SIEM, Vulnerability Scanning, Server Monitoring and Compliance Training for IT Professionals
Table of Contents

Templates

When designing Server Manager one of our primary goals was to produce a highly scalable and easily configurable software package. The result was a system that uses what we call Templates. A Template is defined as a configurable object that defines properties for an executable function that is assigned to one or more hosts, host groups, template groups and summary reports. For example:

  • A Ping Monitor Template that defines the failure rate prior to triggering.
  • An Website Monitor Template that sends an email alert when any assigned website is down or missing expected content.

How it works:

Once a template has been created it must be assigned to a computer, device or host. Upon being assigned to a host, Server Manager immediately calculates and saves the next execution time. The Explorer Viewadds a Monitor Node under the assigned host. Every minute at the top of the minute Server Manager checks to see if a Monitor should be executed. If a Monitor is scheduled to execute, Server Manager creates a new thread. The thread then executes the Monitor, fires Actions, saves the results to the history database and finally calculates and saves the next execution time.

To create a Template:

  • Select File | New | Template. The Select Template Type view displays.
  • Click the template type to create. The Template Properties view displays.
Note
Unlicensed template types appear in gray text. If you would like to create a template that is not currently licensed, please contact Corner Bowl Software to upgrade your license.
  • Configure the Template Properties.
  • When applicable, assign target hosts, host groups, and template groups.
  • When you have finished configuring the template, click the OK button to save.

To assign a template to computers, devices and hosts:

  • From the Explorer View, navigate to the template you want to assign a host.
  • Right-click and select Assign | Computer, Device or Host. The Select Multiple Computers, Devices and Hosts dialog displays.
  • Check the computers to assign then click OK.

Sample Templates

Server Manager includes sample templates of which several are initially assigned to the localhost. The sample Templates can be modified and assigned to other computers as necessary. To view the sample templates, from the Explorer View, expand the Templates node then select Sample Templates.

