Is it possible to view determine what process was using CPU at a given point in time in the past, and if so, how far back can we go. Problem is we don't know what process or service it was. this is on a Windows server.
You can only go back as far as you have configured the product to save data. Likely the data has had it's data point aggregated to more of an average without the peaks and valleys so yuou lose the critical data points you may need.
You should help us push forth the data warehouse concept to allow proper detailed reporting over time in the following idea:
If you didn't already set up a method of tracking it then that data is not collected out of the box. I created a SAM template for specifically this use case a while back and recently uploaded it to thwack here
I also have a custom SWQL query I use with that template on my node details pages so i can just specify how many minutes back I want it to look and it will show me the top 5 processes by cpu and by mem utilization at that time. I keep meaning to rework the search logic so I can just drop a timestamp in there and get to it that way, just haven't written up the code to parse the timestamps yet.
SELECT tolocal(TimeStamp) as Timestamp
, cs.Component.DetailsUrl as [_linkfor_Name]
, cs.DynamicEvidence.ColumnLabel as Label
, cs.DynamicEvidence.StringData as Message
FROM Orion.APM.ComponentStatus cs
where cs.DynamicEvidence.StringData is not null
and cs.Component.Application.Name like '%snapshot%'
order by timestamp desc--, caption, cs.Component.Application.Name
, cs.Component.Name, label
Loop1 Systems: SolarWinds Training and Professional Services
SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 150,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process. Learn more today by joining now.