Thanks Zak but not quote what I was looking for.

A service installed on approx half our Windows VDI nodes randomly stops. I want the 'svcs' to go red if:

• the service is installed; and
• the service is not running.

Any ideas?

On Mon, 11 Oct 2021 at 16:16, Beck, Zak <zak.beck at accenture.com> wrote:

Hi

https://www.xymon.com/help/manpages/man5/analysis.cfg.5.html

You need to use the svc directive in analysis.cfg. You can alert on whether the service is started or stopped, and the startup setting. This should work with both the BBWIN client and the Powershell client.

Cheers

Zak

*From:* Xymon <xymon-bounces at xymon.com> *On Behalf Of *Colin Coe *Sent:* 11 October 2021 03:39 *To:* Xymon Mailing List <xymon at xymon.com> *Subject:* [External] [Xymon] Monitor Windows service if installed

This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly with links and attachments.

Hey all

Is there a way to alert if a particular Windows service is installed but not running?

Thanks

---

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.

---

www.accenture.com

Thanks but how to make it go only if it is installed *and* not running?

On Tue, 12 Oct 2021 at 06:25, Tom Schmidt <tom at 4schmidts.com> wrote:

Colin, An example from what I use to monitor that the Xymon Powershell Client service is running, I have this in the server/etc/analysis.cfg file:

Windows Powershell client - WinPSClient

CLASS=powershell SVC XymonPSClient startup=automatic status=%(start|started)

If the XymonPSClient service is not running or is not configured to automatically start, then the alert for the service will be red. If the service is not installed, it likewise will go red.

Tom

On Mon, Oct 11, 2021 at 3:55 PM Colin Coe <colin.coe at gmail.com> wrote:

...

Thanks Zak but not quote what I was looking for.

A service installed on approx half our Windows VDI nodes randomly

stops. I want the 'svcs' to go red if:

...

• the service is installed; and
• the service is not running.

Any ideas?

On Mon, 11 Oct 2021 at 16:16, Beck, Zak <zak.beck at accenture.com> wrote:

...

Hi

https://www.xymon.com/help/manpages/man5/analysis.cfg.5.html

You need to use the svc directive in analysis.cfg. You can alert on

whether the service is started or stopped, and the startup setting. This should work with both the BBWIN client and the Powershell client.

...

Cheers

Zak

From: Xymon <xymon-bounces at xymon.com> On Behalf Of Colin Coe Sent: 11 October 2021 03:39 To: Xymon Mailing List <xymon at xymon.com> Subject: [External] [Xymon] Monitor Windows service if installed

This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly

with links and attachments.

...

---

Hey all

Is there a way to alert if a particular Windows service is installed

but not running?

...

Thanks

---

This message is for the designated recipient only and may contain

privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.

...

---

...

...

www.accenture.com

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Colin, The external script is the way to do it. Use either xymondlog or xymonxlog(for xml output) Like this

xymon xymonserver "xymondlog servname.svc"

and you can first check to see if the service exists, then check to see if its started...

You could get even trickier and use an external script to create a file in analysis.d for that servername (eg. svc_servername.cfg) With this in it.

HOST=servername SVC "Name of service" "status=%^stop" RED

Alan Ford

-----Original Message----- From: Xymon <xymon-bounces at xymon.com> On Behalf Of Tom Schmidt Sent: Tuesday, 12 October 2021 12:26 PM To: Colin Coe <colin.coe at gmail.com> Cc: Xymon Mailing List <xymon at xymon.com> Subject: [EXT] Re: [Xymon] [External] Monitor Windows service if installed

Colin, There is not a configuration in Xymon to do that. It would require a custom external script to monitor and alert like you desire, to only alert if a service is installed but not started. I assume you want the alert to be green or clear if the service is not installed.

Tom

On Mon, Oct 11, 2021 at 4:38 PM Colin Coe <colin.coe at gmail.com> wrote:

Thanks but how to make it go only if it is installed *and* not running?

On Tue, 12 Oct 2021 at 06:25, Tom Schmidt <tom at 4schmidts.com> wrote:

...

Colin, An example from what I use to monitor that the Xymon Powershell Client service is running, I have this in the server/etc/analysis.cfg file:

Windows Powershell client - WinPSClient CLASS=powershell

    SVC     XymonPSClient startup=automatic status=%(start|started)

If the XymonPSClient service is not running or is not configured to automatically start, then the alert for the service will be red. If the service is not installed, it likewise will go red.

Tom

On Mon, Oct 11, 2021 at 3:55 PM Colin Coe <colin.coe at gmail.com> wrote:

...

Thanks Zak but not quote what I was looking for.

A service installed on approx half our Windows VDI nodes randomly stops. I want the 'svcs' to go red if:

• the service is installed; and
• the service is not running.

Any ideas?

On Mon, 11 Oct 2021 at 16:16, Beck, Zak <zak.beck at accenture.com> wrote:

...

