Windows host monitoring

A Windows probe can monitor Windows hosts over WMI — its own machine with zero configuration, or remote hosts with DCOM credentials (stored encrypted, always masked in the UI). No agents on the monitored hosts.

Host health (WMI sensor)

• CPU, memory, per-volume disk usage, uptime
• Service watchdog: alert when a required Windows service is not running
• Warn/critical thresholds per metric, with automatic recovery alerts
• Alerts fire after 3 consecutive breaches (~1.5 min sustained) — single spikes are ignored

Event Log monitoring

• Watch System, Application, Security or any other log — local or remote
• Forward only chosen levels (Error / Warning / Info / Audit success / failure)
• Alert rules: level + Event ID + source + message text, firing on N matches within M minutes
• Every event is collected exactly once; floods are capped per poll, never silently lost
• Event viewer in the dashboard with level, ID and text filters