When Splunk is running McAfee process MFEVTPS.EXE is consuming CPU. I have followed the instruction documented here http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/RunningSplunkalongsideWindowsantivir... (Configure viruscan not to monitor Splunk directory and process) and yet when Splunk starts up McAfee process MFEVTPS.EXE cpu goes up. Is there any reason?
Applying VirusScan Enterprise 8.8 Patch 2 did help.
The issue appears to be with McAfee bug. There are several reasons and as one of community posting discussing this is documented here https://community.mcafee.com/thread/48944 . The behavior does not occur on all uniformly but on a few. In order o address this issue try upgrading Virus Scan to the latest patch. if this does not resolve, please contact Splunk and McAfee support.