Hi, I currently have SNMP monitoring the Windows Update Service in XenApp 6.5. For the obvious reasons, Windows Update should not be running. However, from time-to-time, System Center Endpoint Protection will activate the service when it performs its update and sometimes, the service remains running.

I have a Value Lookup as such:

	<SingleInt state="Ok" value="0">
        Stopped
      </SingleInt>	
	  <SingleInt state="Error" value="1">
        Running
      </SingleInt>

Basically, if Windows Update is stopped or disabled, this should be flagged as 'OK'.

If Windows Update is running, this should be flagged as an 'Error'.

However, employing the above, if WU is running, it's listed as OK, and if its down, it's listed as 'Error'. I need the opposite to happen.

Thoughts?

Article Comments

Your logic (Using Lookups) is correct but unfortunately there's an issue:

The way SNMP works, once a service is stopped it is removed from the SNMP svSvcTable, that way the SNMP Windows Service Sensor will throw an exception/error:

This service is either not installed on the target system or it is stopped. To monitor a service and make sure that it is NOT running, see https://helpdesk.paessler.com/en/support/solutions/articles/64529. (code: PE207)

To monitor a service and ensure that it is stopped, please check the ServiceStatus sensor from PRTG Tools Family.

See this thread for details:
64529 - Is there a method to ensure something DOESN'T exist?

Best regards,


Jul, 2015 - Permalink