How To Troubleshoot High CPU Consumption with SentinelOne Services

SentinelOne 

To see AgentCPU usage:

1. Open Task Manager.

2. In Processes, sort by CPU.

3. See SentinelOne Agent or Sentinel Service.

   

To collect logs for Support:

The Agent is lightweight and does not overload the CPU in normal usage. To learn the issue, collect information with different Windows tools and SentinelOne tools, and send it to your SentinelOne Support engineer.

1. Download these Microsoft tools: 

   • X64 Debuggers And Tools-x64_en-us.msi

   • Windows Performance Toolkit

2. Install the X64 Debuggers application. It will run in the background.

3. Run Windows Performance Recorder, to record a reproduction of the issue.

4. Run Fetch Logs from the Management Console, to get Agent logs.

5. Zip all the output files and upload them to the secure folder that your Support engineer gave you.

To get Windows Performance Recorder output:

1. Start Windows Performance Recorder.

2. Click More options.

3. In the Resource Analysis section, select:

   • CPU usage

   • Disk I/O activity

   • File I/O activity

   

4. In theScenario Analysis section, select Mini filter I/O Activity.

5. In Logging mode, select File.

6. Click Start.

7. Reproduce the endpoint activity that led to the issue.

8. In Windows Performance Recorder, click Save.

9. Go to the folder where you saved the recorder files, and zip the files to one archive.