There is an issue with pan_logdb_index in 5.0.1 which can cause some intermittent high CPU usage.
An issue which continues through to 5.0.6 at least - I'm told it "might" be fixed in 5.0.8, but I'm not holding my breath.
I've noticed high cpu too. We've been experimenting with ditching the software user id agent on the DC's in favor of the hardware (on device) user id agent. Reading Architecting User Identification Deployments gave me a better insight in usage of the different user id possibilities. Now I'm considering keeping the software user id agents on the DC, since it suits our environment better.
E.g. the hardware user id agent can cause a lot of cpu demand on both the management server and DC's. Traffic between firewall and DC is completely different when using software of hardware user id agent.
Careful planning may improve the situation. If you get management cpu down, the GUI user experience also enhances greatly.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!