process-scanner thrashing mysqld
Posted: Mon Dec 16, 2024 6:58 am
I have an issue where eve-ng's process-scanner and mysqld has high CPU utilization and using a lot of disk IO.
I enabled mysql query logging and it appears eve-ng is making the below query hundreds of times per second:
My eve-ng instance is a single server and not a cluster. I tried updating to the latest version eve-ng-pro 6.2.0-20 and still experiencing the same issue. Any ideas what could be causing this?
Code: Select all
PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND
10973 mysql 20 0 1789984 415276 36176 S 84.4 0.2 20:04.14 mysqld
11036 root 20 0 1153596 12724 6080 S 30.1 0.0 7:12.70 process-scanner
Code: Select all
2024-12-16T06:30:12.639766Z 9 Query SELECT id, name, pubkey from cluster where id != 0
2024-12-16T06:30:12.639964Z 9 Query SELECT id, name, pubkey from cluster where id != 0
2024-12-16T06:30:12.640136Z 9 Query SELECT id, name, pubkey from cluster where id != 0
2024-12-16T06:30:12.640295Z 9 Query SELECT id, name, pubkey from cluster where id != 0
2024-12-16T06:30:12.640473Z 9 Query SELECT id, name, pubkey from cluster where id != 0
2024-12-16T06:30:12.640716Z 9 Query SELECT id, name, pubkey from cluster where id != 0