Computer Process Table

The table shows information about the processes running on the selected computer. The number of processes in the list depends on the agent configuration.

To view the table, select ANALYZE > Computers > Computer Search, and search for a computer. Then, in the search results, click the name of the required computer, select the Process Table tab, and select the required period of time in the Interval menu.

The table is available in a simple format (that you can export or add to reports as required) and a detailed format (that you can only export because it contains too much information to fit into a report).

Selected parameters from the process table:

• ID: The ID that uniquely identifies a process. The same ID only appear once in the list.

• Process: The name of the process, the same name can appear multiple times in the list. Process names are click able. Click the name of a process to view information about the particular process on the neighboring Process Chart tab.

  IP data process information is not collected on computers that run Windows XP.

• Owner: The user name running the monitored process.
• Domain: The user domain running the monitored process.
• Samples: Shows the measured value of how many times has the agent seen the process.
• CPU [%]: The peak and average CPU usage in percent during the last report 
• Mem. [MB]: The memory usage peak and average in MB during the last report interval.
• Thread: Maximum and average number of threads during the last report interval.
• Handles: Maximum and average number of handles open by the process.
• Write I/O: Shows the rate at which the process is issuing write I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
• Read I/O: Shows the rate at which the process is issuing read I/O operations. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
• Other IO: Shows the rate at which the process is issuing I/O operations that are neither a read or a write operation, such as a control function. This counter counts all I/O activity generated by the process to include file, network and device I/Os.
• Page Faults: Shows the rate at which page faults by the threads executing in this process are occurring. A page fault occurs when a thread refers to a virtual memory page that isn't in its working set in main memory. This doesn't cause the page to be fetched from disk if it's on the standby list and hence already in main memory, or if it's in use by another process with whom the page is shared.
• Context switches: Shows the rate at which switches from one thread to another occur. Thread switches can occur either inside of a single process or across processes. A thread switch can be caused either by one thread asking another for information, or by a thread being preempted by another, higher priority thread becoming ready to run.
  
  Some operating systems use process boundaries for subsystem protection in addition to the traditional protection of user and privileged modes. These subsystem processes provide additional protection. Therefore, some work done by the operating system on behalf of an application might appear in other subsystem processes in addition to the privileged time in the application. Switching to the subsystem process causes one context switch in the application thread. Switching back causes another context switch in the subsystem thread.

Process reports are deleted when they are older than the keep period configured for the agent configuration group (default is 30 minutes), so if no process reports have been delivered during that period the message No recent process reports available for agent with id is shown instead of the process table.