How to find the EPS for Windows devices
Objective
This utility offers the events per second (EPS) estimator for calculating EPS for your Windows devices without installing EventLog Analyzer. You can leverage the tool to gain detailed insights into the log flow and fine-tune or filter it to collect only the necessary logs for analysis, thereby optimizing storage utilization. Based on the log flow, you can appropriately size your EventLog Analyzer server to optimize resource utilization and minimize system performance issues.
Prerequisites
- The tool should be executed in a domain joint machine.
- You'll need domain admin credentials.
- Open the following TCP ports on the targeted machines: 135, 139, 445.
- Open this TCP ports on the domain controller machines: 389.
Rule description | Protocol | Port | Traffic direction on firewall rules (inbound or outbound) |
WMI, DCOM, and RPC | TCP | 135, 445, and 139 | Incoming (on target machines) |
LDAP | TCP | 389 | Incoming (on domain controllers) |
Steps to follow
Step 1: In the ME_EventlogAnalyzer_Prerequisites_Checker folder, add the needed domain machine IP in the DeviceNameList.txt.
Step 2: Open the Command Prompt or Powershell and run the following command: ME_EventlogAnalyzer_Prerequisites_Checker.exe
Step 3: Type 1 to to choose the first option and run the EPS estimator utility.
Step 4: Then type the number corresponding to the respective machines in the domain (a specific device or all devices).
Specific device: Estimates the EPS for only the devices listed in DeviceNameList.txt.
All devices: Estimates the EPS for all devices in the domain.
Note: Domain admin privileges required to get the EPS
Tips
- Based on the analyzed log flow, you can size your server in accordance with the recommended system requirements.
- Additionally, ensure that the calculated log flow is fine-tuned and optimized by configuring appropriate log collection filters.
- Monitor the log flow from your sources continuously and adjust the server sizing as needed to avoid hardware-related performance issues.
New to ADSelfService Plus?
Related Articles
How to install the EventLog Analyzer agent on Windows devices using a GPO
Overview EventLog Analyzer requires agents in specific scenarios to ensure seamless log collection and file monitoring: Windows file server monitoring: An agent is required to monitor files on Windows file servers. RPC connectivity issues: An agent ...How to install EventLog Analyzer Agent on Windows Devices using Microsoft SCCM
Overview EventLog Analyzer requires agents in specific scenarios to ensure proper log collection and file monitoring: Windows File Server Monitoring: Agent is required for monitoring files in Windows file servers. RPC connectivity issues: If RPC ...How to install the EventLog Analyzer agent on Windows devices: Manual installation
Overview EventLog Analyzer requires agents in specific scenarios to ensure seamless log collection and file monitoring: Windows file server monitoring: An agent is required to monitor files on Windows file servers. RPC connectivity issues: An agent ...How to associate Windows devices with an existing agent
Objective To optimize the bandwidth usage between your environment and the EventLog Analyzer server, you can install an EventLog Analyzer agent in one of your Windows devices and associate other Windows devices with the agent. By doing so, all the ...How to use a Device Group in EventLog Analyzer to update credentials for Windows devices
Objective This article offers detailed information on how to use a Device Group in EventLog Analyzer to update credentials for Windows log sources. Prerequisites You'll need administrator access to EventLog Analyzer. Steps to follow Step 1: Log in to ...