SCOM Agent CPU Utilization higher

Question

H! Guys,

SCOM agent occupies too much CPU resources, what is the reason? Is there a way to solve it?

Environment: SCOM 2019 UR3

Updated: KB5005527-AMD64-Agent hotfix, doesn't seem to work

Answer 1

Can you narrow it down?

1. Is it all servers? If so, have you configuered anti-virus exclusions?
   https://learn.microsoft.com/en-us/system-center/scom/plan-security-antivirus?view=sc-om-2022
2. Just servers with a specific operating system?
3. Just a specific management pack \ application?

If you've done some custom rules and monitors then depending on how you've scoped them then this could be causing an issue. Or has someone done an override to run a rule \ monitor too frequently?

• https://learn.microsoft.com/en-us/system-center/scom/manage-agents-identify-all-running-workflows?view=sc-om-2022

And what is too much? And is it a flat line high or does in go in peaks and troughs? If it is a peak on a regular basis e.g. every 5 minutes, every 15 minutes, every hour then chances are that it is a rule or a monitor.

Answer 2

Check the agent version. I have seen high CPU when the agent is far outdated compared to the SCOM version. I have also seen the same in reverse, for example when SCOM 2012 monitors Server 2016 or higher. Also consider the workload on the agent. Are there any issues on the server causing high event volume or rapid performance fluctuations? have any new, potentially inefficient MPs, been deployed?