uberAgent

Process Tree Dashboard

July 25, 2024

Contributed by:

Tracking Process Lifetime & Child Creation

Process GUID

uberAgent ESA assigns each process a GUID. Such a unique ID is necessary because the operating system’s process IDs are reused. By leveraging process GUIDs, uberAgent can track processes throughout their lifetime, from the start (sourcetype uberAgent:Process:ProcessStartup) to the end (sourcetype uberAgentESA:Process:ProcessStop) as well as during the runtime (sourcetype uberAgent:Process:ProcessDetail).

Process Parent

uberAgent ESA not only identifies unique process instances; it also keeps track of parent-child relationships. All process start and stop events include names and GUIDs of the parent process.

Process Tree

A process tree is an essential tool for understanding process creation behavior. uberAgent ESA comes with a powerful Process Tree dashboard that makes it easy to identify a process’ descendants, listing important process properties such as the process lifetime, the command line, the elevation status, or the name and version of the application the process is a part of. Additionally, the number of child processes is calculated, both direct children as well as their children recursively.

By selecting any process in the tree, it becomes the new root, and the table updates to show its child processes. This makes it possible to browse through process hierarchies.

uberAgent-ESA-Process-Tree-dashboard

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Process Tree Dashboard

July 25, 2024

Contributed by:

July 25, 2024

Contributed by:

Process Tree Dashboard

Tracking Process Lifetime & Child Creation

Process GUID

Process Parent

Process Tree

In this article