Cafmainservice consuming high CPU on Linux Servers

Products

• Endpoint Protection

Issue/Introduction

High CPU usage by Cafmainservice on the following:

• Endpoint Protection (SEP) for Linux

Environment

SEP 14.3 RU9 and earlier

Cause

Leaving the "Upload maximum size: <log size value> records" field blank in the SEPM Client log settings will set an unrealistic highest integer value "2147483647". This same value is also observed in the sylink.xml file under "MaxLogRecords". The client interprets this value for uploading logs to the SEPM. 

 

Resolution

The default value for "Upload maximum size" is 100. It's recommended to setup a realistic value so the performance isn't impacted.

SEP version 14.3 RU10 and higher defaults the "MaxLogRecords" value to 500, and restricts the value in the Sylink.xml file if the "Upload maximum size" field is left blank in the SEPM Client Log settings.

Additional Information

Client log settings reference: Client Log Settings