I was going through the Event Logs on the Kaseya server and found something alarming. This morning, at 7:31am, the Kaseya Server service stopped and restarted (I have the service set to try to restart automatically, just in case something like this happens). The log entries look like:

7:31:42 am 8-Sep-06
Kaseya Server
None
0
N/A

Kaseya Virtual System Administrator v4.6.3.2 started.

7:31:41 am 8-Sep-06
Kaseya Server
None
0
N/A

Kaseya Server was Stopped.


[line]


Fortunately, there were no hiccups experienced by users at the time:


7:33:05 am 8-Sep-06
User connected from 68.226.210.3, Session ID = 195142101

nickpellerin
7:32:41 am 8-Sep-06
Created Wait for remote control request. Session ID = 195142101

nickpellerin
7:32:14 am 8-Sep-06
Created Wait for remote control request. Session ID = 799521969

elarsen
7:32:09 am 8-Sep-06
Admin connected from 192.168.0.32, Session ID = 108170015

elarsen
7:31:52 am 8-Sep-06
User connected from 192.168.0.32, Session ID = 108170015

elarsen
7:31:49 am 8-Sep-06
Created Wait for remote control request. Session ID = 108170015

nickpellerin
7:31:19 am 8-Sep-06
Deleted machine account cx793982-a.tlit61801.trial-period.cherylcheramie without uninstalling first.

nickpellerin
7:28:03 am 8-Sep-06
Downloaded default agent

nickpellerin
7:27:56 am 8-Sep-06
Downloaded default agent


[line]



I decided to check the System Event Log to see what gives, and it shows that the Kaseya Server service has actually stopped and restarted on its own several times in the past few weeks without any warning or explanation:


7:31:42 am 8-Sep-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the running state.

7:31:42 am 8-Sep-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the stopped state.

8:51:14 pm 30-Aug-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the running state.

8:51:13 pm 30-Aug-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the stopped state.

6:15:19 pm 30-Aug-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the running state.

6:15:19 pm 30-Aug-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the stopped state.

10:34:40 am 26-Aug-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the stopped state.

1:02:54 am 26-Aug-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the running state.

1:02:01 am 26-Aug-06
Service Control Manager
None
7036
N/A

The Kaseya Service service entered the stopped state.

[line]


Is anyone else seeing this type of behavior? Sorry for the length of the post.

Thanks

Vince








Legacy Forum Name: Kaseya Service shutting down without warning or reason?,
Legacy Posted By Username: vplaza