use the sc. exe command to check on the status of each service.
DESCRIPTION:
SC is a command line program used for communicating with the
NT Service Controller and services.
C:\Documents and Settings\chubbybunny.hare>sc.exe query SplunkForwarder
SERVICE_NAME: SplunkForwarder
TYPE : 10 WIN32_OWN_PROCESS
STATE : 4 RUNNING
(STOPPABLE,NOT_PAUSABLE,ACCEPTS_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
craft a splunk search for 'STATE STOPPED'
C:\Documents and Settings\chubbybunny.hare>sc.exe query SplunkForwarder
SERVICE_NAME: SplunkForwarder
TYPE : 10 WIN32_OWN_PROCESS
STATE : 1 STOPPED
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
add an Alert action to 'Run a script' to start the service
C:\Documents and Settings\chubbybunny.hare>sc.exe start SplunkForwarder
SERVICE_NAME: SplunkForwarder
TYPE : 10 WIN32_OWN_PROCESS
STATE : 2 START_PENDING
(NOT_STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x7d0
PID : 4000
FLAGS :
upVote the Chubbybunny if it helps!
(\__/)
(='.'=)
(")_(")
... View more