High CPU load affected by ENS for Linux

[rokasporch]

Hi Community,

we are facing a high load on some Suse Linux Enterprise Server 12 SP3.

ENS 10.6.2.103 (Plattform and Threat Prevention) is on the system installed from the screenshot. AMCore content File is the newest. Agent is the latest 5.6.1.157.

On this system a stop via isectpdControl.sh stop did not work and no input into terminal is possible.

On some other Machine, this command was able to stop and the load was going down.

Is this a known bug?

Thanks 

[patrakshar · Accepted solution]

I see that isectpd seems taking 10%. Do you have any SR opened for this? 

There is a known issue with isectpd been crashed with 10.6.2 version which has been resolved in 10.6.3. Check the 1274698 in article 1274698 The isectpd process no longer crashes on SUSE Linux Enterprise Server 11 SP4. 

More information can be shared if we have the logs from that machine.

[rokasporch]

Hi Patrakshar, thank you for your replay. Yes there is a SR open for it but we collect the wrong mer for it (Agent MER instead of ENS MER) After an update on this test client, it is without any problems, currently. Could it be that the problem is also on SLES 12.3 with 10.6.2? Thanks

[patrakshar]

Hi @rokasporch 

Yes. It is possible because the fix was provided within ENSLTP code.