Currently if we want to poll the top processes by CPU during an alert, it must be done after the alert has already been triggered by running a separate executable as a trigger action. This requires a bit of a delay which often sees these processes change frequently and the information provided prove to be unuseful. For example I have CPU alerts that constantly trigger, regardless of my best efforts to capture not only % cpu time but also cpu queue length and number of time the condition exists to limit false positives, but when I attempt to capture the culprits consuming the CPU, the list of processes that come back do not total anywhere near the amount of CPU % being reported.
As such it would be nice to have a feature added to the monitoring templates to not only capture the performance counters, but to also pull the top x number of processes AT time of polling.
