Service Monitoring facility alerting will send out an alert email every time a designated service state is changed, IE started, stopped,paused, etc. on any audited server.
Create a Services Audit template for the services you want to monitor:
- Open the CA Client
- Click View | Administration
- Click Auditing in the bottom left
- Click Services in the tree view on the left
- Click Add in the top menu bar
- Provide a name for the new Services Audit template
- Select the services you wish to audit.
Note: The list of services listed are those that exist on the server that the CA Client is installed on. If you need to add services that exist on a different server, select the option 'Audit only the following services' and click the ellipsis next to 'You are viewing services on <ComputerName>' to select the server where the services reside - Click Finish
- Select the Configuration(s) that the template should be assigned to and enable it under each one
- Right click the agents and select Refresh Configuration
To create an alert enabled search for the Service Monitoring facility:
- Create a new search
- Under the Info tab provide a suitable Search Name
- On the "What" tab, select Add | Event Class
- Filter for the Service Monitoring facility by typing 'Service' under the Facility column where is says' Click here to filer data...'
- Select one of the events class, click Add, select 'Add All Events in Facility'
- Click 'OK'
- Select the "Alert" tab and set the desired alert options, such as SMTP, and alert recipients
- Check Alert enabled
- Save the alert enabled search to a desired folder other than the Built-in folders
To filter the alerts for events occurring on a specific server:
- Under the "Where" tab for the alert click Add and locate the server in question
- Select the server, click Add and OK
- Save the alert.