Advanced server reboot alert

Selspiero

Hi there,

I am looking at the best way to make my server reboot notifications work for our department.

At the moment i just use the 'last boot' has changed, and it sends an email to our service desk - this is fine. The only issue with this is when myself or someone else plans a reboot. What i would like to do is to somehow incorporate the 'shutdown reason' from the windows event log into the notification email - but not sure if this is possible.

Running NPM and SAM - both latest versions

Any thoughts or suggestions would be great

Thanks

mrxinu

A little PowerShell would do the trick, but once you've handed off control in an alert action you can't get it back. So if you've discovered that Server001 has rebooted and you execute GoFindOutWhy.ps1 as your alert action, it'll also have to handle sending the email. Assuming the user running the SW Alert service has permission on the remote system, this would get you the most recent reason for the reboot assuming you'd passed the offending system into the script ($IP_Address) as $remote_system:

Get-EventLog -Computer $remote_system -LogName System -Newest 1 -Source User32 | Select-Object Message

If you're interested in fleshing this out, let me know and I'll work with you on it.