<%NUMBERING1%>.<%NUMBERING2%>.<%NUMBERING3%> PRTG Manual: Windows Process Sensor
The Windows Process sensor monitors a Windows process using Windows Performance Counters or Windows Management Instrumentation (WMI), as configured in the "Windows Compatibility Options" of the parent device.
It shows the following parameters about the process:
- Absolute working set in bytes
- Private bytes
- Number of threads
- Number of handles
- Number of instances
- Average CPU usage (if there are multiple instances running)
- Total CPU usage
For the "total CPU usage" value of a process, all CPU usage values are summed up. The total is divided by the number of all CPUs and the maximum value is 100%. This corresponds to the CPU usage of all instances of this specific process. Regarding the "per instance" value, the summed up CPU usage value is divided by the number of all instances. It shows the average CPU usage of a single instance of the process on one CPU.

Windows Process Sensor
Click here to enlarge: http://media.paessler.com/prtg-screenshots/windows_process.png
- Requires Windows credentials in the parent device settings.
- Requires Windows 2008 or later on the probe system.
- Requires the Windows Remote Registry service to be running on the target computer.
- Does not support 64-bit processes on devices with the address "localhost", "127.0.0.1", "::1". Use the IP address in the network instead.
Note: This sensor cannot show values above 4 GB for 64-bit processes if you run the probe on a 64-bit Windows system. Please add this sensor to a probe running on a 32-bit Windows to monitor 64-bit processes. - Uses a hybrid approach to query monitoring data: Performance counters as standard approach and WMI as fallback.
This sensor type does not support 64-bit processes on devices with the address localhost, 127.0.0.1 (IPv4 address), or ::1 (IPv6 address) in PRTG. This is the case for probe devices, for example. The sensor works on all other target devices in your network. So if you want to monitor 64-bit processes on your local machine, add this device to PRTG with one of the IP addresses under which it is reachable in the local network (for example, 10.0.10.20 instead of 127.0.0.1) and create the sensor on this device.
Note: This sensor type cannot show values above 4 GB for 64-bit processes if you run the PRTG probe with this sensor on a 64-bit Windows system. The WoW64 (Windows 32-bit on Windows 64-bit) emulation layer for 32-bit applications like PRTG limits monitoring values from 64-bit systems or processes to 4 GB and caps off greater values. To avoid this issue that is caused by Windows and to correctly monitor 64-bit processes, please add this sensor to a probe that runs on a 32-bit Windows system.
Hybrid Approach: Performance Counters and WMI
By default, this sensor type uses a hybrid approach, first trying to query data via Windows Performance Counters (which needs less system resources), and using Windows Management Instrumentation (WMI) as a fallback if Performance Counters are not available. When running in fallback mode, the sensor will re-try to connect via Performance Counters after 24 hours. You can change the default behavior in the Windows Compatibility Options of the parent device's settings on which you create this sensor.
Sensors using the Windows Management Instrumentation (WMI) protocol have high impact on the system performance! Try to stay below 200 WMI sensors per probe. Above this number, please consider using multiple Remote Probes for load balancing.
For a general introduction to the technology behind WMI, please see Monitoring via WMI section.
Requirement: Windows Credentials
Requires credentials for Windows systems to be defined for the device you want to use the sensor on. In the parent device's Credentials for Windows Systems settings, please prefer using Windows domain credentials.
Note: If you use local credentials, please make sure the same Windows user accounts (with same username and password) exist on both the system running the PRTG probe and the target computer. If you fail to do so, a connection via Performance Counters will not be possible. However, WMI connections may still work.
In order for this sensor to work with Windows Performance Counters, please make sure a Windows version 2008 or later is installed on the computer running the PRTG probe: This is either on the local system (on every node, if on a cluster probe), or on the system running a remote probe.
Requirement: Remote Registry Service
In order for this sensor to work with Windows Performance Counters, please make sure the Remote Registry Windows service is running on the target computer. If you fail to do so, a connection via Performance Counters will not be possible. However, WMI connections may still work.
To enable the service, please log in to the respective computer and open the services manager (e.g. via services.msc). In the list, find the respective service and set its Start Type to Automatic.
The Add Sensor dialog appears when adding a new sensor on a device manually. It only shows the setting fields that are imperative for creating the sensor. Therefore, you will not see all setting fields in this dialog. You can change (nearly) all settings in the sensor's Settings tab later.
On the details page of a sensor, click on the Settings tab to change its settings.
Note: Usually, a sensor connects to the IP Address or DNS Name of the parent device on which you created this sensor. See the Device Settings for details. For some sensor types, you can define the monitoring target explicitly in the sensor settings. Please see below for details on available settings.
