- Solutions
- Support
- Frequently Asked Questions
- Documentation
- Videos
- Itefix Labs
- User Forum Archive (2005 - 2016)
- Store
- Login
check_winservice - NRPE check plugin for Windows services
Download:
NAME
check_winservice - Nagios NRPE plugin for Windows service checks
SYNOPSIS
check_winservice ] ... ] ] ... ] ] ... ] ]
DESCRIPTION
check_winservice is a Nagios plugin to monitor services on the local Windows system. You can filter services based on name, state or start mode. Negation is also possible. Check_winservice has also a service snapshot fingerprint capability which may help you to monitor changes on service configurations.
OPTIONS
- --service service ] ...
-
Specifies services you want to monitor. You can supply comma separated values as well as multiple --service options. In addition, you may exclude a service by prepending a ! (like !alerter). Optional. Defaults to all services.
- --state state ] ...
-
Specifies service states you want to monitor. You can supply comma separated values as well as multiple --state options. In addition, you may negate a state by prepending a ! (like !running). Available state values (case insensitive):
-
- running - stopped - paused - start pending - stop pending - continue pending - pause pending - unknown
-
Optional. Defaults to all states.
- --startmode startmode ] ...
-
Specifies service start modes you want to monitor. You can supply comma separated values as well as multiple --startmode options. In addition, you may negate a start mode by prepending a ! (like !auto). Available start mode values (case insensitive):
-
- auto - manual - disabled - boot - system
-
Optional. Defaults to all start modes.
- --fingerprint
-
Generates a service snapshot fingerprint for the selected set of services. A service snapshot fingerprint is simply an MD5 digest of a string consisting of concatenated values of following properties for each selected service:
-
- Name, DisplayName, PathName, ServiceType, Started, StartMode, StartName, State, Status, Description
-
prints the fingerprint if no parameter is specified. Otherwise it checks if the given fingerprint matches the current fingerprint for the selected services. Returns CRITICAL if it is a mismatch, OK otherwise. That way, you can get an indication about a possible unauthorized service configuration change.
- --warning threshold
-
Returns WARNING exit code if the selected number of services is above the threshold. Optional.
- --critical threshold
-
Returns CRITICAL exit code if the selected number of services is above the threshold. Optional.
- --verbose
-
Produces some output for debugging or to see individual values of samples. Multiple values are allowed.
- --help
-
Produces a help message.
EXAMPLES
check_winservice --startmode auto --state !running --critical 0
Returns CRITICAL if there exists automatic services which are not running.
check_winservice --service TroubleMaker1,TroubleMaker2 --state running --critical 0
Returns CRITICAL if services TroubleMaker1 or TroubleMaker2 are running.
check_winservice --critical 1 -startmode boot,system -service !BootA,!BootB,!SystemC
Returns CRITICAL if there is at least one service except service BootA, BootB and SystemC, which is configured to start during boot or system phase.
check_winservice --warning 200 --critical 300
Returns WARNING or CRITICAL if the number of defined services exceeds 200 or 300 respectively.
check_winservice --startmode !manual --service Manual1,Manual2 --service Manual3 --critical 0
Returns CRITICAL if services Manual1, Manual2 or Manual3 are not configured to run manually.
check_winservice --fingerprint --state running
Print the service snapshot fingerprint for running services.
check_winservice --fingerprint xxxxxxxxxxxxxxxxxxxxxxx --state running
Returns CRITICAL if the specified fingerprint xxxxxxx does not match the service snapshot fingerprint of running services
EXIT VALUES
0 OK 1 WARNING 2 CRITICAL 3 UNKNOWN
AUTHOR
Tevfik Karagulle http://www.itefix.net
SEE ALSO
- Nagios web site http://www.nagios.org
- Nagios NRPE documentation https://assets.nagios.com/downloads/nagioscore/docs/nrpe/NRPE.pdf
- typeperf documentation http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/nt_command_typeperf.mspx
COPYRIGHT
This program is distributed under the Artistic License. https://opensource.org/licenses/artistic-license.php
VERSION
Version 1.1, October 2011
CHANGELOG
- Changes from 1.0
-
- Bug fix: Improper combination of multiple negated elements in the generated WQL string. See Itefix forum topic /node/12871 for more info.
- Initial release