References > Component Monitor Types > Windows Monitors > WMI Monitor

WMI monitor

Formerly known as the WMI Performance Counter Monitor, this component monitor uses WMI communication to obtain the result of a WMI Query Language (WQL) query. The typical result retrieves the performance data calculated by WMI providers such as the Windows operating system or Microsoft Exchange Server.

All WQL queries are run within the root/CIMV2 namespace.

Named instances of SQL Server may have custom class names that do not match the built-in templates. You must manually change the class name in any WMI Monitor monitoring a named SQL Server instance. For example, if the named instance is "NAMED,” you must change Win32_PerfFormattedData_MSSQLSERVER_SQLServerBufferManager to Win32_PerfFormattedData_MSSQLNAMED_SQLNAMEDServerBufferManager.


The statistic for this component monitor is the value of the first row and column of the data retrieved by the query.

Optionally, the statistic may be set as the difference in query values between polling cycles by checking the option for Count statistic as difference.

The Count statistic as difference option is applicable only for monitors whose counter value increases consistently during each polling interval. Examples of when this option is not applicable include cases such as the following:

  • Counter values sometimes increase and sometimes decrease from one polling interval to another (typical behavior for many counters)
  • Counter values consistently decrease from one polling interval to another

In these cases where the option is not applicable, negative statistic data values will be replaced with zero (0), and the counter monitor will show 0 as the statistic data value in resources and 0 as the value on statistic data charts for this interval.

Field Descriptions


This field provides a default description of the monitor. You have the ability to override the default description by adding to or replacing the text, which will then be automatically saved. The variable to access this field is ${UserDescription}.

Enable Component

Determines whether the component is enabled. Disabling the component leaves it in the application in a deactivated state not influencing either SolarWinds SAM application availability or status.

Credential for Monitoring

Select a Windows credential that has WMI rights on the target node. This is typically a Windows administrator-level credential.

WMI Namespace

Specifies the name of the namespace within which all WQL queries are run. The default value is root\CIMV2.

WQL Query

Type the WQL query you want to run on the target node. This is typically a performance counter Query, but it can be any WQL query. All WQL queries are run within the root/CIMV2 namespace. The WQL query for this monitor returns a numeric value. It will not report errors.

Count Statistic as Difference

Changes the statistic to be the difference in query values between polling cycles.

Convert Value

Checking the Convert Value check box opens the Formula box. From here, you have the ability to manipulate the returned value with a variety of mathematical possibilities. You can choose common functions from the drop down lists to manipulate the returned value, or you can select the Custom Conversion option. See setting Conversion value for more information.

Statistic Warning Threshold

This field allows you to specify when a threshold that indicates a warning level has been breached. Logical operators are in the drop down followed by a blank field for you to enter the value of this threshold. For example: Less than 15 for warning, Less than 5 for critical. See setting Application Monitor Thresholds for more information.

User Notes

This field allows you to add notes for easy reference. You can access this field by using the variable, ${UserNotes}.