Answered by:
High CPU Usage

Question
-
Try to figure out what is causing high CPU usage on Exchange 2010 daily around 12:30am to 1:00am that causes log not able to catch up, DAG replication errors due to disk can't keep up, and multiple other warnings in eventlog on all our mailbox servers.
Looking at the mailbox servers,
Exmon shows multiple mailbox's Bytes Out around 30 - 80MB, Max Server Latency up to 1,200ms.
TaskMgr shows Store.exe at around 40-50%, msftefd.exe fluctuate between 5 to 35%, replication 5-10%.
I am assuming msftefd.exe is performing database content indexing? If so,
where is the schedule?
why would content indexing cause issues with DAG where it reads hundreds of MB/s?
isn't there a throttling on it?
Seems odd...
- Edited by JT_CP Tuesday, July 12, 2016 4:08 PM
Tuesday, July 12, 2016 4:07 PM
Answers
-
Hi,
Perfmon is also a good tool to troubleshoot the performance issues.
https://blogs.technet.microsoft.com/mikelag/2010/01/11/perfwiz-for-exchange-2010/
Some standard of performance counters please refer to the following article:
https://technet.microsoft.com/en-us/library/dd335215(v=exchg.141).aspx
Best regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.
- Edited by Jason.Chao Wednesday, July 13, 2016 11:04 AM
- Proposed as answer by Niko.Cheng Monday, July 25, 2016 1:30 AM
- Marked as answer by Niko.Cheng Monday, July 25, 2016 1:30 AM
Wednesday, July 13, 2016 11:02 AM -
My initial bet will be on AV as well. Ensure that it is correctly configured.
You can use PAL to help analyse the Perfmon data you are collecting.
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:http://blogs.technet.com/rmilne Twitter:
LinkedIn:
Facebook:
XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
- Proposed as answer by Jason.Chao Saturday, July 23, 2016 3:43 PM
- Marked as answer by Niko.Cheng Monday, July 25, 2016 1:30 AM
Wednesday, July 13, 2016 8:16 PM
All replies
-
Hi.
I think need analize mailbox with high latency.
Maybe external user connection from mobile devices and need update os. Sometime old iOS or Android can spoofing when connection to Exchange.
Maybe your are need analize your configuration Understanding Processor Configurations and Exchange Performance
Troubleshooting High CPU Utilization
Maybe you are need install update Exchange and Outlook.
MCITP, MCSE. Regards, Oleg
- Edited by Oleg.Kovalenko Tuesday, July 12, 2016 5:06 PM
Tuesday, July 12, 2016 5:05 PM -
It's not individual mailbox. It is across the board on all six mailbox servers. CPU are at under 20% most of time except during 12:30am to 1:am.Tuesday, July 12, 2016 5:37 PM
-
Maybe you are runing backup, services DB or services on the storage at this time.
MCITP, MCSE. Regards, Oleg
- Edited by Oleg.Kovalenko Tuesday, July 12, 2016 6:35 PM
Tuesday, July 12, 2016 6:33 PM -
Nope, backup was not running.Tuesday, July 12, 2016 9:56 PM
-
One more option I would suggest you trying this Exchange server health check tool which empowers to track the health status of your Exchange Environment and alerts instantly for critical by sending customized email notification for high CPU utilization, disk space and much more.Wednesday, July 13, 2016 6:45 AM
-
Hi,
Perfmon is also a good tool to troubleshoot the performance issues.
https://blogs.technet.microsoft.com/mikelag/2010/01/11/perfwiz-for-exchange-2010/
Some standard of performance counters please refer to the following article:
https://technet.microsoft.com/en-us/library/dd335215(v=exchg.141).aspx
Best regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.
- Edited by Jason.Chao Wednesday, July 13, 2016 11:04 AM
- Proposed as answer by Niko.Cheng Monday, July 25, 2016 1:30 AM
- Marked as answer by Niko.Cheng Monday, July 25, 2016 1:30 AM
Wednesday, July 13, 2016 11:02 AM -
Do you have custom maintenance schedules on your databases or are they set to 24x7?
Check the server OS and make sure the server isn't setup for indexing the file system.
What antivirus are you running on the mailbox servers? It could be a quick scan or file system scan that's set to go off during that time. It could also be a virus definition update/quick scan after the update depending on how that is scheduled in your environment. We had this problem with Symantec Endpoint and wound up having to go to another antivirus product because it was so bad and was killing our mailbox servers.
Wednesday, July 13, 2016 12:47 PM -
My initial bet will be on AV as well. Ensure that it is correctly configured.
You can use PAL to help analyse the Perfmon data you are collecting.
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:http://blogs.technet.com/rmilne Twitter:
LinkedIn:
Facebook:
XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
- Proposed as answer by Jason.Chao Saturday, July 23, 2016 3:43 PM
- Marked as answer by Niko.Cheng Monday, July 25, 2016 1:30 AM
Wednesday, July 13, 2016 8:16 PM