NetCrunch Base Module

NetCrunch Platform

Regardless of what you need to monitor, you need a solid foundation such as event processing, data logic, storage and the presentation.

All NetCrunch Platform product builds upon this robust feature set.

@NetCrunch Overview

We designed NetCrunch to be an integrated system from the beginning. It delivers many features out-of-the-box while allowing a high level of customization.

  • Data Collection An actual monitoring layer (polling engines and receivers)
  • Central Logic and Data Processing it processes all collected data, decides upon alerting conditions, applies monitoring policies, checks thresholds and executes alerting actions
  • Storage It consists of several databases tailored accordingly to the given purpose. It uses an internal SQL database for events, so no additional server is required. It also uses separate file based stores for trends and the whole program state
  • Presentation Desktop and mobile console, graphical maps, dynamic views, dashboards, schedule reports, and GrafCrunch. Everything you need to access the data and get a glimpse at the current state of the monitored system.

No matter which NetCrunch version you use, and what is your monitoring scope, all these elements deliver the features you need.

Download NetCrunch Trial Register for Webinar

    1. High performance - if you need only monitor 50 or 100 devices it works well on low-end hardware (even Intel NUC or Compute Stick can do it), it works well on VM, and you can smoothly go up to 10,000 devices
    2. Universal, feature reach platform regardless of monitoring scope
    3. No need for additional software and licenses such as web server or database servers
    4. NetCrunch is customizable and lets you access its data in a various way (ODBC, data export, integrations). It's hard to list all things can be customized in NetCrunch. For example, the console supports docking, multiple screen management, and automatic full-screen display mode.
    5. An advanced live presentation including dashboards and graphical maps with widgets. Also, support for Grafana (and Grafcrunch)
    6. Central logic makes easy writing plugins and custom scripts - they focus only on delivering state and metrics of monitored objects
    7. NetCrunch is watching itself - the key to the NetCrunch reliability and scalability is extensive monitoring of NetCrunch internal processes. Wouldn't you know first that monitoring system is overloaded?
  • The Atlas

    The Atlas is a central database containing all your monitoring data. The hierarchy of the Atlas views organizes your data it into a manageable database.

    In other words, Atlas is all about data organizing. NetCrunch allows creating custom views based on filters and also in a and even in a more dynamic way using dynamic folders. Dynamic Folder groups nodes by specific criteria and then each group can be placed on a separate view or put on a single one depending on the number of elements.

    Each view is representing a group of nodes, and it can be presented in various ways such as a map, dashboard or a table specific to monitoring data t. It's customizable, and program chooses the best tab for the given view.

    Atlas View Tabs


    NetCrunch allows you to extend node properties by adding custom fields. In this way, you can add any information to the nodes, and you can define reports, policies or filtered views based on custom fields.

  • Monitoring Dependencies

    @Monitoring Dependencies

    When you monitor devices behind router, switch or bridge, you do not want to see the alert storm when the intermediate connection is broken.

    Thanks to the dependencies NetCrunch can disable monitoring of nodes behind the failed device and also can reduce false alerts caused by the link failure.

    The top dependency is the NetCrunch machine if it loses connection it stops monitoring everything. Additionally, NetCrunch monitor its internal processes to make sure everything is working fine.

  • Graphical Maps with Widgets

    We built maps for presenting network topology and dependencies. After we added live data widgets, they become another type of dashboard you can presenting even weather data.

    @@img:map-dashboard-weather.png Map with Weather Info

    Here is another example of the map created from various widgets presenting ESX cluster.

    @@img:map-dashboard.png Map Dashboard

    NetCrunch also creates automatically laid out maps for views can dynamically change (nodes appear or disappear). This especially applies to Layer 2 segment maps.

  • Overview Dashboards

    NetCrunch offers two views for a status overview. First is more details the second one aggregated.

