Configuring Windows Processes


This topic provides information about configuring processes.

The following video (4:53) demonstrates the configuration process for Windows process monitoring:


icon-play@2x.png https://youtu.be/LY6-ia43c9U

On the Add Monitoring Configuration window, set the following preferences:

Monitoring Solution

Monitor Profile

Monitor Type

Microsoft Windows Servers

Services

Processes

Operating System

Windows Processes

Provide the following details:

Process Configuration

Field

Description

List of Processes

Click the Add button to configure the process manually. 

Process Specification

Configure Process Monitoring 

Process Label

Specify a label to identify a group of processes. The input that you specify must match the regular expression pattern, '^[0-9a-zA-Z_]+$'.

Process Name

Specify a name or a regular expression pattern that matches the names of processes that must be monitored. Enter only the process name without extension.

Example: If the process name is Notepad, enter Notepad. Do not enter Notepad.exe.

Use Regular Expression for Process Name

Select this check box if you want to monitor all the processes that contain the process name specified.

Process Arguments

Specify the command line arguments for the processes that you want to monitor.

Note:

  • To monitor a specific process, enter the process arguments.
  • To monitor all the instances of the same process, enter wildcard asterisk ( * )
  • If the process argument field is left blank, only the process with no arguments will be monitored.

Example:

C:\Windows\system32\svchost.exe -k NetworkService 
Here, C:\Windows\system32\svchost.exe is considered as no arguments and -k NetworkService is considered as argument.

Use Regular Expression for Process Argument

Select this check box to enter process command line arguments using regular expression pattern.

Minimum Count

Specify a value so that an alarm is raised if the process count drops under this value.

Maximum Count

Specify a value so that an alarm is raised if the process count rises above this value.

Acceptable Process Owner

Specify a name or regular expression pattern that matches the name of the acceptable process owner.

Use Process Owners for Filtering

Select this check box if you want to filter processes based on the process owners.

 Process Settings  

Generate alarm on Process stop

Select this check box to generate an alarm when the process stops.

Generate alarm on Process start

Select this check box to generate an alarm when the process starts.

Restart Command

Enter the command that would be used to restart a stopped process.

Time to terminate runaway Process

Enter the time for which a process is retained and not terminated when the CPU usage for the process exceeds the defined maximum CPU threshold. After the specified time, the process is terminated. The time that you enter must match the following regular expression pattern - ^[0-9]+$.

Automatic Process Monitoring

Disable Automatic Process Monitoring

Select this check box to disable the default monitoring of processes.

Note: By default, all the processes for which you would configure CPU threshold and time duration are monitored. You can configure CPU threshold and time duration by using the CPU Threshold in % and Time Duration in secs fields.

CPU Threshold in %

Specify the CPU threshold (in %) for automatic process monitoring. The value that you enter must match the following regular expression pattern - ^[0-9]+$.By default, this value is set to 90.

Time Duration in secs

Specify the time limit (in seconds) to start the automatic process monitoring. The input that you specify must match the regular expression pattern, '^[0-9]+$'. By default, this value is set to 300.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*