I am currently monitoring a system with perfmon and logging the following counters:
\Processor(_Total)\% Processor Time
(overall usage)\Process(*)\% Processor Time
(usage per process).
I can later see, that svchost.exe#785
(785
is an example here) was responsible for a CPU spike. Is there any way to see, which service that instance of svchost.exe
had been busy with? Do I have to log anything in addition?