Sorry for answering this late. I think i misexplained, i just assumed that ProcessName is related to the services running and cpu_load_percent is the percentage of cpu used. And even if they are not related, they certainly vary over time. So i want to make my chart not to be a timechart and show the two fields. Thank you in advance. Also if the fields i am using are not correct tell me  ... View more

The variation of the cpu depends on the process running. its like when i open the windows task manager, it show the process which is running and the percentage of cpu used. I want to make a chart of all the process running and the percentage of cpu used. Hope i explained it correctly.  ... View more

search for cpu_load_percent index=perfmon cpu_load_percent=*   search for ProcessName index=perfmon ProcessName ... View more

i receive events when i do separates searchs, one with cpu_load_percent, and the other with processName, but not with both fields, and this is what i get when i dont add the count function: ... View more

this is what i get when i do the search, the value of cpu_user_percent is equal to zero, which is not normal but i its because the fields are not compatibles. I apologize for my bad english ... View more