CPU and Memory Usage on Selected Processes

Elastic Stack Beats
1

How can i get CPU and Memory for the selected(RED) processes only ?

Pasted image479×523 27.7 KB

2

I think this should match the three processes in red in a case insensitive manner.

input:
  procs:
    - '(?i)^devenv.exe$'
    - '(?i)^outlook.exe$'
    - '(?i)^explorer.exe$'
3

Thanks for the reply.

Which field will return me those Memory related value i.e. 724,860, 93,280, etc. Will there be any conversion required for this?

Also, I wanted to set a visualization for these 3 processes (x-axis -> devenv.exe, outlook.exe and explorer.exe) and y-axis(memory).

4

I can't see what the rest of that memory column says but I think that data would map to the proc.mem.rss field which will be reported in bytes.

In Kibana, the proc.mem.rss field can be marked as Bytes and will be formatted appropriately.

For the visualization, you could use a vertical bar chart.

Screen Shot 2016-04-06 at 12.38.59 AM.png1414×946 61.5 KB

5

Thanks Andrew. I will give a try today and vl let u know if i face any issues.

6

Hey Andrew, Thanks for the above things.

Can you please tell me how can I get information about the server Hard Disk Space utilized and Free Space ? Which field provides this info ? Also I am using Windows Server 2012

7

Filesystem stats are enabled by default so as long as you have not disabled them, they will be reported. https://www.elastic.co/guide/en/beats/topbeat/current/configuration-input.html#_stats

The reported filesystem data is described here: https://www.elastic.co/guide/en/beats/topbeat/current/exported-fields-filesystem.html

The data is collected by calling GetDiskFreeSpaceEx on Windows.