Forum Discussion

BHill777's avatar
BHill777
Copper Contributor
Apr 26, 2022

FTP Service outage Alert needed on Azure vm

Greetings!

 

I have a customer facing server in Azure that needs alerts in place due to the critical nature of it's use. I have alerts in place for the basic functions. However, I am curious to know if I can set up an Azure alert for a third party app that may have failed/stoped on the server.  I also need an alert for the FTP service and all I can find in Azure monitoring is a "canned" query alert for "all windows services" that stopped.  I only need an alert for the ftp service being in a stopped state.  Any assistance would be appreciated.

 

This is the "built in" "canned" query already found in Azure for any windows services being stopped:

// Stopped Windows services
// Find all windows services that stopped in the last 30 minutes.
// To create an alert for this query, click '+ New alert rule'
ConfigurationChange // (relies on the Change Tracking solution):
| where ConfigChangeType == "WindowsServices" and SvcChangeType == "State"
| where SvcPreviousState == "Running" and SvcState == "Stopped"
| where SvcStartupType == "Auto" and TimeGenerated > ago(30m)

  • You need to add a filter on the service display name in the query :
    ConfigurationChange
    | where TimeGenerated > ago(30m
    | where SvcDisplayName =~ "your service display name"
    | where ConfigChangeType == "WindowsServices" and SvcChangeType == "State"
    | where SvcPreviousState == "Running" and SvcState == "Stopped"
    • BHill777's avatar
      BHill777
      Copper Contributor
      Will give this a shot, thank you for the response.

Resources