Detects SQL Server 2014 DB Engine restart. Note: This rule is disabled by default. Please use overrides to enable it when necessary.
This rule detects restart of SQL Server.
This rule detects that SQL DB Engine service was in "Stopped" state during some short period and turned back to “Running” state after that. The allowed duration of unavailability is defined by "Unavailable Time" parameter and could be overridden. By default, this value is 900 seconds (15 minutes).
Name | Description | Default Value |
Unavailable Time (seconds) | The workflow will try to catch a service start event during this time frame, after event service stops. | 900 |
Enabled |
| No |
Generates Alerts |
| Yes |
Priority |
| 1 |
Severity |
| 1 |
Target | Microsoft.SQLServer.2014.DBEngine | ||
Category | AvailabilityHealth | ||
Enabled | False | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
|
ID | Module Type | TypeId | RunAs |
---|---|---|---|
ServiceRestart | DataSource | Microsoft.SQLServer.2014.WindowsServiceRestartDetectionProvider | Default |
GenerateAlert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="Microsoft.SQLServer.2014.DBEngineServiceRestart" Enabled="false" Target="SQL2014Core!Microsoft.SQLServer.2014.DBEngine" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>AvailabilityHealth</Category>
<DataSources>
<DataSource ID="ServiceRestart" TypeID="Microsoft.SQLServer.2014.WindowsServiceRestartDetectionProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<ServiceName>SQL Server ($Target/Property[Type="SQL2014Core!Microsoft.SQLServer.2014.ServerRole"]/InstanceName$)</ServiceName>
<CorrelatorInterval>900</CorrelatorInterval>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertMessageId>$MPElement[Name="Microsoft.SQLServer.2014.DBEngineServiceRestart.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Target/Property[Type="SQL2014Core!Microsoft.SQLServer.2014.ServerRole"]/InstanceName$</AlertParameter1>
<AlertParameter2>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</AlertParameter2>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>