审核收集转发器 - Windows 服务

Microsoft.SystemCenter.AuditCollectionService.Forwarder.ServiceMonitor (UnitMonitor)

此监视器检查 ACS 转发器 Windows 服务的状态。

Knowledge Base article:

摘要

审核收集服务进入了停止状态。如果审核收集服务未在运行,就不会将审核数据转发至管理服务器。

原因

代理端审核收集配置不正确。

解决方法

检查系统事件日志以确定审核收集服务进入停止状态的原因。

可以使用以下链接尝试重新启动该服务:

启动审核收集服务

Element properties:

TargetMicrosoft.SystemCenter.Agent
Parent MonitorMicrosoft.SystemCenter.AuditCollectionService.AvailabilityHealthRollup
CategoryStateCollection
EnabledTrue
Alert GenerateFalse
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.CheckNTServiceStateMonitorType
RemotableTrue
AccessibilityInternal
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.SystemCenter.AuditCollectionService.Forwarder.ServiceMonitor" Accessibility="Internal" Enabled="true" Target="SCLibrary!Microsoft.SystemCenter.Agent" ParentMonitorID="Microsoft.SystemCenter.AuditCollectionService.AvailabilityHealthRollup" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.CheckNTServiceStateMonitorType" ConfirmDelivery="true">
<Category>StateCollection</Category>
<OperationalStates>
<OperationalState ID="Running" MonitorTypeStateID="Running" HealthState="Success"/>
<OperationalState ID="NotRunning" MonitorTypeStateID="NotRunning" HealthState="Error"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<ServiceName>AdtAgent</ServiceName>
</Configuration>
</UnitMonitor>