How to monitor for new evets in eventlog and trigger an action

Question

question

phantom2000-5377 asked May 14, '22 LimitlessTechnology-2700 answered May 23, '22

How to monitor for new evets in eventlog and trigger an action

I would like to know the logic or the piece of powershell code that can be used to monitor for a service shutdown event and trigger an action. So when the service stopped, event is written to the eventlog. Powershell should detect that and trigger the action. But this service start/stop actions can be several at a given time. So I want to run the powershell script every 5 minutes, detect whether there is a service shutdown event within that time frame and trigger an action. How can I achieve this? Any help would be greatly appreciated.

Thanks.

windows-server windows-server-powershell

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2022-05-14T18:21:12.817Z

RichMatheisen-8856 answered May 14, '22

A WMI event consumer will do that. use-powershell-to-monitor-and-respond-to-events-on-your-server

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 2 · 2022-05-23T08:35:57.457Z

LimitlessTechnology-2700 answered May 23, '22

Hello

Thank you for your question and reaching out. I can understand you are having query related to Actions while Windows Events occurred.

Scheduled Tasks should get invoked whenever the event Trigger conditions are met.
Depending on the Action that is being executed (e.g. Start a program) that may run continually until the process / application is terminated. Event based Triggers should be able to run from startup and before logon.

--If the reply is helpful, please Upvote and Accept as answer--

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question