System Restart
Monitors Windows system restarts and alerts based on reason codes.
notitie
Overview
The System Restart Event Monitor checks the Windows system event log for events indicating system restarts. It detects and alerts based on supplied reason codes.
info
Use Cases
- Alerts for Restart Reasons: Receive alerts about the reasons for system restarts.
- Detecting Restart Problems: Detect problems necessitating system restarts.
Monitoring Options
Connectivity Alerts
- Device Contact: Alert with [Info/Warning/Error/Critical] if the device cannot be contacted.
Restart Detection
- Planned Restart: Alert with [Info/Warning/Error/Critical] for planned system restarts.
- Unplanned Restart: Alert with [Info/Warning/Error/Critical] for unplanned system restarts.
- Administrator Reason: Alert with [Info/Warning/Error/Critical] for unplanned restarts with an administrator-entered reason.
- No Restart Since Last Check: Alert with [Warning/Error/Critical] if no restart has occurred since the last check.
- Reboot Event Category: Check reboot events by category.
- Ignore Reboot Event Category: Ignore specific reboot event categories.
Authentication and Security
Ensure the monitoring account is part of the Event Log Readers group or has admin rights.
Protocols
Data Points
This event monitor does not generate any data points.
Sample Output
