Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Monitor Process or Service that shouldn't exist

So I've been around the monitoring world for a while now, but very new to Orion Application Monitoring. I'm hoping this doesn't seem like an odd thing, but we have a need to monitor our servers for a service or process that shouldn't exist. We have SCCM and utilize it on the desktop side of the house, but do not want it on the servers. I've got the alert setup the way that I want it, but it would seem for it to work properly I need to monitor for the CcmExec.exe process. Is there a way to monitor for this without it necessary showing up as down or unknown

Find more posts tagged with

Accepted answers

All comments

amstephen87

Cjutting,

My question to you is it that you want to only know if the CcmExec.ex process exists and alert for it or if you want to get a report with machines that are servers that have the process running. IF you want and alert you can can configure the monitor to show up if the process is on. Then you can write your alert to follow the logic you prefer. Let me know what your full requirement is and IO can see if I can assist.

Regards,

-Adam Stephen

Loop1 Systems: SolarWinds Training and Professional Services

LinkedIN: Loop1 Systems
Facebook: Loop1 Systems
Twitter: @Loop1Systems

cjutting

If I'm understanding you correctly your saying to build an application process monitor and apply it to all of the servers. Then write and alert if the process is there to send us an email / page. I think I have something like this now, but for servers that are not running the CcmExec.exe process it says that it's down or unknown which is not the desired result.

So to reiterate my needs...

I want to be able to monitor all of my servers for the CcmExec.exe process. Under normal circumstances this process should NEVER be running on any server. We need to actively check if that process SHOULD show up for whatever reason and be notified so we can be proactive in getting it removed ASAP.

Hopefully this is clear as mud

zackm

you could try a powershell monitor:

$check=Get-Process notepad -ErrorAction SilentlyContinueif ($check -eq $null) {Write-Host "Process is not running"}else {Write-Host "Process is running"}

http://babblecode.blogspot.com/2012/03/powershell-check-if-process-is-running.html

Of course, this would need a little tweaking to fit SAM, but it gets you going down the right path.

-ZackM

Loop1 Systems: SolarWinds Training and Professional Services

LinkedIN: Loop1 Systems
Facebook: Loop1 Systems
Twitter: @Loop1Systems

cjutting

Zackm. I've started to play with the Powershell monitor and keep falling short here. I either get the service isn't running (which it is) or NaN. Thoughts?