Expedition - High CPU Usage for mysqld

bbb1381 — Sun, 08 May 2022 13:50:13 GMT

Some of the rules that have been rule enriched in the project have thousands of source or destination IP Addresses. When I try to open these rules to modify them the fields don't populate and Expedition freezes up. When I view the CPU usage on the server - mysqld CPU jumps up to greater than 100% after I attempt to open the rule for modification.

The Expedition VM is configured with 16 vCPUs, 4 sockets, 4 cores per socket, and 16GB RAM so I don't think this is a lack of resources. Are there any suggestions on how to handle rules with this many objects?

Re: Expedition - High CPU Usage for mysqld

lychiang — Mon, 09 May 2022 16:31:25 GMT

Hi @bbb1381 , Currently, in Expedition 1, MySQL is 1 threat process, and therefore it is limited to one CPU.
For future releases of Expedition, we are planning to increase the number of used CPUs to take better advantage of the resources.

topic Expedition - High CPU Usage for mysqld in Expedition Discussions

Expedition - High CPU Usage for mysqld

Re: Expedition - High CPU Usage for mysqld