Basic Sensor Settings |
|
---|---|
Sensor Name |
Enter a meaningful name to identify the sensor. By default, PRTG shows this name in the device tree, as well as in alarms, logs, notifications, reports, maps, libraries, and tickets. |
Parent Tags |
Shows Tags that this sensor inherits from its parent device, group, and probe. This setting is shown for your information only and cannot be changed here. |
Tags |
Enter one or more Tags, separated by space or comma. You can use tags to group sensors and use tag–filtered views later on. Tags are not case sensitive. We recommend that you use the default value. You can add additional tags to it, if you like. Other tags are automatically inherited from objects further up in the device tree. These are visible above as Parent Tags. |
Priority |
Select a priority for the sensor. This setting determines where the sensor is placed in sensor lists. Top priority is at the top of a list. Choose from one star (low priority) to five stars (top priority). |
Windows Process Monitor |
|
---|---|
Executable |
Enter the name of the process that you want to monitor. Provide the name of an executable file without the .exe extension (for example, enter firefox to monitor firefox.exe). The sensor goes into a Down status if the process is not active on the device. |
Sensor Display |
|
---|---|
Primary Channel |
Select a channel from the list to define it as the primary channel. In the device tree, the last value of the primary channel will always be displayed below the sensor's name. The available options depend on what channels are available for this sensor. Note: You can set another primary channel later by clicking on the pin symbol of a channel in the sensor's Overview tab. |
Chart Type |
Define how different channels will be shown for this sensor.
|
Stack Unit |
This setting is only available if stacked graphs are selected above. Choose a unit from the list. All channels with this unit will be stacked on top of each other. By default, you cannot exclude single channels from stacking, if they use the selected unit. However, there is an advanced procedure to do so. |
By default, all following settings are inherited from objects higher in the hierarchy and should be changed there, if necessary. Often, best practice is to change them centrally in the Root group's settings. To change a setting only for this object, disable inheritance by clicking on the check mark before the corresponding setting name. You will then see the options described below.
Scanning Interval |
|
---|---|
Scanning Interval |
Select a scanning interval (seconds, minutes, or hours) from the list. The scanning interval determines the time the sensor waits between two scans. You can change the available intervals in the system administration. |
When a Sensor Reports an Error |
Define the number of scanning intervals that a sensor has time to report an error before the sensor will be set to a Down status. The sensor can try to reach a device several times, depending on the setup you can specify here, to help avoid false alarms if the monitored device has only temporary issues. For previous scanning intervals with failed requests, the sensor will show a Warning status. Choose between:
Note: Sensors that monitor via Windows Management Instrumentation (WMI) always wait at least one scanning interval until they show an error. It is not possible to set a WMI sensor "down" immediately, so the first option will not apply to these sensor types (all other options can apply). Note: If a sensor has defined error limits for channels, this sensor will always be set to a Down status immediately, so no "wait" option will apply. Note: If a channel uses lookup values, the sensor will always be set to a Down status immediately, so no "wait" options will apply. |
Schedules, Dependencies, and Maintenance Window |
|
---|---|
Note: Inheritance for schedules, dependencies, and maintenance windows cannot be interrupted. The corresponding settings from the parent objects will always be active. However, you can define additional settings here. They will be active at the same time as the parent objects' settings. |
|
Schedule |
Select a schedule from the list. Schedules can be used to monitor for a certain time span (days, hours) throughout the week. With the period list option it is also possible to pause monitoring for a specific time span. You can create new schedules and edit existing ones in the account settings. Note: Schedules are generally inherited. New schedules will be added to existing ones, so all schedules are active at the same time. |
Maintenance Window |
Specify if you want to set-up a one-time maintenance window. During a "maintenance window" period, this object and all child objects will not be monitored. They will be in a paused state instead. Choose between:
Note: To terminate a current maintenance window before the defined end date, you can change the time in Maintenance End At field to a date in the past. |
Maintenance Begins At |
This field is only visible if you enabled the maintenance window above. Use the date time picker to enter the start date and time of the maintenance window. |
Maintenance End At |
This field is only visible if you enabled the maintenance window above. Use the date time picker to enter the end date and time of the maintenance window. |
Dependency Type |
Define a dependency type. Dependencies can be used to pause monitoring for an object depending on the status of another. You can choose between:
Note: Testing your dependencies is easy! Simply choose Simulate Error Status from the context menu of an object that other objects depend on. A few seconds later all dependent objects should be paused. You can check all dependencies in your PRTG installation by selecting Devices | Dependencies from the main menu bar. |
Dependency |
This field is only visible if the Select object option is enabled above. Click on the reading-glasses and use the object selector to choose an object on which the current sensor will depend. |
Delay (Seconds) |
Define a time span. After the master object for this dependency comes back to an Up status, the beginning of the monitoring of the depending objects will be additionally delayed by the time span you define here. This can help to avoid false alarms, for example, after a server restart, by giving systems more time for all services to start up. Please enter an integer value in seconds. Note: This setting is not available if you choose this sensor to be the Master object for parent. In this case, please define delays in the parent Device Settings or in the superior Group Settings. |
Access Rights |
|
---|---|
User Group Access |
Define which user group(s) will have access to the object you're editing. A table with user groups and types of access rights is shown: It contains all user groups from your setup. For each user group you can choose from the following access rights:
You can create new user groups in the System Administration—User Groups settings. To automatically set all objects further down in the hierarchy to inherit this object's access rights, set a check mark for the Revert children's access rights to inherited option. For more details on access rights, please see the section User Access Rights. |
Channel Unit Configuration |
|
---|---|
Channel Unit Types |
For each type of sensor channel, define the unit in which data is displayed. If defined on probe, group, or device level, these settings can be inherited to all sensors underneath. You can set units for the following channel types (if available):
Note: Custom channel types can be set on sensor level only. |
Knowledge Base: My Windows sensors do not work when using direct Performance Counter access. What can I do?
To change display settings, spike filter, and limits, switch to the sensor's Overview tab and click the gear icon of a specific channel. For detailed information, please see the Sensor Channels Settings section.
Click the Notifications tab to change notification triggers. For detailed information, please see the Sensor Notifications Settings section.
For more general information about settings, please see the Object Settings section.
For information about sensor settings, please see the following sections:
Keywords: