insight for active directory · sysinternals - adinsight is an advanced monitoring tool for windows...
TRANSCRIPT
![Page 1: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/1.jpg)
ADInsightCopyright©2007MarkRussinovichandBryceCogswellSysinternals-www.sysinternals.com
ADInsightisanadvancedmonitoringtoolforWindowsthatshowsreal-timefileclient-sideActiveDirectory(LDAP-Light-weightDirectoryAccessProtocol)activity.UsingADInsight,youcantroubleshootpermissions,performance,andconfigurationissuesthataffectAD-enabledapplications,suchasExchangeandSQLServer.
ADInsightusesDLLinjectiontechniquestointerceptcallsthatapplicationsmakeintheWldap32.dlllibrary,whichisthestandardlibraryunderlyingActiveDirectoryAPIssuchldapandADSI.Unlikenetworkmonitoringtools,ADInsightinterceptsandinterpretsallclient-sideAPIs,includingthosethatdonotresultintransmissiontoaserver.ADInsightmonitorsanyprocessintowhichitcanloadit’stracingDLL,whichmeansthatitdoesnotrequireadministrativepermissions,however,ifrunwithadministrativerights,itwillalsomonitorsystemprocesses,includingwindowsservices.
ADInsightrunsonWindows2000,WindowsXP,WindowsVista,WindowsServer2003,andWindowsServer2008.
![Page 2: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/2.jpg)
CapturingEvents
Totogglecapturemodeonandoff,clicktheCapturetoolbarbutton,chooseCaptureEventsfromtheFilemenu,orpressCtrl+E.Nodataiscollectedwhencapturemodeisoff.
Note
Bydefaulteventsarecapturedwhenanewconnectionismade.TochangethedefaultcapturemodechoosePreferencesfromtheOptionsmenuandclearAutomaticallystarttocaptureafterconnection.
![Page 3: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/3.jpg)
CopyinganEvent
TocopyaselectedeventtotheClipboard,choseCopyfromtheEditmenuorpressCtrl+C.
![Page 4: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/4.jpg)
FindingText
TosearchforanoccurrenceoftextintheEventPane,clicktheFindtoolbarbutton,chooseFindontheEditmenu,orpressCtrl+F.ThisactionopenstheFinddialogbox.
IfthetextyouenteredisfoundintheEventPane,thematchingeventwillbeselectedandAutoScrollwillbeturnedofftokeepthelineinthewindow.
TorepeatasearchdowntheeventlistpresstheF3shortcutkey.TorepeatasearchuptheeventlistpresstheShift+F3shortcutkey.
Note
YoucansearchonlyincolumnsthatarevisibleintheEventPane.Tosetthecolumndisplay,chooseSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitem.
![Page 5: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/5.jpg)
ClearingtheDisplay
TocleartheEventPane,clicktheCleartoolbarbuttonorchooseClearDisplayfromtheEditmenu.
Thisactionresetsthesequencenumberto0;italsoresetsthevaluesdisplayedintheTimecolumnifrelativetimeisselected.
![Page 6: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/6.jpg)
FilteringtheDisplay
Todisplayorhideprocesseswhosenamescontainspecifiedtextsubstrings,ortoaddorexcludeselectedLDAPtransactions,clicktheFiltertoolbarbutton,chooseEventFilterfromtheViewmenu,orpressCtrl+L.
ThisactionopenstheEventFiltersdialogbox.
Toviewonlyprocesseswhosenamescontainspecifiedsubstrings,typethetextexpressionintheIncludelist.Toexcludeprocesseswhosenamescontainspecifiedsubstrings,typethetextexpressionintheExcludelist.
![Page 7: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/7.jpg)
UsingFilterExpressions
Youcanentermultipleexpressionsbyseparatingeachexpressionwithasemicolon(;).UsetheAsterisks(*)asawildcardcharacter.Donotincludespacesintheexpressionunlessyouwantthespacestobepartofthefilter.Filterexpressionsareacaseinsensitive.
SelectingDisplayedTransactions
TohideselectedLDAPtransactions,clearthecorrespondingcheckboxes.TodisplayeventsnotcommonlyusedfortroubleshootingandconfigurationselectShowAdvancedEvents.