Available Template Types

TypeDescription
Log ManagementConfigure Event Log, Syslog and text log file management.
Log ConsolidationConfigure log consolidation (e.g. Schedule Server Manager to download the latest Security Event Log entries and save to Microsoft SQL Server or MySQL).
Log Entry Retention PolicyConfigure how long to retain log entries in the consolidation database (e.g. Archive entries older than 30 days and remove entries older than 90 days).
Log BackupBackup, compress, encrypt and sign native Event Log and text log files (e.g. Download native Security Event Logs every night).
Log MonitorConfigure log monitoring (e.g. Create a real-time text log monitor to scan an application log then trigger notifications when search criteria is detected).
File and Directory MonitorsConfigure templates that monitor files and directories (e.g. File integrity, file collection and retention, directory size, etc.)
File Integrity MonitorValidates the integrity of operating system and application files.
File Size and Activity MonitorMonitor file sizes and activity (e.g. Get notified when a file size exceeds 1 GB or is inactive for 10 minutes).
File Collection and RetentionBackup files to a central location and delete expired files (e.g. Copy database backups to a central location then delete old backups no longer needed).
Directory Size MonitorMonitor directory sizes (e.g. Scan a directory every hour and trigger an alert if the size exceeds a threshold).
Directory Watcher MonitorMonitor, log and trigger actions when a directory or file is created, modified, renamed or deleted without using Object Access Auditing (e.g. Monitor all changes made to a secure directory).
Directory CleanerSchedule old data files to be deleted (e.g. Once a week delete database backups and IIS log files that are older than 30 days).
Delete Temporary FilesSchedule the service to remotely delete temporary files (e.g. Delete temporary files that were last modified 3 days ago).
Windows MonitorsConfigure templates that monitor network availability and applications (e.g. Ping, web server, email, etc.)
Account Lockout MonitorConfigure the frequency to scan Active Directory for domain account lockouts and the frequency to scan servers for local account lockouts.
Logon MonitorMonitor Windows logon events (e.g. Get notified when any domain administrator logs on to a server).
CPU MonitorMonitor CPU load over a period of time (e.g. Get notified when CPU load exceeds 50% for 10 minutes).
Memory MonitorMonitor memory consumption over a period of time (e.g. Get notified when memory consumption exceeds 75% for 10 minutes).
Disk Space MonitorMonitor free disk space (e.g. Every hour check the available disk space on all logical disks).
SMART Disk MonitorMonitor SMART Predictive Disk Failure status (e.g. Check SMART status every hour).
Process MonitorMonitor Windows Processes and the resources they consume (e.g. Restart a process when it consumes more than 4 GBs of memory).
Service MonitorMonitor Windows Services and the resources they consume (e.g. Restart a service when it consumes more than 4 GBs of memory).
Performance Counter MonitorMonitor Windows Performance Counters (e.g. Trigger an alert when IO latency is greater than 20ms).
Registry Value MonitorMonitor a Windows Registry Value (e.g. Get notified when a Registry Value is changed to an unexpected value).
Active Directory User MonitorMonitor Active Directory user attribute values (e.g. Get notified when a specific user attribute value changes).
Active Directory User Integrity MonitorMonitor Active Directory users for changes (e.g. Get notified when a user account changes).
Task SchedulerStart, stop or restart an application or script (e.g. Launch a PowerShell script on a managed server)
Clock SynchronizationSynchronize clock time with a Network Time Protocol (NTP) server (e.g. Synchronize the clocks on all your once a week).
Defragment NTFS DisksSchedule the service to remote execute disk defragmentation (e.g. Defragment production disks once a week).
Network and Application MonitorsConfigure templates that monitor network availability and applications (e.g. Ping, web server, email, etc.)
Database MonitorVerify the availability and performance of a database server (e.g. Get notified when a database query is slow to respond).
Directory Service MonitorVerify the availability of an LDAP Directory Service server (e.g. Get notified when your domain controller is no longer responding).
DNS Blacklist MonitorMonitor DNS Blacklists (e.g. Get notified when your email server is blacklisted).
DNS MonitorCheck the availability of a DNS server and the accuracy of a record (e.g. Get notified when an MX record is not returning the expected value).
Domain Expiration MonitorVerify the expiration date of a domain on a WHOIS server (e.g. Get notified 30 days prior to expiration).
Network Speed MonitorVerify the speed your network (e.g. Get notified when your data transfer rate falls below an unacceptable threshold).
Ping MonitorChecks the availability of a host and response time of an ICMP ping packet and payload (e.g. Get notified when 7 of 9 pings timeout).
SSH ShellCheck the availability of an SSH server and run SSH shell scripts.
TCP Port MonitorVerifies a TCP port is accepting connections and optionally returns expected results (e.g. Scan a proprietary TCP based service for availability).
Website MonitorVerify a website is responsive and returning the expected results (e.g. Trigger an alert if a website returns a 500 error).
Wake On LANBroadcast a UDP Wake on LAN packet (e.g. Shoulder tap computers to wake up).
SSL Certificate MonitorsMonitor SSL certificates and digitally signed files (e.g. Get notified 30 days prior to expiration).
SSL Certificate MonitorMonitor SSL certificates, their intermediate certificates and expiration dates (e.g. Get notified 30 days prior to expiration).
Windows SSL Certificate MonitorMonitor Windows SSL certificates, their intermediate certificates and expiration dates (e.g. Get notified 30 days prior to expiration).
Digital Signature MonitorMonitor digitally signed files (e.g. Get notified 30 days prior to expiration).
Email MonitorsMonitor the availability and performance of SMTP, IMAP and POP3 servers (e.g. Get notified when it takes more than 5 minutes for an email to be received).
End-To-End Email MonitorMonitor the availability and performance of SMTP, IMAP and POP3 servers (e.g. Get notified when it takes more than 5 minutes for an email to be received).
SMTP MonitorVerify the availability of an SMTP email server and optionally send an email (e.g. Get notified when your SMTP server is no longer responding).
IMAP MonitorVerify the availability of an IMAP email server (e.g. Get notified when your IMAP server is no longer responding).
POP3 MonitorVerify the availability of a POP3 email server (e.g. Get notified when your POP3 email server is no longer responding).
SNMP MonitorsMonitor SNMP values and traps
SNMP Get MonitorMonitor SNMP variables (e.g. Monitor the CPU, memory and disk space from a Linux server).
SNMP Trap MonitorTrigger actions when specific SNMP traps are received (e.g. Send an email alert when a switch throws an SNMP trap).
SNMP Trap ConsolidationSave SNMP Traps from various sources to the data provider database (e.g. Save all SNMP Traps generated from a switch).
Windows Accounts TemplatesScan both Domain Controllers and Stand-Alone Servers for enabled accounts, active accounts and inactive accounts.
Sample TemplatesSeveral different Templates are available.

Related Topics

Template Properties

Batch Update Templates