The process ECSLOGD.exe is suddenly taking up to 95% of system resources.

Products

• CA Directory
• CA Identity Manager
• CA Identity Governance
• CA Identity Portal
• CA Risk Analytics
• CA Secure Cloud SaaS - Arcot A-OK (WebFort)
• CLOUDMINDER ADVANCED AUTHENTICATION
• CA Secure Cloud SaaS - Advanced Authentication
• CA Secure Cloud SaaS - Identity Management
• CA Secure Cloud SaaS - Single Sign On
• CA Security Command Center
• CA Data Protection (DataMinder)
• CA User Activity Reporting

Issue/Introduction

The process ECSLOGD.exe is the logging daemon for eCS (eTrust/Enterprise Common Services). This process relies on certain files which can become corrupted, causing the ECSLOGD.exe process to consume an inordinate amount of system resources.

Environment

Release: ESPDIR99000-8.1-Extended Support Plus-for CA Directory
Component:

Resolution

There are two files that can become corrupted. Their names are ecslog.dat and ecslog.idx. They are located in:

C:\Program Files\CA\SharedComponents\eTrust Common Services\Log

Along with becoming corrupted, these data files can also grow to extremely large sizes. It is safe to delete them, however since the system might have these in use, you may need to stop their service. To do so:

• Open the Run dialog on your Windows system.
• Type 'Services.msc' (without quotes) and click 'Ok'.
• This will open the Microsoft Services Control Panel.
• Find the service called 'Enterprise Common Services Log Daemon.'
• Right-click on this service and select 'Stop.'

You should then be able to delete the files in the eCS log folder.

***During this process, the Enterprise Common Services Log Daemon service might not have started up correctly. In this case, you will need to disable it from starting. To do so:

• Open the Run dialog on your Windows System.
• Type 'msconfig' and hit enter.
• This will open the Microsoft System Configuration Utility.
• Click on the services tab.
• Locate the Enterprise Common Services Log Daemon service in the list.
• Uncheck the box to the left of this service name, which will prevent the service form automatically loading then next time you boot up.
• Click on the ok button. You will be prompted to restart your system.

When your system restarts, you should now be able to delete the files in the eCS log folder.

Additional Information

Ensure that you are running the latest version of the eCS available from the Manual Updates folder in the latest CR.