ToresettheIncludeandExcludeexpressionsandselectthedefaultLDAPtransactioncheckboxes,clickResettoDefault.
Notes
ChangesintheEventFiltersdialogboxdonotaffectitemsalreadyinthedisplay.WhenyoustartInsightforActiveDirectorywithaProcessFilterappliedfromaprevioussession,theEventFiltersdialogboxwillopentoconfirmyourfiltersettings.TostarttheconsolewithoutopeningtheFilterdialogbox,addthe-qparametertoyourstartupcommand.
![Page 8: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/8.jpg)
HighlightingEvents
Tosetdisplayhighlightingproperties,chooseHighlightPreferencesontheHighlightmenuorfromthecontextmenuthatappearswhenyouright-clickonanitemintheEventPane.
ThisactionopenstheEventHighlightingdialogbox.
Tohighlighteventsinthesamesessionhandleastheselecteditem,clickSessions.Tohighlighteventswiththesameeventhandleastheselecteditem,clickRelatedItems.Tohighlighteventswhoseprocessnamescontainspecifiedtextsubstrings,clickProcessesandtypethetextexpressionintheProcessNameFilterlist.FilterexpressionrulesapplytotextintheProcessNameFilter.Tohighlighteventswitherrors,clickErrorResult.
![Page 9: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/9.jpg)
TohighlighteventswithResultTimesthatarelongerthanaspecifiedtime,clickHighlightEventsthattakelongerthanandtypethetimeinseconds.
Tochangeahighlightcolor,clicktheColorbuttoncorrespondingtothehighlightoption.ThisactionopenstheHighlightColordialogbox.Totoggleallhighlightingonandoff,chooseEnableHighlightingontheHighlightingmenu.
Note
TheNextandPrevtoolbarbuttonsaredisabledwhenhighlightingisdisabledorErrorResultisnotselected.
![Page 10: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/10.jpg)
FindingEventErrors
TogotothenexterrorintheEventPane,clicktheNexttoolbarbuttonorchooseNextEventErrorfromthecontextmenuthatappearswhenyouright-clickonanitemintheEventPane.
TogotothepreviouserrorintheEventPane,clickthePrevtoolbarbuttonorchoosePreviousEventErrorfromthecontextmenuthatappearswhenyouright-clickonanitemintheEventPane.
Note
TheNextandPrevtoolbarbuttonsaredisabledwhenhighlightingisoff,whenErrorResultintheEventHighlightingdialogboxisnotselected,orwhennoitemisselectedintheEventPane.
![Page 11: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/11.jpg)
ViewingRelatedEvents
Toviewalistofeventswiththesameeventhandleastheselecteditem,chooseViewRelatedEventsontheViewmenuoronthecontextmenuthatappearswhenyouright-clickontheitem.ThisactionopenstheRelatedTransactionEventswindow.
NoteColumnsthatappearinthewindowcorrespondtothecolumnsvisibleintheEventPane.Toaddorremovecolumns,chooseSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitem.
![Page 12: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/12.jpg)
ViewingRelatedSessionEvents
ToviewalistofeventswiththesameLDAPsessionhandleastheselecteditem,chooseViewSessionEventsontheViewmenuoronthecontextmenuthatappearswhenyouright-clickontheitem.ThisactionopenstheRelatedSessionEventswindow.
NoteColumnsthatappearinthewindowcorrespondtothecolumnsvisibleintheEventPane.Toaddorremovecolumns,chooseSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitem.
![Page 13: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/13.jpg)
ViewingProcessInformation
ToviewinformationabouttheprocessmakinganLDAPcall,chooseProcessInformationfromthecontextmenuthatappearswhenyouright-clickonanitemintheEventPane.
ThisactionopenstheProcessInformationwindow.
![Page 14: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/14.jpg)
ViewingEventInformation
ToviewsummaryinformationaboutanLDAPfunctionthatappearsintheRequestcolumn,double-clickanitemintheEventPaneorchooseEventInformationfromthecontextmenuthatappearswhenyouright-click.
