Windows Perfmon, determine app pool

Question

From our admins we got an message there is an IIS process that consumed all of the OS memory.
We have set up a perfmon counters but I can see only the w3wp.exe#ordinalNumber counter for Private Bytes, PID. So I know what pid had w3wp.exe. But I'd like to determine the proper application (app pool). I can not see any Counter for tracing cmdline.

I also looked at IIS Logging, https://learn.microsoft.com/en-us/iis/web-dev-reference/server-variables. And I cannot see any server variable to log in a w3wc log a Process Id.

Any ideas?

Answer 1

@Jan Vávra

In Windows Task Manager, you see IIS Worker Processes, but you are not able to identify which worker process is hosting which application pool.

In IIS Manager, you can view the Worker Process assignments by going into the Worker Processes section of the server itself, this will then generate the Process ID of the Worker Process associated with the application pool(if the application pool is not active or sleeping, it will NOT be listed in this screen), you can then find in Task Manager.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

The problem is not reading the actual state but be able to look several hours backward for the point of time when admins have reported the problem and unfortunately restarted the whole OS. From perfmon I can read w3wp.exe#number and I need to assign #number for particular app pool.