IBM Support

IBM Security Guardium CPU Metrics

Question & Answer


Question

What do the various CPU metrics mean in Guardium Reports?

Cause

1. The Sniffer Buffer Usage Report shows: % CPU Sniffer, % CPU MySQL, and System CPU Load.
2. The CLI has a "support show top cpu" command.
3. The System View CPU Usage Report is a predefined report that shows a graph with a scale from 0-100 over 30 minute intervals.

Some values depend on the number of cores in the system.

Answer

1. The percents of Sniffer and MySQL are based on the percent of CPU these processes use. The System Load value in the Buffer Usage Report is obtained from the "Load average" column from uptime, per processor, factored to 100. For example, a value of 130 would be 1.3 per processor in real values.

2. The CLI "show top cpu" is the output from the Linux/UNIX command "top" and adds up the usage of all the CPUs. This can show a value greater than 100.

3. By default, the CPU Usage Report displays the usage for the last two hours. This graphical report is intended to display recent activity.

One way to see the number of cores you have in the system is to run the CLI must_gather system_db_info and look at the cpuinfo output.

There is no standard recommendation from Guardium for healthy CPU usage. This is because of the differences in how CPU resources are allocated to a system, particularly in a virtual environment where physical CPUs are shared. A constant 100% usage of all the CPUs is detrimental as it will slow processes in general.

[{"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Guardium Database Activity Monitor","Platform":[{"code":"PF016","label":"Linux"}],"Version":"9.5","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
16 June 2018

UID

swg21996331