Add New Process (or Modify Selected Process) dialog box

Process Instance Label

Enter a display name for process (s) to be monitored. The display name (process label) cannot contain special characters ( . [ ! @ # $ % ? { } ^ \ \ / | + = & * ( ) ) ; ] ) and blank spaces. The label can contain a maximum of 100 characters.

For example: Display name can be sshd_proc, patrolagent_proc.

Monitored Process String

Enter a string that matches names of processes to be monitored. Input may also be a regular expression pattern.

For example:

• The string can be /usr/sbin/sshd, Patrol.*
• To monitor PATROL Agent process running on port 3282 enter the regular expression as PatrolAgent -p 3282$. 

Minimum Count

Use the spinner buttons, or type a value in this field to set a minimum number for which an alert should be generated if the number of processes drops below the specified limit.

Maximum Count

Use the spinner buttons, or type a value in this field to set a maximum number for which an alert should be generated if the number of processes exceeds below the specified limit.

The value in the Maximum Count field must be equal to or greater than the value in the Minimum Count field.

Acceptable Process Owners

Enter the name of the user who owns the process. Regular expressions are supported. 

Use Process Owners for Filtering

Select this check box to filter a monitored process by process owners.

Because the process filtering for the processes is based on owners, the owner of the processes is always a subset of the provided owner set. Thereby, the ProcessOwnerCheck parameter is deactivated when the Use Process Owners for Filtering check box is selected.

Parent Process ID Must Be 1

From the drop list, select one of the following options:

 Yes - indicates that the parent process ID (PPID) for the process must be 1. (Processes with a PPID of 1 are owned by init).
No – indicates that the parent process ID can be a number other than 1.

Alert Delay Count

Type a value in this field to set the number of collection intervals that this host will defer an alert while it waits for the process count to be reestablished across the host or group.

Delaying the initial alert allows the system to rectify a situation without generating an event to notify you that there is a problem.

Alert State

From the drop list select a state change for the following parameters when the Action Deferral Count reaches zero and the process count across the range is out of range:

Process Count Check (ProcessCountCheck)

Process Ownership Check (ProcessOwnerCheck)

Parent PID is 1 (ProcessParentPID1)

OK

Click this button to execute the action that you selected in the Actions group box.

Cancel

Click this button to close the dialog box without saving any of your changes.