Display the process that has top %_Processor_Time usage.

[vaishnavi07]

How to display the top 10 Processes that has high %_Processor_Time.

index=winserver_process sourcetype="PerfmonMk:RunningProcesses" NOT instance=Idle NOT instance=_Total earliest=-5m@m | eval Process=upper(instance) | top Process limit=10

What does this "top Process" command do? how to find the process that has high %_Processor_Time utilization?

Does anyone know the answer? Thanks in advance!

[jameshgibson]

You first need to sort the processes by %_Processor_time before using top. Something like

| sort - %_Processor_Time | top Process limit=10

The top command just gives you the first 10 lines of the results.