topic Re: Process monitoring in Windows in Getting Data In

Process monitoring in Windows

Gowtham0809 — Mon, 25 Sep 2017 04:59:28 GMT

Hi,

In our system, there will be multiple java.exe process will be running, we are in need for monitoring the cpu and memeory usage of all the java,exe process running.

I tried white listing in inputs.conf file it did not work. We do not need monitoring of other process in our windows server.

Is there any specific commands to be used in inputs,conf file to monitor only Java.exe running. or is there is any App to monitor Java Process. we could not configure JMX, as our Apache used is completely customized by our product owner and we could not edit further.

Thanks

Re: Process monitoring in Windows

inventsekar — Mon, 25 Sep 2017 06:56:52 GMT

please update us your inputs.conf file..
the other logfiles from this same host are getting indexed properly ah?

Re: Process monitoring in Windows

Gowtham0809 — Mon, 25 Sep 2017 08:36:34 GMT

Hi,

I added
[WinHostMon://process]
type = process
interval = 60

this in my inputs.conf file this monitored all the process. then I white listed java.exe. but it didnt not work and still monitored all the process.

other logs in inputs.conf is working without any issues

Thanks,

Re: Process monitoring in Windows

inventsekar — Mon, 25 Sep 2017 08:50:06 GMT

looks like whitelisting (blacklisting as well) attribute does not apply to WinHostMon.
https://answers.splunk.com/answers/306764/why-are-all-services-still-being-indexed-even-with-1.html

maybe, check wmi
https://www.splunk.com/blog/2014/05/30/monitoring-windows-service-state-history.html