Number of active sessions

[Costi (Diaconita Costinel)]

Hi!

Does anyone know how can i see the total number of active sessions? I tried to use winlogbeat and search by event_id but i think my approach isn't the correct one.

Thanks!

[andrewkroh]

What do you mean by active sessions? What are you trying to monitor?

[Costi (Diaconita Costinel)]

Hi!

I want to see how many concurrent users are active on different servers.
Thanks!

[andrewkroh]

That sounds like something that would be easier to monitor using Metricbeat's windows/perfmon module. There's probably a perfmon gauge that reflects the current number of active sessions.

• https://support.microsoft.com/en-us/help/186536/terminal-server-performance-monitor-objects-and-counters
• https://www.elastic.co/guide/en/beats/metricbeat/current/metricbeat-metricset-windows-perfmon.html

[Costi (Diaconita Costinel)]

The perfmon module doesn't have a field that contain data regarding sessions. This means that the only solution is to add a metricset that does this thing, right?

Thanks again for your answers!

[andrewkroh]

The windows/perfmon module is configurable so it can monitor any perfmon value. You just need to know the name of the counter. You can copy that from the Performance Monitor. The page I linked previously seems to suggest there is a counter for the number of active sessions.