ntevl probe using 30% of CPU

Document ID : KB000108613
Last Modified Date : 30/07/2018
Show Technical Document Details
Issue:
ntevl is using approximately 30% of the CPU on a Windows machine. ntevl steadily consumes approx. 30% of CPU.
The ntevl probe also becomes unresponsive and displays a communication error.
Environment:
- UIM 8.5.1
- ntevl v4.31
- Windows 2008 R2
- 2 processors

 
Cause:
- Active Directory Domain Controller Security log monitoring

ntevl security log monitoring configuration setting
Resolution:
Using ntevl Raw Configure option,

Disable (remove) Security log from logs section thereby preventing Security log monitoring.

This resolves the CPU consumption issue on the domain controller machine.