{"id":10282,"date":"2021-04-26T06:14:21","date_gmt":"2021-04-26T13:14:21","guid":{"rendered":"https:\/\/www.coretechnologies.com\/blog\/?p=10282"},"modified":"2022-09-04T06:35:37","modified_gmt":"2022-09-04T13:35:37","slug":"restart-service-when-event-reported","status":"publish","type":"post","link":"https:\/\/www.coretechnologies.com\/blog\/windows-services\/restart-service-when-event-reported\/","title":{"rendered":"Q&A: How do I Restart a Windows Service when an Event is Reported?"},"content":{"rendered":"
\"Q&A:<\/div>\n
\n  We have a service that should restart whenever another service writes a particular event to the Event Viewer. How can I do that?<\/p>\n

— Russell<\/p>\n<\/div>\n

Hi Russell.<\/p>\n

To create that workflow, you can introduce an “Event Trigger” with the Windows Task Scheduler<\/a>. However, that will only work if your triggering event is well defined, with a unique, non-zero identifier.<\/p>\n

For example, event 1026<\/a> — reported when a .NET application crashes — is an excellent candidate:<\/p>\n

\"Event<\/a><\/div>\n

However, you are out of luck if your entry has a generic ID or is 0, as pictured here:<\/p>\n

\"Events<\/a><\/div>\n

Unfortunately there is no good way to create a trigger based on a poorly defined event.<\/p>\n

How to setup an “Event Trigger” Task that restarts your Windows Service<\/h2>\n

Assuming that your event has a unique ID, here’s the step-by-step process to recycle your service when the event arrives:<\/p>\n

    \n
  1. \n

    First, create a batch file that restarts your service.<\/p>\n

    The file should contain two commands — one to stop your service and another to start it again, like this:<\/p>\n

    \nNET STOP <Service-Name>
    \nNET START <Service-Name>\n<\/div>\n

    <Service-Name> is the name of your Windows Service<\/a>.<\/p>\n

    For example, here is the batch file we created to recycle the Print Spooler service:<\/p>\n

  2. \n

    Launch the Windows Event Viewer.<\/p>\n

    To do so, press the Windows + R<\/b> keys to open the Run<\/b> window, and then type eventvwr.msc<\/b>.<\/p>\n<\/li>\n

  3. \n

    In the Event Viewer, navigate to find and highlight an instance of the entry that should trigger your service to restart.<\/p>\n

    To illustrate, we’ll work with event 1026 in the Application log:<\/p>\n

  4. \n

    Right-click the event’s row and select Attach Task To This Event<\/b>:<\/p>\n

  5. \n

    In the wizard, give your task a friendly name. We’re called ours “Restart Service When Event 1026 Occurs”:<\/p>\n

  6. \n

    Confirm the details of your trigger and click Next<\/b> to move on:<\/p>\n

  7. \n

    Choose Start a program<\/b> and click Next<\/b> to continue:<\/p>\n

  8. \n

    Enter the full path to the batch file you created in step 1.<\/p>\n

  9. \n

    Review the summary and make sure everything looks good. This is your last chance to go back and make changes before creating the task.<\/p>\n

    Check the Open the Properties dialog for this task when I click Finish<\/b> box. We’ll need to tweak a few settings to ensure that your service restarts smoothly from the batch file.<\/p>\n

  10. \n

    In the Properties window, affirm a couple of options:<\/p>\n

    Run whether user is logged on or not<\/b>. Otherwise, your service will only restart when you’re logged on.<\/p>\n

    Run with highest privileges<\/b>. Necessary because restarting your service likely requires administrative rights.<\/p>\n

  11. \n

    As a security precaution, please enter your password:<\/p>\n

  12. \n

    And finally, the Event Viewer confirms that it has created your new task:<\/p>\n

    \"Create<\/a><\/div>\n

    Click OK<\/b> to wrap up.<\/p>\n<\/li>\n<\/ol>\n

    That’s it!<\/p>\n

    The next time the event enters the Windows Event Logs, the Task Scheduler will run the batch file, which will restart your service.<\/p>\n

    Managing the new “Event Trigger” Task<\/h2>\n

    The new task will reside in the Event Viewer Tasks<\/b> section of the Task Scheduler:<\/p>\n

    \"Task<\/a><\/div>\n

    You can make adjustments to the task there. <\/p>\n

    One final Task Scheduler tip: If you see a link labeled Enable All Tasks History<\/b> in the Actions<\/b> section on the right, be sure to click it:<\/p>\n

    \"Task<\/a><\/div>\n

    That setting tells Task Scheduler to keep a record every time a task runs. And with that tracking in place, after your event has been reported you can check the task’s History<\/b> tab to confirm that the task ran and your batch file executed successfully.<\/p>\n

    Bonus #1: Send an email alert when the service restarts<\/h2>\n

    Would you like to be notified whenever the event appears and the service restarts?<\/p>\n

    If so, you should update your script to call a command line tool that will deliver an email message.<\/p>\n

    We recommend using a PowerShell script, or SwithMail, as described in this article on sending email without Outlook<\/a>.<\/p>\n

    Bonus #2: Use ServicePilot to restart a “slow” service that takes a while to stop<\/h2>\n

    The NET command can run into trouble if your service takes more than 30 seconds to stop. In that scenario, NET STOP gives up and the subsequent NET START will fail because the service isn’t in the right state. The end result is a dead service!<\/p>\n

    In that case, we recommend using our free ServicePilot<\/a> utility instead of the NET command.<\/p>\n

    For example, here is our script that replaces NET with ServicePilot:<\/p>\n

    \"Restart<\/a><\/div>\n

    Notice the option to give the service up to 120 seconds to stop. You should specify a duration that works for your service.<\/p>\n

    \nAll the best!<\/p>\n