5.02021-11-21T21:52:56ZExchange ServersMicrosoft Exchange Server 2016 - ServicesMicrosoft Exchange Server 2016 - Services## Overview
```
The "Exchange 2016 - Services" is mostly used to restart critical services by using "ACTIONS" and has discovery rules (Which Are Disabled by Default)
This template is based on using the {EVENT.TAGS} as a execute command within Actions.
(Note: The whole Trigger will execute all alerts and do with them as you specify but independently execute based on 5m run-times)
So if there are three (3) services out, it may take fifteen (15) to twenty (20) mins to restart them.
To create an "ACTION" do the following.
Add "All Services" and tag them as (Trigger equals XXX)
See Example: Trigger equals Template Microsoft Exchange Server 2016 - Services: Service: MSExchangeUMCR on Template Microsoft Exchange Server 2016 - Services
If done correctly, you will have A~AE Trigger equals, about (31 Objects)
Once done, under "Operations" to Execute a command on the windows server use the following configuration.
Operation Type: Remote Command (Note: Zabbix Agent must be set to "Allow Remote Commands)
Target list: Current Host
Type: Custom Script
Execute on: Zabbix Agent
Commands: net start {EVENT.TAGS}
Yes, it a "Vague" tutorial (Sorry)
```
## Author
Route Packets
Exchange ServersExchange 2016 Client AccessExchange 2016 MailboxExchange 2016 Transport- Service Status Microsoft Exchange Search Host Controllerservice_state[HostControllerService]5mExchange 2016 MailboxPOST{last(0)}<>0Service: HostControllerService on {HOST.NAME}{EVENT.TAGS}HIGHHostControllerService
- Service Status Microsoft Exchange Compliance Auditservice_state[MSComplianceAudit]5mExchange 2016 Transport{last(0)}<>0Service: MSComplianceAudit on {HOST.NAME}{EVENT.TAGS}INFOMSComplianceAudit
- Service Status Microsoft Exchange Active Directory Topologyservice_state[MSExchangeADTopology]5mExchange 2016 Client AccessExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeADTopology on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeADTopology
- Service Status Microsoft Exchange Anti-spam updateservice_state[MSExchangeAntispamUpdate]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeAntispamUpdate on {HOST.NAME}{EVENT.TAGS}WARNINGMSExchangeAntispamUpdate
- Service Status Microsoft Exchange Compliance Serviceservice_state[MSExchangeCompliance]5mExchange 2016 Transport{last(0)}<>0Service: MSExchangeCompliance on {HOST.NAME}{EVENT.TAGS}WARNINGMSExchangeCompliance
- Service Status Microsoft Exchange DAG Managementservice_state[MSExchangeDagMgmt]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeDagMgmt on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangeDagMgmt
- Service Status Microsoft Exchange Transport Deliveryservice_state[MSExchangeDelivery]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeDelivery on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangeDelivery
- Service Status Microsoft Exchange Diagnosticsservice_state[MSExchangeDiagnostics]5mExchange 2016 Client AccessExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeDiagnostics on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeDiagnostics
- Service Status Microsoft Exchange EdgeSyncservice_state[MSExchangeEdgeSync]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeEdgeSync on {HOST.NAME}{EVENT.TAGS}WARNINGMSExchangeEdgeSync
- Service Status Microsoft Exchange Searchservice_state[MSExchangeFastSearch]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeFastSearch on {HOST.NAME}{EVENT.TAGS}HIGHMSExchangeFastSearch
- Service Status Microsoft Exchange Frontend Transportservice_state[MSExchangeFrontEndTransport]5mExchange 2016 MailboxPOST{last(,0)}<>0Service: MSExchangeFrontEndTransport on {HOST.NAME}{EVENT.TAGS}HIGHMSExchangeFrontEndTransport
- Service Status Microsoft Exchange Health Manager Recoveryservice_state[MSExchangeHMRecovery]Exchange 2016 Client AccessExchange 2016 Mailbox{last(0)}<>0Service: MSExchangeHMRecovery on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangeHMRecovery
- Service Status Microsoft Exchange Health Managerservice_state[MSExchangeHM]5mExchange 2016 Client AccessExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeHM on {HOST.NAME}{EVENT.TAGS}HIGHMSExchangeHM
- Service Status Microsoft Exchange IMAP4 Backendservice_state[MSExchangeIMAP4BE]5mExchange 2016 Client Access{last(0)}<>0Service: MSExchangeIMAP4BE on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangeIMAP4BE
