If the service goes down itself, it will generate Error in the Event log; you can use some syslog application from a differnt machine to monitor the event log. There is a good possibility when the service goes down, it will generate Dr.Watson Log & User.DMP; Open a TAC case with the above information along with detailed CTI & SDL CTI traces to find the root cause.