Archive

Require splunk query to get list of processes running in web server

New Member

I used sourcetype-perfmon:process and i could get fields - counter/instance/object which refers process name

0 Karma

Esteemed Legend

We need WAY more explanation.

0 Karma

SplunkTrust
SplunkTrust

Hi @jeniemmanuel,
to do this I usually use a script (e.g. in Linux containing ps -eafd) and I compare the result with a lookup in which I listed all the processes I should have so the difference is the missed processes.

You can find this script in Splunk_TA-nix for Linux or Splunk_TA-Windows for Windows.

Ciao.
Giuseppe

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!