In the processes and services report it shows a column called "process name (ID)" that lists the process and the port it's using. I can't figure out how to get that in our custom reports.
Look at http://thwack.solarwinds.com/thread/32277. I am going to try this query for my alert:
Process: ${ProcessName}
PID: ${SQL:select top 1 PID from APM_ProcessEvidence pe join APM_CurrentComponentStatus ccs on ccs.ComponentStatusID = pe.ComponentStatusID and ccs.ComponentID = ${ComponentID} order by avgpercentcpu desc}