https://community.splunk.com/t5/Getting-Data-In/Windows-Perfmon-Process-quot-Processor-Time-quot/m-p/563474#M100373 <P>Hi,</P><P>Having major issues with Perfmon collection. Values collected for "% Processor Time" (as well as privileged and user) sometimes contain invalid information.</P><P>Just monitoring a single 6 vCPU machine. While for some processes the CPU usage is correctly returned as percentage value between 0 and 600, other processes every few minutes return values that are way above charts like a few thousand to for ex. like 1.5 Mio. I cannot see any of those numbers while running perfmon.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sini_0-1629118197305.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15584iAFDF36B857EB14F2/image-size/medium?v=v2&amp;px=400" role="button" title="sini_0-1629118197305.png" alt="sini_0-1629118197305.png" /></span></P><P>The process IDs of those process also don't change.</P><P>Regards</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 16 Aug 2021 12:51:17 GMT sini 2021-08-16T12:51:17Z https://community.splunk.com/t5/Getting-Data-In/Windows-Perfmon-Process-quot-Processor-Time-quot/m-p/563474#M100373 <P>Hi,</P><P>Having major issues with Perfmon collection. Values collected for "% Processor Time" (as well as privileged and user) sometimes contain invalid information.</P><P>Just monitoring a single 6 vCPU machine. While for some processes the CPU usage is correctly returned as percentage value between 0 and 600, other processes every few minutes return values that are way above charts like a few thousand to for ex. like 1.5 Mio. I cannot see any of those numbers while running perfmon.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="sini_0-1629118197305.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15584iAFDF36B857EB14F2/image-size/medium?v=v2&amp;px=400" role="button" title="sini_0-1629118197305.png" alt="sini_0-1629118197305.png" /></span></P><P>The process IDs of those process also don't change.</P><P>Regards</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Mon, 16 Aug 2021 12:51:17 GMT https://community.splunk.com/t5/Getting-Data-In/Windows-Perfmon-Process-quot-Processor-Time-quot/m-p/563474#M100373 sini 2021-08-16T12:51:17Z