https://community.cisco.com/t5/network-security/firepower-module-one-cpu-stuck-at-100/m-p/2954132#M149148 <P>I have always liked using the following Linux commands:</P> <PRE class="prettyprint"><CODE>ps -eo pcpu,pid,user,args | sort -k1 -r | head -10</CODE></PRE> <P>or</P> <PRE class="prettyprint"><SPAN>ps xo pid,cmd --sort=%cmd | tail -1</SPAN></PRE> <P>I hope this helps!</P> <P><EM>Thank you for rating helpful posts!</EM></P> Fri, 21 Oct 2016 01:41:15 GMT nspasov 2016-10-21T01:41:15Z https://community.cisco.com/t5/network-security/firepower-module-one-cpu-stuck-at-100/m-p/2954131#M149147 <P>One cpu is stuck at 100% for cpu 03 on a FirePower module on an ASA 5545-x. &nbsp;Going into the the console for the module and doing a "top" command I see that the process using the most CPU is "ids_event_alert". &nbsp;</P> <P></P> <P>Does anyone have any documentation on where to find logs to see what is causing the high CPU spike for one processor. &nbsp;Speciffically a log correlating to "ids_event_alert".</P> <P></P> <P>Attach is a screenshot of the top command on the "expert" console form the affected Firepower Module.</P> <P></P> <P>Versions:</P> <P>ASA-- 9.4(2)11</P> <P>Module-- 6.1.0-330</P> Tue, 12 Mar 2019 08:24:49 GMT https://community.cisco.com/t5/network-security/firepower-module-one-cpu-stuck-at-100/m-p/2954131#M149147 tsiemers1 2019-03-12T08:24:49Z https://community.cisco.com/t5/network-security/firepower-module-one-cpu-stuck-at-100/m-p/2954132#M149148 <P>I have always liked using the following Linux commands:</P> <PRE class="prettyprint"><CODE>ps -eo pcpu,pid,user,args | sort -k1 -r | head -10</CODE></PRE> <P>or</P> <PRE class="prettyprint"><SPAN>ps xo pid,cmd --sort=%cmd | tail -1</SPAN></PRE> <P>I hope this helps!</P> <P><EM>Thank you for rating helpful posts!</EM></P> Fri, 21 Oct 2016 01:41:15 GMT https://community.cisco.com/t5/network-security/firepower-module-one-cpu-stuck-at-100/m-p/2954132#M149148 nspasov 2016-10-21T01:41:15Z