Hi

https://www.xymon.com/help/manpages/man5/analysis.cfg.5.html

You need to use the svc directive in analysis.cfg. You can alert on whether the service is started or stopped, and the startup setting. This should work with both the BBWIN client and the Powershell client.

Cheers

Zak

From: Xymon <xymon-bounces at xymon.com> On Behalf Of Colin Coe Sent: 11 October 2021 03:39 To: Xymon Mailing List <xymon at xymon.com> Subject: [External] [Xymon] Monitor Windows service if installed

This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly with links and attachments.

---

Hey all

Is there a way to alert if a particular Windows service is installed but not running?

Thanks

---

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.

---

---

www.accenture.com

---

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Xymon mailing list Xymon at xymon.com http://lists.xymon.com/mailman/listinfo/xymon

Note: This email, including any attachments, has been sent by AWP Australia Pty Ltd (ABN 52 097 227 177) trading as Allianz Global Assistance and is intended solely for the addressee. It is confidential, may contain personal information and may be subject to legal professional privilege. If you have received this by mistake, confidentiality and any legal privilege are not waived or lost and we ask that you contact the sender and delete and destroy this and any other copies. In relation to any lawful use you may make of the contents of this email, you must ensure that you comply with the Privacy Act (C'th) 1988 and you should note that the contents may be subject to copyright and therefore may not be reproduced, communicated or adapted without the express consent of the owner of the copyright. Allianz Global Assistance will not be liable in connection with any data corruption, delay, computer virus or unauthorised access, interception, or amendment to the contents of this email. If you no longer want to receive messages from us, please contact us at Allianz Global Assistance, PO Box 162 Toowong, Qld, 4066, ph +61 7 3305 7000.

Hi

It depends on how it is stopping or not running. If the service is stopping but still shows as ?started? in the Services control panel, then maybe you could monitor the process behind the service? Then it depends on whether the process is running or hung.

To monitor a process you should be able to use the PROC directive in analysis.cfg. To find the process name, go to Task Manager -> Services, right-click the service (it must be running) and select ?Go to details?, it will take you to the process name on the Details tab. This process should be listed on the [procs] page and the [cpu] page (analysis.cfg will turn the procs test red if the process is not there).

Of course if the nature of ?not running? is that the process is still present but doing nothing, I would think most bets are off.

Zak

From: Colin Coe <colin.coe at gmail.com> Sent: 11 October 2021 22:54 To: Beck, Zak <zak.beck at accenture.com> Cc: Xymon Mailing List <xymon at xymon.com> Subject: Re: [External] [Xymon] Monitor Windows service if installed

Thanks Zak but not quote what I was looking for.

A service installed on approx half our Windows VDI nodes randomly stops. I want the 'svcs' to go red if:

• the service is installed; and
• the service is not running.

Any ideas?

On Mon, 11 Oct 2021 at 16:16, Beck, Zak <zak.beck at accenture.com<mailto:zak.beck at accenture.com>> wrote: Hi

https://www.xymon.com/help/manpages/man5/analysis.cfg.5.html<https://urldefense.proofpoint.com/v2/url?u=https-3A__www.xymon.com_help_manpages_man5_analysis.cfg.5.html&d=DwMFaQ&c=eIGjsITfXP_y-DLLX0uEHXJvU8nOHrUK8IrwNKOtkVU&r=S-aLwpx-PHBTBMIG_c2JczRC0SfuZCmsiH9Iams25FI&m=7LXi29xuhqF277zepRG4bw9Nq8QKYsyY06-ASwA0-ew&s=vfq7Tu_B8mlvKnXb_1P8rzLSEBQPUn08sd9gmCwcv9c&e=>

You need to use the svc directive in analysis.cfg. You can alert on whether the service is started or stopped, and the startup setting. This should work with both the BBWIN client and the Powershell client.

Cheers

Zak

From: Xymon <xymon-bounces at xymon.com<mailto:xymon-bounces at xymon.com>> On Behalf Of Colin Coe Sent: 11 October 2021 03:39 To: Xymon Mailing List <xymon at xymon.com<mailto:xymon at xymon.com>> Subject: [External] [Xymon] Monitor Windows service if installed

This message is from an EXTERNAL SENDER - be CAUTIOUS, particularly with links and attachments.

Hey all

Is there a way to alert if a particular Windows service is installed but not running?

Thanks

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise confidential information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the e-mail by you is prohibited. Where allowed by local law, electronic communications with Accenture and its affiliates, including e-mail and instant messaging (including content), may be scanned by our systems for the purposes of information security and assessment of internal compliance with Accenture policy. Your privacy is important to us. Accenture uses your personal data only in compliance with data protection laws. For further information on how Accenture processes your personal data, please see our privacy statement at https://www.accenture.com/us-en/privacy-policy.

www.accenture.com<http://www.accenture.com>