Windows Process (NT_PROCESS)
Attributes (parameters)
The following attributes are available for this monitor type:
Name | Description | Unit | Default Performance Key Indicator (KPI) |
---|---|---|---|
Number of processes monitored (PROCCount) | Displays the number of running instances of a process. | # | No |
Handle count (PROCHandleCount) | Displays the number of handles associated with a process. | Handles | No |
IO data bytes per second (PROCIODataBytesPerSec) | Displays the rate that the process is issuing bytes to I/O operations, including file, network, and device I/O operations. I/O operations that involve control operations are not included. | Bytes/Sec | No |
IO read bytes per second (PROCIOReadBytesPerSec) | Displays the rate that the process is issuing read bytes from I/O operations, including file, network, and device I/O operations. | Bytes/Sec | No |
IO read operations per second (PROCIOReadOpersPerSec) | Displays the rate that the process is issuing read I/O operations, including file, network, and device I/O operations. | Opers/Sec | No |
IO write bytes per second (PROCIOWriteBytesPerSec) | Displays the rate that the process is writing bytes to I/O operations, including file, network, and device I/O operations. | Bytes/Sec | No |
IO write operations per second (PROCIOWriteOpersPerSec) | Displays the rate that the process is issuing write I/O operations, including file, network, and device I/O operations. | Opers/Sec | No |
Process owner check (PROCOwnerCheck) | Checks the process owner. This parameter goes into an alarm state if the process owner is a user other than the acceptable owners. The annotation displays the name of the user who is not the acceptable owner. |
| No |
Page faults per second (PROCPageFaultsPerSec) | Displays the number of page faults per second by the threads executing in this process. A page fault occurs when a thread refers to a virtual memory page that is not in its working set in main memory. | per sec | No |
Page file bytes (PROCPageFileBytes) | Displays the current number of bytes this process has used in the paging file. | KB | No |
User time (PROCUserTimePercent) | Displays the percentage of elapsed time that this process's threads have spent executing code in user mode. | % | No |
Indicates if the process id has changed since the last collection cycle (PROCPidChange) | Indicates whether the process ID is changed between two collection cycles. This parameter can have the following values:
|
| No |
Private memory (PROCPrivateBytes) | Monitors the private bytes used by each monitored process. | KB | No |
Privileged time (PROCPrivTimePercent) | Displays the percentage of elapsed time that this process's threads have spent executing code in privileged mode. | % | No |
Processor time (PROCProcessorTimePercent) | Displays the percentage of elapsed time the selected process used the processor to execute instructions. Use this parameter to learn the distribution of processor time between processes. This parameter contains a recovery action that automatically attempts to kill a process when PROCProcessorTimePercent is in alarm for a specified amount of time. Recommendations If this parameter is consistently at or near 100 percent, the processor may be the bottleneck. However, if a memory bottleneck exists, the increased paging activity may be taxing the processor and masking what is primarily a memory bottleneck instead of a processor bottleneck. Refer to the following parameter topics to help identify memory bottlenecks:
| % | Yes |
Process status (PROCStatus) | Displays the status of the associated process. |
| No |
Thread count (PROCThreadCount) | Displays the number of threads currently active in this process. | Threads | No |
Virtual bytes (PROCVirtualBytes) | Monitors the virtual bytes used by each monitored process. | KB | No |
Working set (PROCWorkingSet) | Displays the current number of bytes in the working set of this process. The working set is the set of memory pages touched recently by the threads in the process. | KB | Yes |
IO Data Operations Per Second (PROCIODataOpersPerSec) | Displays the rate that the process is issuing read and write I/O operations, including file, network, and device I/O operations. | Operations/second | No |
Processes Details (PROCDetails) | Displays the details of running instances of process being monitored, such as:
| None | No |
Process count check (PROCCountCheck) | Checks the number of running instances of a process and goes into a warning state if the number of instances is not within the defined threshold. Monitor the expected process count based on the value of this attribute. |
| No |
Virtual bytes MB (PROCVirtualBytesMB) | Monitors the virtual bytes used by each monitored process in MB. | MB | No |