$ 0 0 I used sourcetype-perfmon:process and i could get fields - counter/instance/object which refers process name