Monitoring Windows Services

[Chris Fink]

Is there a way for CIM7 to monitor a service running in Windows? I'm pretty sure it doesn't, I just want to double check, and see what's being used to do this.

Thanks

[Brent Ingler · Accepted solution]

Yes, there is. It's called the process monitor, and it's configured through the Compaq Management Agents control panel applet. From what I've seen, it has to be done on each server individually (no group configuration). You can set up the agents to send a trap to the IM server every time a service starts, stops, or both. You just need to know the executable that the service calls, as the list is not the easy-to-identify service names.

Brent

[Chris Fink]

Brent,

Thanks for all your help. I'm still having a problem with this.

I've found the exe's and added them to the process monitor (relaynt.exe added as relaynt). I have it set to monitor if it stops. I set up a query to monitor the server by name and by type:process monitor event.

I've stopped the service and nothing happened. I dropped the data collection interval to 5 seconds, and still nothing happened (stopped and restarted the agents).

Do I need to setup something else on the CIM7 side to see if this stops?

Thanks,
Chris

[Brent Ingler]

There shouldn't be anything else to set up, however I must admit that it's been pretty hit-and-miss when I've used it as well. To my knowledge, there's no polling task that's associated with the Process Monitor, so that isn't it. What you might want to try is re-starting SNMP on the server in question, and see if the monitor sends the traps then. Let me know.

Brent

[Darrin Rawls]

This should work just as you describe - monitor the process via the agents setup via the control panel.

Just make sure the trap destination for the managed device is setup to send traps to the IM7 server...

[Rhino_1]

Hello,

I use this process in our environment and it works just fine. Snmp has a default time frame that it polls for the status. As mentioned before, make sure that it is setup to send its traps to your cim7 server.

-RWU

[Chris Fink]

It is set to send traps to my CIM7 server. I have changed the default collection interval to 30 seconds, since the service itself has been set to restart after 60 seconds.

I have restarted the agents.

What should I be looking for as far as an alert goes, in CIM7?

Right now, I'm waiting for the service to stop in order to test this.

[Rob Buxton]

Just imlpemented this myself. The first thing I'd test is whether the Test Trap gets to your IM Server, this can be sent using the HP Management Agents GUI.

This should trigger a "Major" Event.

[Chris Fink]

I tried to send the test trap. I get the message that the Compaq Management Agents Remote Alerter Agent has not finished initializing or is not enabled. This is via Terminal Services, W2K SP2, Agents Version 5.4.

I did notice in the System Log that the application has stopped twice (once yesterday morning and once this morning). The source is the Foundation Agents. Description:
Compaq Foundation Agent:
Process relaynt has stopped.
[SNMP TRAP: 11011 in CPQHOST.MIB].

I have triple checked the SNMP settings on this server and all is well.

There is 1 thing. When I access the agents via CIM7, it takes a very long time to bring up the summary page, if at all.

[Chris Fink]

Let me correct that. After having read another of Brent's posts about SNMP settings, I have changed my SNMP trap destinations to include the control community as well as change the destination from servername to servername.domain.com.

We'll see if that helps tomorrow morning.

[matthew robey]

Test traps do not work when running via Terminal Services.
Use the server console.

Matt