XG330 : Very high cpu usage for Garner service??

Hi Julian Cast : Can you please press 1 ( after PSMON) to get CPU core wise details and confirm output? Please share snapshot for reference again with pressing 1.

Hi Vishal_R,

done Thank you !

Hi Julian Cast : Thanks for sharing the snapshot. Is Device having any syslog configuration ? If yes is it reachable from XG? Can you check garner.log file to see there is any suspected logs there ?

XG Log file guide:

https://support.sophos.com/support/s/article/KB-000038142?language=en_US

Garner is basically the reporting daemon. So it looks like, you have a high volume of reports or a broken database.

Can you check, if your reports (Logviewer / Reporting) on box works? 

If there are no reports anymore, check the log size: https://support.sophos.com/support/s/article/KB-000035777?language=en_US

Try to restart the daemon. 

we should know what service needs to be restarted for garner process.

Julian Cast in our case there is a lot of RED logging in the garner.log file. Maybe one device is going banana?

And tail -f the syslog.log file if there is excessive logging happening.

Hi yes we export log into a specific log server, maybe it's the reason! 

SFV6C8_AZ01_SFOS 18.0.4 MR-4# service garner:restart -ds nosync
200 OK

Yes it's work, we will check the log exported and verify if it's not over charged