Alert who has initiated the Windows server down

[Tharakaw]

Hi All,
I am trying to alert when the server is going to down. For Windows server when we are shut down it asks the reason for the shutdown. I need to know if there any way to alert who has initiated the shutdown and what would be the reason for shutting down (crash or plan). I have already referenced the article about the alerting the server availability using ping and the agent data receiving(if data is not receiving on particular time period). But I need the solution more advanced than that for server down monitoring.

Thank you.
Best Regards,
Tharaka Wehalla

[Colttt]

I am not an expert with Windows, what is with the windows eventlog? You can parse it and check it for specific words

[Tharakaw]

Hi Colttt,
Thank you for your reply. I am trying to capture the below event log(This is for server rebooting). Once this event is triggered for any server I need to alert the mail to the server owner with the all below details.



************************************************** ************************************************** ************************************************** ************************************************** ****************************
************************************************** ************************************************** ************************************************** ************************************************** ****************************

Log Name: System

Source: USER32

Date: 14.02.2014 03:22:24

Event ID: 1074

Task Category: None

Level: Information

Keywords: Classic

User: SYSTEM

Computer: *schnipp*

Description:

The process C:\Windows\system32\svchost.exe (*schnipp*) has initiated the restart of computer *schnipp* on behalf of user NT AUTHORITY\SYSTEM for the following reason: Operating System: Recovery (Planned)

Reason Code: 0x80020002

Shutdown Type: restart

Comment:

Found on Spiceworks: https://community.spiceworks.com/top...ampaign=growth

************************************************** ************************************************** ************************************************** ************************************************** ****************************
************************************************** ************************************************** ************************************************** ************************************************** ****************************

Thank you.
Best Regards,
Tharaka Wehalla