High CPU Usage During Specific Time Periods on Worker UTM – Is This Expected Behavior?

Hello Sophos Community,
We are currently experiencing frequent AutoScale events on our Sophos Worker UTM instances (version 9.709-3.1). Upon investigation, we noticed that CPU usage spikes significantly during specific time periods, even though overall traffic and load remain relatively stable.
Specifically, the CPU usage increases sharply between 02:00 and 03:00 UTC , and this pattern has been consistent across multiple days.
The instances are running on AWS EC2 m4.large type, which provides 2 vCPUs and 8 GiB of memory.
We would like to understand whether this behavior is expected due to product characteristics or internal processes (e.g., scheduled tasks, updates, etc.).
Our main concern is whether these CPU spikes are normal or if they indicate a misconfiguration or performance issue.
If needed, we can provide additional details such as deployment region or logs.
Thank you in advance for your insights and support.
  • maybe, there are internal processes.
    especially i would check for reports.
    Can you post a picture of CPU Chart?


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.