Process monitoring

[noliver]

Im looking to get real time data on specific processes. CPU and Ram usage data.

I configured NIC monitoring specific to process by using WinNetMon like:

[WinNetMon://OUTLOOK]
index = desktop
process = OUTLOOK

But im looking for the CPU and RAM data now.

Thanks

[delink]

You might want to check out the Splunk_TA_windows app. It contains the necessary inputs.conf settings to collect PerfMon data such as this from any Windows machine you have universal forwarders or Splunk Enterprise installed on.