We recently setup Zabbix and had it go through and do a low level discovery. Very nice job!
However, because it was a new installation, I didn't have in the entries to have it ignore certain Windows services. For example, ShellHWDetection (which only runs when someone logs in) is an "automatic" service.
So now I have about 80 systems that are all reporting as being in error for this. Another service that is similar is sppsvc (checks in with Microsoft to make sure the license is good).
What I would like to do is setup an Action to go trough and if *any* of the services we want to ignore are triggered, then have all of the Triggers for certain services Disabled.
Logically:
If ( ShellHWDetection is Triggered ) or ( sppsvc is Triggered )
Then ...
(disable triggering for ShellHWDetection)
(disable triggering for sppsvc)
(disable triggering for TrustedInstaller)
That way, even in the future, if we add a "service to be ignored" we can also have it make sure they are all disabled in one pass.
I checked "Mass Update" options, but you cannot disable a service by name/format/name fragment/whatever.
So, looking at Actions, I think I figured out how to detect them as running...how do I perform the "disable" for the triggers though?
Thanks!
--Kevin.
However, because it was a new installation, I didn't have in the entries to have it ignore certain Windows services. For example, ShellHWDetection (which only runs when someone logs in) is an "automatic" service.
So now I have about 80 systems that are all reporting as being in error for this. Another service that is similar is sppsvc (checks in with Microsoft to make sure the license is good).
What I would like to do is setup an Action to go trough and if *any* of the services we want to ignore are triggered, then have all of the Triggers for certain services Disabled.
Logically:
If ( ShellHWDetection is Triggered ) or ( sppsvc is Triggered )
Then ...
(disable triggering for ShellHWDetection)
(disable triggering for sppsvc)
(disable triggering for TrustedInstaller)
That way, even in the future, if we add a "service to be ignored" we can also have it make sure they are all disabled in one pass.
I checked "Mass Update" options, but you cannot disable a service by name/format/name fragment/whatever.
So, looking at Actions, I think I figured out how to detect them as running...how do I perform the "disable" for the triggers though?
Thanks!
--Kevin.