Windows Services Monitor polled via WinRM shows as Unknown in SAM

Traditionally, the Windows Services component is polled using WMI queries. However, with the introduction of WinRM-based polling, new query errors may occur, causing the component to show as Unknown.

Sample Query:

Get-WmiObject -Class Win32_Service

Querying WMI class 'Win32_Service' with 'select Name,Caption,State,ProcessId from Win32_Service where Name = 'DNS' OR Caption = 'DNS''

Rebuild the corrupted performance counters on the monitored machine by running the following commands from an Administrative Command Prompt. Press ENTER after each command. 

-- Scripts are not supported under any SolarWinds support program or service.
-- Scripts are provided AS IS without warranty of any kind. SolarWinds further
-- disclaims all warranties including, without limitation, any implied warranties
-- of merchantability or of fitness for a particular purpose. The risk arising
-- out of the use or performance of the scripts and documentation stays with you.
-- In no event shall SolarWinds or anyone else involved in the creation,
-- production, or delivery of the scripts be liable for any damages whatsoever
-- (including, without limitation, damages for loss of business profits, business
-- interruption, loss of business information, or other pecuniary loss) arising
-- out of the use of or inability to use the scripts or documentation.

cd c:\windows\system32
lodctr /R

cd c:\windows\sysWOW64
lodctr /R

WINMGMT.EXE /RESYNCPERF

• Performance Logs and Alerts service
• Windows Management Instrumentation (WMI) service

For additional information, see Invalid Query error within component monitor in SAM.

If the issue persists after rebuilding performance counters, consider verifying WMI connectivity and WinRM configuration on the target machine.