NetCrunch Platform Module

Logs, Servers, Virtualization
and Applications

Add monitoring of operating systems and applications running on Windows, macOS, Solaris, Linux, and BSD. Monitor ESXi and Hyper-V hypervisors, web pages, text logs, SQL queries, and more.


Download NetCrunch Trial

Nowadays, enterprises run multiple servers to provide various services. The performance of each of these servers is usually highly critical. Even if only one of these servers fails, it can affect the delivery of several business essential services.

NetCrunch provides multi-vendor support to monitor servers and critical applications continuously, along with their services and processes. It uses many different technologies and appropriate protocols for each monitoring target, such as virtualization hosts, operating systems, and applications.

The program stores all the data for historical performance tracking and troubleshooting, thus eliminating multiple server monitoring tools.

  • Top Benefits

    1. Consistent, vendor-agnostic monitoring of major operating systems such as Windows, Linux, BSD, Solaris, macOS, ESXi
    2. Out-of-the-box monitoring settings (Monitoring Packs)
    3. Unified event and log management with advanced correlation
    4. Hardware health monitoring (IPMI)
    5. Sensors for monitoring WMI, SQL, Web, Email, Files, Logs
  • Server Performance Monitoring

    Usually, more than 50% of the issues are reported by the end-users. The server monitoring solution is the only way to detect early symptoms and pass relevant notifications to the IT team.

    Proactive monitoring with thresholds and baselines

    NetCrunch allows setting intelligent thresholds on system and application performance metrics. They can be defined as simple thresholds or by the deviation from baseline, change rate, etc. NetCrunch offers 9 types of thresholds. See more in the documentation

    Operating System Monitoring

    NetCrunch monitors various operating system parameters such as memory, processor, and disk operations.

    Read more in the documentation

    @@img:detailed-charts.gif Server Performance Status

    Monitoring Packs

    NetCrunch uses Monitoring Packs (sets of rules for monitoring) to manage the monitoring settings - many of them are automatically assigned for the given OS.

    @@img:os-packs.png OS Monitoring Packs

    System Views

    NetCrunch offers a quick insight into the operating system with System Views. The views depend on the operating system.

    For example, for Linux family systems (macOS, BSD, Solaris), NetCrunch presents logged users, opened files, and network connections.

    You can access a list of services, processes, sessions, and pending updates on Windows machines.

  • Windows Monitoring

    NetCrunch uses a remote connection to the Windows system to monitor its performance (no SNMP or agent required) by retrieving performance counters available in Windows.

    Windows monitoring relies on a watching of Windows services, Windows Event Log, and perfmon counters. Additionally, you can use WMI sensors for in-depth access to system data.

    System Views

    NetCrunch offers a quick insight into Windows machines with System Views such as:

    • Services - list of running services with the ability to start, stop and pause selected service
    • Processes - Live list of running processes showing process activity and resource usage. You can terminate the selected process,
    • Sessions - list user sessions and their resource usage, with the ability to terminate the whole session or a single process.
    • Pending Updates - list of updates pending for installation
    • Scheduled Tasks - List of scheduled tasks and their running status

    @@img:system-views.png Windows Services

    Monitoring Windows Services

    NetCrunch can monitor windows service state based on the service state and startup type. For example, you can be alerted only when the given service is not running and is not disabled.

    Windows Event Log

    NetCrunch allows you to define simple alert filters to convert event log events into NetCrunch alerts. These filters are automatically converted into appropriate WQL queries.


    NetCrunch provides 16 WMI sensors out of the box.

    • AD Replication
    • File Shares
    • Pending Reboot
    • Process
    • Process Group Summary
    • Remote Ping
    • Time Difference
    • Windows Updates
    • WMI Data
    • WMI HDD Health (SMART)
    • WMI Object
    • WMI Query:Object
    • WMI Perfmon
    • WMI Battery Sensor
    • Windows Task Scheduler
    • Registry Counters Sensor

    Read more in the WMI Sensors, Windows Updates / Pending Reboots and AD Replication

  • Monitoring Linux, BSD, macOS, and Solaris

    @@img:linux-processes.png Linux Process List

    NetCrunch supports agentless monitoring of Unix-based systems using the SSH protocol. This allows you to avoid the problematic usage of SNMP on those systems. Using SNMP is always an option.

    NetCrunch can monitor various Linux distributions based on kernel 2.4 or newer. It has been tested with: CentOS, RedHat, Fedora, Novell OES, Ubuntu Desktop, and Server. It also supports various BSD editions such as FreeBSD, OpenBSD, and NetBSD.

    NetCrunch monitors all vital system parameters and offers ready to use Monitoring Packs for each system.

    See Monitoring Packs


    NetCrunch offers advanced event management, including conditional alerts and correlation. The most important view for the administrator is Active Alerts View which shows only alerts that are not resolved yet. In this way, he can focus on current issues, without the hassle of browsing a history log.

