Setting win svcs for monitoring using Display names
list Juha Vuori
Hello,
As a happy user of Xymon for linux, z/VSE and z/VM monitoring since years, I now entered into the world of Windows.
We have a win server with a big amount of auto-generated services, which should be centrally monitored by Xymon server. The problem is that the Display names of the services are human readable, like INV_ABC, but the Service names are generated and horrible, like D070AF2E-E343-40B9-9F23-45B8572309F4.
I am running bbwin in centralized mode and Xymon server version 4.3.12, and I cannot find any other way to start to monitor these services than putting
HOST=SRV123
SVC D070AF2E-E343-40B9-9F23-45B8572309F4 startup=automatic status=started
in analysis.cfg instead of
HOST=SRV123
SVC INV_ABC startup=automatic status=started
which I would like to use.
Is there a way (a setting in the bbwin client or xymon server) to use Display names instead of Service names when referring to the services in analysis.cfg?
To clarify, the data the client sends now already includes the display name:
[svcs]
Name StartupType Status DisplayName
D070AF2E-E343-40B9-9F23-45B8572309F4 automatic started INV_ABC
...
BR,
Juha Vuori
list Mark Mulligan
You can add a text string at the end of the SVC statement SVC Symantec_AntiVirus startup=automatic status=started "TEXT=Symantec_Endpoint_Protection" It will display the text for the SVC so they are more human readable Mark Mulligan Associate Operations Engineer - Splunk and Xymon Admin P Please do not print this e-mail unless necessary
list Juha Vuori
▸
On 01/31/2014 11:19 PM, Mark Mulligan wrote:
You can add a text string at the end of the SVC statement SVC Symantec_AntiVirus startup=automatic status=started "TEXT=Symantec_Endpoint_Protection" It will display the text for the SVC so they are more human readable Mark Mulligan Associate Operations Engineer – Splunk and Xymon Admin
Thank you Mark,
That is a bit better.. however, for SVC test
HOST=SRV123
SVC D070AF2E-E343-40B9-9F23-45B8572309F4 startup=automatic status=started
without TEXT=, e.g. in alert emails for SRV123/svcs, the problem is described as
&red D070AF2E-E343-40B9-9F23-45B8572309F4: No matching service - want started/manual
but with "TEXT=ServiceA" added to the SVC definition, the description reads
&red ServiceA
I'd like to give the description "No matching service - want started/manual" to the poor operators
getting these alert messages, so some kind of embedding would be needed. Where might this parsing be
coded? I could look at the code.
This is for 4.3.13, I'll upgrade to the latest level and see if this has been changed somehow..
Br,
Juha Vuori