Monitoring Process in Windows

Elastic Stack Beats
1

Hi All,

Currently trying to figure out how to monitor whether a Windows application is Up or Down.

Currently using a filter to narrow down it to a specific agent.name (My Server) and process.name (application name) and its been set to alert if the number of results is below then 3 for the last 2 minutes.

This works fine if the application is busy, however when the application is idle I don't get consistent documents thus the alert is unreliable.

I am currently using elastic agent with the system integration to get my data

2

What I think the problem is, is within the System-Integration of Elastic agent, it is set to to get the top 5 CPU and Memory processes. Is there a way where I can specify the process names I want to monitor permanently?
Not sure whether I populate "Env whirelist" or "Processes", can't find any documentation either

3

Hi @bevano

Perhaps take a look at this thread I think I gave some examples

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.