Windows Service
Checks the status of Windows services on remote machines and alerts if they are found to be stopped or missing.
notitie
Overview
The Windows Service Event Monitor watches your Windows services and alerts based on their current status. It has options to start and stop services when their states do not match expected values.
info
Use Cases
- Stopped Service Alerts: Receive alerts about stopped services.
- Service Management: Automatically start or stop selected services.
Monitoring Options
Protocol Selection
- Protocol: Choose between Service Control Manager API (SCM) or SC Command Line (SC CLI). Note: SC CLI does not require admin rights, but some options are limited.
Connectivity Alerts
- Device Contact: Alert with [Info/Warning/Error/Critical] if the device cannot be contacted.
Service Status Alerts
- Selected Services Status: Alert with [Info/Warning/Error/Critical] if selected services are [status].
- Missing Services: Alert with [Info/Warning/Error/Critical] if the selected services are not found.
- Automatic Services: Alert with [Info/Warning/Error/Critical] if any services set to "Automatic" are stopped*.
- New Service Detection: Alert with [Info/Warning/Error/Critical] if new services are found.
- Deleted Service Detection: Alert with [Info/Warning/Error/Critical] if services have been deleted.
Service Management Actions
- Start Stopped Services: Start any services that are not running*.
- Ignore Selected Services: Ignore selected services to avoid unnecessary alerts.
Authentication and Security
The account used for authentication must have admin rights.
Protocols
Data Points
| Data Point | Description |
|---|---|
| Time Difference | Time difference between Windows device and FrameFlow server in seconds. |
| Time Zone Match | Success/Failure data point. Value of 1 if the time zone matches, value of zero if it does not. |
| UTC Offset Match | Success/Failure data point. Value of 1 if the UTC offset matches, value of zero if it does not. |
Sample Output
