Windows Event Log Service Health Monitor

Operational States

Name State Description
Service Not Running Error The Event Log service is not running
Service Running Success The Event Log service is running

Overridable Parameters

Parameter Name Default Value Description Override
Alert only if service startup type is automatic   This may only be set to 'true' or 'false'. If set to 'false', then alerts will be triggered no matter what the startup type is set to. Default is 'true'.

Alert Details

Monitor State Message Priority Severity Auto Resolution
Service Not Running (Error) Windows Event Log Service Stopped Medium Critical Yes

Run As Profiles

Name
Default

Monitor Knowledgebase

Summary

The Event Log service enables event log messages issued by Windows-based programs and components to be viewed in Event Viewer. The service can’t be stopped through administrative action and is required for the Operating System to function.

Causes

A service can stop for many reasons, including:

  • The service encountered an exception that stopped the service.

  • The service was improperly configured, which prevented it from starting.

  • The service was prevented from starting because the user account assigned to the service could not be authenticated.

Resolutions

If this service is stopped, the Operating System should be restarted. If restarting the service doesn’t resolve the issue and the Operating System is unable to boot in Normal Mode the configuration of the service may need to be updated in Safe Mode. Once in Safe Mode the service should be configured with a startup type of “Automatic” and the Log On configuration should be set to “Local System”.

External References
This monitor does not contain any external references.

See Also for Windows Server Operating System Management Pack


Downloads for Windows Server Operating System Management Pack

AZURE OPTIMIZATION ASSESSMENT GET STARTED
MIGRATION TO AZURE GET STARTED
SYSTEM CENTER MIGRATION TO AZURE GET STARTED
MIGRATION TO AZURE FOR SQL AND WINDOWS 2008 GET STARTED