Documentation forServer & Application Monitor
Monitoring your applications and environment is a key capability of Hybrid Cloud Observability and is also available in a standalone module, Server & Application Monitor (SAM). Hybrid Cloud Observability and SAM are built on the self-hosted SolarWinds Platform.

Real-Time Process information in "Top XX" alerts

SAM provides additional troubleshooting information for high CPU, memory, and virtual memory by sending email alerts. This is done by utilizing the Top Offending Processes metric running on the server at the time of the alert.

Find the executable path SolarWinds.APM.RealTimeProcessPoller.exe and its command line arguments below.

Here is command line argument syntax:

SolarWinds.APM.RealTimeProcessPoller.exe -n=<NodeID> [-count=<NumberOfProcesses>] [-sort=<SortBy>] [-timeout=<PollingTimeout>] [-alertID=<AlertDefID>]

Command line argument variables are included in the following table:

Variable Definition
-n ID of a Node (NodeID), which is polled.
-count The number of processes to show.
-sort

The criteria used to select top processes, including:

  • CPU: Processor time. This is the default value if the command line argument is not specified.
  • PhysicalMemory: Process physical memory.
  • VirtualMemory: Process virtual memory.
  • DiskIO: Process disk I/O per second.
-timeout Timeout for polling in seconds.
-alertID The AlertDefID of associated triggered alert. If this argument is provided, then alert notes are updated with the results from polling.
-activeObject The ActiveObject property of the associated triggered alert. If this argument is not provided, NodeID is used.

Example 1

This example returns the top 20 processes with the highest virtual memory consumption running on the host with node ID 123.

SolarWinds.APM.RealTimeProcessPoller.exe -n=123 -count=20 -sort=VirtualMemory -timeout=300

Example 2

This example uses the Execute an External Program alert action:

SolarWinds.APM.RealTimeProcessPoller.exe -n=${NodeID} -alertID=${AlertDefID}

Example 3

This example uses the Execute an External Program alert action for an alert defined for virtual memory:

SolarWinds.APM.RealTimeProcessPoller.exe -n=${NodeID} -alertID=${AlertDefID} -activeObject=${NetObjectID} -sort=VirtualMemory