Monitor Windows Application

[Alan Lim]

Hello,

I would like to monitor Windows application (example abc.exe) and it will trigger an alert where the abc.exe is not running.
The abc.exe is no a service and thus I don't think it can be configured under service.info. Am I right?
If it's correct then where can I create the rule? Appreciate if someone could guide me. Thank you

[Mike2K]

Hi there!

You could create a powershell script which you can run from the Zabbix agent.

Something like this:
PS C:\Users\MichelvanSonSolved-I> Get-Process chrome

Handles NPM(K) PM(K) WS(K) CPU(s) Id SI ProcessName
------- ------ ----- ----- ------ -- -- -----------
344 39 109608 70812 90.63 868 1 chrome
4898 144 387080 328300 3,871.86 1192 1 chrome
518 11 2552 5484 0.30 1640 1 chrome
143 11 2384 4808 0.16 1900 1 chrome
2949 72 751252 292592 1,942.17 2480 1 chrome
325 34 71716 40544 44.06 3528 1 chrome
273 29 121660 36832 22.80 4240 1 chrome
319 45 118512 46032 105.63 4420 1 chrome
273 166 807524 461204 422.70 4564 1 chrome
317 29 58856 28396 3.45 5280 1 chrome
349 45 117696 112992 426.50 5392 1 chrome
267 22 27920 23732 8.16 9432 1 chrome
270 28 47028 26928 3.17 9544 1 chrome
347 33 61512 33024 4.09 9692 1 chrome
370 67 232116 208684 147.06 10008 1 chrome
308 36 84628 36356 5.92 10372 1 chrome
299 41 119416 23604 11.30 10784 1 chrome
322 33 65088 29444 3.53 11236 1 chrome
325 31 60876 35316 81.97 11628 1 chrome
622 49 104528 57044 70.50 11740 1 chrome
344 90 362216 51904 529.31 11816 1 chrome
272 27 46196 29440 1.42 11868 1 chrome
329 35 65676 47112 5.64 12064 1 chrome
365 34 70480 36972 7.28 12248 1 chrome
346 29 42160 21964 9.50 12348 1 chrome
289 27 52876 25072 2.69 12416 1 chrome
377 58 146340 40784 321.64 12484 1 chrome
322 30 58924 30140 3.84 12684 1 chrome
322 30 64084 31664 4.08 13076 1 chrome
298 31 61612 26040 2.36 13156 1 chrome
302 36 88312 59664 102.55 13184 1 chrome
275 29 51052 38492 36.17 13200 1 chrome
337 47 110172 106348 173.27 14168 1 chrome
335 35 78528 105784 3.55 14276 1 chrome
351 38 82700 61164 44.08 15356 1 chrome
326 34 61204 58948 4.53 15592 1 chrome
359 40 113588 80900 8.83 16156 1 chrome
342 43 81352 108544 11.42 16280 1 chrome
362 31 54900 78336 2.34 17044 1 chrome
334 32 68596 37336 15.08 17096 1 chrome
346 32 62712 54604 4.48 17740 1 chrome
319 27 41840 30500 6.05 18256 1 chrome
375 42 193312 38872 31.53 18628 1 chrome
336 34 75448 71832 3.36 19380 1 chrome
365 33 66868 42900 7.86 19820 1 chrome
397 35 73804 69688 23.64 20104 1 chrome
352 36 79732 52488 10.36 20280 1 chrome
338 37 112120 93252 9.23 20552 1 chrome
324 35 81992 44664 5.77 20704 1 chrome
303 31 51392 39736 1.64 20996 1 chrome
321 30 60284 50216 2.08 21132 1 chrome
348 41 89116 120960 6.39 21644 1 chrome
324 32 60900 38708 3.73 21708 1 chrome
266 19 14296 22268 0.09 21848 1 chrome
351 31 53684 59908 4.88 23184 1 chrome

If you play around with the output you should get exactly what you need...

[ankur_hts]

Hi,

I'm new, but i just happened to find this post, which might help -- https://www.zabbix.com/forum/zabbix-...s-applications

[Alan Lim]

Hi,

Thank you for the information.

I have read the link and one guy had mentioned the following parameters.

----------------------------------------------------------------------------------------------------------------------------
do you want to know "my fin.exe is running" ?

item: proc.num[fin.exe]
trigger: proc.num[fin.exe].last(0)}<1

if number of instances <1 - fin.exe not running now. trigger ERROR.
--------------------------------------------------------------------------------------------------------------------------------

I have no idea where to implement it? Put these parameters into agent.conf (client) or Zabbix console (server)?


Thank you

[kbergmanis]

Hi,

item: proc.num[fin.exe]
trigger: proc.num[fin.exe].last(0)}<1

I have no idea where to implement it? Put these parameters into agent.conf (client) or Zabbix console (server)?

Pretty straightforward, tested just now.
Go to Zabbix dashboard\Configuration\ [either Hosts or Templates, depending on your Setup] \ Items\Create New Item. Create item with key that you found - "proc.num[abc.exe]" This might help.
Then in same Host or Template go to Triggers and select Create Trigger, and Set Problem Expression to what you have found - "proc.num[abc.exe].last(0)}<1". Again, this should help.

Tested on my system with notepad and works like a charm.

[ArtursL]

Hi,

First You need to create a proc.num[fin.exe] item via the web interface.
You can read about Zabbix items here

When that's done, you should create a trigger with the expression you provided - {NameOfYourHost:proc.num[fin.exe].last()}<1
You can read about Zabbix Trigger expressions here

[Alan Lim]

Hi All,

Thank you for your guidance.

It's working now and can get the alert if the application failed.

By the way, does the Zabbix has the capability to execute a remote application if receive an alert when an application stops running?

[ArtursL]

Yes, that's possible. You can define a remote command operation in the Configuration - Actions menu that will run the failed process if a specific trigger is active.
You also have to make sure that Remote Commands are enabled in the Zabbix Agent config.
You can read more about actions and operations here
And here's a short Stackoverflow post with screenshots and a discussion about how Zabbix agent launches the process, which may come in handy for you