CPU Spike after upgrade 10.6.x

[mkhairul12]

Hi Everyone, currently I am having issue with this, my CPU spike to 100% all the time after upgrade to 10.6.x
I believe the issue when enabling the threatwind IP check on the code, my configuration as recommended by the documentations.
any solutions for this?

[osmontero]

Hello, can you please share with us some metrics from your environment, like amount of logs processed per day, instance memory, cores and individual core speed. This will help us with further optimizations.

[KevCar69]

I am also seeing this. Never had an issue with 10.1. At least I think that was the version I had installed back in October. Soon as I upgraded to 10.6 I noticed CPU running at 100%. And this with only 2 DC's added.

[mkhairul12]

We are running about 1 firewall logs only, I have encounter this before but what i did before is removing all the IPBlocklist files from correlation and as yesterday once i remove those file CPU back to normal, so my conclusion this is due to the IPBlacklist checking correlation for the threatwinds. But this is actually important for the system but we need workaround because my office environment now only 5 staff but CPU constant 100% and logs <1GB per day, i have stopped all other integration and found its ok but when enable firewall specifically focusing IP Checking thats the real issue for now

[GitterDunner421]

Yes, seeing that here too. Was on 10.5.18 and everything running normally. Upgraded to 10.6.2 and CPU is maxed out. The correlation process it the offender according to top from terminal session.

[Kbayero]

Hello @mkhairul12 @KevCar69 @GitterDunner421

We have been able to replicate your bug, release 10.7.2 should fix the issue.