The event is only triggered by the service monitor and services monitor It is triggerede just before the monitor has failed the number of times assigned to the monitor.

When the event is triggered and the service is still down, a start command is sent to the service, trying to get it back online.

If the service is still not responding, the fail trigger is set, and the monitor changes state to failed.