NCPA agent reports incorrect CPU status

[titien104]

Hi Team,
I have a Critical Alert on one of my Linux VMs (NCPA installed on it) about CPU at 100%. However, when I investigate the issue, it shows CPU usage is just around 10-50%. However, I see there is a process (falcon-sensor) that use around 130% all the time. I had restart both NCPA_listener, NCPA_passive and falcon_sensor but it does not help. Please see pics below and let me know if you have a solution.

CPU at 99%.PNG

CPU Incorrect status.PNG

Thanks,

[scottwilkerson]

Actually you just circled the user CPU usage, there is also 49% of the CPU being used by system.

The real number you should look at is the id number (0.5%) and subtract from 100%