Kntcma.exe shows high CPU or Memory usage during Windows event log processing
The Monitoring Agent for Windows OS agent process, kntcma.exe, may show high CPU or Memory usage during Windows event log processing, while any event log is receiving a large number of events, the processing of these events for the enabled situations causes a high CPU or Memory load reading the events from the log.
Resolving the problem
1. KBB_RAS1 in NT agent configuration file KNTENV must be set at ERROR only. This makes sure no High CPU is attributed to log tracing.
2. Add NT_LOG_THROTTLE=1 to file KNTENV, which would make NT agent drops all of the duplicated events every read cycle of the event log.
3. Restart NT agent to make your change take effect.
|Systems and Asset Management||Tivoli Monitoring Version 6||ITM Agent Windows V6||Windows||18.104.22.168, 22.214.171.124, 126.96.36.199, 6.2.2, 6.2.1|