailbox store's send queue.
 
  High number of messages in store send queue
  \MSExchangeIS Public(_Total)\Receive Queue Size
 
  Receive Queue Size is the number of messages in the public store's receive queue.
 
  High Queue Size
  \MSExchangeIS Public(_Total)\Send Queue Size
 
  Send Queue Size is the number of messages in the public store's send queue.
 
  High Queue Size
  SMTP Server
  \SMTP Server()\Avg Retries/msg Delivered
 
  The average number of retries per local delivery.
  \SMTP Server()\Avg Retries/msg Sent
 
  The average number of retries per outbound message sent.
  \SMTP Server()\Badmailed Messages (Bad Pickup File)
 
  The number of malformed pickup messages sent to badmail.
  \SMTP Server()\Badmailed Messages (General Failure)
 
  The number of messages sent to badmail for reasons not associated with a specific counter.