High CPU usage seen for sysmon process

Open
#217 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
25/100
Issue type
Bug
Clarity
Needs clarification
Activity status
Stale
Tech stack
c, linux
Domain
operating-systems, performance

Research direction

No source file, test, reproduction steps, or diagnostic output is identified in the issue. Start by collecting the requested investigation details around the recurring sysmon CPU spike on Red Hat 8.10, including relevant process data; a concrete fix and completion criteria cannot be defined until the cause is isolated.

Written by the indexing model from the issue text.

Description

Hi Mario, Team,

Operating System - Redhat 8.10
Kernel version - 4.18.0-553.79.1.el8_10.x86_64.
Sysmon version is use - 1.4
Is Azure - No
Application installed on VM - Sterling by IBM

Issue -
sysmon at times uses more than 90% of 1 CPU on the Virtual Machine. As a remediation, the sysmon process is restarted and the usage falls down below 3% and then increases again in a few weeks time.

Please find reference screenshot below -

Image

Please let us know what information we can provide to help investigate the same further.

Dominant language
C
Stars
2.2k
Forks
220
Avg merge
11d 22h
Merged PRs (30d)
2

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from microsoft/SysmonForLinux

All issues in microsoft/SysmonForLinux

Similar issues

More C issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.