topic Muliple JAVA process on ITSI server in Splunk ITSI

Muliple JAVA process on ITSI server

ips_mandar — Tue, 08 Jan 2019 11:15:03 GMT

HI,
I have dedicated serach head for ITSI on windows OS. I have ITSI version 4.0.4 and I have installed Java SE Development Kit 8. But when itry to create notable event aggregation policies then multiple java instance are running which in turn CPU utilization goes to 100.
so what can be issue due to which multiple java process are running?
I would appreciate any ideas?
it seems hardware is enough but not understand about multiple java instance..
Thanks

Re: Muliple JAVA process on ITSI server

skoelpin — Tue, 08 Jan 2019 15:58:57 GMT

You probably don't want to hear this, but you should run it on *nix. I would recommend opening a support case

Re: Muliple JAVA process on ITSI server

srinivasmanikan — Wed, 30 Sep 2020 00:32:20 GMT

That Java processes are created by rules engine
rules engine is used by grouping policy
In this case we have to go to the scheduled search and there we have ITSI_Event_grouping
we need to kill this job so it will again restart the job then our CPU comes down