KNOWN ISSUE: "AeXMetricProv.exe" consumes high CPU usage on Domain Controllers

Article:TECH122357

Created: 2010-03-18

Updated: 2010-03-18

Article URL http://www.symantec.com/docs/TECH122357

NOTE: If you are experiencing this particular known issue, we recommend that you to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.

Article Type
Technical Solution

Product(s)

Show all

Languages

Show all

Problem

On some machines, AeXMetricProv.exe consumes high CPU usage. This behavior is most prevelant on, but not limited to, Domain Controllers.

Environment

Monitor Solution for Servers SP4 7.0.7416

Cause

This condition occurs on machines with excessively busy NT Event Logs. Domain Controllers are most likely to experience this issue because their NT Event Logs, the Security log in particular, are typically busier than other Windows machines.

If any NT Event rules are enabled in a Monitor Policy, the Monitor Agent will then read all NT Events which occur on a machine. This architecture is not typically problematic unless the NT Event Logs are excessively busy (e.g. thousands of events per minute).

This is a known issue and has been submitted to development.

Solution

There is no direct resolution to this behavior at this time. This article will be updated when this issue has been resolved in a future release.

To aleviate the CPU consumption, separate all Domain Controllers (and other machines with excessivley busy NT Event Logs) from the existing Monitor Policies. Clone the existing enabled policies, remove all NT Event based rules, and apply the policies to only the effected machines. This will allow all other monitoring to occur except for NT Event monitoring which will resolve the high CPU consumption of the Monitor Agent.

Supplemental Materials

Source	DEFECT
Value	ETK 1998414
Description	Logged in Etrack (Symantec) database

Legacy ID

52004