Navigation:  Remote Monitoring and Management > Proactive Monitoring > Windows Server and Workstation Monitoring > 24x7 Checks >

Windows Service Check

Previous pageReturn to chapter overviewNext page

 

Windows systems are underpinned by Windows Services - these services provide crucial functions to users, machines and applications network-wide.

 

The Windows Services Check monitors the selected Windows Services and fails where a service is in the stopped state.

 

During the installation process the Agent queries the device for any Windows Services that are set to start automatically, it then compares any discovered services with the services.ini file and where a match is found a Check is automatically added for the service(s). Additional Windows Service Checks can be added manually either in the Agent (during and post-installation) as well as from the Dashboard (post-installation).

 

Check configuration

The check is configured via the Dashboard or Advanced Monitoring Agent:

 

Dashboard

Log on to the Dashboard, select the target device in the north pane of the Servers or Windows tab then choose the Checks tab.

 

Add

From the Add Check drop-down go to Add 24x7 Check, Windows Service Check.

Select the Windows Service from the drop-down

Enable PASS if "Start Pending" to avoid the generation of failures where the status of the service is Start Pending

Restart Service

Select the RESTART service if ‘Stopped’ option to ensure essential services are always running. If enabled configure the restart Alert settings. Please note, some services may routinely stop as part of their normal operation, and restarting such services prematurely may cause problems

Alert Thresholds

Number of consecutive failures before alert sent this option sends an Alert when the number of consecutive failures exceeds the entered threshold figure. To adjust the sensitivity of the Alert generation select the number of consecutive failures from the drop-down (1-5). Please be aware that sending an Alert resets the consecutive failure counter.

Number of consecutive restarts before alert* this option sends an Alert when the number of consecutive restarts exceeds the entered threshold figure. To adjust the Alert generation sensitivity select the number of consecutive restarts from the drop-down (1-50). Please be aware that sending an Alert resets the consecutive restart counter.

Restart Alert

Alert if service is restarted X times in Y hours* this option sends an Alert when the cumulative number of restarts exceeds the entered threshold figure during the selected time period. To adjust the Alert generation sensitivity select the number of restarts from Alert if service is restarted (1-5) and times in () hours Please be aware that any restarts that results in a consecutive restart Alert are excluded from the cumulative count.

* These options are only available where RESTART service if ‘Stopped’ is enabled

 

Edit

Select the required Windows Service Check in the south panel then of the Checks tab then from the Checks drop-down Edit Check, configure as required.

 

Delete

Select the required Windows Service Check in the south panel of the Checks tab then from the Checks drop-down Delete.

Enter the password of the user you have logged on to the Dashboard under to confirm deletion.


Link Check to On-Check Failure Automated Task


We have included the ability to run a Automated Tasks when a Check fails to, for example automatically dealing with cause of the failure, and with Dashboard 6.21 we have simplified its configuration process by incorporating the option to assign an On-Check Failure Automated Task when adding or editing a Check in the Checks tab for the Dashboard. Further information on this process is available in the section: Link Check to On-Check Failure Automated Task

 

Agent

After logging into the Advanced Monitoring Agent on the target machine go to Settings in the 24x7 Checks section, Configure checks, Windows Service Check

 

Add

Click Add then select the Windows Service from the drop-down

Enable PASS if "Start Pending" to avoid the generation of failures where the status of the service is Start Pending

Select the RESTART service if ‘Stopped’ option to ensure essential services are always running. If enabled configure the restart Alert settings. Please note, some services may routinely stop as part of their normal operation, and restarting such services

To adjust the sensitivity of the Alert generation use Only FAIL after (1 - 5) consecutive failures. Once set an Alert is dispatched when the number of failures exceed this limit. Please note this option is disabled when RESTART service if ‘Stopped’ is selected.

 

Edit

Select the required Windows Service Check click Edit then configure as required.

 

Delete

Select the required Windows Service Check and click Delete

 

Whichever management option is selected click OK to apply changes.

 

Dashboard: Add or Edit Check Behaviour


Pre-Agent 10

When a Check is added or edited from the Dashboard the new settings are downloaded to the Agent the next time it communicates back to the Dashboard and applied when all of the Checks of that frequency type next run.

From Agent 10

Any changes to the Check actioned from the Dashboard are applied immediately with the Check automatically re-run when the settings are received. This ensures that the users can almost instantaneously see the effects of any Check addition or modification; with the time this individual Check ran reflected in its Date/Time column.

Please be aware that due to this improvement, the Date/Time may differ between Checks running at the same frequency.

 

 

 

clip0018

 

Check Conditions

The check queries the state of the service and reports back on the following conditions:

 

Dashboard/Agent Message

Service State

Pass

Start

Fail (or Pass if Start Pending option enabled)

Start Pending

Fail

Stopping/Stopped

Cannot open service

Service login failure or Service no longer exists

 

Where the Advanced Monitoring Agent queries the specified service on the server and it returns it is in the Stopping/Stopped/Start Pending or Cannot open service state an Alert is generated.

 

The failure condition can be investigated from the Services console

 

1.Windows key + r
2.services.msc
3.Check the target service Status and Startup Type column

To change the Startup Type

4.Right-click on the service
5.Properties
6.Change Startup type (for example to Automatic or Automatic (Delayed Start)
7.OK to save

 

 

As indicated in the above table where the error message Cannot open service is displayed it may be that the account the Advanced Monitoring Agent Service is logged on under does not have sufficient privileges to query the service (in which case this may be resolved by changing the Advanced Monitoring Agent service logon account) or the service the Agent is monitoring no longer exists.

 

This can happen when the service has been uninstalled or renamed, for example as part of a program update, since the Check was added. To resolve this problem simply remove the existing Windows Service Check entry via the Delete option then Add its replacement (if available) from the drop-down Windows Service list.

 

Please note the deprecated Agentless Scan and MiniAgent Auto-Start Windows Services Check only monitors the services, it cannot restart them.Windows Service Check – Trigger Events

 

Unsupported Special Characters

Where the Windows Service name contains an unsupported special character, this is represented by a ? in the service name.

 

Agent 10.3.0 RC: Windows Service Check – Trigger Events

Trigger events are designed to reduce the number of Services that run in the background and were introduced by Microsoft from Windows Server 2008 R2 and Windows 7.

 

Rather than automatically start with the system, then run in the background until they are required; with trigger events the Service is started then stopped when requested.

 

Windows Service triggers are supported from Agent 10.3.0 RC onwards and where a Service is identified as using a trigger, the Service is excluded from automatic addition during the Check detection process.

 

We have taken the approach to ignore these Services, as if a Windows Service Check is added for a trigger event Service the Check will primarily be in the failed state and only pass when the service is triggered.

 

Include Trigger Controlled Services - Device Level

To include trigger event controlled Services in the Check detection add the following string in the settings.ini file before registering the Agent and / or running Check Detection.

 

1.Login to the target device.
2.Navigate to the Agent installation folder, by default: C:\Program Files (x86)\Advanced Monitoring Agent
3.Open the settings.ini file in a text editor
4.Go to the [247CHECK] section; or create a [247CHECK] section
5.Add the string: SNIFFTRIGGERSERVICES=1
6.Save the settings.ini file to apply
7.To return to the ignore trigger events change the above setting to: SNIFFTRIGGERSERVICES=0

 

Register the Agent or Run Check Detection (Monitoring Templates)