Real-Time Process information in "Top XX" alerts

SAM provides additional troubleshooting information for high CPU, memory, and virtual memory by sending email alerts. This is done by utilizing the Top Offending Processes metric running on the server at the time of the alert.

Find the executable path SolarWinds.APM.RealTimeProcessPoller.exe and its command line arguments below.

Here is command line argument syntax:

SolarWinds.APM.RealTimeProcessPoller.exe -n=<NodeID> [-count=<NumberOfProcesses>] [-sort=<SortBy>] [-timeout=<PollingTimeout>] [-alertID=<AlertDefID>]

Command line argument variables are included in the following table:

Variable	Definition
-n	ID of a Node (NodeID), which is polled.
-count	The number of processes to show.
-sort	The criteria used to select top processes, including: CPU: Processor time. This is the default value if the command line argument is not specified. PhysicalMemory: Process physical memory. VirtualMemory: Process virtual memory. DiskIO: Process disk I/O per second.
-timeout	Timeout for polling in seconds.
-alertID	The AlertDefID of associated triggered alert. If this argument is provided, then alert notes are updated with the results from polling.
-activeObject	The ActiveObject property of the associated triggered alert. If this argument is not provided, NodeID is used.

Example 1

This example returns the top 20 processes with the highest virtual memory consumption running on the host with node ID 123.

SolarWinds.APM.RealTimeProcessPoller.exe -n=123 -count=20 -sort=VirtualMemory -timeout=300

Example 2

This example uses the Execute an External Program alert action:

SolarWinds.APM.RealTimeProcessPoller.exe -n=${NodeID} -alertID=${AlertDefID}

Example 3

This example uses the Execute an External Program alert action for an alert defined for virtual memory:

SolarWinds.APM.RealTimeProcessPoller.exe -n=${NodeID} -alertID=${AlertDefID} -activeObject=${NetObjectID} -sort=VirtualMemory