topic Re: Monitor number of threads used by a service installed on Windows Server in Splunk Search

Monitor number of threads used by a service installed on Windows Server

jfaigan — Wed, 26 Jan 2022 16:10:23 GMT

I have parts of a Windows .Net application that are installed as services and run as services under an account on Windows Server.

I would like to monitor the number of threads that these services are consuming.

Is there a way to do that with Splunk? I have begun looking at the documentation for APM but I am not convinced this is possible under Windows + .Net.

Thoughts? Suggestions?

Regards,
Joel

Re: Monitor number of threads used by a service installed on Windows Server

richgalloway — Wed, 26 Jan 2022 16:21:06 GMT

Look into Microsoft's Sysmon utility (https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon) and the Splunk Add-on for Microsoft Sysmon (https://splunkbase.splunk.com/app/1914/).

Re: Monitor number of threads used by a service installed on Windows Server

jfaigan — Wed, 26 Jan 2022 16:22:13 GMT

Ok, great! Thanks for the quick reply. I will take a look at that.

Re: Monitor number of threads used by a service installed on Windows Server

jfaigan — Wed, 26 Jan 2022 17:30:15 GMT

So I do not think SysMon will provide me the info I need, I do appreciate the idea as it led me to Process Monitor. I will see if there is any kind of integration with Process Mon.

Joel

Re: Monitor number of threads used by a service installed on Windows Server

jfaigan — Thu, 27 Jan 2022 19:09:44 GMT

Ok, so I think I have found what I am looking for, however, it is clearly addressed by SignalFx Smart Agent Receiver but this is deprecated.

It is not clear if the Hosts Metric Receiver will provide the same level of info.

The SmartFx documentation clearly states the process threads is an exposed metric. The Hosts Metric Receiver does not go into sufficient detail.

Fingers crossed!