Thanks for your time first of all.
I cloned the windows item for DHCP since it was a service item.
I am using it as a template to monitor a program set to run at boot called Network Authority (Arcsight).
It looks like I am getting a monitor/check, but I am trying to get the trigger to respond/email me if Network Authority is NOT running.
Here is what I have set. Is anything wrong with this? I feel that its in the trigger, but not sure.
As for the Process in services.msc
Service name: NetworkAuthority
Path to Executable: D:\DeviceAuthority\bin\NetworkAuthority.exe
Set to start Automatically
and the item
Description: Service State of Arcsight client
Key: service_state[NetworkAuthority]
Type: numeric
Data type: Decimal
Update interval: 30sec
Status: active
and the trigger
Name: Arcsight not running on {HOSTNAME}
expression: {ny-it10.jmm.com:service_state[NetworkAuthority].last(0)}<1
Sevirity: Disaster
I cloned the windows item for DHCP since it was a service item.
I am using it as a template to monitor a program set to run at boot called Network Authority (Arcsight).
It looks like I am getting a monitor/check, but I am trying to get the trigger to respond/email me if Network Authority is NOT running.
Here is what I have set. Is anything wrong with this? I feel that its in the trigger, but not sure.
As for the Process in services.msc
Service name: NetworkAuthority
Path to Executable: D:\DeviceAuthority\bin\NetworkAuthority.exe
Set to start Automatically
and the item
Description: Service State of Arcsight client
Key: service_state[NetworkAuthority]
Type: numeric
Data type: Decimal
Update interval: 30sec
Status: active
and the trigger
Name: Arcsight not running on {HOSTNAME}
expression: {ny-it10.jmm.com:service_state[NetworkAuthority].last(0)}<1
Sevirity: Disaster