search

microsoft / OMS-Agent-for-Linux

http://www.microsoft.com/oms
Other
410 stars 309 forks source link

oms agent and ClamAV cpu usage issue #856

Closed OwainWin closed 3 weeks ago

OwainWin commented 5 years ago

This issue was originally logged on the waagent GitHub issues page but after investigation has been found to be an oms agent issue and I was asked to open a new issue here, the original waagent issue is here: https://github.com/Azure/WALinuxAgent/issues/1403

I have an issue where some change in the waagent has a conflict with ClamAV on-access scanning and causes the waagent python process - python -u bin/WALinuxAgent-2.2.33-py2.7.egg -run-exthandlers - to gradually consume all the cpu.

This started a some point with 2.2.26 on any new VM's deployed, existing VM's running the same waagent version are fine. This has persisted through every new agent release up to and including 2.2.33.

I've had this open as a support call and upgrading LAD 2.39 to 3.0 has lessened the impact - it takes longer to consume all the cpu, but is still an issue. I have been advised by support to create a new issue here. I have been able to temporarily fix this by excluding the following directories from on-access scanning: •/opt/microsoft/omsagent •/opt/microsoft/omsconfig •/opt/omi/share/omsconfig •/var/lib/waagent •/var/opt/microsoft/omsagent •/var/opt/microsoft/omsconfig

As instructed I removed the /var/lib/waagent directory exclusion so this directory is being scanned and there was no issue showing that the problem is with the oms agent and not the waagent.

morwn commented 5 years ago

Hey @OwainWin, Do you register to Azure Security Center? What is your Linux distribution name and version?

OwainWin commented 5 years ago

Hi Mor

No the VM isn’t registered in Azure security center.

The OS is CentOS 7.5.1804.

Best Regards

Owain

From: Mor Weinberger notifications@github.com Sent: 13 December 2018 06:17 To: Microsoft/OMS-Agent-for-Linux OMS-Agent-for-Linux@noreply.github.com Cc: Owain Winterbone (Cefas) owain.winterbone@cefas.co.uk; Mention mention@noreply.github.com Subject: Re: [Microsoft/OMS-Agent-for-Linux] oms agent and ClamAV cpu usage issue (#856)

Hey @OwainWinhttps://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FOwainWin&data=02%7C01%7C%7Cb95d95564f384b4358eb08d660c28fbb%7Ceeea3199afa041ebbbf2f6e42c3da7cf%7C0%7C0%7C636802786085415812&sdata=EkPYaBr6mGAXBUGbAU0sAGcgdJfoxgfJA%2BxrCF%2Fg7bw%3D&reserved=0, Do you register to Azure Security Center? What is your Linux distribution name and version?

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FMicrosoft%2FOMS-Agent-for-Linux%2Fissues%2F856%23issuecomment-446854974&data=02%7C01%7C%7Cb95d95564f384b4358eb08d660c28fbb%7Ceeea3199afa041ebbbf2f6e42c3da7cf%7C0%7C0%7C636802786085415812&sdata=KDhBQ3yNEJhIrwUWaMP8oSzsPsyvhzbkrbt4QnT0Sto%3D&reserved=0, or mute the threadhttps://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAYsuPPBahhF_zUQH12zciPUrcJ3Pxjpeks5u4fDNgaJpZM4ZPoAn&data=02%7C01%7C%7Cb95d95564f384b4358eb08d660c28fbb%7Ceeea3199afa041ebbbf2f6e42c3da7cf%7C0%7C0%7C636802786085572058&sdata=60raqAd12JEUYOxhypJWzGzN7s0%2FG1eI3AFTB0GCDwo%3D&reserved=0.

This email and any attachments are intended for the named recipient only. Its unauthorised use, distribution, disclosure, storage or copying is not permitted. If you have received it in error, please destroy all copies and notify the sender. In messages of a non-business nature, the views and opinions expressed are the author's own and do not necessarily reflect those of Cefas. Communications on Cefas’ computer systems may be monitored and/or recorded to secure the effective operation of the system and for other lawful purposes. All messages sent and received by the Centre for Environment, Fisheries and Aquaculture Science may be monitored in line with relevant UK legislation . https://www.gov.uk/government/organisations/centre-for-environment-fisheries-and-aquaculture-science/about/personal-information-charter

hestolz commented 3 weeks ago

Thank you for your submission. As previously announced, the Log Analytics agent has been deprecated and has no support as of August 31, 2024. If you use the Log Analytics agent to ingest data to Azure Monitor, migrate now to the new Azure Monitor agent. As part of repo archival, open issues and pull requests will be closed.