High CPU usage / CPU spike (more than 30-40 GHz) is seen on Aria Operatins for Logs cluster

Products

• VMware Aria Suite

Issue/Introduction

• CPU usage at 100% is observed on 3 or more Aria Operations for Logs nodes Cluster and due to this other VMs in the vCenter cluster are being affected in terms of performance.
• The environment may have 2-3 vCenter servers integrated with around 65 hosts.
• Even though there are 5 Nodes, each worker node may still be consuming nearly 25 GHz or more which may affect other VMs in the vCenter cluster. Find the relevant screenshot below:

 

Environment

• Aria Operations for Logs 8.x

Cause

• The CPU Spike occurs when Precomputation Queries are generated too often.
• Precomputation Queries are an automated process in Aria Operations for Logs which regularly runs user-defined queries to prime the cache so whenever users run queries, the request is fulfilled by the cache.
• To mitigate this, cache priming needs to be disabled. An example of high Precomputation queries is below:

Resolution

• Resolving this issue requires modifications to the internal config. We recommend creating a case with the Global Support team and referencing the provided KB article for detailed guidance and further assistance.