Skip to main content
KarlH
KarlH
Explorer II
October 14, 2024
Solved

Stop Start collector features in GUI just keep spinning

  • October 14, 2024
  • 2 replies
  • 1135 views

A collector with high cpu usage. It's reporting, procs are up.. the stop start  seems to be very short in duration what is it actually doing?

 

Thanks

Best answer by Secusaurus

Hi @KarlH,

 

We've seen this behavior on Collectors that have not enough resources for the amount of logs. In case of a VM, try to give it more RAM, CPU or a better drive (SSD, in case you're using HDD). Or use multiple Collectors instead of a single one to distribute the load.

 

Best,

Christian

2 replies

premchanderr
Staff & Editor
premchanderr
Staff & Editor
October 15, 2024

Hi @KarlH ,

 

Looks like the processes are crashing and recovering on its own. 

You would need to check which process #phstatus and probe further on the error.  Especially check for unknown events and events with large length/volume. 

KarlH
KarlHAuthor
Explorer II
October 15, 2024

Ok thank you Prem!

Secusaurus
SecusaurusAnswer
Contributor III
October 15, 2024

Hi @KarlH,

 

We've seen this behavior on Collectors that have not enough resources for the amount of logs. In case of a VM, try to give it more RAM, CPU or a better drive (SSD, in case you're using HDD). Or use multiple Collectors instead of a single one to distribute the load.

 

Best,

Christian

NSE8 | Fortinet Advanced MSSP Partner
    KarlH
    KarlHAuthor
    Explorer II
    October 15, 2024

    Will do thank you Christian!

    Terms & ConditionsAccessibility statement