process-scanner thrashing mysqld

[cedarbloom]

I have an issue where eve-ng's process-scanner and mysqld has high CPU utilization and using a lot of disk IO.

Code: Select all

    PID USER      PR  NI    VIRT    RES    SHR S  %CPU  %MEM     TIME+ COMMAND
  10973 mysql     20   0 1789984 415276  36176 S  84.4   0.2  20:04.14 mysqld
  11036 root      20   0 1153596  12724   6080 S  30.1   0.0   7:12.70 process-scanner

I enabled mysql query logging and it appears eve-ng is making the below query hundreds of times per second:

Code: Select all

2024-12-16T06:30:12.639766Z         9 Query     SELECT id, name, pubkey  from cluster where id != 0
2024-12-16T06:30:12.639964Z         9 Query     SELECT id, name, pubkey  from cluster where id != 0
2024-12-16T06:30:12.640136Z         9 Query     SELECT id, name, pubkey  from cluster where id != 0
2024-12-16T06:30:12.640295Z         9 Query     SELECT id, name, pubkey  from cluster where id != 0
2024-12-16T06:30:12.640473Z         9 Query     SELECT id, name, pubkey  from cluster where id != 0
2024-12-16T06:30:12.640716Z         9 Query     SELECT id, name, pubkey  from cluster where id != 0

My eve-ng instance is a single server and not a cluster. I tried updating to the latest version eve-ng-pro 6.2.0-20 and still experiencing the same issue. Any ideas what could be causing this?