Boot Processes Metrics
Boot Processes
uberAgent collects detailed information about each process running during the boot process like the command line and latency\.
Note
This metric is only available on client operating systems.
Details
-
Source type:
uberAgent:OnOffTransition:BootProcesses -
Used in dashboards: Single Boot Duration
-
Enabled through configuration setting:
BootDetail -
Related configuration settings: n/a
-
Supported platform: Windows
List of Fields in the Raw Agent Data
| Field | Description | Data type | Unit | Example |
|---|---|---|---|---|
| ProcName | Process name. | String | svchost.exe | |
| ProcID | Process ID. | Number | 456 | |
| ProcParentID | Parent process ID. | Number | 789 | |
| ProcStartTimeRelativeMs | Relative process start time. | Number | ms | 100 |
| ProcLifetimeMs | Process lifetime. | Number | ms | 50 |
| ProcCmdline | Process commandline. | String | C:\WINDOWS\system32\svchost.exe -k DcomLaunch -p | |
| ProcIOReadCount | Count of process I/O read operations. | Number | 91 | |
| ProcIOWriteCount | Count of process I/O write operations. | Number | 97 | |
| ProcIOReadMB | Amount of process I/O read operations data volume. | Number | MB | 50 |
| ProcIOWriteMB | Amount of process I/O write operations data volume. | Number | MB | 50 |
| ProcIOLatencyReadMs | Process I/O read operations latency. | Number | ms | 30 |
| ProcIOLatencyWriteMs | Process I/O write operations latency. | Number | ms | 30 |
| SessionID | Unique identifier that is generated by the machine when the session is created. Will be reassigned to other sessions after logoff. | Number | 3 | |
| TotalBootDurationMs | Total boot duration. | Number | ms | 500000 |
| SortOrder2 | Sort order number to sort the table Boot process performance on the Single Boot dashboard correctly. | Number | 29 | |
| BootUID | Unique UID for a boot generated by uberAgent. | String | 00000408-0049-004b-0bb9-8ed17e25d401 |
List of Calculated Fields
| Field | Description | Data type | Unit | Where available | Example |
|---|---|---|---|---|---|
| SortOrder | Sort order number to sort the table Boot process performance on the Single Boot dashboard correctly. | Number | Splunk data model | 1 |
Boot Process Detail
uberAgent collects detailed information about each process running during the boot process like the disk IO and latency\.
Note
This metric is only available on client operating systems.
Details
-
Source type:
uberAgent:OnOffTransition:BootProcessDetail -
Used in dashboards: Single Boot Duration
-
Enabled through configuration setting:
BootDetail -
Related configuration settings: n/a
-
Supported platform: Windows
List of Fields in the Raw Agent Data
| Field | Description | Data type | Unit | Example |
|---|---|---|---|---|
| ProcessName | Process name. | String | svchost.exe | |
| ProcessIOReadCount | Count of process I/O read operations. | Number | 91 | |
| ProcessIOWriteCount | Count of process I/O write operations. | Number | 97 | |
| ProcessIOReadMB | Amount of process I/O read operations data volume. | Number | MB | 50 |
| ProcessIOWriteMB | Amount of process I/O write operations data volume. | Number | MB | 50 |
| ProcessIOLatencyMs | Process I/O operations latency. | Number | ms | 60 |
| BootUID | Unique UID for a boot generated by uberAgent. | String | 00000408-0049-004b-0bb9-8ed17e25d401 |
List of Calculated Fields
| Field | Description | Data type | Unit | Where available | Example |
|---|---|---|---|---|---|
| ProcessIOCount | ProcessIOReadCount+ProcessIOWriteCount. | Number | Splunk data model | 188 | |
| ProcName | Process name. | String | Splunk data model | chrome.exe |