multiple rrdtool high (100%) cpu usage

Hello Team,

Good day and hope every one is well. 

This issue seems to be due to Daylight saving change that happened. This is currently being investigated by Dev Team.

Suggested workaround is to set TimeZone to anything other than GMT, IST (Ireland), and BST (British Summer Time) and restart the system.  If that doesn’t work, UTC should work fine, as this has no daylight savings.

As far as we know, this should only affect UK customers.

Many thanks for your time and patience and thank you for choosing Sophos. 

Cheers,

Hello Team,

Good day and hope every one is well. 

This issue seems to be due to Daylight saving change that happened. This is currently being investigated by Dev Team.

Suggested workaround is to set TimeZone to anything other than GMT, IST (Ireland), and BST (British Summer Time) and restart the system.  If that doesn’t work, UTC should work fine, as this has no daylight savings.

As far as we know, this should only affect UK customers.

Many thanks for your time and patience and thank you for choosing Sophos. 

Cheers,

My TimeZone is set to 'Europe / London' rather than GMT and I was still impacted by this issue.

Any update to resolve this issue as one of our client UTM's in HA is maxed out at 100% CPU and is a complete outage for 1000 users.  CPU has gone up since early hours of Sunday morning.  This looks to be related to this issue raised as same firmware version 9.714-4.  Already raised with Sophos support 06378016.  Told that someone from technical would ring me back in 2 hours.  This is unacceptable as we have a complete outage for this client.

My Timezone is set to 'Europe / London' not GMT, IST (Ireland), and BST (British Summer Time)

StepNo6 said:

Any update to resolve this issue as one of our client UTM's in HA is maxed out at 100% CPU and is a complete outage for 1000 users.  CPU has gone up since early hours of Sunday morning.  This looks to be related to this issue raised as same firmware version 9.714-4.  Already raised with Sophos support 06378016.  Told that someone from technical would ring me back in 2 hours.  This is unacceptable as we have a complete outage for this client.

If I were in your situation I'd have implemented the workaround which JeffreyLewcock suggested last night. This kills the rrd processes and then prevents the Cron jobs from running commenting them out. Takes two minutes [assuming you know how to use vi] and it doesn't require a reboot.

JeffreyLewcock said:

I ssh'd in then sudo'd to root

killall /usr/local/bin/create_rrd_graphs.plx
killall rrdtool

I then edited

/etc/crontab
/etc/crontab.rrd

to comment out the cron entry that restarts the process

If rrdtools has respawned you might have to re run the killall commands

This prevents the rrdtools running however the graphing is then stopped

Remove the commenting when you have a proper solution (and tell me !!)

I'm suprised theres not more people having this problem TBH

My system was also set to Europe / London

Jeff

Hey JeffreyLewcock ,

Thank you for reaching out to the community, this is a known issue - NUTM-14089. Our Dev team is working on it.

Please try the below workaround to see if it fixes the issue

• Change the timezone 
• reboot or kill rrdtool