Running process filters
Filter any processes, using combinations of name and key parameters, from coming back to the instance. Out-of-the box, you can filter OS processes. Filtering processes helps reduce the number of records created, updated, or deleted in the database which can improve overall database performance.
Before you begin
Role required: discovery_admin or admin
About this task
To add processes to the filter, you must setup configurations using the Running Process filter record [running_process_filter]. These records make sure the filtered processes do not populate the Running process [cmdb_running_process] table.
Procedure
-
Select New to create a record.
The form and descriptions are explained below.
Field Description Active Check the box to include or exclude. Name Name for the record. Description Short description of the record. Category A name for the configuration type. Running process filters can be grouped however you want so that it's easier to identify and choose in the table. Probe Mandatory field. Which probe will use this filter. Often Linux or Windows active processes or ADM enhanced. When the probe executes, the instance sends the running_process_filter records as a probe parameter. The probe then uses this to filter the results before sending the information back to the instance.
Discovery Schedule You can apply the filter on a specific Discovery schedule. If you leave this field, it applies to all schedules, even Quick Discovery. Filter Any process matching the filter will not be added to the Running Processes [cmdb_running_process] table.
For example, if you want to filter all svchost.exe processes except the svchost.exe process for IIS classification, the filter definition would be:
- name is svchost.exe
- parameters does not contain iissvcs
For information on setting filter conditions see: Condition builder
Case sensitive Applies to the Filter field. If case sensitive is checked, the filter may pull more or less information than you want. Default is off. OOB filters There are Linux and Windows filters to choose from. See Out-of-the-box process filters for more details.