Thisactionopensapop-updialogboxthatdisplaysthefullnameanddescriptionofthefunction.
ToviewdetaileddiagnosticinformationabouttheLDAPfunction,clicktheMoreInfohyperlink.ThisactionopensabrowserwindowwithinformationfromtheMSDNLibraryWebsite.
![Page 15: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/15.jpg)
SettingTimeDisplayOptions
TotoggletheTimecolumndisplaybetweenclocktimeandrelativetime,chooseClockTimefromtheOptionsmenuorpressCtrl+T.
WhenclocktimeisselectedyoucantoggletheTimecolumndisplaytoshoworhidemillisecondsbychoosingShowMillisecondsfromtheOptionsmenu.YoucantogglethenumberofdecimalplacesdisplayedintheTimeandDurationcolumnsbychoosingShowSimpleTimefromtheOptionsmenu.SimpletimeisdisplayedintheTimecolumnonlywhenrelativetimeisselected.
![Page 16: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/16.jpg)
SettingAutoScroll
Bydefaultthedisplayscrollstoautomaticallyshownewactivity.
TotoggleAutoScrolloffandon,clicktheScrolltoolbarbutton,chooseAutoScrollontheViewmenuorpressCtrl+A.
Note
TurningoffAutoScrolltemporarilysetstheHistoryDepthtoanunlimitednumberoflinessothatnewitemswillcontinuetoappearinthedisplay.
![Page 17: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/17.jpg)
SettingHistoryDepth
BydefaultolderlinesarediscardedfromtheeventlisttostaywithinaspecifiedHistorydepth.TochangeHistorydepth,clicktheHistorytoolbarbutton,chooseHistoryDepthontheViewmenu,orpressCtrl+H.
ThisactionopenstheEventListHistoryDepthdialogbox.
TypeorselectanewvalueintheHistoryDepthboxorclickDefaulttorestorethedefaultvalueof50,000lines.Typeorselect0intheHistoryDepthboxtoretainanunlimitednumberoflinesinthedisplay.
Note
TurningoffAutoScrolltemporarilysetstheHistoryDepthtoanunlimitednumberoflinessothatnewitemswillcontinuetoappearinthedisplay.
![Page 18: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/18.jpg)
SettingtheColumnDisplay
Toselectthecolumnsthatappearinthedisplay,chooseSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitemintheEventPane.ThisactionopenstheSelectColumnsdialogbox.
YoucanchooseanyofthefollowingcolumnstoappearintheEventPane:
SequenceNumber
theuniquesequencenumberassignedtoanevent;gapsinsequencenumbersmayindicatebufferoverflowresultingfromheavyactivityorfilteringthatpreventssomeitemsfromappearinginthedisplay
Time thetimethattheeventoccurred
Process thenameoftheprocessmakingtheLDAPcalltotheActiveDirectory
Request thenameoftheLDAPfunctioncall
Type whethertheLDAPcallissynchronousorasynchronous
Session theLDAPsessionhandle
EventID theLDAPeventhandle
![Page 19: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/19.jpg)
Input thevaluepassedfromtheProcesstotheActiveDirectory
Output thevaluepassedtotheProcessfromtheActiveDirectory
Result theResultcodereturnedbythefunction;SuccessresultsarenotdisplayedunlessyouclearSuppressSuccessStatusontheOptionsmenu
Duration theelapsedtimebetweenthecallandtheresult
YoucanchooseanyofthefollowingcolumnstoappearintheDetailsPane:
Parameter theparameternamesfortheselectedLDAPcall
In/Out whethertheparameterisbeingsentorreceivedbytheapplication
Value thevaluepassedtoorfromtheprocessmakingtheLDAPcall
![Page 20: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/20.jpg)
SettingOtherDisplayOptions
Tochangethefontsizeofitemsinthedisplay,chooseFontontheOptionsmenu.ChooseAlwaysonToptokeepthewindowdisplayedwhenyouswitchprogramsorwindows.TotoggletheRequestcolumnbetweenfullandsimpleLDAPfunctionnames,clickShowSimpleEventNameontheOptionsmenu.ExamplesoffullandsimpleLDAPfunctionnamesare:
