Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 7

CPU usage by Windows Process

Hi guys.

I've recently installed SAM to test it and i love it.

I have a virtual machine under ESXi 6.5 that for some reason from 4:30am to 6:00am, the CPU goes nuts and finally gets unresponsive (no ping, no vmtools, no remote desktop).

I need to know if SAM is able to record or report which Windows process(es) are using high CPU within that period of time.

Any ideas?



Labels (1)
0 Kudos
5 Replies

Take a look at the following thread.  It should help point you in the right direction.

Re: Monitor Processes with high CPU utilization on a Windows sever

Also, here is an article describing the RealTimeProcessPoller.

Real-Time Process information in top 10 alerts

Hi mprobus

It is exactly what i need but i don't know how to implement it.

The big difference is that i only need this for one server.

Can you help me?


0 Kudos

Since you only care about the 1 server, I would start with building an alert to trigger on that server's cpu usage.  This would look similar to the following.

You would then add the action Execute and External Program under the Trigger Actions.  For the path to the program type:

APM\SolarWinds.APM.RealTimeProcessPoller.exe -n=${NodeID} -alertId=${N=Alerting;M=AlertID} -count=10 -sort=CPU -timeout=120

When the alert triggers, it should add the process information inside the alert.

0 Kudos


Aparently the alarm worked but why is it alerting on a 3% CPU usage?

Name   Process ID   CPU
WmiPrvSE.exe   7616   3.32 %
svchost.exe   860   0.38 %
sqlservr.exe   2728   0.31 %
Taskmgr.exe   14884   0.15 %
lsass.exe   564   0.08 %
w3wp.exe   8284   0.08 %
WmiPrvSE.exe   27832   0.08 %
vmtoolsd.exe   11508   0.04 %
System   4   0 %
smss.exe   300   0 %

Did i do something wrong?. I've placed the condition to be over 40%.



0 Kudos

Does the cpu load chart of the server reflect >40% usage at the time of the alert?

If so, it's possible that it was brief enough that it dropped before the poller was able to collect.

0 Kudos