IBM Support

Director agent high CPU when monitoring Microsoft Windows event log - IBM System x

Troubleshooting


Problem

When IBM Director Agent is installed on a Microsoft Windows system, it automatically monitors the Microsoft Windows Event log and parses through event Microsoft Windows event. Under normal circumstances, this does not cause any performance issues. However, if a large number of Microsoft Windows Events are being added to the Event log, high Central Processing Unit (CPU) utilization may be caused by the IBM Director agent.

Resolving The Problem

Source

RETAIN tip: H194183

Symptom

When IBM Director Agent is installed on a Microsoft Windows system, it automatically monitors the Microsoft Windows Event log and parses through event Microsoft Windows event. Under normal circumstances, this does not cause any performance issues. However, if a large number of Microsoft Windows Events are being added to the Event log, high Central Processing Unit (CPU) utilization may be caused by the IBM Director agent.

Affected configurations

This tip is not hardware specific.
This tip is not option specific.

The system is configured with at least one of the following:

  • IBM Director, any version

Note: This does not imply that the network operating system will work under all combinations of hardware and software. Please see the ServerProven compatibility Web page for more information:

  http://www.ibm.com/servers/eserver/serverproven/compat/us/

Workaround

  1. Decrease the amount of events being audited and sent to theMicrosoft Windows Event log.
  2. Disable the Microsoft Windows Event Log monitoring by the IBM Director agent by implementing a twgescli.ini file by performing the following instructions:
    1. On the Director Agent, create a file named twgescli.ini in the %installroot%\ibm\director\data directory.
    2. Add the following line to the twgescli.ini file:
        [TWGESCLI]
      enabled=0
    3. Stop and start the IBM Director Support service.

Additional information

IBM Director Agent is working as designed as pertaining to how it monitors the Microsoft Windows Event Log. The workaround completely disables Director Agent monitoring of the Microsoft Windows Event log.

 

Document Location

Worldwide

Operating System

System x:Windows 2000

System x:Windows Server 2003

System x:Windows Server 2003 x86-64

System x:Windows Server 2008

System x:Windows Server 2008 x86-64 & 2008 R2

[{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW312","label":"System x->System x3800"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW313","label":"System x->System x3650 T"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW314","label":"System x->System x3850"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW315","label":"System x->System x3950"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"HW316","label":"System x->System x3950 E"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW317","label":"System x->System x3500"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW318","label":"System x->System x3550"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW319","label":"System x->System x3650"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW31Q","label":"System x->System x iDataPlex dx320 server"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW31V","label":"System x->System x iDataPlex dx360 server"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW31Y","label":"System x->System x iDataPlex dx340 server"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW321","label":"System x->System x3400"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW322","label":"System x->System x3455"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW323","label":"System x->System x3655"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW324","label":"System x->System x3755"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW328","label":"System x->System x3105"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"LOB26","label":"Storage"}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW329","label":"System x->System x3200"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW331","label":"System x->System x3250"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW332","label":"System x->System x3850 M2"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW333","label":"System x->System x3950 M2"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW334","label":"System x->System x3200 M2"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW335","label":"System x->System x3250 M2"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW336","label":"System x->System x3350"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW337","label":"System x->System x3100"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW338","label":"System x->System x3450"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HW339","label":"System x->System x3610"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}},{"Type":"HW","Business Unit":{"code":"BU016","label":"Multiple Vendor Support"},"Product":{"code":"HWXA1","label":"System x->System x3650 NAS"},"Platform":[{"code":"PF033","label":"Windows"}],"Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
29 January 2019

UID

ibm1MIGR-5078280

Page Feedback