PRTG Manual: Core & Probes

On the Core & Probes tab, you can define settings for the PRTG core server as well as for probe connections if you use remote probes or mini probes.

i_round_redIf you cannot save changes to Core & Probes settings because you get an Error (Bad Request) with the message Active Directory Domain not accessible, make sure that you provide the correct access type for your domain in section Active Directory Integration. For example, change Use the PRTG core server service account (usually Local System) (default) to Use explicit credentials and provide correct credentials for the domain. PRTG automatically sets the access type to Use the PRTG core server service account (usually Local System) (default) by default, so you might need to change this.

i_podIf 15 minutes (900) seconds have passed since your last credential-based login and you open a setup page from a different setup page, PRTG asks you to enter your credentials again for security reasons. A dialog box appears. Enter your Login Name and Password and click OK to continue.

i_round_blueThis documentation refers to an administrator that accesses the PRTG web interface on a master node. Other user accounts, interfaces, or failover nodes might not have all of the options in the way described here. In a cluster, note that failover nodes are read-only by default.

In this section:

Proxy Configuration

i_podThis option is not available in PRTG Hosted Monitor.

Proxy Configuration

Proxy Configuration

Setting

Description

Proxy Server Handling

Define if you want to use PRTG with a direct internet connection or if a proxy is necessary:

  • Do not use a proxy server (default): Do not use a proxy. Use this setting if a direct internet connection to the PRTG core server system is available.
  • Use a proxy server: Define proxy settings below. Use this setting if a proxy is mandatory in your network.

i_round_blueWe recommend that you use PRTG with a direct internet connection.

i_round_blueThe proxy settings are valid for auto-update, activating the product, obtaining Geo Maps tiles, and for sending HTTP, push, and SMS text message notifications.

Server

This setting is only visible if you select Use a proxy server above

Enter the address of the proxy server that you use for outbound connections. Enter a valid address.

Port

This setting is only visible if you select Use a proxy server above

Enter the port number of the proxy server that you use for outbound connections. Enter an integer.

Proxy Authentication

This setting is only visible if you select Use a proxy server above

Determine whether the proxy server needs credentials or not:

  • Do not use authentication: Do not use credentials for proxy connections.
  • User name and password: Define credentials (user name and password) below. Use this setting if the proxy server requires credentials.

User Name

This setting is only visible if you select User name and password above.

Enter a user name for proxy authentication. Enter a string.

Password

This setting is only visible if you select User name and password above.

Enter a password for proxy authentication. Enter a string.

Probe Connection Settings

Probe Connection Settings

Probe Connection Settings

Setting

Description

Probe Connection IP Addresses

Define how the PRTG core server handles incoming connections from probes:

  • Local probe only, 127.0.0.1: Only accept local probe connections. The PRTG core server does not allow the use of remote probes.

i_prtgThis is the default setting in PRTG Network Monitor.

  • All IP addresses available on this computer: Accept incoming connections from remote probes, no matter on which IP address of the PRTG core server they come in.
    i_podThis is the default setting in PRTG Hosted Monitor.
  • Specify IP addresses: Accept incoming connections from remote probes only on the selected IP address(es) of the PRTG core server. In the list, select the IP addresses by enabling a check box in front of the desired IP addresses.

i_round_blueYou can also change this setting in the PRTG Administration Tool on PRTG Core Server Systems.

i_round_redIf you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, the PRTG app for desktop, or the PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

i_podThis option is not available in PRTG Hosted Monitor.

Access Keys

Enter a list of access keys for remote probe connections. Enter one access key per line.

i_round_blueEvery remote probe and multi-platform probe that wants to connect to this PRTG installation has to use one of these keys.

i_square_cyanFor more information on how to set an access key for a remote probe, see section PRTG Administration Tool.

Allow IP Addresses

Enter a list of remote probe IP addresses or Domain Name System (DNS) names that you want to allow to connect to the PRTG core server. Enter one IP address or DNS name per line. The following options are also possible:

  • [Empty]: An empty field does not allow any remote probes (only the local probe). Enter IP addresses or DNS names to allow remote probe connections.
    i_round_blueWe recommend that you use IP addresses instead of DNS names because DNS name resolution might be cached.
  • any: Enter the word any to automatically allow all remote probe connections.
    i_podThis is the default setting in PRTG Hosted Monitor.
    i_round_blueWe recommend that you only use this option in intranets in PRTG Network Monitor, not in PRTG Hosted Monitor.

i_round_bluePRTG always automatically allows the local probe (127.0.0.1). PRTG checks the list of allowed IP addresses before it checks the list of denied IP addresses.

i_round_blueIf the IP address of a remote probe regularly changes (for example, because of an internet provider that dynamically assigns IP addresses), enter the potential IP address range for the remote probe or use any.

i_square_cyanYou can use the PRTG syntax for IP address ranges. For more information, see section Define IP Address Ranges.

