---
title: "Example Performance Analysis Monitors"
description: "The alert description will be automatically generated when the monitor triggers, and will factor in the three metric and their relative values, and also other related metrics and configuration settings for the target object."
canonical: "https://helpcenter.veeam.com/docs/mp/vmware_guide/example_analysis_monitors.html"
breadcrumb: "Veeam MP for VMware User Guides > Operations Guide > Monitoring with Veeam MP for VMware > Performance Analysis Monitors > Example Performance Analysis Monitors"
dateModified: "2026-09-08"
---

# Example Performance Analysis Monitor

## Virtual Machine Memory Ballooning and Swapping Analysis

<table style="width:100%;" class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>Monitor/ Alert Name</p>
    </th>
    <th style="width:15%;">
      <p>Target </p>
    </th>
    <th style="width:15%;">
      <p>Parent Monitor</p>
    </th>
    <th style="width:15%;">
      <p>Default Thresholds</p>
    </th>
    <th>
      <p>State changes</p>
    </th>
    <th style="width:25%;">
      <p>Alert Description</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p>Virtual Machine Memory Ballooning and Swapping Analysis </p>
    </td>
    <td>
      <p>VMGUEST </p>
    </td>
    <td>
      <p>Performance</p>
    </td>
    <td>
      <p>memoryBalloonPct &gt; 50</p>
      <p>memorySwapRate &gt;100</p>
      <p>cpuSwapWaitPct&gt;25</p>
    </td>
    <td>
      <p>If one metric is &gt;threshold, then state=Warn. </p>
      <p>If more than one metric is &gt;threshold, then state=Critical</p>
    </td>
    <td>
      <p>The virtual machine<span style="font-weight:bold;"> [vm name]</span> running on host <span style="font-weight:bold;">[hostname]</span> has a Memory resource issue.</p>
    </td>
  </tr>
</table>

The alert description will be automatically generated when the monitor triggers, and will factor in the three metric and their relative values, and also other related metrics and configuration settings for the target object.

For this particular monitor, the alert description may include one or more of the following entries:

- If memory ballooning is an issue:

  *‘The VM has ballooned [memoryBalloonPct]% of total memory. Although ballooning is a normal function of memory sharing, high ballooning can cause excessive pagefile swapping within the VM.’*

- If host use of the disk swap file is an issue:

  *‘The vSphere Host has swapped [memorySwapRate] KB/sec to disk for this VM.’*

- If the VM is in a wait state while host swapping occurs:

  *‘The VM has spent [cpuSwapWaitPct]% of runtime in a wait state while the vSphere Host swaps memory.’*

- Additional guidance to the root cause can also be included:

  *‘…Disk swapfile use indicates the Host is under memory stress, and reclaiming memory through better methods (such as ballooning) is failing.’*

- Additional troubleshooting guidance includes VMware Tools status for this VM:

  *‘Check that VMware Tools is installed in this VM as it is required for efficient vSphere Host memory management.’*

## Datastore Unknown Files Analysis

<table style="width:100%;" class="Blue_Table">
  <tr style="vertical-align:top">
    <th>
      <p>Monitor/ Alert Name</p>
    </th>
    <th style="width:15%;">
      <p>Target</p>
    </th>
    <th style="width:15%;">
      <p>Parent Monitor</p>
    </th>
    <th style="width:15%;">
      <p>Thresholds</p>
    </th>
    <th style="width:35%;">
      <p>Alert Description</p>
    </th>
  </tr>
  <tr style="vertical-align:top">
    <td>
      <p>Veeam VMware: Datastore Unknown Files Analysis</p>
    </td>
    <td>
      <p>SHARED DATASTORE </p>
    </td>
    <td>
      <p>Configuration</p>
    </td>
    <td>
      <p>unknownFilesGB&gt;50, warning</p>
    </td>
    <td style="width:25%;">
      <p>Datastore [<span style="font-weight:bold;">datastore name</span>] contains files unknown to vCenter totaling [<span style="font-weight:bold;">unknownFilesGB</span>] GB in size. </p>
      <p>These files could be orphaned snapshots, orphaned VMs, or manually copied files such as ISO. </p>
      <p>Run the Diagnostic Task against the Datastore to see the full list of unknown files.</p>
      <p>Datastore is currently [<span style="font-weight:bold;">usedPct</span>]% used with [<span style="font-weight:bold;">freeGB</span>] GB space remaining.</p>
    </td>
  </tr>
</table>

The monitor works as follows:

- Collector posts the *unknownFilesGB* metric for each datastore. 

  unknownFilesGB = [total datastore space usage] – [space used by known VM datastore files], in GB

  - Known files = VMDKs, snapshots, swap files, all VM files registered in a vCenter Server. 
  - Therefore, unknown files = total of orphaned snapshots, orphaned VMs, manually copied ISOs, and so on.

- The *unknownFilesGB* metric is obtained by Collector querying a vCenter Server; space used by known VM datastore files is calculated using the ‘committed storage’ property for all VMs, and summing these properties for each datastore.
- There are two advanced Collector Settings in Virtualization Extensions UI:

  - **EnableUnknownFilesScan** (default *True*). If False, the Collector will not collect the *unknownFilesGB* metric for the datastore;
  - **DatastoreScanInterval** (default *12*). The Collector will run a query every N intervals. Default is 12 intervals x 15 = 180 minutes (every 3 hours).

- When the *Veeam VMware: Datastore Unknown Files Analysis* monitor is fired by a threshold above, the **Veeam VMware: Datastore Unknown Files Analysis Diagnostic Task** becomes available in Health Explorer state change events. 

  You can also run the **Scan Datastore for Unknown Files** task from the **Tasks** sidebar for the selected Datastore. To learn more about the task, see [Scan Datastore for Unknown Files Task](scan_datastore_for_unknown_files.md).