Votes:
Hi,
We monitor a WMI process called: tman.odbc but due to the nature of the system it launches multiple copies of this process with different user names. We need to be able to monitor these individually since a failure of one could indicate a problem but at the moment all instances have to fail before we get an alert.
Regards, Darren.
4 Replies
Votes:
You would need to use a Custom WMI or Custom Script sensor. You can find relevant queries under:
Created on Mar 22, 2011 3:31:23 PM by
Votes:
I have experimented a bit with this and although I can run a query to list the occurances of a particular process: SELECT * FROM Win32_Process WHERE Description='tman.odbc.exe' in the WMI tester I can't see how to then specify which individual user since there will be multiple instances of this process running, each started by a different user.
Last change on Mar 24, 2011 1:58:13 PM by
Votes:
I have narrowed it down to individual users by adding the ExecutablePath:
SELECT * FROM Win32_Process WHERE Description='tman.odbc.exe' AND ExecutablePath LIKE "%CCUK%"
But this still returns 10 rows so not suitable for a sensor. I just need to know if like in SQL we can get a count of the number of instances of a process spawned by a single user. In our system I just need to know whether there are any running processes to know it is up. None would mean it is down.
Last change on Apr 8, 2011 3:30:01 PM by
Votes:
Unfortunately WQL doesn't support a count(*) construct. So you'll have to write a custom exe/script sensor for your needs, I'm afraid.
Created on Apr 11, 2011 10:57:55 AM by
Add comment