FullNameldap_get_values_len
SimpleName getvalueslength
Totogglethedisplaybetweendistinguishedandsimplenames,clickShowDistinguishedNameFormatontheOptionsmenu.Examplesofequivalentdistinguishedandsimplenamesare:
DistinguishedNameCN=RCHASE-2K3,CN=Computers,DC=OA,DC=Denver,DC=Addesinc,DC=com
SimpleName OA.Denver.Addesinc.com\Computers\RCHASE-2K3
TotogglethedisplayofLDAPfilterstringsintheInputcolumnandDetailsPanebetweensimpleformat(i.e.,prefixnotation)andstandardformat(i.e.,infixnotation),clickShowSimpleLDAPFiltersontheOptionsmenu.Examplesofequivalentsimpleandstandardformatfilterstringsare:
SimpleFormat((NOT((showInAdvancedViewOnly=TRUE))AND(samAccountType=805306368))AND((name=rchase-2k3*)OR(sAMAccountName=rchase-2k3*)))
StandardFormat (&(&(!(showInAdvancedViewOnly=TRUE))(samAccountType=805306368))(name=rchase-2k3*)(sAMAccountName=rchase-2k3*)))
![Page 21: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/21.jpg)
TotoggleoffandonthedisplayofSuccessstatusintheResultcolumn,clickSuppressSuccessStatusfromtheOptionsmenu.
![Page 22: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/22.jpg)
Command-LineOptions
Youcanusecommand-lineparameterstosetconsolestartupoptionsandtolaunchthemonitoringservicefromabatchfileorcommandwindow.
Syntax
adinsight[-q][-o][-logFileName][-fiIncludeString][-feExcludeString][[-uUserName–pPassword]-rComputerName]...
Parameters
–q
StartstheconsolewithoutopeningtheFilterdialogbox.BydefaulttheFilterdialogboxopensatstartupifanyfiltersareapplied.
–o
Turnsoffeventcapture.
-logFileName
Writesactivitytoalogfilewithoutopeningtheconsole,whereFileNameisthenameoftheoutputfile.
–fi
SpecifiesanIncludestringfortheFilter.FilterexpressionrulesapplytotheIncludeStringtext.
–fe
SpecifiesanExcludestringfortheFilter.FilterexpressionrulesapplytotheExcludeStringtext.
-?
Displayshelpatthecommandprompt.
![Page 23: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/23.jpg)
SavingOutput
TosavethecontentsoftheEventPaneasatextfile,chooseSaveontheFilemenuorpresstheCtrl+Sshortcutkey.
TocopytheselecteditemtotheClipboard,choseCopyfromtheEditmenuorpresstheCtrl+Cshortcutkey.
Note
YoucanalsosavethecontentsoftheEventPaneasHTMLformattedreports.
![Page 24: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/24.jpg)
LoggingtoaFile
Youcanusethecommand-line-logoptiontowriteactivitytoalogfilewithoutopeningtheconsole.
![Page 25: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/25.jpg)
ViewingEventReports
ToviewareportofallitemsintheEventPane,chooseEventsfromtheHTMLReportssubmenuoftheViewmenu.
ThisactionopensanHTML-formattedreportinyourWebbrowserwindow.
ToviewdetaileddiagnosticinformationaboutanLDAPfunctionintheRequestcolumn,clickthehyperlink.Tosavethecontentsofthereport,
![Page 26: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/26.jpg)
chooseSaveAsfromtheFilemenuofyourbrowserwindow.
Note
ColumnsthatappearinthereportcorrespondtothecolumnsvisibleintheEventPane.Toaddorremovecolumns,chooseSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitem.
![Page 27: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/27.jpg)
ViewingEventswithDetails
ToviewareportofallitemsintheEventPanewithcorrespondingDetailsPanes,chooseEventswithDetailsfromtheHTMLReportssubmenuoftheViewmenu.
ThisactionopensanHTML-formattedreportinyourWebbrowserwindow.
