Splunk to monitor resources by individual application

[vijaygarg]

Hello,
I am using trial version of Splunk 4.3.4 build 136012 and setup Splunk for Windows. We have multiple .Net applications running on the server.

I can see the W3WP process and resources being used by this. Is it possible to check Memory/CPU being used by individual application.

Thanks

[MarioM]

i think you will need to get perfmon to enumerates by PID
The Process object in Performance Monitor can display Process IDs (PIDs).

Then map the PID to application name via lookup file