NetCrunch Monitors Logs, Servers, Virtualization and Apps

NetCrunch Platform Module

Logs, Servers, Virtualization
and Applications

Add monitoring of operating systems and applications running on Windows, Mac OS X, Solaris, Linux, and BSD. Monitor ESXi hypervisors, web pages, text logs, SQL queries and more.

This module is included in

it can be added to any NetCrunch platform product.


Download NetCrunch Trial

Nowadays enterprises run multiple servers to provide various services. Performance of each of these servers is usually highly critical. Even if only one of these servers fails, it can affect the delivery of several business essential services.

NetCrunch provides multi-vendor support to monitor servers and critical applications continuously, along with their services and processes. It uses many different technologies and appropriate protocols for each monitoring target such as virtualization hosts, operating systems, and applications.

The program stores all the data for historical performance tracking and troubleshooting, thus eliminating the need for multiple server monitoring tools.


    1. Consistent, vendor-agnostic monitoring of major operating systems such as Windows, Linux, BSD, Solaris, Mac OS X, ESXi
    2. Out-of-the-box monitoring settings (Monitoring Packs)
    3. Unified event and log management with advanced correlation
    4. Hardware health monitoring (IPMI)
    5. Sensors for monitoring WMI, SQL, Web, Email, Files, Logs
  • Server Performance Monitoring

    Usually, more than 50% of the issues are reported by the end-users. The server monitoring solution is the only way to detect early symptoms and pass relevant notifications to the IT team.

    Proactive monitoring with thresholds and baselines

    NetCrunch allows setting intelligent thresholds on system and application performance metrics. They can be defined as simple thresholds or by the deviation from baseline, change rate, etc. NetCrunch offers 8 types of thresholds. See more in the documentation

    Operating System Monitoring

    NetCrunch monitors various operating system parameters such as memory, processor and disk operations.

    Read more in the documentation

    @@img:detailed-charts.gif Server Performance Status

    Monitoring Packs

    NetCrunch uses Monitoring Packs (sets of rules for monitoring) to manage the monitoring settings - many of them are automatically assigned for the given OS.

    @@img:os-packs.png OS Monitoring Packs

    System Views

    NetCrunch offers a quick insight into the operating system with System Views. The views depend on the operating system.

    For example, for Linux family systems (MacOS, BSD, Solaris) NetCrunch presents list of logged users, opened files and network connections.

    On Windows machines, you can access a list of services, processes, sessions and pending updates.

  • Windows Monitoring

    NetCrunch uses a remote connection to the Windows system to monitor its performance (no SNMP or agent required) by retrieving performance counters available in Windows.

    Windows monitoring relies on a watching of Windows services, Windows Event Log, and perfmon counters. Additionally, you can use WMI sensors for in-depth access to system data.

    System Views

    NetCrunch offers a quick insight into Windows machines with System Views such as:

    • Services - list of running services with ability to start, stop and pause selected service
    • Processes - Live list of running processes showing process activity and resource usage. You can terminate the selected process,
    • Sessions - list user sessions and their resource usage, with ability to terminate the whole session or a single process.
    • Pending Updates - list of updates pending for installation

    @@img:system-views.png Windows Services

    Monitoring Windows Services

    NetCrunch can monitor windows service state based on the service state and startup type. For example, you can be alerted only when the given service is not running and is not disabled.

    Windows Event Log

    NetCrunch allows you to define simple alert filters to convert event log events into NetCrunch alerts. These filters are automatically converted into appropriate WQL queries.


    NetCrunch provides 10 WMI sensors out of the box:

    • File Shares
    • Process
    • Process Group Summary
    • Remote Ping
    • Time Difference
    • WMI Data
    • WMI HDD Health (SMART)
    • WMI Object
    • WMI Query:Object
    • WMI Perfmon

    Read more in the Documentation

  • Monitoring Linux, BSD, Mac OS X and Solaris

    @@img:linux-processes.png Linux Process List

    NetCrunch supports agentless monitoring of Unix-based systems using the SSH protocol. This allows you to avoid the problematic usage of SNMP on those systems. Using SNMP is always an option.

    NetCrunch can monitor various Linux distributions based on kernel 2.4 or newer. It has been tested with: Cent OS, RedHat, Fedora, Novell OES, Ubuntu Desktop, and Server. It also supports various BSD edition such as FreeBSD, OpenBSD, and NetBSD.

    NetCrunch monitors all vital system parameters and contains ready to use Monitoring Packs for each system.

    See Monitoring Packs


    NetCrunch offers advanced event management, including conditional alerts and correlation. The most important view for the administrator is Pending Alert View which shows only alerts that are not resolved yet. In this way, he can focus on current issues, without a hassle of browsing a history log.

    Read more about Alerting, Escalation and Event Log Management

    External Event Sources

    • Web Messages (webhooks)
    • SNMP Traps
    • Syslog
    • Windows Event Log
    • Remote Text Log over SSH
    • Apache format Logs
    • Log4j Logs
    • IPMI Log

    NetCrunch has also the ability to parse any kind of text logs and includes parsing expressions for custom log processing.

  • VMware ESXI Monitoring

    NetCrunch supports ESXi version 5.5, 6 and 6.5. It connects directly to the ESXi servers, so it does not need vSphere to be installed. This allows skipping single point of failure that can be a connection to vSphere.

    @@img:datastores.png Datastores

    NetCrunch comes with pre-configured Automatic Monitoring Packs to monitor ESXi as soon as OS monitoring is set to ESXi.

    Read more about VMware ESX Monitoring or in the documentation.

