Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 15765 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SAVservice using high CPU utilization

Azwan

Hello

Anyone encounter issue as per subject?,CPU utilization for SAVservice is high 50-60% when disable or enable on-access scanning, temporary solution shops have to be uninstall until this issue is solved.

:19311


This thread was automatically locked due to age.
  • 0
    Hello Azwan,

    to answer the explicit question - yes. As for the rest, the description is not very specific or detailed and also not alarming. 50% could be (only) half of a dual-core, but even 60% on a single core shouldn't choke the machine. Furthermore CPU utilization per se is not evil - for how long does it persist, is something not working, are users complaining? I understand that it is independent of on-access setting, but when does it occur?

    This general issue/question has been discussed several times on the ESDP board, please have a look at these threads. They might not solve your problem but probably give you an idea what additional details to post. Also if the issue recurs after reinstall you should probably collect the logs and contact Support.

    Christian
    :19313
  • 0

    Hello Christian,

    CPU utilization is maintain at 50-60% even on-access scanning has been disable and user is complaining this issue is affecting exchange performance since SAVservice is using all the CPU resource.

    Does this issue related with schedule scanning?, found disccussion on sophos talk that have same problem and option to solve this issue by  enable "run at lower priority"

    /search?q= 17121

    /search?q= 11501

    :19317
  • 0

    HI,

    When you have this high CPU utalization, is a scheduled scan taking place?

    So the machine is an Exchange server?


    What OS is it running? The option to run scheduled scans at a lower priority only works on Vista+, so Vista, Win7 and 2008.

    Regards,

    Jak 

    :19319
  • 0

    Hello Azwan,

    all scans log their start and stop to SAV.txt so you should be able to find out whether a scan (on-access, scheduled or on-demand/right click) was running at a certain time - that's better than just guessing where the problem could be. It might also be useful to check if CPU is high all the time (i.e. right from after boot even without a user logged on) and never drops.

    Christian   

    :19323
  • 0

    Hi Jak,

    I just spoke to person incharge for this server and he mention server performance return back to normal however SAVservice is still reaching 30-50% compare from previous process 50-60% and he still query why the service still high since we have exclude all the exchange related folder & *.exe file.

    Found some interesting troubleshootng info on sophos partner support portal regarding this issue, if sophos on-access is disable and still encounter high utilization process  we need to check "Application Control Policy" as per info from sophos

    "Note that scanning for Application Control can still occur when regular on-access scanning is disabled, because the option above is not dependent on that setting."

    Server Spec:

    Operating System: Windows Server 2003 Enterprise Service Pack 2

    Exchange Server version:  Microsoft Exchange System 6.5.7638.1 (2003)

    There's a Trend Micro ScanMail for Microsoft Exchange 8.0 installed on the same server.

    :19325