Is there a way to pull a list of running processes and the CPU % usage per process via Splunk natively? Using Powershell isn't proving to be that useful. For example, get-process | select name,CPU will give you the CPU time, but not the CPU percentage. Various scripts I've tried aren't successful at converting to a percentage.
inputs.conf
[perfmon://Process]
object = Process\(*
counters = *
instances = *
index = perfmon
interval = 30
disabled = 0
index=perfmon object=Process counter="% Processor Time" instance!=_Total instance!=Idle | stats latest(Value) as Value by host, instance
Turns nicely into Trellis pie chart
Edit: formatting to code to maintain backslash->paren
Have a look at this
http://docs.splunk.com/Documentation/Splunk/7.0.2/Data/MonitorWindowsperformance