-
1. Re: Patrol agent running powershell processes consuming 5GB memory
Neal Meagher Dec 28, 2017 1:53 PM (in response to Abhay Bhagat)I have similar case where patrol agent is opening up Powershell instances and consuming 95% of memory. Have you had any luck diagnosing?
-
2. Re: Patrol agent running powershell processes consuming 5GB memory
Abhay Bhagat Jan 2, 2018 5:47 AM (in response to Neal Meagher)Unfortunately no , Customer disabled the agent on the server and did not gave the opportunity to troubleshoot further .
-
3. Re: Patrol agent running powershell processes consuming 5GB memory
Suman Kumar Jan 14, 2018 2:06 AM (in response to Abhay Bhagat)Dear Abhay,
We had faced similar type of issue in our environment on a Windows server. We troubleshooted a lot but it didn't work. Below is the workaround to resolve this issue:
- Stop Patrol Agent service and keep it on disable mode.
- Delete the Patrol Agent installation directory.
- Open the regedit and delete the BMC Software or Patrol Agent related folder under KEY_LOCAL_MACHINE\SOFTWARE.
- Install the Patrol Agent on the other drive.
Hope it helps..
Thanks,
Suman
-
4. Re: Patrol agent running powershell processes consuming 5GB memory
Roberto Barnes Apr 3, 2018 8:44 PM (in response to Abhay Bhagat)It is the NT_EVENTLOG km. It creates the PowerShells to handle Windows Logs, but for some reason they keep growing in memory use and won't release it.
We also noticed other similar powershells that had been left orphaned, i.e., Windows resource monitors shows their parent process cannot be found.
The powershells look like this:
powershell.exe -NonInteractive -NoProfile invoke-command -scriptblock "{$SleepSeconds=60;$startTime = '2018-03-22T13:26:08Z';$Host.UI.RawUI.BufferSize = New-Object Management.Automation.Host.Size(5000, 2500); $counter=1;$query = '<QueryList><Query Id=\"0\" > <Select Path=\"Application\">*</Select> <Select Path=\"Microsoft-IIS-Logging/Logs\">*</Select> <Select Path=\"Microsoft-Windows-TaskScheduler/Operational\">*</Select> <Select Path=\"Microsoft-Windows-TaskScheduler/Maintenance\">*</Select></Query></QueryList>';$bckqry=$query;while(1 -eq 1) { Try {$doc=[xml]$query;$endTime = ((get- ...
There is a BMC article 000094691, which may apply.
Regards,
RB