Endpoint Protection

 View Only
  • 1.  SemSvc.exe using 15% - 90% CPU- Still having troubles

    Posted Jun 23, 2011 12:56 PM

    I've been reading other forums concerning SemSvc using alot of CPU. I'm using SBS R2 - 11.0.6200.754.  I read  particular one about the C:\Program Files\Symatec\Symatec Proction Manager\inbox\agetinfo and I have 32 files that folder.  How many files should I keep in that folder and I if I delete them would it help me?  If not what would.  I have a plain file server.

    Thanks



  • 2.  RE: SemSvc.exe using 15% - 90% CPU- Still having troubles

    Posted Jun 24, 2011 03:12 PM

    Hi,

    the CPU usage is not related to the number of files in agentinfo, at least not in the way you describe it. Several things can cause it and a case-by-case analysis is required.

    High CPU usage can be reduced by tuning the product according to the size on your company (pull mode instead of push mode) and the available hardware.

    I'm afraid, I don't read enough details for further suggestions.



  • 3.  RE: SemSvc.exe using 15% - 90% CPU- Still having troubles

    Broadcom Employee
    Posted Jun 24, 2011 05:50 PM

    Files buildup in that folder based on whether or not the SEPM/Database can process the requests fast enough.  More details like how many clients, system resources, database type, heartbeat (push/pull/time), and other things like replication, any additional features (Learned applications, Network Application Monitoring, firewall logg) being installed will have an impact on how fast your heartbeat can be.

    Are the files .dat, .err, .tmp?  When were they created?

    I would start by putting your heartbeat in pull (if it isn't already) and then increasing the heartbeat (maybe start by increasing it by 30 minutes).  Without knowing more information about your environment any further suggestions are hard to make.



  • 4.  RE: SemSvc.exe using 15% - 90% CPU- Still having troubles

    Posted Jun 24, 2011 06:07 PM

    If the files you're seeing are .dat.err and .tmp files (in C:\Program Files\Symantec\Symantec Endpoint Protection Manager\data\inbox\agentinfo), then it could mean that the machine is having problems processing incoming log data. I bet it you look in some of the other folders in \data\inbox (like content), you'll find more temp files and folders, and error reports

    Windows SBS (2008 R2?) servers are usually the machines in the environment that does it all... what exactly is up and running on this server, besides file server? What kind of resources does it have, and is it virtual or physical? What is your client heartbeat cycle set to, and how many clients do you have?

    sandra