Monitoring the thread count of active processes via WMI Query sensors

Since introducing WMI sensors to IPCheck with version 5.4.1.834/835 we have received multiple requests on how to monitor processes using WMI Query sensors. Doing so is actually quite simple. When adding the sensor, merely provide the following WMI query:

 

select ThreadCount from Win32_Process WHERE name="process.ext"

 

 

where "process.ext" stands for the name of the process one wants to monitor, including the process's extension (e.g. explorer.exe).

Beyond allowing you to monitor the number of open threads for the process in case, this method also allows you to discern if the process is actually active, seeing as if the process is not active, no values will be returned.



Copyright © 1998 - 2012 Paessler AG