SQLExternalMonitoring what is it in sp_who2 result

Question

SQLExternalMonitoring what is it in sp_who2 result

sqlfriend

SSC Guru

Points: 52781
More actions
September 26, 2024 at 5:35 pm
Go to Answer
#4462788

If I run sp_who2, one of item in the list is showing using program SQLExternalMonitoring , what is it? it uses quite a bit cpu and ram.
70 sleeping NT AUTHORITY\SYSTEM SNOCSMASQP01 . master AWAITING COMMAND 170846212 57458731 09/26 10:31:41 SQLExternalMonitoring 70 0

Thanks,
sqlfriend

SSC Guru

Points: 52781
More actions
September 27, 2024 at 6:06 pm
Answer
#4463175

Found out it is Azure Arc, it is part of our server monitoring and Microsoft defender; an agent that is installed by infrastructure team on all servers

Viewing 5 posts - 1 through 4 (of 4 total)

You must be logged in to reply to this topic. Login to reply

Jeff Moden SSC Guru Points: 1004340 More actions · Answer 1

You'll probably need to look at Task Manager or Resource Monitor to figure out exactly what software is being executed there. Do you have an infrastructure team that might know?

--Jeff Moden

RBAR is pronounced "ree-bar" and is a "Modenism" for Row-By-Agonizing-Row.
First step towards the paradigm shift of writing Set Based code:
________Stop thinking about what you want to do to a ROW... think, instead, of what you want to do to a COLUMN.

Change is inevitable... Change for the better is not.

Helpful Links:
How to post code problems
How to Post Performance Problems
Create a Tally Function (fnTally)

TL SSC-Addicted Points: 469 More actions · Answer 2

That is an application (or application client) running local on the server with SQL. The "NT AUTHORITY\SYSTEM" indicates it is running as a service as Local System. Looking through the services on the box might help you find it.

Of note, sp_who2 doesn't list the amount of memory being used by a process. It shows the amount of CPU and Disk I/O. Those numbers can be a little misleading because they are cumulative since the process started. For a monitoring system those will often start when the SQL instance is started and continue to run as long as SQL does. Over time that can lead to numbers that look alarming but represent very little system resources at any one time.

sqlfriend SSC Guru Points: 52781 More actions · Answer 3

Actually I found it is on almost all of our SQL servers, I checked service, could not find anything particular, and it is running on NT AUTHORITY\SYSTEM, could that be actually SQL server internal process? like Activity monitor?

Thanks