Understanding Agent-Based and Agentless Monitoring

ManageEngine OpManager supports agent-based and agentless monitoring enabling, users to choose the monitoring method that best suits their requirements. Both approaches offer various advantages. Hence, users should understand the difference between each and choose accordingly.

Agent-based monitoring enhances server monitoring by installing lightweight agents on end servers. While the user interface remains the same, in the backend, the agent collects real-time performance data and sends it to the OpManager server, thereby reducing operational load on the server and improving monitoring efficiency.

Agentless monitoring allows the monitoring server to directly poll the devices for availability, performance and overall health of the devices. Since monitoring is handled directly from the OpManager server, users only need to configure the monitoring server, making deployment simpler.

In this document, you will see a detailed comparison between agent-based and agentless monitoring.

Agent - Based vs WMI monitoring

ParametersAgent MonitoringWMI Monitoring
CredentialNo credentials required for monitoring.Requires valid credentials for continuous monitoring.
Port DependencyUses the endpoint’s default dynamic ports. No additional ports need to be opened.Requires WMI and RPC ports to be open between the OpManager server and the endpoint.
CommunicationCommunication is initiated from the endpoint to the OpManager server.Communication is initiated from the OpManager server to the endpoint.
InstallationRequires installing an agent on the endpoint server.No agent installation is required.
Polling ImpactNot affected by endpoint changes such as IP or DNS updates.Not affected as long as credentials and connectivity remain unchanged.
Bulk DiscoveryBulk discovery is supported through external tools such as GPO, SCCM, or other endpoint management solutions.Supports multiple discovery methods such as IP range-based discovery and CSV import, along with scheduling options.
Data collection during downtimeIf the OpManager server goes down for maintenance, the agent continues collecting data for up to 6 hours.Data collection stops while the OpManager server is under maintenance.
Additional MonitorsSupports Log File Monitoring.Supports the following additional monitors:
  • Performance Monitors — Real-time data with graphical views.
  • Process Diagnostics — View CPU and memory-consuming processes and terminate them if required.
  • Windows Service Monitoring — Monitor Windows services and their availability.
Core Monitoring Metrics
  • Server Reboot Monitoring - instant notifications
  • Real-time availability monitoring
  • Windows Server Monitoring — Instant notifications when the server state changes.
Notifications based on polling intervals:
  • Server Reboot monitoring
  • Availability monitoring
  • Windows Service monitoring
Interface MonitoringDoes not rely on SNMP agents.Relies on SNMP agents.
Direct execution on end serversIn script monitoring, scripts can be executed directly on the end servers. In Network Path Analysis, the source can be configured as the installed end server.In script monitoring, scripts are executed on the OpManager server. In Network Path Analysis, the source must be configured as the OpManager server.
Threshold Violation AlertsThreshold violation alerts are generated after the data is received from the agent and processed (maximum delay of 5 minutes from polling).Threshold violation alerts are generated during the polling interval.
Limitations of monitors
  • Workflow with limited task supported.
  • Data collection diagnostics not supported.
Interfaces cannot be monitored using WMI credential alone.

Agent - Based vs CLI monitoring

ParametersAgent MonitoringCLI Monitoring
CredentialCredentials are not required for monitoring.Credentials are required and must remain synchronised, if not, the user account may be locked.
Port DependencyUses the endpoint’s default dynamic port. No additional ports need to be opened.Requires Telnet (23) or SSH (22) ports to be enabled on both the OpManager server and the endpoin
CommunicationCommunication is initiated from the endpoint to the OpManager server.Communication is initiated from the OpManager server to the endpoint.
InstallationRequires installing an agent on the endpoint server.No agent installation required
Polling ImpactNot affected by endpoint changes such as IP or DNS updates.Not affected as long as credentials and connectivity remain unchanged.
Bulk DiscoveryBulk discovery can be achieved via endpoint management tools such as Endpoint Management solutions.Supports multiple bulk discovery methods such as IP range—based discovery and CSV import, with scheduling options available.
Data collection during downtimeIf the OpManager server goes down for maintenance, the agent continues collecting data for up to 6 hours.Data collection stops during the maintenance period.
Common Monitors
  • Performance Monitor
  • Process Monitor
  • Service (Port) Monitor
Additional MonitorsSupports Script Monitoring.Supports the following additional monitors:
  • Custom CLI monitors
  • Script Monitors
  • Interface Monitoring - rely on SNMP Agents.
  • Top N Process list updated in CPU & Memory Utilization alerts.
Core Monitoring Metrics
  • Server Reboot Monitoring - instant notifications
  • Real-time availability monitoring
Notifications based on polling intervals:
  • Server Reboot monitoring
  • Availability monitoring
  • Script Monitors with script Execution on Remote Server.
Threshold Violation AlertsAlerts are generated after the data is received from the agent and processed (maximum delay of 5 minutes from polling).Alerts are generated during the configured polling interval.
Limitations of monitors
  • Workflow with limited task supported.
  • Data collection diagnostics not supported
Interfaces cannot be monitored using CLI credential alone.

Choosing the Best Monitoring Method for Your Environment

Based on the comparison between agent-based and agentless monitoring, the following scenarios will help you determine which monitoring approach would best work for you.

Agent-Based MonitoringAgentless Monitoring
  • When your credentials cannot be shared or changed frequently.
  • When external access to your network is restricted.
  • When opening network ports is restricted.
  • When monitoring WAN devices with frequently changing IP addresses.
  • When your organization operates as a distributed enterprise.
  • Best suited for monitoring network devices such as servers, switches, and routers.
  • When your network environment included virtual devices.
  • When you prefer monitoring without installing additional software or agents on devices.

To learn the installation steps for Windows and Unix agents, click here