ConfigurationChange
| where ConfigChangeType == "WindowsServices"
and SvcState == "Stopped"
and (
Computer has "NET-SQL2.networkhg.org.uk"
or Computer has "NET-SQL3.networkhg.org.uk"
or Computer has "NET-GISSQL1.networkhg.org.uk"
or Computer has "NET-CALSQL.networkhg.org.uk"
)
and (
SvcDisplayName == "SQL Full-text Filter Daemon Launcher (TEST)"
or SvcDisplayName == "SQL Full-text Filter Daemon Launcher (MSSQLSERVER)"
or SvcDisplayName == "SQL Full-text Filter Daemon Launcher (SQLEXPRESS)"
or SvcDisplayName == " SQL Server (MSSQLSERVER)"
or SvcDisplayName == "SQL Server (Test) "
or SvcDisplayName == "SQL Server Agent (MSSQLSERVER)"
or SvcDisplayName == "SQL Server Agent (Test)"
or SvcDisplayName == "SQL Server Browser"
or SvcDisplayName == "SQL Server Integration Services 10.0"
or SvcDisplayName == "SQL Full-text Filter Daemon Launcher (FIDO)"
or SvcDisplayName == "SQL Full-text Filter Daemon Launcher (SUN)"
or SvcDisplayName == "SQL Server (FIDO)"
or SvcDisplayName == "SQL Server (SUN)"
or SvcDisplayName == "SQL Server Agent (FIDO)"
or SvcDisplayName == "SQL Server VSS Writer"
or SvcDisplayName == " SQL Server Integration Services 11.0"
or SvcDisplayName == "SQL Server Reporting Services (MSSQLSERVER)"
or SvcDisplayName == "SQL Server Reporting Services (SQLEXPRESS)"
or SvcDisplayName == "SQL Server Analysis Services (MSSQLSERVER)"
)
Question to ask, if one of the service gets stopped in any of the server mentioned above, will I get an email with regards to that server or all the servers will be listed
Writing the query is only half of your question. An alert based off this query will need to be created to get an email.
The email would be the result of the query which in this case would be all the combinations of servers/services that are stopped.
Thanks, I have got the answer to this question, I have created another query similar to this, and I created an alert to email to action a group, if any service gets stopped in the combination of servers.
Insights
Top 10 result(s)
Computer NH-P2PAPP01.networkhg.org.uk
ConfigChangeType WindowsServices
ChangeCategory Modified
SourceComputerId d901f954-1d9a-43b5-a0b9-afd0cf688923
SvcChangeType State
SvcDisplayName Integra SPC FINPROD
SvcName SPCFINPROD
SvcState Stopped
SvcPreviousState Running
SvcStartupType Auto
SvcAccount LocalSystem
SvcPath F:\Integra\intspc\FINPROD\bin..\bin\spc_64.exe //RS//SPCFINPROD
SourceSystem OpsManager
MG 00000000-0000-0000-0000-000000000001
ManagementGroupName AOI-4d3a9999-1d9a-4086-8d0c-1a31ac03c9d8
TenantId 4d3a9999-1d9a-4086-8d0c-1a31ac03c9d8
TimeGenerated 2020-06-14T01:00:20
VMUUID 116e3f42-eb84-de2e-00c5-c56ed4f4b80f
LastSnapshotAge 60
Type ConfigurationChange
Related
My PC name is IBALL1. I get an error
Login Failed for user 'iball1\User1'.(Microsoft SQL server, Error: 18456)
I am trying to log in using Windows authentication.
And in SQL Server Configuration Manager > SQl Server Service > SQL Server Logon As Local System.
In error log text file, at C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Log
Log says:
Login failed for user 'iball1\User1'. Reason: Could not find a login matching the name provided. [CLIENT: local machine]
i have also faced same problem then i have followed this intructions
Try this once other wise will look into other solution
Go to SQL Server Configuration Manager
Start->all program->SQL Server 2008 R2->Configuration Tools->SQL Server Configuration Manager
Explore "SQL Server Network Configuration" and then select "Protocols For MSSQLSERVER".
Check your TCP/IP Protocols in right side pane. If it is disabled then enabled it and Restart the "Sql Server(MSSQLSERVER) service" that available in "SQL Server 2008 R2 services pane".
Couple of check points:
1) make sure your your sql express services is up and running with name 'IBALL1'
if not try restarting.
2) while connecting give pc name as prefix for server name too .
I've downloaded SQL Server 2008 from here, and I tried to connect it to Visual Studio 2013, but I get an error when I enter server name (SQLSERVER2008).
How can I know the correct server name?
Here is an image of the error:
Go to "Start" => "All Programs" => "Microsoft Sql Server"
and open "Sql Server Configuration Manager"
From there in left side pan, select "SQL Server Services". In right side pan, there will be something like "SQL Server(instance name)". what is in parenthesis is the name of your sql server. if you accept default setting during installation of sql server then most chances are that name of server is "SQLEXPRESS".
Further info is here
How to check name of sql server
I am trying to connect to a SQL Server 2008. I just installed SQL Server 2008 and Service Pack 2. I open SQL Server Management Studio and try to connect with database engine:
ServerName: Laura\SQLEXPRESS
Authentication: Windows Authentication
User Name: Laura\Laureta
Click Connect and shows the following error:
A network error ocurred while establishing a connection to SQL
server...error 26-Error locating server/instance specified
I also turned off windows firewall
Check sqlserver service if running or not
from start menu > run> services
I'm wondering if I can use some command line command and a config file to setup my Reporting Services after I have installed it. You can do that to install SQL Server so I'm hoping for something that will allow me to have a set config file and then I can quickly do it for a computer/ multiple computers.
Why not just use the management console? Its possible using the bat to command the start and stop of the service:
I do not use this process but theoretically this would work:
INSTALL
sc create SQL Server Reporting Services (MSSQLSERVER)
binpath= "C:\Program Files\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\ReportServer\bin\ReportingServicesService.exe"
net start SQL Server Reporting Services (MSSQLSERVER)
PAUSE
STOP
net stop SQL Server Reporting Services (MSSQLSERVER)
PAUSE
START
net start SQL Server Reporting Services (MSSQLSERVER)
PAUSE
UNINSTALL
net stop SQL Server Reporting Services (MSSQLSERVER)
sc delete SQL Server Reporting Services (MSSQLSERVER)
As for parameters and other directives, I do not have that list.
I can't Install SQL Server 2008 Express on Server 2012 Essentials
Commandline:
/q /ACTION=Install /FEATURES=SQL /INSTANCENAME=SQLEXPRESS2008 /INSTANCEID=SQLExpress2008 /SQLSVCACCOUNT="NT AUTHORITY\Network Service" /AGTSVCACCOUNT="NT AUTHORITY\LOCAL SERVICE" /SQLSYSADMINACCOUNTS="BUILTIN\ADMINISTRATORS"
I get an exception:
Overall summary:
Final result: SQL Server installation failed. To continue, investigate the reason for the failure, correct the problem, uninstall SQL Server, and then rerun SQL Server Setup.
Exit code (Decimal): -2068578304
Exit facility code: 1204
Exit error code: 0
Exit message: Network Service or Local Service account is not permitted for the SQL Server service on a domain contoller. Specify a different account.
Start time: 2012-09-17 15:55:44
End time: 2012-09-17 15:55:56
Requested action: Install
Which account should I use?
you should assign it an account from Active Directory. We typically create DBSERVERNAME_SQL or something similiar for this service account. Because it sounds like you're on a domain controller, I don't think that you'll have a choice but to create an active directory account.