    @@img:active-alerts-view.png Active Alerts

    Read more about Alerting, Escalation and Event Log Management

    External Event Sources

    • Web Messages (webhooks)
    • SNMP Traps
    • Syslog
    • Windows Event Log
    • Remote Text Log over SSH
    • Apache format Logs
    • Log4j Logs
    • IPMI Log

    NetCrunch also has the ability to parse any kind of text logs and includes parsing expressions for custom log processing.

  • VMware ESXI Monitoring

    NetCrunch supports ESXi version 5.5 or newer. It can connect directly to the ESXi servers, or though vCenter is vSphere is installed. NetCrunch can easily switch from vCenter to direct mode in case of vCenter maintenance of failure - allowing skipping a single point of failure.

    @@img:esx-vm-list.png Esxi VM List

    @@img:datastores.png Datastores

    NetCrunch comes with pre-configured Automatic Monitoring Packs to monitor ESXi as soon as OS monitoring is set to ESXi.

    Read more about VMware ESX Monitoring or in the documentation.

    @@img:esx-hardware-status.png ESX Hardware Status

  • SQL Monitoring

    SQL sensors allow measuring connectivity, query execution, and can process result data as metrics or statuses.

    SQL Query:Data Sensor

    Allows executing query returning multiple rows. Each numeric column can be used as a source for performance metrics.

    SQL Query:Object

    This type of query should return a single row. It can be used for checking database authentication and connectivity. The returned data row can be treated as a status object.

    Supported databases: SQL Server, Oracle, PostgreSQL, MySQL, MariaDB, ODBC source

  • Web Monitoring

    NetCrunch offers several sensors for web/cloud monitoring.

    It can send simple HTTP requests to measure single request-response time or load and render a whole web page as a web browser does. Finally, it supports REST requests and data sensors, allowing the processing of external data.

    Web Page Sensor

    The sensor renders the page like a web browser. It loads all resources and runs scripts. It's intended for monitoring modern web pages or applications. It supports standard login and custom login forms.

    Data File Sensor

    The sensor loads data from a file using one of the predefined file formats. It supports native NetCrunch XML, JSON, and CSV and also allows to process data through Data Parsers which support consuming any data.

    Basic HTTP Sensor

    This sensor sends a single request and can alert on response code or by checking response data. It can send GET, HEAD, and POST requests.


    Similar to the Basic HTTP sensor, this sensor can also send a single request and can alert on response code or by checking response data. Additionally, It can send any type HTTP request, including a custom request, and easily add URL query parameters. It also allows setting custom headers and cookies for the request.

  • Monitoring Packs & Sensors

    @@img:web-page-sensor.png WebPage Sensor Settings

    NetCrunch Monitoring Packs

    They enable efficient management of the monitoring settings. They provide settings for monitors based on object/counter data-model such as SNMP or Windows PerfMon. Built-in agents provide such data.

    You can use them to create monitoring policies by setting node filters. They can also be assigned manually to the particular node (or multiple nodes using multiselection). Currently, the program includes more than 260 ready to use Monitoring Packs for monitoring devices, applications, and operating systems.

    Monitoring Packs

    NetCrunch Sensors

    They are similar to Monitoring Packs as they consist of default alerts and data collectors but are much more complex.

    Sensors are dynamic monitors performing various actions to measure or retrieve remote data.

    They offer more monitoring power in exchange for a more complex setup process.

    The sensor usually requires a definition of the data source or actions to be taken (credentials, queries, paths, and parameters). For example, the SQL Query sensor needs a database connection profile and an SQL query.

    Read more about what can be monitored at What can I monitor

    You can find an actual list of sensors here: Sensors

  • Receiving and logging Syslog and Web Messages

    NetCrunch receives syslog and web message by default, even from nodes that are not in the Atlas. All you need to configure is the extenal source to send a message to NetCrunch.

    @Web Message

    Turning received messages into alerts

    Turning received messages from External Events windows into alerts is easy. The program will even create a new node if it is not defined in the Atlas yet. You can also define more complex alerts by filtering message content.

    Web Messages

    NetCrunch receives a webhook message via an HTTP POST request. You can quickly send notifications to NetCrunch using Amazon SNS service, or you can use curl from a command line.

    Read more in External Event Sources

What makes NetCrunch different?

Fastest in Configuration

With NetCrunch, you can start monitoring in minutes. Discovery and policies make initial setup a breeze. It can be a bit too fast for some. We quite often hear users asking: "That's it?". Yes indeed. We value your time.

Vendor Agnostic

NetCrunch is a unified product, built from the beginning as the general, system-agnostic, and integrated solution.


NetCruch 10 introduced a new fast and scalable sensor engine. NetCrunch already has 8500+ MIBs in the database, and the list of Monitoring Packs and sensors is growing with every version.


Here at AdRem Software, we believe in "do it right or not at all," so we deliver professional solutions instead of workarounds.

Constantly Improving

We try to break NetCrunch every day by overloading it in our tests, pushing the performance limits a little further with every new version (similar to Formula 1).

Download 30-day trial