- Service Status Microsoft Exchange IMAP4service_state[MSExchangeImap4]5mExchange 2016 Client AccessPOST{last(0)}<>0Service: MSExchangeImap4 on {HOST.NAME}{EVENT.TAGS}HIGHMSExchangeImap4
- Service Status Microsoft Exchange Information Storeservice_state[MSExchangeIS]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeIS on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangeIS
- Service Status Microsoft Exchange Mailbox Assistantsservice_state[MSExchangeMailboxAssistants]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeMailboxAssistants on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeMailboxAssistants
- Service Status Microsoft Exchange Mailbox Replicationservice_state[MSExchangeMailboxReplication]5mExchange 2016 Client AccessPOST{last(0)}<>0Service: MSExchangeMailboxReplication on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeMailboxReplication
- Service Status Microsoft Exchange Notifications Brokerservice_state[MSExchangeNotificationsBroker]5mDISABLEDExchange 2016 Client AccessExchange 2016 MailboxExchange 2016 Transport{last(0)}<>0Service: MSExchangeNotificationsBroker on {HOST.NAME}{EVENT.TAGS}DISABLEDWARNINGMSExchangeNotificationsBroker
- Service Status Microsoft Exchange POP3 Backendservice_state[MSExchangePOP3BE]5mExchange 2016 Client Access{last(0)}<>0Service: MSExchangePOP3BE on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangePOP3BE
- Service Status Microsoft Exchange POP3service_state[MSExchangePop3]5mExchange 2016 Client AccessPOST{last(0)}<>0Service: MSExchangePop3 on {HOST.NAME}{EVENT.TAGS}HIGHMSExchangePop3
- Service Status Microsoft Exchange Replicationservice_state[MSExchangeRepl]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeRepl on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeRepl
- Service Status Microsoft Exchange RPC Client Accessservice_state[MSExchangeRPC]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeRPC on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeRPC
- Service Status Microsoft Exchange Service Hostservice_state[MSExchangeServiceHost]5mExchange 2016 Client AccessExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeServiceHost on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeServiceHost
- Service Status Microsoft Exchange Transport Submissionservice_state[MSExchangeSubmission]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeSubmission on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangeSubmission
- Service Status Microsoft Exchange Throttlingservice_state[MSExchangeThrottling]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeThrottling on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeThrottling
- Service Status Microsoft Exchange Transport Log Searchservice_state[MSExchangeTransportLogSearch]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeTransportLogSearch on {HOST.NAME}{EVENT.TAGS}AVERAGEMSExchangeTransportLogSearch
- Service Status Microsoft Exchange Transportservice_state[MSExchangeTransport]5mExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeTransport on {HOST.NAME}{EVENT.TAGS}DISASTERMSExchangeTransport
- Service Status Microsoft Exchange Unified Messaging Call Routerservice_state[MSExchangeUMCR]5mDISABLEDExchange 2016 Client AccessPOST{last(0)}<>0Service: MSExchangeUMCR on {HOST.NAME}{EVENT.TAGS}DISABLEDAVERAGEMSExchangeUMCR
- Service Status Microsoft Exchange Unified Messagingservice_state[MSExchangeUM]5mDISABLEDExchange 2016 MailboxPOST{last(0)}<>0Service: MSExchangeUM on {HOST.NAME}{EVENT.TAGS}DISABLEDAVERAGEMSExchangeUM
- Service Status Microsoft Exchange Server Extension for Windows Server Backupservice_state[wsbexchange]DISABLEDExchange 2016 Mailbox{last(0)}<>0Service: wsbexchange on {HOST.NAME}{EVENT.TAGS}DISABLEDAVERAGEwsbexchange
{#SERVICE.NAME}service_stateState of service "{#SERVICE.NAME}" ({#SERVICE.DISPLAYNAME})service_state[{#SERVICE.NAME},state]1wExchange 2016 Client AccessExchange 2016 MailboxExchange 2016 TransportWindows service state{last()}<>0RECOVERY_EXPRESSION{last()}<>0{#SERVICE.DISPLAYNAME} ({#SERVICE.NAME}) {#SERVICE.STATENAME} on {HOST.NAME} and be able to extract {#SERVICE.NAME} from itDISABLEDYES{#SERVICE.NAME}Windows service state0Running1Paused2Start pending3Pause pending4Continue pending5Stop pending6Stopped7Unknown255No such service