microsoft / microsoft/SysmonForLinux

High CPU usage seen for sysmon process

Open
#217 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
2.2k
Forks
220
Avg merge
11d 22h
Merged PRs (30d)
2

Description

Hi Mario, Team,

Operating System - Redhat 8.10
Kernel version - 4.18.0-553.79.1.el8_10.x86_64.
Sysmon version is use - 1.4
Is Azure - No
Application installed on VM - Sterling by IBM

Issue -
sysmon at times uses more than 90% of 1 CPU on the Virtual Machine. As a remediation, the sysmon process is restarted and the usage falls down below 3% and then increases again in a few weeks time.

Please find reference screenshot below -

Image

Please let us know what information we can provide to help investigate the same further.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file, test, reproduction steps, or diagnostic output is identified in the issue. Start by collecting the requested investigation details around the recurring sysmon CPU spike on Red Hat 8.10, including relevant process data; a concrete fix and completion criteria cannot be defined until the cause is isolated.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, linux
Domain
operating-systems, performance
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.