I've recently installed the Solarwinds Log Forwarder for Windows on our Win2008R2 domain controllers to send the security events to Kiwi Syslog, and periodically the CPU utilization will spike and stay at 100% until I stop/restart the service.
Two events in the Solarwinds.net event log may be attributable to this:
| SolarWinds Event Log Forwarder for Windows Service - Unhandled Exception. See previous event messages for reason. |
and
System.ArgumentException: Source array was not long enough. Check srcIndex and length, and the array's lower bounds.
at System.Array.Copy(Array sourceArray, Int32 sourceIndex, Array destinationArray, Int32 destinationIndex, Int32 length, Boolean reliable)
at System.Collections.Generic.Queue`1.SetCapacity(Int32 capacity)
at System.Collections.Generic.Queue`1.Enqueue(T item)
at LogForwarder.LogForwarderService.Eventing6EventCallback(SubscribeNotifyAction action, IntPtr context, IntPtr eventPtr)
Security events log on the DCs is set to overwrite when the log reached max size (100MB).
Any ideas other than adding CPUs/cores to these serviers?
