Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Linux servers encounter high CPU usage when Integrity Monitoring is enabled

    • Updated:
    • 8 Sep 2021
    • Product/Version:
    • Platform:
    • Linux
Summary
Customers using Deep Security Agent (DSA) version 20.0.0-2740 or 20.0.0-2921 may encounter high CPU utilization for the ds_am process after enabling the Integrity Monitoring module.
Details
Public

Scenario 1: Both the Integrity Monitoring and Anti-Malware module are enabled.

  1. Log in to the manager console and go to Administration > Updates > Security > Pattern Updates.
  2. Click Check for Updates and Download to initiate a security update.
  3. Go to the Computers tab and select the target computer.
  4. From the Computer Properties window, go to Updates and click Download Security Updates.
  5. Once update is complete, check the Behavioral Monitoring Event Filtering Pattern. You should have 1.2.1265 or above. image.png
  6. Log in to the target computer and verify that the CPU utilization for ds_am has decreased.



Scenario 2: Only Integrity Monitoring is enabled.

  1. Contact Trend Micro Support to assist in manually updating the pattern file. 
This is workaround is temporary to mitigate the performance impact and as a limitation, it will not display manually updated pattern versions into the manager console like Scenario 1. You will need to wait for the official release fix build to display correct pattern info.
 
Premium
Internal
Partner
Rating:
Category:
Troubleshoot
Solution Id:
000288768
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.