Computer Login Info

Login info lists login processes captured by the PerformanceGuard agent on an individual computer.

To view the login info, select ANALYZE > Computers > Computer Search, and search for a computer. Then, in the search results, click the name of the required computer, and then select the Login Info tab.

The table by default lists processes from the latest login. To view processes from another login, select the required login date and time in the menu in the top right corner of the table.

If a login took place some time ago, data about the login may no longer be available. This will depend on how long you keep process data for the agent configuration group in question (see information under Advanced in Agent Configuration Group Settings).

The table shows the following for each process:

  • Id: Process ID.
  • Time Start (s): Time when the process was started, measured in seconds relative to the start of the login.
  • Time Delta (s): The number of seconds that the process was running before the next process started. Only processes started by system accounts are considered, which means that user processes will always have a zero time delta.
  • Process Name
  • Clock Time (s): The total number of seconds that the process had been running at the time when the startup report was gathered.
  • CPU Time (s): CPU time, in seconds, that the process has spent.
  • Disk IO (Reads): Number of disk reads.
  • Disk IO (Writes): Number of disk writes.
  • Other IO (Ops.): Number of non-disk IO operations.
  • Other IO (Bytes): Amount of non-disk IO data.
  • Page Faults: Total number of page faults that the process has generated.
  • User: User and domain that owns the process.
  • Version: Version of the process.
  • Flags:
    • 0: No information
    • 1: The process is signed
    • 2: The process signature is trusted
    • 4: The process runs under Windows File Protection (WFP)
    • 8: The process module has version information
    • 16: The process can be queried for process information
    • 32: The process is a system process
    • 64: The process hosts one or more services
    • 128: The process was running when the report was created
  • Hosted Services: Names of services that the process hosts (if any). This can be quite useful, as some processes are used to run a lot of different services. This allows you to determine which services use resources during login.

Search this documentation

On this page

In this section