Enterprise SIEM, Centralized Log Management, Security, Compliance, Server Monitoring and Uptime Monitoring Software
Table of Contents

WMI Properties

Use this view to increase or decrease the Windows host's WMI Quota.

WMI Quota Violation errors are typically thrown when downloading large Windows Event Logs such a domain controller Security Event Logs. Before increasing the WMI Quota, we suggest you first modify the Event Log Consolidation Template to download entries in hourly batches then retry. For more information see: Event Log Consolidation Template Properties

If the changes you make to the Event Log Consolidation template have no effect, updating the following Windows host's WMI quota properties may resolve the Quota Violation error:

PropertyDescription
Memory Per HostAmount of private memory that can be held by each host.
Memory All HostsCombined amount of private memory in bytes that can be held by all hosts.
Threads Per HostNumber of threads owned by any one host.
Handles Per HostNumber of kernel object handles each host can have.

To increase the Windows host's WMI quota

  • From the Explorer View right click on the hosts that is throwing the Quota Violation error then select Host Properties. The Host Properties View displays.
  • From the Host Properties View select the WMI Quota tab.
  • Use the Memory per host text box to increase or decrease the maximum memory per host value. Use the x2 button to double the current value. Use the /2 button to half the current value.
  • Use the Memory all host text box to increase or decrease the maximum memory all hosts value. Use the x2 button to double the current value. Use the /2 button to half the current value.
  • Use the Threads per host text box to increase or decrease the maximum threads per host.
  • Use the Handles per host text box to increase or decrease the maximum handles per host.

Related Topics

Host Properties

Batch Update Hosts

Event Log Consolidation Template Properties