<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Dataplane under severe load - Log entries in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195776#M58421</link>
    <description>&lt;P&gt;Are you sure your monitoring system is looking at the dataplane cpu and not the management cpu? That would be the first thing that I would verify. The 'show running resource-monitor' command could come in handy here if you can get the alerts and take a look at the last 60 minutes and see what your utilization percentage is.&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Thu, 18 Jan 2018 16:47:49 GMT</pubDate>
    <dc:creator>BPry</dc:creator>
    <dc:date>2018-01-18T16:47:49Z</dc:date>
    <item>
      <title>Dataplane under severe load - Log entries</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195769#M58420</link>
      <description>&lt;P&gt;I see occasional "Dataplane under severe load" log entries.&amp;nbsp; It is now occurring most days, sometimes a few times a day.&amp;nbsp; Our monitoring system never shows the CPU average over 30% so whenever it happens it is apparently very brief.&amp;nbsp; I also have never noticed any particular issues that correspond with these events.&amp;nbsp; The events usually occur far from peak traffic periods.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I am curious if others experience this in the same manner and what to think of it.&amp;nbsp; Also curious as to what might be causing it.&amp;nbsp; My main concern is that if something is causing it to spike, it might be possible for a prolonged spike which would likely cause an issue.&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="dp high load.PNG" style="width: 458px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/13300i3D4F86627261AE11/image-size/large/is-moderation-mode/true?v=v2&amp;amp;px=999" role="button" title="dp high load.PNG" alt="dp high load.PNG" /&gt;&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 18 Jan 2018 16:34:19 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195769#M58420</guid>
      <dc:creator>Demast</dc:creator>
      <dc:date>2018-01-18T16:34:19Z</dc:date>
    </item>
    <item>
      <title>Re: Dataplane under severe load - Log entries</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195776#M58421</link>
      <description>&lt;P&gt;Are you sure your monitoring system is looking at the dataplane cpu and not the management cpu? That would be the first thing that I would verify. The 'show running resource-monitor' command could come in handy here if you can get the alerts and take a look at the last 60 minutes and see what your utilization percentage is.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 18 Jan 2018 16:47:49 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195776#M58421</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2018-01-18T16:47:49Z</dc:date>
    </item>
    <item>
      <title>Re: Dataplane under severe load - Log entries</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195778#M58422</link>
      <description>&lt;P&gt;I am not 100% certain what it is monitoring in regards to CPU, but it does show 2 CPU entries.&amp;nbsp; One does seem to correspond to the management plane and one to the data plane.&amp;nbsp; I don't expect it would show any spikes since they are super short it would not likley witness them when polling the current usage.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Whenever I log in to the PA management page, I check the dataplane CPU on the dashboard page and it also is always below 30%.&amp;nbsp; Whatever is happening is likely very brief.&amp;nbsp; Here are the last seven days:&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="terminal,monaco"&gt;Resource monitoring sampling data (per day):&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="terminal,monaco"&gt;CPU load (%) during last 7 days:&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;core&amp;nbsp;&amp;nbsp;&amp;nbsp; 0&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 1&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 2&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 3&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 4&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 5&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 6&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 7&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; avg max avg max avg max avg max avg max avg max avg max avg max&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; 7&amp;nbsp; 84&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 84&amp;nbsp; 10&amp;nbsp; 85&amp;nbsp; 10&amp;nbsp; 84&amp;nbsp; 14&amp;nbsp; 93&amp;nbsp; 14&amp;nbsp; 93&amp;nbsp; 14&amp;nbsp; 93&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; 8 100&amp;nbsp; 10 100&amp;nbsp; 12 100&amp;nbsp; 12 100&amp;nbsp; 17 100&amp;nbsp; 17 100&amp;nbsp; 16 100&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 4 100&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 4 100&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 99&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; 1&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 90&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; 1&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 87&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 95&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 5&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 5&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 5&amp;nbsp; 94&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; *&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 5&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 6&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 6&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 99&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;core&amp;nbsp;&amp;nbsp;&amp;nbsp; 8&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 9&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 10&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 11&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; avg max avg max avg max avg max&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 14&amp;nbsp; 93&amp;nbsp; 14&amp;nbsp; 93&amp;nbsp; 14&amp;nbsp; 93&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 84&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 16 100&amp;nbsp; 16 100&amp;nbsp; 16 100&amp;nbsp;&amp;nbsp; 9 100&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 99&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 89&amp;nbsp;&amp;nbsp; 1&amp;nbsp; 89&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 3&amp;nbsp; 87&amp;nbsp;&amp;nbsp; 1&amp;nbsp; 87&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 5&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 94&amp;nbsp;&amp;nbsp; 2&amp;nbsp; 94&lt;/FONT&gt;&lt;BR /&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 8&amp;nbsp; 99&amp;nbsp;&amp;nbsp; 4&amp;nbsp; 99&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="terminal,monaco"&gt;&amp;nbsp;&lt;/FONT&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 18 Jan 2018 17:35:19 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195778#M58422</guid>
      <dc:creator>Demast</dc:creator>
      <dc:date>2018-01-18T17:35:19Z</dc:date>
    </item>
    <item>
      <title>Re: Dataplane under severe load - Log entries</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195784#M58423</link>
      <description>&lt;P&gt;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/1075"&gt;@Demast&lt;/a&gt;,&lt;/P&gt;&lt;P&gt;Your average load is really low, but something is definately spiking the CPU to 100% on a daily basis looking at the max.&amp;nbsp;&lt;/P&gt;&lt;P&gt;What I would do is actually write a small powershell or bash script that simply makes API calls on an hourly basis to record the 'show running resource-monitor minute' status to a file. Once you have a few examples of what's actually going on we can start to see what exactly is causing it and start working on the why.&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 18 Jan 2018 17:49:04 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/dataplane-under-severe-load-log-entries/m-p/195784#M58423</guid>
      <dc:creator>BPry</dc:creator>
      <dc:date>2018-01-18T17:49:04Z</dc:date>
    </item>
  </channel>
</rss>

