CPU and Memory Usage on Selected Processes

(Sameer Panicker) #1

How can i get CPU and Memory for the selected(RED) processes only ?

(Andrew Kroh) #2

I think this should match the three processes in red in a case insensitive manner.

    - '(?i)^devenv.exe$'
    - '(?i)^outlook.exe$'
    - '(?i)^explorer.exe$'

(Sameer Panicker) #3

Thanks for the reply.

Which field will return me those Memory related value i.e. 724,860, 93,280, etc. Will there be any conversion required for this?

Also, I wanted to set a visualization for these 3 processes (x-axis -> devenv.exe, outlook.exe and explorer.exe) and y-axis(memory).

(Andrew Kroh) #4

I can't see what the rest of that memory column says but I think that data would map to the proc.mem.rss field which will be reported in bytes.

In Kibana, the proc.mem.rss field can be marked as Bytes and will be formatted appropriately.

For the visualization, you could use a vertical bar chart.

(Sameer Panicker) #5

Thanks Andrew. I will give a try today and vl let u know if i face any issues.

(Sameer Panicker) #6

Hey Andrew, Thanks for the above things.

Can you please tell me how can I get information about the server Hard Disk Space utilized and Free Space ? Which field provides this info ? Also I am using Windows Server 2012

(Andrew Kroh) #7

Filesystem stats are enabled by default so as long as you have not disabled them, they will be reported. https://www.elastic.co/guide/en/beats/topbeat/current/configuration-input.html#_stats

The reported filesystem data is described here: https://www.elastic.co/guide/en/beats/topbeat/current/exported-fields-filesystem.html

The data is collected by calling GetDiskFreeSpaceEx on Windows.

(system) #8