Cisco Secure ACS Alarm (CRITICAL

[lisandro]

Estamos recibiendo estas alertas todos los días y nose a que se debe, por lo que veo el CPU llegó al 99.38%

pero no logro saber por que sucede.

CISCO SECURE ACS - ALARM NOTIFICATION

Alarm Name: ACS - System Health

Severity: Critical

Cause/Trigger: Alarm caused by ACS - System Health threshold

Generated on: 2020-06-02 14:18:00.0

Details

-------

(ACS Instance = srvacs02, CPU Utilization (%) =  99.38 , Memory Utilization (%) =  65.33 , Disk I/O Utilization (%) =  18.09 , Disk Space Used /opt (%) =  22.75 , Disk Space Used /localdisk: (%) =  7.65 , Disk Space Used / (%) =  9.87 )

Me conecte por CLI para ver el CPU pero lo unico que encuentro es lo siguiente: imagenes

y no lo se interpretar.

Alguien me puede ayudar si es que han tenido el mismo problema 

version de ACS 5.8.0.32

[balaji.bandi]

Looks for me some BUG :

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvi08068/?rfs=iqvred

[lisandro]

Gracias por su respuesta,
Podria yo validar de alguna forma, ya sea por CLI o WEB, que el CPU esta bien y es solo un error de calculo como indica el BUG?

[lisandro]

Sorry, I add it in English

Thanks for your reply,
Could I validate in some way, either by CLI or WEB, that the CPU is fine and it is only a calculation error as indicated by the BUG?

[Damien Miller]

With both ACS 5.8 and ISE you can leverage the CLI commands "tech top" and "tech mpstat" to monitor CPU processes and statistics in real time.

[lisandro]

Thank you so much for your help,
Now I make this query, the bug indicates the following
Terms:
5.8 p6 or later

How can I validate if my ACS has p6
with a show version I can see that the version is 5.8.0.32 but I don't see p6

Thanks a lot

[Anurag Sharma]

Hi @lisandro ,

If your show version doesn't the patch 6, then it must not be installed.

This is from my lab (I have Patch 10 installed):

acs158/admin# show ver

Cisco Application Deployment Engine OS Release: 2.2
ADE-OS Build Version: 2.2.2.016
ADE-OS System Architecture: x86_64

Copyright (c) 2005-2015 by Cisco Systems, Inc.
All rights reserved.
Hostname: acs158

Version information of installed applications
---------------------------------------------

Cisco ACS VERSION INFORMATION
-----------------------------
Version : 5.8.0.32.10
Internal Build ID : B.442
Patches :
5-8-0-32-10

I would recommend you Install Patch 10 on your ACS. There will be little to no support otherwise, as this is an End-of-Life product.

[lisandro]

Thanks for your reply,
I did not know that a patch 10 existed, as the ACS is already out of support, we never update it.
With patch 10, shouldn't that bug you mentioned before appear?

And if it is not solved with the patch, could you give any suggestion to avoid the alarm messages every 2 minutes we have?
Thanks a lot

[Anurag Sharma]

@lisandro ,

You should upgrade first and then check if the problem persists. It's a little tricky to troubleshoot issues like 'High CPU' over community forums. Would be great if you could open a TAC case.

Regarding the alarms, are you receiving them over email or Syslog or just on ACS?

[lisandro]

We are receiving them by email.
I already tried to open TAC but the equipment is not supported.

That is to say that for my case it could only validate, at the moment that an alarm arrives by mail, a CLI through if I indeed have a high CPU or it is a calculation error as indicated by the BUG, is that so?
Thank you

[Anurag Sharma · Accepted solution]

From the CLI, run 'tech top'.

If you see the CPU to be not as per the alarm, then it's that bug. Otherwise, it's not that bug.

Alerting every 2 minutes is the default behaviour. If you do not wish to get emails for this alarm, please disable the alarm or remove the Email notification from the alarm.

[lisandro]

Another query and excuse my daring, that another suggestion can give me, to not have these alerts every two minutes.

Thank you