This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Log Forwarder for Windows causing very high CPU utilization on domain controllers

I've recently installed the Solarwinds Log Forwarder for Windows on our Win2008R2 domain controllers to send the security events to Kiwi Syslog, and periodically the CPU utilization will spike and stay at 100% until I stop/restart the service. 

Two events in the event log may be attributable to this:

SolarWinds Event Log Forwarder for Windows Service - Unhandled Exception.  See previous event messages for reason.


System.ArgumentException: Source array was not long enough. Check srcIndex and length, and the array's lower bounds.

at System.Array.Copy(Array sourceArray, Int32 sourceIndex, Array destinationArray, Int32 destinationIndex, Int32 length, Boolean reliable)

at System.Collections.Generic.Queue`1.SetCapacity(Int32 capacity)

at System.Collections.Generic.Queue`1.Enqueue(T item)

at LogForwarder.LogForwarderService.Eventing6EventCallback(SubscribeNotifyAction action, IntPtr context, IntPtr eventPtr)

Security events log on the DCs is set to overwrite when the log reached max size (100MB).

Any ideas other than adding CPUs/cores to these serviers?

Parents Reply Children
No Data