Notify when windows service does not exist

Elastic Stack Beats
1

Hi!

As for today my windows module configuration looks like:

- module: windows
  metricsets: ["service"]
  period: 10s
  processors:
  - drop_event.when.not.regexp:
      windows.service.display_name: '^(MyService1|MyService2)$'
  fields:
    env: dev

Everything works fine, but there is an important issue: what if service does not exist? Now, when it is stopped or started, logs are being sent to Kibana. But when I uninstall the service, no logs are provided and as a result in Kibana last received state is "running"...

Is there any possibility, option to enforce logging to Kibana with state like "service-not-exists"?

Best regards,
Mateusz

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.