I am trying to create a custom WMI sensor which queries for any processes with a certain name using more than a certain amount of memory and returns their ProcessID.
It makes more sense in WQL...
Select IDProcess From Win32_PerfFormattedData_PerfProc_Process Where PageFileBytes > 629145600 AND Name LIKE "%w3wp#%"
When I add it as a WMI Custom sensor, I get the following error: Query returned more than one record (code: PE078)
When I add it as a WMI Custom String sensor, I get the following error: This sensor has not received any data since startup. Please check "WMI Delay" channel of core/probe health sensor. Consider distributing your WMI sensors across several probes!
The WMI Custom sensor works if there is only one process that meets the criteria but I need it to work with multiple processes meeting the criteria. Sort of like the WMI Users sensor where there is a list of users but in this case I need a list of ProcessID's.
How do I create the custom sensor to accept multiple values and present them as a list?
Add comment