Hi,
We monitor a WMI process called: tman.odbc but due to the nature of the system it launches multiple copies of this process with different user names. We need to be able to monitor these individually since a failure of one could indicate a problem but at the moment all instances have to fail before we get an alert.
Regards, Darren.
Article Comments
I have experimented a bit with this and although I can run a query to list the occurances of a particular process: SELECT * FROM Win32_Process WHERE Description='tman.odbc.exe'
in the WMI tester I can't see how to then specify which individual user since there will be multiple instances of this process running, each started by a different user.
Mar, 2011 - Permalink
I have narrowed it down to individual users by adding the ExecutablePath:
SELECT * FROM Win32_Process WHERE Description='tman.odbc.exe' AND ExecutablePath LIKE "%CCUK%"
But this still returns 10 rows so not suitable for a sensor. I just need to know if like in SQL we can get a count of the number of instances of a process spawned by a single user. In our system I just need to know whether there are any running processes to know it is up. None would mean it is down.
Apr, 2011 - Permalink
Unfortunately WQL doesn't support a count(*) construct. So you'll have to write a custom exe/script sensor for your needs, I'm afraid.
Apr, 2011 - Permalink
You would need to use a Custom WMI or Custom Script sensor. You can find relevant queries under:
Which WQL queries are used by PRTG's WMI sensors?
Mar, 2011 - Permalink