Deny IP Addresses

Enter a list of remote probe IP addresses or DNS names that you do not want to allow to connect to the PRTG core server. Enter one IP address or DNS name per line.

i_round_blueYou can use Deny IP Addresses to explicitly deny connections from remote probes that you do not want to include in your setup either at all or for a certain time. You can also use it to allow access to an IP address range under Allow IP Addresses, but to deny access to a single IP address from the IP address range.

i_square_cyanYou can use the PRTG syntax for IP address ranges. For more information, see section Define IP Address Ranges.

i_round_blueIf you deny the IP address or DNS name of a remote probe, you must restart the PRTG core server to apply your changes.

i_round_blueWe recommend that you use IP addresses rather than DNS names because DNS name resolution might be cached.

Deny GIDs

Enter a list of global IDs (GID) Enter one GID per line. PRTG denies access to matching GIDs.

i_round_blueIf you remove a remote probe from the device tree or if you deny a remote probe after installation, PRTG automatically adds its GID to this list. The remote probe is no longer able to connect. Denying GIDs is more precise than denying IP addresses, where other remote probes at the same location could also be excluded.

i_round_blueA GID is the ID that PRTG attributes to every probe that you include in your monitoring.

Connection Security

Specify the security level that the PRTG web server accepts for connections to and from the PRTG core server:

  • High security (TLS 1.3, TLS 1.2): Only accept high security connections from probes.
  • Default security (TLS 1.3, TLS 1.2) (recommended): Only accept high security connections from probes.
  • Weakened security (TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0): Additionally accept TLS 1.1-secured and TLS 1.0-secured connections from probes.
    i_round_blueIf you have probes that do not support TLS 1.3-secured or TLS 1.2-secured connections because you updated from an older PRTG version, you can use this setting to connect to and to update older probes. After the update, we recommend that you change this setting to High security (TLS 1.3, TLS 1.2) or Default security (TLS 1.3, TLS 1.2) (recommended).

i_round_blueIf you set a registry key in previous PRTG versions to override the Secure Sockets Layer (SSL)/Transport Layer Security (TLS) version and cipher suites of PRTG web server connections or probe connections, High security (TLS 1.3, TLS 1.2) overrides the registry setting and only TLS 1.3 and TLS 1.2 are allowed. If you select Default security (TLS 1.3, TLS 1.2) (recommended), the registry value overrides this setting and the connection security that you defined in the registry applies.

i_round_redIf you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, the PRTG app for desktop, or the PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

i_podThis option is not available in PRTG Hosted Monitor.

Mini Probes

Define if you want to allow mini probe connections to the PRTG core server:

  • Do not allow mini probes: Mini probes cannot connect to the PRTG web server. You are not able to monitor with mini probes if you choose this option.
  • Allow mini probes to connect to the PRTG web server: Mini probes can connect to the PRTG web server and use the defined TCP port for the web server for this purpose. The default port for secure connections is 443.
  • Allow mini probes to connect to an extra port: Mini probes can connect to the PRTG web server via a specific port. Use this if you do not want the whole PRTG web server to be reachable from other networks all the time only because of mini probes.
    i_round_blueSSL/TLS must be enabled on the mini probe port.

i_round_blueIf you want to use mini probes, you need to configure the PRTG web server to accept connections from mini probes and select Secure HTTPS server (port 443, recommended, mandatory for internet access) in the PRTG web server settings.

i_square_cyanFor more information, see section Mini Probe API. See also the Knowledge Base: Where can I find PRTG mini probes which are ready to use?

i_round_redIf you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, the PRTG app for desktop, or the PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

i_podThis option is not available in PRTG Hosted Monitor.

Mini Probe Port

This setting is only visible if you select Allow mini probes to connect to an extra port above.

Enter the number of the port for mini probe connections. Make sure that SSL is available on this port.

i_round_redIf you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, the PRTG app for desktop, or the PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

i_podThis option is not available in PRTG Hosted Monitor.

PRTG MultiBoard File Transfer

Select if you want to allow PRTG MultiBoard to access the PRTG data directories and PRTG program directories of the PRTG core servers connected to PRTG MultiBoard:

  • Disable (default): Do not allow PRTG MultiBoard to access, configure, and transfer PRTG files. You will not be able to use the Probe Transfer, Configuration Viewer, and Template Transfer features.
  • Enable: Allow PRTG MultiBoard to access, configure, and transfer PRTG files.

i_round_bluePRTG MultiBoard requires access to the PRTG Configuration.dat file for the Probe Transfer and Configuration Viewer features.

