hi
I use the search below in order to monitore the processes which use more than 80% of CPU
index="TUTU" sourcetype="perfmonmk:process"
| where process_cpu_used_percent>80
But I want to monitore only the processes > 80% of CPU which last at least one minutes or more and to display it in a timechart
could you help me please??
thanks
↧