monitoring multi services using scom

Question

Hi,

I have an application that has many services and I want to monitor all that services with one MP and one group. I dont want to create for each services a Windows services.
I know I can create under Authoring-->Windows Services, but there I can create only one services. Maybe is create group only way.

Is there any guide?

Regards

Answer 1

Hi @PerserPolis-1732 ,

there are other ways to achieve that, in a pretty easy way. In order to give you adequate hints, I need to ask some more questions:

• Are the services, located on the same server or on multiple servers?
• Is there a common string amongts the service names (we can use WMI query to get only specific services, but there has to be a common rule)

What you can do i Wildcard Service Monitoring, using a WMI filter:

• You can either author your own MP from scratch, like Kevin describes here:

How to discover and monitor a service with a wildcard for the service name
https://kevinholman.com/2019/09/08/how-to-discover-and-monitor-a-service-with-a-wildcard-for-the-service-name/

• Or you can follow this approach, which is mainly GUI based, but requires some basic XML editing:

SCOM monitoring multiple services running under one account or similar names
https://blog.topqore.com/scom-monitoring-multiple-services-running/

The article covers a basic WMI filter, but I could help you build more complex one.

Hope I could help you out!

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Stoyan Chalakov

Answer 2

Hi,

Based on my understanding, Aggregate monitors group multiple monitors to provide a single health aggregated health state. This provides an organization to all of the monitors targeted at a particular class and provides a consolidated health state for specific categories of operation.

SCOM – Monitoring a Service – Part 4 basic app mp

Answer 3

Hi,

I know that link you send me. But it does not work

Regards

Answer 4

Hey, the WMI query is ineed invalid...Please use this one:

Select * from Win32_Service where (Name like '%d2dweb%') and (Startmode != 'Disabled')  

but this fuilter won't get you all the services you have listed, it is good for testing.

So instead of using this filter in your MP in SCOM (as suggested in the article), in order to query all services above on all the group members, you need this one:

Select * from Win32_Service where (Name like 'CA%') or (Name like '%LogWatch')  

this iwlll get you alll the services starting with CA and also the addditional one - ASLogWatch. If you get the services this way, you don't need the additional condition - Starmode !=Disabled.

If you are testing with wbemtest, you can only test the sevrices, which are present on the computer you are working on, os the second query won't work, except if you have all those service on the same host.
Please let me know if you need aadditional calrifications, will gladlyy help you out.

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Stoyan Chalakov

Answer 5

Hi,

you need to follow this exact guide:

SCOM monitoring multiple services running under one account or similar names
https://blog.topqore.com/scom-monitoring-multiple-services-running/

create group, configure a Service Monitor, export and then edit the MP. During editing you will replace part of the MP with this filter...then it will work, I have done this 1000 times, it works like a charm.
Becasue this article, contains examples which you cannot copy, here is another one, which exaplains the same operation, but you can copy the needed changes:

HOW DO I: CREATE A WILDCARD SCOM SERVICE MONITOR AND RECOVERY
http://www.opsconfig.com/how-do-i-create-a-wildcard-scom-service-monitor-and-recovery/

You can skip the recovery task part if you like.

After you are done and have configured all and re-imported the MP, just go to Monitoring and create new state view, look for the service monitor and you should sse all the services there. In the group you put alll the severs, which have those services running on them.

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)
Regards
Stoyan Chalakov