Getting Data In

Process monitoring in Windows

Gowtham0809
New Member

Hi,

In our system, there will be multiple java.exe process will be running, we are in need for monitoring the cpu and memeory usage of all the java,exe process running.

I tried white listing in inputs.conf file it did not work. We do not need monitoring of other process in our windows server.

Is there any specific commands to be used in inputs,conf file to monitor only Java.exe running. or is there is any App to monitor Java Process. we could not configure JMX, as our Apache used is completely customized by our product owner and we could not edit further.

Thanks

0 Karma
1 Solution

inventsekar
SplunkTrust
SplunkTrust

please update us your inputs.conf file..
the other logfiles from this same host are getting indexed properly ah?

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !

View solution in original post

0 Karma

inventsekar
SplunkTrust
SplunkTrust

please update us your inputs.conf file..
the other logfiles from this same host are getting indexed properly ah?

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma

Gowtham0809
New Member

Hi,

I added
[WinHostMon://process]
type = process
interval = 60

this in my inputs.conf file this monitored all the process. then I white listed java.exe. but it didnt not work and still monitored all the process.

other logs in inputs.conf is working without any issues

Thanks,

0 Karma

inventsekar
SplunkTrust
SplunkTrust

looks like whitelisting (blacklisting as well) attribute does not apply to WinHostMon.
https://answers.splunk.com/answers/306764/why-are-all-services-still-being-indexed-even-with-1.html

maybe, check wmi
https://www.splunk.com/blog/2014/05/30/monitoring-windows-service-state-history.html

thanks and best regards,
Sekar

PS - If this or any post helped you in any way, pls consider upvoting, thanks for reading !
0 Karma
Get Updates on the Splunk Community!

The Payment Operations Wake-Up Call: Why Financial Institutions Can't Afford ...

The same scenario plays out across financial institutions daily. A payment system fails at 11:30 AM on a busy ...

Make Your Case: A Ready-to-Send Letter for Getting Approval to Attend .conf25

Hello Splunkers, Want to attend .conf25 in Boston this year but not sure how to convince your manager? We've ...

Community Spotlight: A Splunk Expert's Journey

In the world of data analytics, some journeys leave a lasting impact not only on the individual but on the ...