Monitor , record history of used process

[sponge_b0b]

Hello people,

on my little home made server, I have a little tools that allow me to receive an email alert when the CPU is too much overloaded.

So since few days I receive an alert around the same time (~2 am). Great I know that my CPU was working more around that time for about 5min... but with this basic tool I don't know which process generate this activity.

Did you know any software who can recorde the activity (process, mem usage, Disk usage, network) and log the process who made the activity.

Thank you

 

[hang-the-9]

Try this https/technet.microsoft.com/en-us/library/2008.08.pulse.aspx

 

[Ralston18]

As another option check the Event Viewer logs.

Likely to provide some indication of what is taking place just before or at 2:00 a.m..

 

[sponge_b0b]

Try this https/technet.microsoft.com/en-us/library/2008.08.pulse.aspx

Thank you @hang-the-9 I had try the perfmon, but he lack a lot of useful features.

As we can see on this screenshot we see that the svchost#5 is working every ~10min
BUT without any PID or full command line of the svchost I cannot do nothing.

Of course I'have tried this : https/support.microsoft.com/en-us/help/281884/the-process-object-in-performance-monitor-can-display-process-ids-pids

But it's not working ! I cannot enter "Enables PID data" as an DWORD entry