Fix SEPM consuming high CPU resources on remote SQL DB server

Most of the cases this attributes to the cases like constant updates to the DB and/or huge size data insertion to the DB, these by default factors for any DB server high resource utilization.

In case of SEPM, the most common case is that SEPM has the Application Learning feature enabled which constantly updates the DB with data and also resulting in overgrown SEP DB.  To control this you need to use the Application Learning feature cautiously. Below are usual recommended options to make effective use of this feature:

  1. Disable Application Learning entirely if Application-Based firewall policies or System Lockdown are not being used
  2. Enable Application Learning only on a select number of machines to ensure that new applications are still being added to the Application List in the database
  3. Enable Application Learning across the environment periodically when changes are made to the executable run in the environment

On a server which already overgrown with Application Learning feature data, follow below steps to clear the data and restore SEPM DB to normal operational size:

  1. Delete the contents of the Computer_Application table                                             DELETE FROM COMPUTER_APPLICATION and better would be                                       TRUNCATE TABLE COMPUTER_APPLICATION
  2. Manually editing the SEPM database is not recommended or supported.
  3. This particular table is low risk to edit as there isn’t anything directly linked to this table, but unintended consequences can occur

<

p>The validity of SEPM reports involving any Application Learning data cannot be expected/guaranteed to function correctly.

Leave a Reply

Your email address will not be published. Required fields are marked *