Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Linux service restart alert with user info

We already have a monitored alert setup to inform us when HTTP (Apache/Tomcat) is down on our Red Hat server. I want to know if it is possible to also send in this same alert who stopped the service, if someone did stop or restart the service.

We have something similar with our Windows server. I currently have an alert that when a Windows server reboots it will indicate within the same alert who rebooted the server. I would like to do the same thing with Linux service restart alerts also.

Find more posts tagged with

Accepted answers

All comments

aLTeReGo

THis information should be available through the Syslog or SNMP Trap message sent from the Linux server to the Orion server, provided that syslog or SNMP Traps have been configured on the Linux/Unix host to point at the Orion server.

ecrosby

Currently, we are monitoring the server via SNMP in SAM using the HTTP template. I see no options within this template to select an audit to find out who restarted the service.

aLTeReGo

This would not be found in the template since this information is not queried (pulled) from the host, rather it's sent from the Linux/Unix host via Syslog or SNMP Traps in a push method. This requires syslog or SNMP Traps be configured on the Linux/Unix host to send those messages to the Orion server. From there you can configure alerts through the Syslog or SNMP Traps viewer, and see these messages displayed in the Message Center.