Where would I find winmgmt process ID (in DB as svchost.exe and PID -1)

Hi,

if you want to filter "Top 10 Monitored Processes ..." resources by process name, use filter "MonitorStatus.ProcessName like 'svchost.exe'". Not "pe.Name like 'svchost.exe'". The latter one doesn't work in SAM 6.2.

Also (and unfortunately), "ComponentPID" in "Orion.APM.CurrentStatistics" always returns "-1" - it's hardcoded, because it was deprecated a few years ago. Currently, there is no way of getting process ID from SWIS. You would need to use SQL queries instead.

I posted the following report which provides an example using the Custom Table Resource to achieve something similar, though pstranak‌'s statement still holds true. The PID is not available, likely because there can be more than one PID for a given monitored process (multiple instances of a process).

Top Processes & Services

Now I understand that MonitorStatus.x is what I wanted instead of PE.x

Still not sure why PE.Name LIKE 'svchost.exe' would not work since thats the name in the swis field? If it's deprecated or broken can the documentation here be updated to reflect?

SolarWinds Online Help