This article was previously published under Q196727
This article has been archived. It is offered "as is" and will no longer be updated.
Sometimes it is desirable or necessary to determine when a process hasended when charting it in Performance Monitor. Use the Process|Elapsed Timecounter to determine this.
When monitoring a process in Chart View in Performance Monitor (from eithercurrent activity or a log file) you might need to determine when a processhas ended. The Processor|%Processor Time counter is not appropriate forsuch a determination because it shows only if the process is active oridle. Performance Monitor shows an idle process at 0 percent processortime; however, it also shows an ended process at 0 percent processor time(if it was running at one time during the current charting or loggingprocedure).
The Process|Elapsed Time counter, on the other hand, increments from zerofrom the moment a process is started and continues to increment until theprocess ends. After the process ends, this counter returns to zero. This iswhy this is the more appropriate counter to use for determining an endedprocess.
NOTE: If you start a process, end it, and then start it again (in whichcase it usually receives a different Process ID, or PID) theProcess|Elapsed Time counter accounts for this as the same process.
TIP: You can use the Process|Elapsed Time counter for the CSRSS (the Win32subsystem) process instance to determine when a system has trapped orotherwise shut down while charting or logging it with Performance Monitor,in additional to the usual methods (that is, bookmark notations in the Timewindow).