ToviewdetailedinformationaboutanLDAPfunctionintheRequest
![Page 28: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/28.jpg)
column,clickthehyperlink.Tosavethecontentsofthereport,chooseSaveAsfromtheFilemenuofyourbrowserwindow.
Note
ColumnsthatappearinthereportcorrespondtothecolumnsvisibleintheEventPane.Toaddorremovecolumns,chooseSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitem.
![Page 29: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/29.jpg)
ViewingEventswithTimeResults
ToviewahistogramreportofLDAPcallsintheEventPanewithTotalTime,LongestTime,andAverageTimestatistics,chooseEventTimeResultsfromtheHTMLReportssubmenuoftheViewmenu.
ThisactionopensanHTML-formattedreportinyourWebbrowserwindow.
ToviewdetailedinformationaboutanLDAPfunction,clickthehyperlink.Tosavethecontentsofthereport,chooseSaveAsfromtheFilemenuofyourbrowserwindow.
Note
Todisplayuncalledfunctions,choosePreferencesfromtheOptionsmenuandclearSuppressuncalledfunctionsinreports.
![Page 30: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/30.jpg)
ViewingHighlightedEvents
ToviewareportofhighlightedentriesintheEventPane,chooseHighlightedEventsfromtheHTMLReportssubmenuoftheViewmenu.
ThisactionopensanHTML-formattedreportinyourWebbrowserwindow.
![Page 31: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/31.jpg)
ToviewdetailedinformationaboutanLDAPfunctionintheRequestcolumn,clickthehyperlink.Tosavethecontentsofthereport,chooseSaveAsfromtheFilemenuofyourbrowserwindow.
Note
ColumnsthatappearinthereportcorrespondtothecolumnsvisibleintheEventPane.Toaddorremovecolumns,chooseSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitem.
![Page 32: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/32.jpg)
ChangeColorHighlighting
YoucansetcolorhighlightingpropertiesofthedisplaybychoosingHighlightPreferencesfromtheHighlightmenuorfromthecontextmenuthatappearswhenyouright-clickonanitemintheEventPane.
![Page 33: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/33.jpg)
DisplayOnlySelectedEvents
YoucandisplayorhideprocesseswhosenamescontainspecifiedtextoraddandexcludeselectedtransactionsbyclickingtheFilter toolbarbutton,choosingEventFilterontheViewmenu,orpressingCtrl+L.
![Page 34: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/34.jpg)
LogSystemActivity
Youcanusethecommand-line-logoptiontowriteactivitytoalogfilewithoutopeningtheconsole.
![Page 35: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/35.jpg)
SaveEventsintheDisplay
YoucansavethecontentsoftheEventPaneasatextfilebychoosingSaveontheFilemenuorpressingCtrl+S.
YoucancopyaselecteditemtotheClipboardbychoosingCopyfromtheEditmenuorpressingCtrl+C.
Note
YoucanalsosavethecontentsoftheEventPaneasHTMLformattedreports.
![Page 36: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/36.jpg)
ViewDifferentColumnsintheDisplay
YoucanselectthecolumnsthatappearinthedisplaybychoosingSelectColumnsfromtheOptionsmenuorfromthecontextmenuthatappearswhenyouright-clickonanitemintheEventPane.
![Page 37: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/37.jpg)
ReportingBugs
[email protected],includingthebehavioryouobserved,thebehavioryouexpected,andstepsforreproducingtheproblem.
![Page 38: Insight for Active Directory · Sysinternals - ADInsight is an advanced monitoring tool for Windows that shows real-time file client-side Active Directory (LDAP - Light-weight Directory](https://reader033.vdocument.in/reader033/viewer/2022041908/5e650d62b0c1f510a10bff57/html5/thumbnails/38.jpg)
SettingProgramPreferences
Tochangethedefaultcapturemodewhenmakinganewconnection,displayatrayicon oncomputersrunningthemonitoringservice,changetheTCP/IPportnumberoradministrativesharename,ordisplayuncalledfunctionsinEventswithTimeResultsreports,choosePreferencesfromtheOptionsmenu.
ThisactionopensthePreferencesdialogbox.