Multi-Platform Probe Connection Settings

Multi-Platform Probe Connection Settings

Multi-Platform Probe Connection Settings

Setting

Description

Multi-Platform Probe Connections

Define if you want to allow multi-platform probe connections to the PRTG core server:

  • Do not allow multi-platform probe connections (default): Multi-platform probes cannot connect to the PRTG core server. You are not able to monitor with multi-platform probes if you select this option.
  • Allow multi-platform probe connections: Allow multi-platform probes to connect to the PRTG core server. PRTG automatically creates a Multi-Platform Probe Connection Health (Autonomous) sensor on your PRTG core server.

i_round_blueMulti-platform probes connect to the PRTG core server via a NATS server.

i_square_cyanFor more information, see the Multi-Platform Probe for PRTG manual.

i_round_redIf you change this setting, PRTG needs to restart the PRTG core server to apply your changes. After you click Save, a dialog box appears that asks you to confirm the restart. Click OK to trigger the restart. During the restart, all users of the PRTG web interface, the PRTG app for desktop, or the PRTG Apps for Mobile Network Monitoring are disconnected and reconnected.

NATS Connection Security

This setting is only visible if you select Allow multi-platform probe connections above.

Define the connection security level between the PRTG core server and the NATS server.

  • TLS (default): Select Transport Layer Security (TLS) for an encrypted communication channel to the NATS server. This configures the NATS connection to use the tls:// schema.
  • Unsecure (not recommended): All data sent between the PRTG core server and the NATS server, including passwords and other sensitive information, will be transmitted in plain text. The NATS connection will use the unencrypted nats:// schema.

NATS Server Host

This setting is only visible if you select Allow multi-platform probe connections above.

Enter the host name and the port of the NATS server. An encrypted NATS server connection follows the format host name:port. The default host is localhost:23561.

i_round_blueEnter the host name as a fully qualified domain address name (FQDN) of the system that runs the NATS server.

i_round_blueThe default port for this connection is 23561. The NATS server supports port numbers 1 - 65535.

NATS User Name

This setting is only visible if you select Allow multi-platform probe connections above.

Enter the user name for authentication against the NATS server. Enter a string.

NATS Password

This setting is only visible if you select Allow multi-platform probe connections above.

Enter the password for authentication against the NATS server. Enter a string.

NATS Server Certificate Authority Handling

This setting is only visible if you select TLS (default) above.

Define the CA certificate the NATS server uses:

  • Use system certificate store (default): Use the CA certificate from your system's certificate store.
  • Specify a certificate authority certificate file: Define a CA certificate file below. Use this setting if you created your own TLS certificate.
     
    i_square_cyanFor more information, see the Knowledge Base: How can I create a TLS certificate?

Certificate File Name

This setting is only visible if you select Specify a certificate authority certificate file above.

Select the CA certificate to use for TLS validation. This file must match the CA certificate used to install the NATS server.

Connection Log Level

Define the log severity level of the multi-platform probe connection that will appear in the log file:

  • Error: Log critical events.
  • Warning: Log unexpected events that might result in future errors.
  • Info (default): Log events that are significant to the normal operation of the the probe adapter.
  • Debug: Log detailed events that occur during the operation of the probe adapter. Useful for identifying issues.
  • Trace: Log all events of the probe adapter.

i_round_blueThe log level decreases in severity, with Error being the highest severity and Trace being the lowest. The log file will record all logs pertaining to the selected log severity level and all higher severity levels. For example, if you select Info (default), the log file will contain logs identified as Info, Warning, and Error. If you select Debug, the log file will contain logs identified as Error, Warning, Info, and Debug.

i_round_blueYou can find the log files in the PRTG data directory: C:\ProgramData\Paessler\PRTG Network Monitor\Logs\probeadapter.

i_round_redWe recommend that you only set your level to Debug or Trace when you are troubleshooting your setup due to the large amount of logs the probe adapter generates. Treat log files created at these log levels as confidential as some logs may contain sensitive information.

Active Directory Integration

i_podThis option is not available in PRTG Hosted Monitor.

Active Directory Integration

Active Directory Integration

Setting

Description

Domain Name

To use the Microsoft Entra ID integration, enter the name of your local domain. Enter a string or leave the field empty.

i_round_redPRTG does not support trusted domains or AD subdomains. For more important notes about AD integration, see section Active Directory Integration, section Notes and Restrictions.

Domain Access

Define how PRTG performs Active Directory (AD) queries:

  • Use domain name (default): Use the entry in the Domain Name field above.
  • Specify domain controllers: Use specific domain controllers. Specify the domain controllers below.

