esmproc.exe cpu and memory usage

esmproc.exe cpu and memory usage (Full Version)

All Forums >> [Networking & Security] >> GFI EventsManager

Message

totalstu -> esmproc.exe cpu and memory usage (29.Dec.2006 2:05:32 PM)
I noticed that the esmproc.exe process is constantly using between 90-100% of the cpu. I also notice that the memory usage of the process is at 196,616k, and rising. The machine was reboot about 4 hours ago. Still using build 1122. What could be the reason for this? Thanks

Calin Ghibu -> RE: esmproc.exe cpu and memory usage (3.Jan.2007 3:51:58 AM)
Hi, Do you have any anti virus software scanning the network traffic in real time? What is the load of ESM? How many computers are you scanning in real time mode, or small time intervals? Can you post anything about your hardware? Note: memory consumption of 200 MB is what I consider low->medium load. ESM can work with up to 1.7 GB of memory if necessary and available. Best regards, Calin

totalstu -> RE: esmproc.exe cpu and memory usage (3.Jan.2007 11:43:34 AM)
Event Manger is running on a virtual machine, with 768mb ram, creating within VMware. NSM is also running on this machine. There is almost 200mb of free memory. We have Norton Corp 8 or 9 running on every server and workstation in our organization. We are/were using the trial version of Event Manager to monitor 11 machines. Unfortunately, the trial has ended. I'm guessing the best thing to do would be to uninstall the old version and install the lastest build and see what happens. Is there a way to get a key that will give us another 30 day trial? Thanks

Calin Ghibu -> RE: esmproc.exe cpu and memory usage (4.Jan.2007 2:31:26 AM)
Ok, how much memory does the server running the VM have in all? Do VMs also run anti virus? If yes, have you excluded ESM processes and ports from the anti virus real time monitoring? How about the ESM file folders? Regarding evaluation: I think you can obtain more evaluation time if you contact the support department and simply ask for it. Best regards, Calin

totalstu -> RE: esmproc.exe cpu and memory usage (4.Jan.2007 8:23:19 AM)
The server running the VM has 2gb of memory. VMs also run AV. I hadn't excluded the processes and ports from the AV RT monitoring. They are now. The ESM file folders were also not excluded. They are now. I'll contact support about getting another 30 day trial key and once that is done I'll monitor the situation. Thanks

Calin Ghibu -> RE: esmproc.exe cpu and memory usage (9.Jan.2007 3:01:48 AM)
ok, Any updates on this issue? have you upgraded to atest build? Does the issue still appear? Best regards, Calin

totalstu -> RE: esmproc.exe cpu and memory usage (9.Jan.2007 7:36:37 AM)
Hi Calin, That issue may have been resolved. I upgraded to the newest build, and received a new key. Things seem to have been better yesterday. I do notice that there is no acitivity since about 6pm last night. Under job activity nothing is moving. I will stop and restart the service and see what happens. Thanks So after watching it this morning I see the cpu usage is all over the place. Sometime at 99% and sometime at 20%. Most times it just fluctuates between them. Memory usage is at 303000kb and climbing.

Calin Ghibu -> RE: esmproc.exe cpu and memory usage (9.Jan.2007 12:25:54 PM)
Hi, Under the circumstances is quite normal. 200 MB free memory for ESM is too little (depends on the number of events you are collecting though but for 11 machines I think it is too little). BTW: where is the database located? Try installing on a real machine coz I doubt processor time available to ESM is enough also. Best regards, Calin

totalstu -> RE: esmproc.exe cpu and memory usage (10.Jan.2007 9:16:05 AM)
I'm using an MSDE DB, located on the same VM as Events Manager. I figured in testing mode this would be sufficient rather than having it run on our sql server. Just to be clear, are you suggesting to install EM on a non virtual machine with 1GB or more ram? Would it matter if the cpu is AMD or Intel? Once again it stopped processing last night. Well, maybe not stopped processing but nothing was showing up in active jobs under "job activity" The operational history was showing all errors so I stopped/restarted and it is now functioning properly. Thanks

Calin Ghibu -> RE: esmproc.exe cpu and memory usage (12.Jan.2007 8:58:39 AM)
Hi, Well, I think memory available is too little and this may cause bottlnecks or even crashes, especially since you have the database engine on the same machine (this guy also consumes a significant amount of memory). You may want to check out the deployment guide available. It contains very good information and benchmark data, so you can make an idea of the requirements and also you may find it very usefull in deciding how to deploy and use the product. If you do not manage on a real machine, at least make available some more RAM for the virtual machine (CPU manufacturer is of less importance and less significant). Best regards, Calin

totalstu -> RE: esmproc.exe cpu and memory usage (12.Jan.2007 11:36:42 AM)
Things seem to have stopped again. I have run the troubleshooter and got the files. I will zip them and send to support, referencing this thread. Meanwhile, I'll look into moving this to a more powerful machine. Thanks

andrew6123 -> RE: esmproc.exe cpu and memory usage (5.Mar.2008 3:03:08 PM)
Our EventsManager v8 Esmproc.exe is using about 96% of the server's cpu. Has his issue been resolved.

mblinde -> RE: esmproc.exe cpu and memory usage (23.Jun.2009 9:37:22 AM)
Has there been a solution to this. I have recently upgraded to EventsManager 8.2 and moved this installation to a 2008 64x server and with the exact same processing rules as were on the previous install and now the CPU is averaging over 90% CPU use in a 24 hour period and usually it sits maxed out at 100% of a 3000Mhz CPU resource allocation in VMWare. It is specificly esmproc.exe that is using all the CPU. Turn off this service and the average CPU use is less than 1%.

DrewE -> RE: esmproc.exe cpu and memory usage (23.Jun.2009 10:15:27 AM)
How many machines are you collecting from? How many of these are domain controllers? Also, are any remote / physically distant from the GFI EventsManager server? Many different questions can go into why GFI EventsManager has a high CPU usage, also, there is a schedule that can be changed so instead of collecting events in real-time (every 5 seconds) GFI EventsManager can collect events every 10 minutes from one group of machines, every 8 minutes from another group, and every 14 minutes from a third group. This staggering would help alleviate some of the CPU usage issues as well.

mblinde -> RE: esmproc.exe cpu and memory usage (23.Jun.2009 10:20:34 AM)
Roughly 70 servers

Page: [1] 2 next > >>