# windows_exporter config - Domain Controller
# Roles: AD DS, DNS Server, DFS Replication (SYSVOL/DFSR)
#
# Collectors enabled beyond defaults:
#   cpu_info      - CPU model/core count as metric labels
#   physical_disk - Per-disk IO, latency, and queue depth
#   ad            - ~60 AD DS metrics: LDAP, replication, ATQ, binds, SAM, authentication
#   dns           - DNS query/response counts, zone transfers, dynamic updates, memory
#   dfsr          - DFS Replication connection, folder, and volume metrics (SYSVOL health)
#   tcp           - TCP state counts; useful for tracking LDAP/Kerberos/RPC connection load

collectors:
  enabled: "[defaults],cpu_info,physical_disk,ad,dns,dhcp,dfsr,tcp,time,process,performancecounter"

collector:
  logical_disk:
    volume-exclude: "^(HarddiskVolume|HarddiskVolumeShadowCopy)"

  dns:
    # Collect both standard perf counters and WMI error statistics
    enabled:
      - metrics
      - wmi_stats

  dfsr:
    # All three source types - connection (replication traffic), folder (SYSVOL
    # conflict/staging), and volume (USN journal / DB operations)
    sources-enabled:
      - connection
      - folder
      - volume

  service:
    # AD DS, DNS, DFS, Kerberos KDC, Net Logon, time sync, and core services
    include: "(?i)(ntds|dns|dfsr|kdc|netlogon|w32tm|IsmServ|gpsvc|eventlog|winmgmt|lsass|samss)"
