Im looking to get real time data on specific processes. CPU and Ram usage data.
I configured NIC monitoring specific to process by using WinNetMon like:
[WinNetMon://OUTLOOK]
index = desktop
process = OUTLOOK
But im looking for the CPU and RAM data now.
Thanks
You might want to check out the Splunk_TA_windows app. It contains the necessary inputs.conf settings to collect PerfMon data such as this from any Windows machine you have universal forwarders or Splunk Enterprise installed on.