    Nodes Overview

    For a smaller number of nodes, it shows nodes detailed view of each service status per node. @Node Status Overview Dashboard

    Summary Overview

    For larger number nodes summary view aggregates statuses in a more concise per service view. @Overview Summary

  • Top Charts

    Another dashboard easy to configure showing top statistics for the Atlas view.

    @@img:top-charts.png Top Charts

    There are many pre-defined charts defined such as

    • Top Problem Nodes
    • Processor Utilization
    • Free Disk Space
    • Memory Usage
    • Slow Responding Nodes (by PING)
    • Network Traffic (Switches and Routers)
    • Network Traffic (Servers)
    • Top Interfaces by Traffic
    • Most loaded nodes by disk read/write
    • Network Traffic Summary
    • Processes by CPU load
    • Processes by Memory
    • Top Interfaces % Utilization

    You can create a top chart based on any monitoring performance counter.

  • Performance Views

    @@img:performance-view.png Performance View

    NetCrunch provides a particular type of Atlas view called Performance view. It can present charts, gauges and bar chart with live data. You can create a view for a group of nodes by defining a filter for nodes and then by adding counters displayed (i.e., "% Processor Utilization" for servers), or you can add each chart manually. Additionally, you can group multiple trends on a single chart.

    @@img:performance-view-group-chart.png Performance View - Grouped Charts

  • Performance Monitoring

    Monitoring performance metric is a core of every monitoring system. NetCrunch stores every collected metric n Performance Trend database - fast compressed file-based NoSQL database.

    In any place where performance metrics are accessible, you can always look into the historical data of the counter compare multiple counter values over time.

    @@img:trend-viewer.png NetCrunch Trend Viewer

    Advanced Thresholds

    Unlike basic monitoring products, NetCrunch offers a vast range of threshold condition including baselines for professional usage.

    Event Triggers for Counters

    Calculated Performance Counters

    Sometimes it happens that we need to monitor the calculated metric base upon other counters presented by the device. The example can be windows "Normalized Processor Usage" which requires system processor utilization to be divided by the number of processors.

    @@img:calculated-counter.png Calculated Counter

  • GrafCrunch

    @@img:grafcrunch-dashboard.png GrafCrunch Dashboard

    NetCrunch comes with a fork of the open source project Grafana. One of the top open source performance visualization projects,

    it greatly increases the possibilities of creating live performance dashboards and allows you to present data from various sources. You can also put on a single dashboard data from multiple NetCrunch servers.

    GrafCrunch has been created for easy installation and integration into NetCrunch.

  • Event Log

    NetCrunch act as a central log server for various event sources. It stores events in the NetCrunch Event Log (SQL) database and performs defined alert actions

    Pending Alerts

    In NetCrunch, all internal alerts are automatically correlated, so the program knows when an alert begins (and is pending for resolution) and when it is finished (closed or resolved). NetCrunch allows easily correlate even external alerts such as traps or syslog messages to provide an accurate state of the system. @Pending Alerts

    Event Details

    For every event stored in the event log, NetCrunch offers a detailed view. Beside showing parameters of the event, the window allows you to manage alert setting and find where it is defined (which policy), You can see useful frequency analysis which will tell you how often such type of the event happens on given node. Additionally, administrators can add comments many comments to it. @Event Details

  • Alerting Actions

    As a response to an alert, NetCrunch can execute a sequence of actions, and they can escalate over the time. Operations can also be executed when the alert ends (on close).

    @@img:alerting-actions.png Alerting Actions

    A typical action is a notification, but NetCrunch also allows executing (remotely) corrective actions like commands (i.e. restarting) or scripts.

    Common action groups:

    • Basic Actions: Such as playing sound, sending desktop notification
    • Control Actions: Such as running a program or the script
    • Logging Actions: You can write events to a text file or to Windows Event Log, send SNMP trap, send syslog message or trigger WebHook
    • Scripts: Run remote scripts on Windows or Linux family systems

    Read more about Alerting Actions

  • Reporting

    NetCrunch includes comprehensive viewer allowing generating reports on demand and access stored reports then can be generated automatically.

