CPU load ESMPROC.EXE (Full Version)

All Forums >> [Networking & Security] >> GFI EventsManager



Message

HPA -> CPU load ESMPROC.EXE (10.Aug.2009 2:47:21 AM)

Is it normal that ESMPROC.exe has a almost continuous cpu load of 30-40%



DrewE -> RE: CPU load ESMPROC.EXE (10.Aug.2009 8:22:32 AM)

What type of logs are you collecting? Do you collect any W3C Logs?



mblinde -> RE: CPU load ESMPROC.EXE (17.Aug.2009 12:43:27 PM)

HPA 30 - 40% cpu is actually kind of good depending on the number of machines you are collecting logs from and the amount of events you are taking in on average. W3C logs did for one reason or another cause issues with our Events Manager process to run at nearly 90 to 100% throughout the entire day. Just watch the Job Activity page under the Status tab and keep Task Manager open and watch as its collecting logs which ones are causing the CPU to rise more then the other and you'll have your culprit.



DCC_BLE -> RE: CPU load ESMPROC.EXE (25.Feb.2010 4:25:10 AM)

Hi DrewE and mblinde: I have the same issue here, running Windows 2003 in VPC with SQL Express. This machine has all processorpower (by the way, more than anough mem free, it uses practically nothing) and is only looking at our SBS 2003-server, to collect windows events. It used to collect also the W3C-logs but as mentioned in other threads, this takes forever to collect all of it.
I know VPC is maybe not the best way to run ESM, but it is only for testing and showing to customer. I tried to collect not realtime, but every 5 minutes, but still the collection on itself takes up 100% practically.

If I look at the SQL management studio, the databases are set to autogrow per 25 MB, but both databases have more than enough free space inside. I did however set the database to move data older than 1 day to the backup db and this one is set to delete after 2 weeks. I guess this can also set back at the start: collect all and then move and then delete... Could that be the problem
[image]http://www.dcc-nederland.nl/uploads/esm_issue_forum.JPG[/image]



ernestbyrd -> RE: CPU load ESMPROC.EXE (15.Mar.2010 3:24:26 PM)

If you are on build 20090922, make sure you have applied the CPU patch found here: http://kbase.gfi.com/showarticle.asp?id=KBID003694



Page: [1]