All posts
tutorialwindows

Monitor a Windows Server with OxiPulse

By SecuryBlack

Most monitoring agents treat Windows as an afterthought. OxiPulse ships a first-class Windows Service integration — the agent installs via a one-line PowerShell command, registers as a service that starts automatically on boot, and writes structured logs to the Windows Event Viewer.

Prerequisites

  • Windows Server 2016 or later (or Windows 10/11)
  • PowerShell 5.1 or later (pre-installed on all modern Windows versions)
  • An OxiPulse account at app.securyblack.com

1. Install the agent

Open PowerShell as Administrator and run:

irm https://install.oxipulse.dev | iex

The installer:

  • Downloads the correct binary for your architecture (x86_64 or ARM64)
  • Installs it to C:\Program Files\OxiPulse\oxipulse.exe
  • Creates the config directory at C:\ProgramData\oxipulse\
  • Registers and starts the OxiPulse Windows Service

2. Create an agent in SecuryBlack

Log into app.securyblack.com, go to Agents → New agent, give it a name, and copy the token. It is shown only once.

3. Configure the agent

@"
endpoint = "https://ingest.securyblack.com:4317"
token    = "YOUR_TOKEN_HERE"
"@ | Set-Content "C:ProgramDataoxipulseconfig.toml"

4. Restart the service

Restart-Service OxiPulse
Get-Service OxiPulse   # should show Status: Running

5. Verify in the dashboard

Open the agent detail page in SecuryBlack. CPU, RAM, disk and network charts will populate within the first collection interval (10 seconds by default).

Viewing logs

OxiPulse writes structured logs to C:\ProgramData\oxipulse\oxipulse.log (rolling daily). You can also view recent entries directly:

Get-Content "C:ProgramDataoxipulseoxipulse.log" -Tail 50

Service management

# Check status
Get-Service OxiPulse

# Stop the agent
Stop-Service OxiPulse

# Disable auto-start
Set-Service OxiPulse -StartupType Disabled

# Uninstall
Stop-Service OxiPulse
sc.exe delete OxiPulse
Remove-Item "C:\Program Files\OxiPulse" -Recurse
Remove-Item "C:\ProgramData\oxipulse" -Recurse

Auto-update on Windows

OxiPulse checks for updates 5 minutes after startup. When a new version is found it replaces the binary in C:\Program Files\OxiPulse\ and exits cleanly. The Windows Service Manager restarts the process automatically with the new binary — no manual intervention required.