R2: Monitoring a process running under svchost.exe


  • Hi,

    I've searched a while but wasn't able to find an answer: does anybody can tell me how to monitor a service running under svchost.exe with SCOM 2007 R2?


    Friday, October 02, 2009 9:20 AM


  • Use a standard unit monitor - not the service monitoring template.

    The service templace cannot monitor any service that launches the process as svchost.exe, because the second step in the service template is to monitor the process.... which wont be uniquely named for those services as they run under svchost.

    It would be better for the template to still allow monitoring of ANY service - and simply just grey out the process monitoring options if it is SVCHost based....

    A standard service monitor does not have this limitation.  It is really better to use unit service monitors in my opinion.... because you are free to create an application class for them - or to target a generic class and then override the monitor for specific machines using a group.

    Sunday, October 04, 2009 7:33 PM