Alert on service down

Guys,

I'm trying to set up an alert that should send me an email when the Spooler service (Print Spooler) on the server SERVER001 goes down. I thought it was a simple and fairly obvious alert but yet I am really confused constructing a working query/condition. There's probably been a lot about this already but I haven't found anything to help me in a few days. This is what I set in my last approach - obviously it doesn't work. I also created the working Spooler Service Monitor Template and tried to trigger the alert on that one but it didn't work. I would really appreciate your help.

Find more posts tagged with

Alert

trigger alert

service

Accepted answers

All comments

fop

Your trigger needs to be an AND block of the 'node' properties - node name, polling status (though I'd change 'status' to equal 'up'), then the 'what fires the alert' block is an AND block of your component values.

IF (node name is SERVER001 AND server is up) THEN IF (monitored component is Spooler AND its status is not up) THEN fire alert.

weston.hood

I agree, drop the polled status, just use regular ol node "status"

And another thing; you are using Component name = "Spooler" unless you renamed it to that, the out-of-the-box template uses component name "Print Server Spooler Service"

Make sure that when you type text in that box you get drop-down component name recommendations. And I recommend clicking on the correct one to ensure you entered the right component name
e.g.

Zwonimir

I suppose this is not what you are suggesting? because it is not working.... The scope of alert I narrowed down to Node name is equal to Server001 but it didn't work either The spoolsv.exe component was recommended by SW

I also tried with this one, and Application instance is my Spooler Service Monitor template but that doesn't work either

fop

Try this. If I was doing it I'd add the 'is not unmanaged' option in line 3 of the trigger scope. I don't have easy access to SWQL Studio right now to verify it but it looks right logically.