You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

96 lines
3.3 KiB

<form version="1.1">
<label>Services - Windows</label>
<search id="resultBaseSearch">
<query>
eventtype=windows_index_windows eventtype=hostmon_windows Type=Service
| eval Host=if(isnull(Host), upper(host), upper(Host))
| table Host, Name, StartMode, State
</query>
<earliest>$Time.earliest$</earliest>
<latest>$Time.latest$</latest>
<done>
<condition>
<set token="tok_job_base_search">$job.sid$</set>
</condition>
</done>
</search>
<fieldset submitButton="false" autoRun="true">
<input type="dropdown" token="HostMonitoringHost" searchWhenChanged="true">
<label>Host</label>
<choice value="*">All</choice>
<search>
<query>
| loadjob $tok_job_base_search$
| fields Host
| stats count by Host
| sort Host
</query>
</search>
<fieldForLabel>Host</fieldForLabel>
<fieldForValue>Host</fieldForValue>
<default>*</default>
<initialValue>*</initialValue>
</input>
<input type="multiselect" token="MultiServiceName" searchWhenChanged="true">
<label>Name</label>
<choice value="*">All</choice>
<allowCustomValues>true</allowCustomValues>
<fieldForLabel>Name</fieldForLabel>
<fieldForValue>Name</fieldForValue>
<default>*</default>
<initialValue>*</initialValue>
<prefix>(</prefix>
<suffix>)</suffix>
<valuePrefix>Name="</valuePrefix>
<valueSuffix>"</valueSuffix>
<delimiter> OR </delimiter>
</input>
<input type="dropdown" token="StartMode" searchWhenChanged="true">
<label>StartMode</label>
<choice value="*">All</choice>
<choice value="Auto">Auto</choice>
<choice value="Disabled">Disabled</choice>
<choice value="Manual">Manual</choice>
<fieldForLabel>StartMode</fieldForLabel>
<fieldForValue>StartMode</fieldForValue>
<initialValue>*</initialValue>
<default>*</default>
</input>
<input type="dropdown" token="ServiceState" searchWhenChanged="true">
<label>State</label>
<choice value="*">All</choice>
<choice value="Continue Pending">Continue Pending</choice>
<choice value="Pause Pending">Pause Pending</choice>
<choice value="Paused">Paused</choice>
<choice value="Running">Running</choice>
<choice value="Stopped">Stopped</choice>
<choice value="Stop Pending">Stop Pending</choice>
<choice value="Start Pending">Start Pending</choice>
<fieldForLabel>State</fieldForLabel>
<fieldForValue>State</fieldForValue>
<default>*</default>
<initialValue>*</initialValue>
</input>
<input type="time" token="Time" searchWhenChanged="true">
<label></label>
<default>
<earliest>-15m</earliest>
<latest>now</latest>
</default>
</input>
</fieldset>
<row>
<panel>
<table>
<title>Services</title>
<search base="resultBaseSearch">
<query>
| search Host="$HostMonitoringHost$" $MultiServiceName$ StartMode="$StartMode$" State=$ServiceState$ | stats count by Host, Name, StartMode, State | table Host, Name, StartMode, State</query>
</search>
<option name="wrap">true</option>
<option name="rowNumbers">false</option>
<option name="drilldown">row</option>
</table>
</panel>
</row>
</form>