KNOWN ISSUE: "AeXMetricProv.exe" consumes high CPU usage on Domain Controllers

Article:TECH122357  |  Created: 2010-03-18  |  Updated: 2010-03-18  |  Article URL
NOTE: If you are experiencing this particular known issue, we recommend that you Subscribe to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.
Article Type
Technical Solution


On some machines, AeXMetricProv.exe consumes high CPU usage. This behavior is most prevelant on, but not limited to, Domain Controllers.


  • Monitor Solution for Servers SP4  7.0.7416


This condition occurs on machines with excessively busy NT Event Logs. Domain Controllers are most likely to experience this issue because their NT Event Logs, the Security log in particular, are typically busier than other Windows machines.

If any NT Event rules are enabled in a Monitor Policy, the Monitor Agent will then read all NT Events which occur on a machine. This architecture is not typically problematic unless the NT Event Logs are excessively busy (e.g.  thousands of events per minute).

This is a known issue and has been submitted to development.


There is no direct resolution to this behavior at this time. This article will be updated when this issue has been resolved in a future release.

To aleviate the CPU consumption, separate all Domain Controllers (and other machines with excessivley busy NT Event Logs) from the existing Monitor Policies. Clone the existing enabled policies, remove all NT Event based rules, and apply the policies to only the effected machines. This will allow all other monitoring to occur except for NT Event monitoring which will resolve the high CPU consumption of the Monitor Agent.

Supplemental Materials

ValueETK 1998414
DescriptionLogged in Etrack (Symantec) database

Legacy ID


Article URL

Terms of use for this information are found in Legal Notices