How to display the top 10 Processes that has high %_Processor_Time.
index=winserver_process sourcetype="PerfmonMk:RunningProcesses" NOT instance=Idle NOT instance=_Total earliest=-5m@m | eval Process=upper(instance) | top Process limit=10
What does this "top Process" command do? how to find the process that has high %_Processor_Time utilization?
Does anyone know the answer? Thanks in advance!
You first need to sort the processes by %_Processor_time
before using top. Something like
| sort - %_Processor_Time | top Process limit=10
The top command just gives you the first 10 lines of the results.