    @@img:esx-hardware-status.png ESX Hardware Status

  • SQL Monitoring

    SQL sensors allow measuring connectivity, query execution, and can process result data as metrics or statuses.

    SQL Query:Data Sensor

    Allows executing query returning multiple rows. Each numeric column can be used as a source for performance metrics.

    SQL Query:Object

    This type of query should return a single row. It can be used for checking database authentication and connectivity. Returned data row can be treated as a status object.

    Supported databases: SQL Server, Oracle, PostgreSQL, MySQL, MariaDB, ODBC source

  • Web/Cloud Monitoring

    NetCrunch offers several sensors for web/cloud monitoring.

    It can send simple HTTP requests to measure single request-response time or load and render a whole web page as a web browser does. Finally, it supports REST requests and data sensors allowing processing of external data.

    Web Page Sensor

    The sensor renders the page like a web browser, it loads all resources and runs scripts. It's intended for monitoring modern web pages or applications. It supports standard login and custom login forms.

    Data File Sensor

    The sensor loads data from a file using one of the predefined file formats. It supports native NetCrunch XML, JSON, and CSV and also allows to process data through Data Parsers which support consuming any data.

    Basic HTTP Sensor

    This sensor sends a single request and can alert on response code or by checking response data. It can send GET, HEAD and POST requests.


    Similar to Basic HTTP sensor, this sensor can also send a single request and can alert on response code or by checking response data. Additionally, It can send any type HTTP request including a custom request and allows easy adding of URL query parameters. It also allows setting custom headers and cookies for the request.

  • Monitoring Packs & Sensors

    @@img:web-page-sensor.png WebPage Sensor Settings

    NetCrunch Monitoring Packs

    They enable efficient management of the monitoring settings. They provide settings for monitors based on object/counter data model such as SNMP or Windows PerfMon. Built-in agents provide such data.

    You can use them to create monitoring policies by setting node filters. They can also be assigned manually to the particular node (or multiple nodes using multiselection). Currently, the program includes more than 180 ready to use Monitoring Packs for monitoring devices, applications, and operating systems.

    Monitoring Packs

    NetCrunch Sensors

    They are similar to Monitoring Packs as they consist of default alerts and data collectors but are much more complex.

    Sensors are dynamic monitors performing various actions to measure or retrieve remote data.

    They offer more monitoring power in exchange for a more complex setup process.

    The sensor usually requires a definition of the data source or actions to be taken (credentials, queries, paths, and parameters). For example, SQL Query sensor needs a database connection profile and an SQL query.

    Read more about what can be monitored at What can I monitor

    You can find an actual list of sensors here: Sensors

  • Receiving and logging Syslog and Web Messages

    NetCrunch receives syslog and web message by default, even from nodes that are not in the Atlas. All you need to configure is the extenal source to send a message to NetCrunch.

    @Web Message

    Turning received messages into alerts

    Turning received messages from External Events windows into alerts is easy, the program will even create a new node if it is not defined in the Atlas yet. You can also define more complex alerts by filtering message content.

    Web Messages

    NetCrunch receives webhook message via HTTP POST request. You can quickly send notifications to NetCrunch using Amazon SNS service or you can use curl from a command line.

    Read more in External Event Sources

What makes NetCrunch different?

Fastest in Configuration

With NetCrunch you can start monitoring in minutes. Discovery and policies make initial setup a breeze. It can be a bit too fast for some. We quite often hear users asking: "That's it?". Yes indeed. We value your time.

Vendor Agnostic

NetCrunch is a unified product, built from the beginning as the general, system-agnostic and integrated solution.


NetCruch 10 introduced a new fast and scalable sensor engine. NetCrunch already has 8500+ MIBs in the database, and the list of Monitoring Packs and sensors is growing with every version.


Here at AdRem Software, we believe in "do it right or not at all" so we deliver professional solutions instead of workarounds.

Constantly Improving

In our tests, we try to break NetCrunch every day by overloading it, pushing the performance limits a little further with every new version (similar to Formula 1).

Download 30-day trial

NetCrunch Platform Modules

  • NetCrunch Platform Explore core features such as alerting, dashboards and intelligent maps with widgets, making NetCrunch most productive monitoring platform on the market Read more

  • SNMP & Core Monitoring Monitor devices and services availability using 70+ built-in protocol monitors and SNMPv1,v2c,v3 equipped with dozens Monitoring Packs and 8700+ Read more

  • Logs, Servers, Virtualization, and Application Monitoring Get wide coverage of monitoring by monitoring servers, operating systems, virtualization, SQL servers, Web and Cloud. Process text logs, syslog, traps, web message, and other event sources with ease... Read more

  • Hardware and Software Inventory for Windows Get everything you to monitor Windows machines and tracking hardware and software inventory Read more

  • Layer 2 Visualization Visualize layer-2 connections, VLANs and traffic on switch ports Read more

  • Traffic Flow AnalyzerAnalyze network traffic with flows (NetFlow, sFlow and other protocols) and use Cisco NBAR2 for application monitoring Read more

  • Integration ServicesIntegrate NetCrunch with Service Desk and productivity applications. Let NetCrunch forward data to an external system Read more

  • Advanced Monitoring and AlertingUse business status to reflect critical path and service dependencies, use advance condition to react to heartbeat or missing events. Set advanced threshold conditions on metrics to detect rapid changes or abnormal behavior. Read more

  • Advanced Configuration Manage multiple NetCrunch users, organizational groups, monitoring templates and create dynamic Atlas folders Read more