High CPU usage / CPU spike (more than 30-40 GHz) is seen on Aria Operatins for Logs cluster

Products

• VMware Aria Suite

Issue/Introduction

• CPU usage at 100% is observed on 3 or more Aria Operations for Logs nodes Cluster and due to this other VMs in the vCenter cluster are being affected in terms of performance.
• The environment may have 2-3 vCenter servers integrated with around 65 hosts.
• Even though there are 5 Nodes, each worker node may still be consuming nearly 25 GHz or more which may affect other VMs in the vCenter cluster. Find the relevant screenshot below:

 

Environment

• Aria Operations for Logs 8.x

Cause

• This happens (CPU Spike) as Precomputation Queries are generated too often.
• Precomputation Queries is an automatic process in Aria Operatins for Logs which regularly runs user-defined queries to prime the cache so whenever users come up with their queries, the request is fulfilled by the cache.
• To mitigate this, cache priming needs to be disabled. An e.g. of high Precomputation queries is below:

Resolution

• Resolving this issue requires modifications to the internal config. We recommend creating a case with the Global Support team and referencing the provided KB article for detailed guidance and further assistance.