How To Monitor Windows Services with ZABBIX ( Correct Way )

[@zabbixtraining]

Follow On Patreon with FREE tier available and plenty of goodies patreon.com/dmitryl Zabbix 7 IT Infrastructure Monitoring Cookbook #affiliatelinks US: amzn.to/3A7Zvis DE: amzn.to/3NFYWiV UK: amzn.to/4hbC74r

[@oscarns6484]

Excellent explanation as always. Although might be useful to mention that once those services are not discovered anymore, it's items and triggers are still going to be present but marked for deletion in 30 days (default vaule). That value can be changed on the hole Zabbix instance or in the Item/Trigger prototypes section for each of those.

[@internetrandomguy938]

Dmitry, but when you update the template, those changes will be overwritten. Could you please share best practices on how to take care of both these needs (having your own list of excluded services and at the same time always having the latest official zabbix template)? Can SERVICE.NAME.NOT_MATCHES be merged (taken as a sum) from two templates?

[@zabbixtraining]

Then you need to change Filter on Host level. User Macro values are set in 3 places Host>Template>Global

[@yttanel]

Was wondering if theres a way for Zabbix to monitor if Windows Defender Firewall has been turned off 🤔

[@zabbixtraining]

Yes, I remember many years I made such a template using WMI. You can monitor a lot of stuff about defender

[@zabbixtraining]

github.com/zabbix/community-templates/tree/main/Operating_Systems/Windows/template_windows_defender_wmi_monitoring

[@yttanel]

​@@zabbixtrainingThank you! 😁

[@SatishKumar-er2lq]

Modifying Template will impact all server, however I want to disable that service in particular box, can I disable in Items..? will it work.? will it impact Template or other servers..? any one please reply. Thanks.

[@zabbixtraining]

Then you need to change Filter on Host level. User Macro values are set in 3 places Host>Template>Global

[@jasongarner107]

In your example with the multiple google services each with a version, can you do |Google*| to grab any google services? The reason you would want to do this is you can add those two services exact names and that would work in Zabbix until Google updates itself and now the service name is different because the version number changed.

[@jasongarner107]

Oh I see, you use .+ so |Google.+| Let me try that.

[@zabbixtraining]

Sure you can, it's a regex. Google for regex101, that will help you

[@BeOCeKa]

I am struggling with regex.... I also need help on Google and wildcard

[@pflugstefan]

You can add "|GoogleUpdaterInternalService.+" . matches any character (except for line terminators) + matches the previous token between one and unlimited times, as many times as possible, giving back as needed