We are monitoring a number of services in each server which are related to antivirus, web protection and security. There are altogether 10 + services per server. The issue is whenever there is an update on AV signature or threat database etc, services stop and starts automatically and we do receive 20+ email alert per server - one for each service down and the other for each service up. We are monitoring 400+ servers. You can calculate the number of emails this is generating!!

Is there a way to group these services into one and I only receive one alert instead of 10+ per server when service goes down?

Thanks,

Ash