Team: Huntress EDR
Product: ConnectWise Automate
Environment: Huntress integration
Summary: Setup guide for the ConnectWise Automate integration for monitoring Huntress Agent and Huntress Updater service statuses.
Follow the steps below to create a Service Monitor in ConnectWise Automate that monitors the Huntress Agent and Updater service statuses.
If you are also interested in the Remote Monitor (Orphaned Agent), you can kill 2 birds with one stone by downloading and uploading the XML expansion on our GitHub here: https://github.com/huntresslabs/deployment-scripts/tree/main/ConnectWise-Automate/Monitors
NOTE: This only works on devices running Windows
Creating Advanced Search Group
If you have already created a search group either by following Automate to Manage Billing, or by creating one on your own, you can skip to section 2.
- Go to Automation > Advanced Searches and create a new search
- Customize the search to your liking, below is what we recommend. Save the search as "Software\Software - Huntress Agent Installed" (or something similar).
- Go to Browse > Groups. Right-click on "Groups" and hit "create group"
- Set the "Computers" under "AutoJoin Searches." And add the "Huntress" product we created earlier under the "Managed Services" Tab.
Creating the Monitor
- Open the group created in Section 1.
- Go to Computer > Remote Monitors.
- Click Add at the bottom.
- Select Monitor Services and Processes.
- Chose an Alert template
- (the settings on this page is up to you and your environment/requirements)
- You can customize the Alert Style:
- This guide is using the built-in ~Autofix Action Restart Service” to restart the Huntress service. If you have customized the Alert Template, this monitor will follow those alert rules.
- (the settings on this page is up to you and your environment/requirements)
- Click Next
- The alert subject/body can be customized:
- The alert subject/body can be customized:
- Click Next
- Give the Monitor a name
- Give the Monitor a name
- Click Finish
- This is what your monitor should look like: (IMPORTANT: Make sure you filter the monitor to only Windows machines, as Macs do not have Services)
Checking Monitor
- Open Automations > Monitors from the ConnectWise Automate Control Center
- Click the System Monitors tab
- Search for your monitor based on the name you created in the previous section
- Example Queries (query depends on what you set the name to):
- SVC-Huntress
- %huntress%
- scv-hunt%
- %hunt%
- Example Queries (query depends on what you set the name to):
Comments
0 comments
Please sign in to leave a comment.