Windows services integration - Alerts

I’m having a look at Windows services integration and can receive metrics and query the state of services. I’m now trying to setup a test alert that can tell me the hostname that the specified service isn’t running on.

I’ve setup an alert which triggerse when the count is greater than 0 but the alert text doesn’t include the hostname?

Hi @robin.pilch

Have you configured the win services yml file?
Do you see win services data coming in?

If you follow this link you will see that the alert query should be something like this. You can specify the service name and facet by
SELECT count(*) FROM Metric WHERE metricName = 'windows_service_state' AND state != 'running' AND service_name = 'lfsvc' FACET

Informational links:

1 Like