Overview

The System Restart Event Monitor checks the Windows system event log on your network devices for events that indicate the system was restarted. It can detect and alert based on the supplied reason codes.

Use Cases

• Receiving alerts about why system restarts were performed
• Detecting problems that necessitated the system to restart

Monitoring Options

This event monitor provides the following options:

Alert With [Info/Warning/Error/Critical] if the Device Cannot Be Contacted

Use this option to get alerts if FrameFlow could not contact the selected device.

Alert with [Info/Warning/Error/Critical] if the device has been restarted (Planned)

Use this option to get alerts about system restarts that were marked as planned.

Alert with [Info/Warning/Error/Critical] if the device has been restarted (Unplanned)

Use this option to get alerts about system restarts that were marked as unplanned.

Alert with [Info/Warning/Error/Critical] when a reason has been entered by an administrator for an unplanned restart

With this option selected the event monitor will alert when it detects a restart event that includes a reason string entered by an administrator. The option to enter a reason string is offered by Windows when an administrator logs in the next time, so these events may not be generated until sometime after the actual restart. It is best used as an audit trail for restart reasons.

Alert with [Warning/Error/Critical] if the device has not been restarted since the last check

Use this option to receive an alert if the device you're monitoring hasn't been restarted since the last time the event monitor ran.

Check reboot events by category

Each restart event includes a category code. Use this option to only be alerted about events with a selected category.

Ignore the reboot event category

Use this option to get alerts about all event categories except for the selected one.

Authentication and Security

The account used for authentication must be part of the Event Log Readers group or have admin rights.

Protocols

Data Points

This event monitor does not generate any data points.

Sample Output

Tutorial

To view the tutorial for this event monitor, click here.