Reference Guide

Rules 167
Process Rules
Zombie
Purpose
This rule detects defunct, or Zombie, processes that are no longer active. The process
table entry remains in the system until the parent process quits or performs a wait call
for the child. When a large number of defunct processes exist, the process table might
be full. As a result, the parent cannot spawn new processes. Zombie processes can
eventually lead to system-wide failures or crashes.
Scope
Process_Stats
Rule Definition
Condition State
A process is consuming more than 80% of the available CPU Warning
The process is no longer a runaway process
Normal
Rule Definition
Condition State
The number of zombie processes exceeds 10 Warning