TECHZEN Zenoss User Community ARCHIVE  

Windows Service Alerting Issue

Subject: Windows Service Alerting Issue
Author: [Not Specified]
Posted: 2015-10-09 08:35

I am trying to get alerted on if a service is stopped or restarted, to get an alert when the service is down. I am running 4.2.4 I create an alert an alert triggger

Rule Any
Event Class contain (ServerName)

Event Class contain (Status/WinService)

I manually stop the service and it shown down, but I don't receive an email alert. I receive other alerts via email.

What am I doing wrong

Thanks for the assitance



Subject: Re: [Zenoss] Windows Service Alerting Issue
Author: [Not Specified]
Posted: 2015-10-09 09:00

Are you saying you're matching on Event Class Don't you want to match on Device or Subject or . . . Unless you've created an event class that's named after the server . . . and have transforms to move your event to that event class. James Pulver CLASSE Computer Group Cornell University

Subject: Tes, I am matching on the
Author: [Not Specified]
Posted: 2015-10-09 09:17

Yes, I am matching on the Event Class because I have multiple Servers runng the same type service and want to be alerted if any of the services fail.

Thanks



Subject: I changed from Event Class to
Author: [Not Specified]
Posted: 2015-10-09 09:25

I changed from Event Class to Device Group and it still doesn't alert. WTF.



Subject: I changed the alert to just
Author: [Not Specified]
Posted: 2015-10-09 09:39

I changed the alert to just one server to alert if the service is stopped. Still no alert. What am I doing wrong. If my company would pay for a different monitoring system, I would totally ditch Zenoss.



Subject: I changed the alert to just
Author: [Not Specified]
Posted: 2015-10-09 09:39

I changed the alert to just one server to alert if the service is stopped. Still no alert. What am I doing wrong. If my company would pay for a different monitoring system, I would totally ditch Zenoss.



Subject: Thatt is what I did.
Author: [Not Specified]
Posted: 2015-10-09 10:27

Thatt is what I did.

Event Class Status\WinServ
Severity Critical

What else do I net to do



Subject: The odd thing is the event is
Author: [Not Specified]
Posted: 2015-10-09 10:32

The odd thing is the event is recorded in the Events log of the server but not in the main Events table. Is that normal



Subject: I don't know if it's your
Author: [Not Specified]
Posted: 2015-10-09 13:17

I don't know if it's your problem, but from what you've provided:
This:
Event Class Status\WinServ
Is not equal to this:
Event Class /Status/WinServ

Forward slashes in Zenossland



Subject: I don't understand what you
Author: [Not Specified]
Posted: 2015-10-09 14:05

I don't understand what you mean. All I am trying to do is create a trigger to get alerted when a service is down. Why is this so damn hard to do.



Subject: Why don't you post a
Author: [Not Specified]
Posted: 2015-10-09 14:13

Why don't you post a screenshot somewhere of what your trigger looks like right now
(you'll have to use some image host service and link to it)



Subject: Okay The is how my rule is
Author: [Not Specified]
Posted: 2015-10-09 14:25

Okay The is how my rule is setup

Systems contains /Hyperion **That is The System Group Name**

Event Class contains /Status/WinService

Severity equals Critical

Should this trigger an alert





Subject: Sure, if an Event comes in
Author: [Not Specified]
Posted: 2015-10-09 14:30

Sure, if an Event comes in matching those criteria. You added that Trigger to a corresponding Notification, as well



Subject: Here is my trigger
Author: [Not Specified]
Posted: 2015-10-09 14:40

Here is my trigger

Subject: Still didn't trigger. WTF.
Author: [Not Specified]
Posted: 2015-10-09 14:56

Still didn't trigger. WTF. I stopped and restarted the service. It is currently stopped and Zenoss reconizes it as down. No alert.



Subject: Try looking in $ZENHOME/log
Author: Jane Curry
Posted: 2015-10-09 15:37

Try looking in $ZENHOME/log/zenactiond.log. It is the zenactiond daemon that receives valid triggers from the zeneventserver daemon and then checks whether the trigger is valid for any notifications. By default you only have a low level of debugging but it may show issues. If you don't have a high enough level of logging to spot the problem, you can turn on debug level on-the-fly with:

zenactiond debug

The command toggles the debug level so a second similar command sets the logging level back to normal. You will get a LOT of output with debugging on but it does really show what is going on.

Cheers,
Jane

Email: jane.curry@skills-1st.co.uk    Web: https://www.skills-1st.co.uk



< Previous
Can Someone assist Me on Setting up an alert notifying Me a Windows Service Is D ...
  Next
Zenoss 3.0.3 alerting rules have stopped working
>