On my Windows 2003 Server, the disk activity has been out of control recently - the disk queue is getting long, and I'm getting heat on the wait time for resources. I'm looking for a tool that will let me view two things:
- What processes are causing the majority of disk accesses
- What files are being accessed constantly
Number 2 seems more important to me, since I can identify files that might be better either compressed (to lower the size of disk reads and shift load to the processor, which is only lightly utilized) or moved to the FC SAN.
Thanks for your suggestions!
You can get a quick bird's eye view using Process Monitor to see what the currently-running processes are doing. This will show you both the processes and the files they're accessing.
Adding the "I/O Read Bytes", "I/O Write Bytes", "I/O Reads", and "I/O Writes" columns to Task Manager can give you some ideas, too.
Longer term, you're probably best off capturing some counter logs w/ Performance Monitor and sifting through the data. The free Performance Analysis of Logs (PAL) tool can give you some decent feedback of overall system performance characteristics.
I'd wonder about whether you're seeing memory paging causing an increase in disk activity. Watch the "Pages Input / sec" counter of the "Memory" object in Performance Monitor. A sustained high count of pages input / sec indicates that you're starved for physical memory, which can manifest itself in excessive disk access.
I used Filemon for something like this a while ago. Turns out theres a new tool called ProcessMon which does real time registry and file system monitoring.
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
Edit - Evan beat me to it; I also like PAL for analysing perfmon counters thats a good tip.