You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
44 lines
1.6 KiB
44 lines
1.6 KiB
<form version="1.1">
|
|
<label>Processes - Windows</label>
|
|
<fieldset submitButton="false">
|
|
<input type="dropdown" token="HostMonitoringHost" searchWhenChanged="true">
|
|
<label>Host</label>
|
|
<choice value="*">All</choice>
|
|
<search>
|
|
<query>| inputlookup windows_hostmon_system | dedup Host | sort Host</query>
|
|
</search>
|
|
<fieldForLabel>Host</fieldForLabel>
|
|
<fieldForValue>Host</fieldForValue>
|
|
<default>*</default>
|
|
<initialValue>*</initialValue>
|
|
</input>
|
|
<input type="dropdown" token="HostProcessName" searchWhenChanged="true">
|
|
<label>Name</label>
|
|
<choice value="*">All</choice>
|
|
<search>
|
|
<query>| inputlookup windows_hostmon_process_details | dedup Name | sort Name</query>
|
|
</search>
|
|
<fieldForLabel>Name</fieldForLabel>
|
|
<fieldForValue>Name</fieldForValue>
|
|
<initialValue>*</initialValue>
|
|
<default>*</default>
|
|
</input>
|
|
</fieldset>
|
|
<row>
|
|
<panel>
|
|
<table>
|
|
<title>Processes</title>
|
|
<search>
|
|
<query>eventtype=windows_index_windows eventtype=hostmon_windows Type=Process host="$HostMonitoringHost$" Name="$HostProcessName$" | dedup host, Name | table host, Name, StartTime, CommandLine</query>
|
|
<earliest>0</earliest>
|
|
<latest></latest>
|
|
</search>
|
|
<option name="wrap">true</option>
|
|
<option name="rowNumbers">false</option>
|
|
<option name="drilldown">cell</option>
|
|
<option name="dataOverlayMode">none</option>
|
|
<option name="count">10</option>
|
|
</table>
|
|
</panel>
|
|
</row>
|
|
</form> |