We use Solarwinds Orion Network monitoring tool which gets it's info via SNMP. About once a week the Solarwinds is showing that the DNS service has started on one of our internal DNS servers. When I go to the servers event viewer I can't find a corresponding DNS start event. Solarwinds Tech told me that the event viewer is getting it's info via WMI. So my question is why would SNMP show a DNS start and WMI does not?