https://community.splunk.com/t5/Splunk-Search/CPU-Usage-by-Process/m-p/360649#M162235 <P>Have a look at this<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/7.0.2/Data/MonitorWindowsperformance">http://docs.splunk.com/Documentation/Splunk/7.0.2/Data/MonitorWindowsperformance</A></P> Thu, 15 Mar 2018 21:09:51 GMT somesoni2 2018-03-15T21:09:51Z https://community.splunk.com/t5/Splunk-Search/CPU-Usage-by-Process/m-p/360648#M162234 <P>Is there a way to pull a list of running processes and the CPU % usage per process via Splunk natively? Using Powershell isn't proving to be that useful. For example, get-process | select name,CPU will give you the CPU time, but not the CPU percentage. Various scripts I've tried aren't successful at converting to a percentage.</P> Thu, 15 Mar 2018 19:53:00 GMT https://community.splunk.com/t5/Splunk-Search/CPU-Usage-by-Process/m-p/360648#M162234 Kendo213 2018-03-15T19:53:00Z https://community.splunk.com/t5/Splunk-Search/CPU-Usage-by-Process/m-p/360649#M162235 <P>Have a look at this<BR /> <A href="http://docs.splunk.com/Documentation/Splunk/7.0.2/Data/MonitorWindowsperformance">http://docs.splunk.com/Documentation/Splunk/7.0.2/Data/MonitorWindowsperformance</A></P> Thu, 15 Mar 2018 21:09:51 GMT https://community.splunk.com/t5/Splunk-Search/CPU-Usage-by-Process/m-p/360649#M162235 somesoni2 2018-03-15T21:09:51Z https://community.splunk.com/t5/Splunk-Search/CPU-Usage-by-Process/m-p/360650#M162236 <P>inputs.conf</P> <PRE><CODE>[perfmon://Process] object = Process\(* counters = * instances = * index = perfmon interval = 30 disabled = 0 </CODE></PRE> <P>index=perfmon object=Process counter="% Processor Time" instance!=_Total instance!=Idle | stats latest(Value) as Value by host, instance</P> <P>Turns nicely into Trellis pie chart</P> <P>Edit: formatting to code to maintain backslash-&gt;paren</P> Fri, 16 Mar 2018 22:14:46 GMT https://community.splunk.com/t5/Splunk-Search/CPU-Usage-by-Process/m-p/360650#M162236 hortonew 2018-03-16T22:14:46Z