    All reports can be scheduled and send as email attachments to administrators. Reports are in PDF format.

    @@img:report-viewer.png Report Viewer

    Predefined Reports

    NetCrunch contains about 50 pre-defined reports. The reports are divided into two categories for Node and for Map as they targeting detailed information about the node or about the map.

    Basic node reports include

    • Node Availability Report
    • Node Summary Report
    • TCP/IP Report
    • Node Performance Counters View
    • Node Traffic on Node Interfaces
    • Node Interfaces Availability
    • Node Network Services and Interfaces

    Basic map reports

    • Detailed Report of SNMP Enabled Nodes
    • Details of Node Monitoring Report
    • Nodes Properties Report
    • Nodes Summary Map Report
    • Physical Segments Report
    • Top 10 Nodes Availability Report
    • Interfaces Traffic Report

    Custom Reports

    Defining Reports from Atlas Views

    You can easily define report based on table view of any of the Atlas View. It can be created from Nodes view or any monitor view such as SNMP or Windows.

    This feature can be useful if you create own custom fields and add to nodes and you want a report regarding these columns.

    @@img:report-from-view.png Report From View Wizard

    Defining Reports on Performance Metrics

    It's very easy. You can define Data Collector and add it to Monitoring Pack or to the node

    @@img:data-collectors.png Data Collector Settings

  • NetCrunch Self Monitor

    @NetCrunch Server Status

    NetCrunch is scalable multi-process and multi-threaded asynchronous system.

    It processes millions of operations 24x7, and you might rely on it. It consists of many internal processing elements, tasks, and queues. No wonder we have to measure hundreds of parameters inside of NetCrunch to know when and why it can break.

    There is no such thing like infinite scalability (the same as no clean diesel engines) claimed by some German software vendors. The system always can run out of resources.

    NetCrunch internal architecture looks more like it is a child of the application server and database server with some genes of the operating system.

    We strive to improve NetCrunch performance and reliability with every new version that we want to be the best NetCrunch ever.

Fastest Configuration

NetCrunch is designed to manage thousands of components. NetCrunch does many things automatically so that you can configure hundreds of nodes in just a couple of minutes.

NetCrunch Server

NetCrunch Server runs on x64 Windows Server systems (Windows 2008 R2, Windows 2012 R2). It comes with its web server and an embedded SQL database for storing monitoring events data. You can install NetCrunch on a virtual machine, provided you assign it at least 2 processors and 3.5GB RAM.

Remote Administration Console

The NetCrunch remote administration console can be installed on any Windows machine Windows 7 or later (32 bit or 64 bit systems). A large HD screen with 32-bit color support is required. For the best experience, we recommend multiple monitors. Additionally, 50-inch monitors will allow you to see more aspects of the monitored network. However, a Surface Pro type device with a 13-inch screen and Windows 10 will run the console smoothly.
The console always displays real-time information and requires minimal bandwidth to operate as it transmits data instead of HTML pages like many other solutions. It runs even if the network delay is more than 200ms. The console can be automated, and it can switch between defined screens automatically according to the switching scenario.

Web Console

You can browse your network status from any location using the NetCrunch Web Console via HTTP/S, which allows for restricting rights to particular views and operations. You can integrate console user accounts with Active Directory.

NetCrunch Platform

  • NetCrunch Platform Explore core features making NetCrunch productive monitoring platform Read more
  • SNMP & Core Monitoring Monitor device and service availability using 70+ protocol monitors and SNMP v1,v2c,v3 equiped with dozens Monitoring Packs and 8500+ MIB modules. Read more
  • Layer 2 Topology Mapping Visualize layer 2 connections, VLANs and traffic on switch ports Read more
  • Flow Analyzer Analyze network traffic with flows and Cisco NBAR for application monitoring Read more
  • Logs, Servers, Virtualization and ApplicationsMonitor servers, virtualization and applications Read more
  • Integration Services Integrate NetCrunch with Service Desk and monitor custom data sources Read more