I need to monitor the object 'COMMAND LINE' which is a column you can enable inside Windows Server 2008's Task Manager.
Is anyone using this or know where to find it and use it with SAM WMI?
Here it is shown in Task Manager:
Hello,
Yes, there is CommandLine property in Win32_Process class (in standard root\cimv2 namespace):
SELECT * FROM Win32_Process
The SAM uses this property as filter in Process Monitor (WMI) if you need differentiate processes with the same name (e.g. svchost.exe). When this (optional) property is not blank then it uses LIKE condition:
LIKE '%CommandLineSettingValue%'
From your description it is not clear how you want to monitor this string value, so please provide more information about your use case.
Thanks,
Lukas Belza (SolarWinds development)
Lukas,
That is the WMI I will need - thank-you!
What we hope to do is to capture that string each time the process is called. By the way, this is a PERL.EXE process which does not always stay resident. So, it is in/out of the process list during business hours.
The COMMAND LINE will show us the script being called and we hope to determine any scripts causing lags .etc.
If you have any ideas on this let me know...thanks again.
