Monitor individual windows services?

Troubleshooting
1

Apologies if this is obvious or has been covered…I’ve looked through here and have looked through documentation but am still very unsure.

I’m looking at checkmk as a replacement for an aging Nagios server and am impressed so far and I have played a little for example and have one of my Windows servers logging print queues which is great, but on the old Nagios server I have it monitoring the spooler service to ensure it is running along with a bunch of other services.

I’m sure it should be straight forward I just cannot seem to figure out how to do it…appreciate any assistance if possible!

2

I think I figured this out but wanted to reply in case anyone has anything to add or correct?

I created a service discovery rule for the Spooler service and went back to my host and the service is now there to be added to be monitored.

So it looks like I just have to add the specific Windows service names to the discovery rules as needed?

3

Yes - only add “Spooler” in the Windows Service Discovery. I think I remember, that case sensitive is important. Here is my list, unfortunately in german

Druckerwarteschlange (Spooler)
Remote Desktop (TermService) - Deaktiviert
Gruppenrichtlinienclient (gpsvc)
Arbeitsstationsdienst (LanmanWorkstation)
Datei und Druckerfreigabe (LanmanServer)
Netlogon (Netlogon)
Aufgabenplanung / Taskmanager (Schedule)
Basisfiltermodul (BFE)
Benutzerprofildienst (ProfSvc)
Benachrichtigungsdienst für Systemereignisse (SENS)
COM+ Ereignissystem (EventSystem)
DCOM-Server-Prozessstart (DcomLaunch)
Zertifikatsverteilung (CertPropSvc) - Deaktiviert
DFS-Namespace (Dfs)
DFS-Replication (DFSR)
Diagnoserichtliniendienst (DPS)
Dienst für die Benutzerzugriffprotokollierung (UALSVC)
Distributed Transaction Coordinator (MSDTC)
IP-Hilfsdienst (iphlpsvc)
Infrastrukturdienst für Hintergrundaufgaben (BrokerInfrastructure)
Kerberos-Schlüsselverteilungscenter (Kdc)
Kryptografiedienst (CryptSvc)
Lokaler Sitzungs-Manager (LSM)
NLA Network Location Awareness (NlaSvc)
NTDS (NTDS)
Netzwerkrichtlinienserver (IAS)
Netzwerkspeicher-Schnittstellendienst (nsi)
Plug Play (PlugPlay) - Deaktiviert
SNMP Dienst (SNMP)
Sicherheitskonto-Manager (SamSs)
Stromversorgung (Power)
Systemereignissbroker (SystemEventsBroker)
TCP/IP-NetBIOS-Hilfsdienst (lmhosts) - Deaktiviert
RPC-Endpunktzuordnung (RpcEptMapper)
RPC-Remoteprozeduraufruf (RpcSs)
Windows-Ereignisprotokoll (EventLog)
Windows Defender Firewall (mpssvc)
Windows-Remoteverwaltung (WinRM)
Windows-Verbindungs-Manager (Wcmsvc)
Windows-Verwaltungsinstrumentation (Winmgmt)
SSDP Suche (SSDPSRV) - Deaktiviert
Windows Search (WSearch)

4

Hi @wolfhead,

I think this is the relevant part of the docs for your question:

Also make sure to mark the answer to your question, so everyone looking at this can quickly understand what the solution is.

5

Thank you yes I had read that I think I was just confused as to where exactly I was setting that up but I have it working now.

1 Like
6

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed. Contact an admin if you think this should be re-opened.