Hi,
I have a question concerning the system metrics field system.process.cpu.total.norm.pct described as "The percentage of CPU time spent by the process since the last event. This value is normalized by the number of CPU cores and it ranges from 0 to 100%"
Let's assume I set the "Process Include Top N by CPU"-Value in the System process metrics to 15 with a period of 60s.
How does Elastic Agent / Agentbeat calculate the Top 15 in that case?
Does it maintain a table with all the processes and their PIDs and after 60s it calculates the sum of CPU time spent by EVERY process then picks the Top 15 of those?
Thank you very much for some explanations & insights!