- 5 minutes to read

Prerequisites for the Nodinite Message Queueing Monitoring Agent

Unlock seamless monitoring of your enterprise message queues with the Nodinite Message Queueing Monitoring Agent. This page guides you through all prerequisites to ensure a smooth installation and optimal performance for ActiveMQ, MSMQ, and Azure Service Bus environments.

✅ Effortless integration with leading message queue platforms
✅ Centralized, real-time monitoring for on-premise and cloud deployments
✅ Enhanced security and compliance with granular user rights
✅ Scalable architecture for enterprise-grade reliability

This page describes the prerequisites for installing and running the Nodinite Message Queueing Monitoring Agent.

graph LR subgraph "Nodinite" roNI(fal:fa-code-commit Message Queueing Monitoring Agent)--- roMonitor[fal:fa-monitor-waveform Monitoring] end subgraph "Apache" roMonitor --- ro1(fal:fa-list ActiveMQ) end subgraph "Azure" roMonitor --- ro2(fal:fa-list Service Bus Queues) roMonitor --- ro3(fal:fa-list Service Bus Topics) end subgraph "Microsoft/Windows" roMonitor --- ro4(fal:fa-list MSMQ) end subgraph "MuleSoft" roMonitor --- ro5(fal:fa-list AnypointMQ) end

Architecture overview: The Nodinite Message Queueing Monitoring Agent connects to multiple queueing technologies for unified monitoring.

Instances of this agent can be installed on-premise using TCP/IP for local network access and/or in the cloud/off-site using Service Bus Relaying (see also the external link for additional information MicrosoftServiceBusRelayingLink).

We recommend that you keep this agent close to Nodinite Core Services. This documentation covers local network setup (usually on the Nodinite application server)

Verified Topic
Software Requirements
What Windows User Rights does the Message Queueing Monitoring Agent require?
What ActiveMQ User rights are required?
What MSMQ User rights are required?
What Azure ServiceBus User rights are required?
What Firewall settings are required ?

Software Requirements

The Message Queueing Monitoring Agent is a Windows Service, typically installed on the Nodinite application server for best performance and security.

Product Version/Edition
Windows Server Windows 2025
Windows 2022
Windows 2019
Windows 2016
Windows 2012 R2
Windows 2012
.NET Framework .NET Framework 4.8 or later New 6.0
Our recommendation is .NET Framework 4.8.1 or later
ActiveMQ 5.14.0 and later
MSMQ For supported Windows versions. NOTE: Additional roles and features may be required depending on the intended usage
Azure Service Bus Current public (GA) version by Microsoft in Azure

Versions 6.0 and later require .NET Framework 4.8 or later.
Versions 5.4 and later require .NET Framework 4.6.2 or later.
Versions before 5.4 require .NET Framework 4.5.2 or later.

What Windows User Rights does the Message Queueing Monitoring Agent require?

The agent installs as a Windows Service—usually on the Nodinite application server or a supported virtual machine.

What ActiveMQ User rights does the Message Queueing Monitoring Agent require

Review the Apache ActiveMQ Security guide for best practices on securing your message queues.

What MSMQ User rights does the Message Queueing Monitoring Agent require

For MSMQ, refer to the Securing Messages Using Transport Security user guide for configuration and security recommendations.

What Azure ServiceBus User rights does the Message Queueing Monitoring Agent require

The Nodinite Message Queueing Monitoring Agent requires the following Azure Roles to be set on the ClientId/ApplicationId used to connect with the Azure REST API:

Service Name Permission Comment
Service Bus Namespace Azure Service Bus Data Owner Allows for full access to Azure Service Bus resources. Set on Subscription, or Resource Group Level
Subscription Reader Show Details and Match/Validate the Subscription Id with the current configuration.
NOTE: This right inherits to all other Resources in selected Subscription

You can apply these rights on different scopes. For more details, review the Authenticate and authorize an application with Azure Active Directory to access Azure Service Bus entities user guide.

Firewall

Depending on where you install the Nodinite Message Queueing Monitoring Agent in relation to Nodinite Monitoring Service and your network's Internet access, you may need to configure firewalls on different servers. The following diagram illustrates the agent installed on its own server.

Network communication overview: The agent requires specific ports for secure and reliable monitoring across platforms.

graph LR subgraph "Nodinite Core Services Server" roMonitoringService(fal:fa-watch-fitness Monitoring Service) end subgraph "Nodinite Monitoring Agents Server" roNI(fal:fa-monitor-waveform Message Queuing Monitoring agent) end subgraph "ActiveMQ" roMonitoringService --> |8000| roNI ro1(fal:fa-list ActiveMQ Broker) roNI --> |61616| ro1 end subgraph "MSMQ" roNI --> |1801, ...| ro2(fal:fa-cloud ServiceBus) end subgraph "Azure Service Bus" roNI --> |443|ro3(fal:fa-list Queues) roNI --> |443|ro4(fal:fa-list Topics) end subgraph "MuleSoft AnypointMQ" roNI --> |443|ro5(fal:fa-list MuleSoft AnypointMQ) end

1. Between the Message Queueing Monitoring Agent and the ActiveMQ Broker

Port Name Inbound Outbound TCP UDP Comment
53 DNS The Agent needs to know where your other servers/services are (can sometimes optionally be solved with user-defined entries in the hosts file in each Windows server instance), review the following 'Microsoft' user guide
61616 Remote connection port Default, actual value may depend on your configuration

If you use SSL or custom ports, additional ports must be opened.

2. Between the Message Queueing Monitoring Agent and the MSMQ Service

Port Name Inbound Outbound TCP UDP Comment
1801 TCP
135 TCP
2101 RPC
2103 RPC
2105 RPC
1801
3527

For a full list of MSMQ ports, review the Microsoft guide here

3. Between the Message Queueing Monitoring Agent and the Azure (ServiceBus)

Port Name Inbound Outbound TCP UDP Comment
443 HTTPS Secure outbound traffic
5671, 5672 AMQP AMQP with TLS.
Test-NetConnection -ComputerName [service bus name].servicebus.windows.net -Port 5671
Test-NetConnection -ComputerName [service bus name].servicebus.windows.net -Port 5672

Use the PowerShell script to verify connectivity between the host with the Agent and Azure (Internet). Repeat for each unique namespace in use.

4. Between the Monitoring Service and the Nodinite Message Queueing Monitoring Agent

The following ports must be allowed on the Windows server where the agent is installed and running:

Port Name Inbound Outbound TCP UDP Comment
53 DNS The Agent needs to know where your other servers/services are (can sometimes optionally be solved using entries in the local hosts file)

And further with 'Option 1' or 'Option 2' as documented next:

Option 1 (Local network)

Port Name Inbound Outbound TCP UDP Comment
8000 RPC Communication is initiated by the Monitoring Service

Option 2 (Cloud/Hybrid)

Use Service Bus Relayed connections when Nodinite and the agent are on totally different networks.

Nodinite uses the same principle technique as the On-Premise data gateway, see 'Adjust communication settings for the on-premises data gateway' user guide.

Port Name Inbound Outbound TCP UDP Comment
443 HTTPS Secure outbound traffic
5671, 5672 Secure AMQP
9350 - 9354 Net.TCP

Release Notes

For detailed information about the features and bug fixes, please visit the Portal

Next Step

Install Message Queues Monitoring Agent

Add or manage a Monitoring Agent Configuration
Monitoring
Administration