High CPU on Hyper-V VM
-
I jumped at that as soon as I was able here - one less thing server side to worry about.
-
@garak0410 said:
@Dashrender said:
I only suggest removing the AV as a test to see if the utilization goes down.
After that, if it did, I would definitely look to another product... or getting with Symantec support to find the problem.
Symantec said I have the option for cloud hosted A/V under our license...may move to that as a temporary solution...
We did this when we had Symantec, one minor hiccup is that the update process would eat up our bandwidth and everything would slow to a crawl. Modifying the update policies helped with that.
-
@coliver said:
@garak0410 said:
@Dashrender said:
I only suggest removing the AV as a test to see if the utilization goes down.
After that, if it did, I would definitely look to another product... or getting with Symantec support to find the problem.
Symantec said I have the option for cloud hosted A/V under our license...may move to that as a temporary solution...
We did this when we had Symantec, one minor hiccup is that the update process would eat up our bandwidth and everything would slow to a crawl. Modifying the update policies helped with that.
That's good to know because we only have 6 meg internet here (serious)...I will do my research in migrating and this will at least float me until we can choose another suite this November...
-
Confirm with Symantec that the clients will share the dat updates with each other on the local LAN. many client AVs do that today to save on bandwidth.
-
@Dashrender said:
Confirm with Symantec that the clients will share the dat updates with each other on the local LAN. many client AVs do that today to save on bandwidth.
Interesting. Which ones do. That's a lot of the reason I would keep a server in house (much the same as WSUS).
-
@thecreativeone91 said:
@Dashrender said:
Confirm with Symantec that the clients will share the dat updates with each other on the local LAN. many client AVs do that today to save on bandwidth.
Interesting. Which ones do. That's a lot of the reason I would keep a server in house (much the same as WSUS).
I know ControlNow had this feature. Not sure about Symantec or Webroot, @Nic could probably answer that.
-
@coliver said:
@thecreativeone91 said:
@Dashrender said:
Confirm with Symantec that the clients will share the dat updates with each other on the local LAN. many client AVs do that today to save on bandwidth.
Interesting. Which ones do. That's a lot of the reason I would keep a server in house (much the same as WSUS).
I know ControlNow had this feature. Not sure about Symantec or Webroot, @Nic could probably answer that.
Good info...thanks...I am going to look into the cloud solution for now and then another suite this late fall...but the problem may still remain...I don't think it is so much the SEPM but the client itself...
-
@thecreativeone91 said:
@Dashrender said:
Confirm with Symantec that the clients will share the dat updates with each other on the local LAN. many client AVs do that today to save on bandwidth.
Interesting. Which ones do. That's a lot of the reason I would keep a server in house (much the same as WSUS).
Panda AV does, and I know McAfee used to, don't know about today.
-
Got an update on this...the day my daughter was having a baby, the server just bottomed out again...here I was trying to juggle being there for her and helping work get back up again...because of the 100% CPU problem, they were unable to do a lot of work off of the file server...they had access to it but running an intensive job from a shared folder was impossible...this all came to a head when my daughter was being rushed into a C-Section and I had my boss on the phone trying to walk him through shutting down VM's and then rebooting the host...
I've yet found time to move the anti-virus off to another server but may fast-track this...These new set of problems still do not point to one thing for certain. I was able to get some Performance Monitor logs on both the host and the VM...the logs are here if anyone wants to take a gander...it is just a few minutes of logs but taken at the height of the high CPU problems on the file server VM...also included logs for the host (called virtual):
New observations:
Rebooting is not the cure all. He rebooted the host and the VM's came back up and the file server was still topping 100% CPU.
When I got back to the office after 5PM. it was better.
When I actually POWER DOWN the host for a few minutes and then power back on and then the VM's come up, we do not see this problem right away. Could be days or weeks when it comes back.Considering observation number 3, could this very well be a hardware problem?
-
I'd be curious what happens if you unplugged the switch ports for a few moments, then reconnected. Though I can't tell you why I'm curious about that.
-
@Dashrender said:
I'd be curious what happens if you unplugged the switch ports for a few moments, then reconnected. Though I can't tell you why I'm curious about that.
The physical switch? That was next on my list...it is time for a switch upgrade in our main "server room."
-
@garak0410 said:
@Dashrender said:
I'd be curious what happens if you unplugged the switch ports for a few moments, then reconnected. Though I can't tell you why I'm curious about that.
The physical switch? That was next on my list...it is time for a switch upgrade in our main "server room."
Yep.
-
@Dashrender said:
@garak0410 said:
@Dashrender said:
I'd be curious what happens if you unplugged the switch ports for a few moments, then reconnected. Though I can't tell you why I'm curious about that.
The physical switch? That was next on my list...it is time for a switch upgrade in our main "server room."
Yep.
It is interesting that it kills the performance on just one VM and not the other two...but if this does come back again before "resolving" this, I will do that first...
-
It is happening RIGHT NOW...going to look at switch port...will report back findings...
-
How many network connections are on that VMhost?
-
@Dashrender said:
How many network connections are on that VMhost?
Well, first up, I can't even get to this host, physically or RDP. The desktop shows up but can't click start or bring up task manager...this is some serious stuff...
-
@garak0410
I assume you mean you can't get the console to show you anything? -
@Dashrender said:
@garak0410
I assume you mean you can't get the console to show you anything?I walked upstairs to the virtual host, logged in and the desktop was frozen...couldn't do anything...CTRL-ALT-DEL produced the screen where I can choose task manager but nothing clickable...I RPDed into the VM"s and shutdown gracefull and then fat fingered the virtual host...it is coming up now...
You still think it can be switch/switch port related? Enough to lock up (not responding to mouse clicks) the physical server like that?
-
You think this may warrant a call to Microsoft?...I am guessing I have 1 or 2 calls allowed a year...or we'll just pay for the calls...Dell did help me a lot but ended up wanting to blame the anti-virus...there is no anti-virus on the host...and this time the host locked up...
-
@garak0410 AV on the host set to not scan any folder containing vm drives? (VHD etc)
