Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
09-22-2017 08:02 AM
PA-5020, sitting on 8.0.4.
From time to time MP load increases rapadily due to appweb3 process going above 300%. Looking like this:
There is no direct correlation found between the spikes and actions taken within the GUI. Spike may go on for a while - 20 minutes, 2 hours, 5 hours, etc. During that time GUI is still usable and everything is operating without noticable delay (same goes for data plane, no impact there). But this is still bothering, as there's no clue what is causing the load and if that could have bigger impact for the box in the future.
Spikes can be seen clearly when monitoring CPU load - it show values below 20% and then sudden spike ~90% further, while it drops after a while.
Has anyone seen such a behavior or are there any suggestion where to look further?
09-22-2017 08:46 AM
Hi @nikoo,
This process has 3 instances with different names in MP (2 of them you can restart with the debug command).
You could try this and see if it alleviates the load :
> debug software restart process sslvpn-web-server > debug software restart process web-server
More info on appweb3 :
Also this discussion on restarting appweb on PAN-OS 7.0 is still valid in 8.0 and might contain some useful tips :
https://live.paloaltonetworks.com/t5/General-Topics/Restart-appweb-in-PanOS-7-0-x/m-p/142861
Cheers !
-Kiwi.
09-24-2017 11:37 PM
Hi,
Thanks for the input, I've looked though these articles and most likely reboot for these processes should be done anyway, but just curious if that is may be something specific customer is doing within GUI, etc. or that is process itself getting busy with something, so looking if someone has seen similar pattern in any way.
03-09-2020 03:00 AM
Hi,
I dont't have access to the first link you mention. It says "You do not have sufficient privileges for this resource or its parent to perform this action."
kr,
Tommy
03-11-2020 06:05 AM
this happened to our appliance rarely and the only command solve this is restart managment service
>debug software restart process management-server
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