Primary Domain Controller

This setting is only visible if you select Specify domain controllers above.

Enter the DNS name of the primary domain controller.

Backup Domain Controller (optional)

This setting is only visible if you select Specify domain controllers above.

Optionally enter the DNS name of the backup domain controller or leave the field empty.

LDAP Connection Security

Define if you want to use a Secure Sockets Layer (SSL)/Transport Layer Security (TLS) secured connection to the LDAP server:

  • Use LDAP without connection security (default): Do not use an SSL/TLS-secured connection.
  • Use LDAP over SSL: Use an SSL/TLS-secured connection.

Access Type

Define which user account PRTG uses to configure AD access:

  • Use the PRTG core server service account (usually Local System) (default): Use the same Windows user account configured for the PRTG core server service. In a default installation, this is the "local system" Windows user account. If this account does not have the right to query all groups of your Active Directory, do not use this option.
  • Use explicit credentials: Define a user account that PRTG uses to authenticate against the Active Directory. This should be a user account with full access to all of your AD groups.

PRTG uses this account to query the AD for available groups.

User Name

This setting is only visible if you select Use explicit credentials above.

Enter the Windows user account name that PRTG uses to authenticate for AD configuration.

Password

This setting is only visible if you select Use explicit credentials above.

Enter the password for the Windows user account that PRTG uses to authenticate for AD configuration.

Historic Data Purging

Data purging enables you to automatically delete unnecessary data to free up disk space and to improve system performance. You can define different time spans for several kinds of data.

i_square_cyanFor more information on storage locations, see section Data Storage.

i_podPRTG Hosted Monitor purges historic data using the default purging limits of PRTG Network Monitor except the configuration backups that are purged after 30 days. You cannot modify historic data purging limits in PRTG Hosted Monitor.

Historic Data Purging

Historic Data Purging

Setting

Description

Log File Records

Define how long PRTG keeps records in the system log file Log Database.db. Enter a value in days. PRTG automatically deletes all entries that are older than this value. This also affects the content of the Logs tab of monitoring objects like sensors.

i_round_blueKeep this value as low as possible to enhance system performance.

i_round_blueThe default value is 30 days.

PRTG Web Server Log Records

PRTG creates one PRTG web server log file every day. Define how many PRTG web server log files to keep. Enter a value in days. PRTG automatically deletes all PRTG web server log files that older than this value.

i_round_blueThe default value is 30 days.

Historic Sensor Data

Define for how long PRTG keeps historic sensor data for all sensors. Enter a value in days.

i_round_redHistoric sensor data is the basis for reports on monitoring data. If you decrease this value, less historic monitoring data is available.

i_round_blueDepending on the scanning intervals and the number of sensors in your setup, the file that contains this data can become large. For smaller installations up to 500 sensors, 365 is usually appropriate.

i_round_blueThe default value is 365 days.

i_round_blueThe maximum value is 9999 days.

Toplist Records

Define for how long PRTG keeps toplist records for Flow (NetFlow, jFlow, sFlow, IPFIX) and Packet Sniffer sensors. Enter a value in days. We recommend that you use 30 days here.

i_round_blueOld toplist data is deleted automatically as soon as a limit of 2 GB is reached. The oldest data is deleted from the database first.

i_round_blueThe default value is 30 days.

Closed Tickets

Define for how long PRTG keeps tickets that are in the Closed status. Enter a value in days.

i_round_blueThe default value is 365 days.

Reports

Define the maximum age for PDF reports. Enter a value in days. PRTG automatically deletes all reports that are older than this value.

i_round_blueThe default value is 365 days.

Configuration Auto-Backups

Define the maximum age for daily configuration backups. Enter a value in days. PRTG automatically deletes all configuration backup files that are older than this value.

i_round_blueThe default value is 365 days.

i_podPRTG Hosted Monitor purges the configuration backups after 30 days.

Screenshots of HTTP Full Web Page Sensor

Define for how long PRTG keeps the screenshots of the HTTP Full Web Page sensor (PhantomJS browser engine). Enter a value in days. PRTG automatically deletes screenshots that are older than this value with every sensor scan.

i_round_blueThe default value is 10 days.

i_round_redSave your settings. If you change tabs or use the main menu without saving, all changes to the settings are lost.

More

i_square_blueKNOWLEDGE BASE

Where can I find PRTG mini probes which are ready to use?

How can I create a TLS certificate?

 

i_square_blueOTHER MANUALS

Multi-Platform Probe for PRTG (PDF)

Others

There are some settings that you must define in the PRTG Administration Tool. For more information, see sections: