cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 11

Windows Server Unexpected and Normal Reboot Alert

If you are looking for a way to capture both unexpected and normal reboot of a windows server, you may use the attached SAM template to monitor the corresponding event IDs:

pastedImage_0.png

After that, you may now create an alert that would trigger every time the event ID will appear after the last poll on the device.

The attached sample alert will also show you what is the reason behind the Server reboot and who initiated it.


pastedImage_3.png

You can modify or improve this according to your liking

Labels (1)
4 Replies
Level 9

@mat12 Really handy, thanks! 🙂

"After that, you may now create an alert that would trigger every time the event ID will appear after the last poll on the device.

The attached sample alert will also show you what is the reason behind the Server reboot and who initiated it."

Do you mean another alert to monitor just EventID 1074,6008? How would you go about this sorry? What purpose?

0 Kudos
Level 11

That's great,

Many thanks for sharing this with us @mat12.

0 Kudos
Level 8

Excellent!  Very useful!  Thanks mat12

Level 7

This is awesome. Thanks Mat12.