Print Friendly
Comments

Check for Running Processes

Generates alerts based on the presence, absence or utilization of one or more running modules.

Task Parameters

Processes: A list of service or executable image names to check for. May be entered from the keyboard or clipboard or, if connected to a local service instance, click the Processes caption to select from a list of the modules currently running on that machine.

Services are described by their unique service name. An executable image may be described by the module name (i.e. "Notepad"), the executable filename (i.e. "Notepad.exe") or a fully specified path to the executable (i.e. "C:\Windows\Notepad.exe"). The more thoroughly a process is distinguished the more stringently it will be matched to a running instance.

Combine Instances: Instructs the task to aggregate utilization for multiple instances matched to the same process name. Utilization thresholds are otherwise considered separately for each instance (the lowest when testing less-than, the highest when testing more-than).

Alert Conditions

For a single named process;

  • The process is running (was matched to a running service or executable instance).
  • The process is running and; recorded average processor utilization of less-than/more-than {5-95} percent over the task frequency.
  • The process is not running (was not matched to a running service or executable instance).
  • The process is not running or; recorded average processor utilization of less-than/more-than {5-95} percent over the task frequency.
  • The process has multiple instances (was matched to more than one executing instance).

For a list of process names;

  • Any process is running (at least one process name in the list was matched).
  • Any process is running and; recorded average processor utilization of less-than/more-than {5-95} percent over the task frequency.
  • Any process is not running (at least one process name in the list was not matched).
  • Any process is not running or; recorded average processor utilization of less-than/more-than {5-95} percent over the task frequency.
  • Any process has multiple instances (at least one process was matched more than once).
  • All processes are running (all process names in the list were matched).
  • All processes are running and; recorded average processor utilization of less-than/more-than {5-95} percent over the task frequency.
  • All processes are not running (all process names in the list were not matched).
  • All processes are not running or; recorded average processor utilization of less-than/more-than {5-95} percent over the task frequency.
  • All processes have multiple instances (all process names were matched more than once).

In each case the setting of an alert may be further conditioned on having met the test criteria on 1-8 consecutive evaluations.

29 August 2016