{"id":8061,"date":"2026-10-18T10:43:45","date_gmt":"2026-10-18T07:43:45","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=support_article&p=8061"},"modified":"2026-10-18T10:43:45","modified_gmt":"2026-10-18T07:43:45","slug":"high-cpu-usage-on-endpoint-when-elements-exposure-management-agent-is-scanning","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/fi\/support-articles\/high-cpu-usage-on-endpoint-when-elements-exposure-management-agent-is-scanning\/","title":{"rendered":"High CPU usage on endpoint when Elements Exposure Management agent is scanning"},"content":{"rendered":"

Issue:<\/h3>\n

We have enabled Vulnerability Management scan (agent based scanning) on our devices which have Elements Agent installed, and the CPU usage is very high when the Vulnerability Management agent is scanning. What can we do to improve the performance?\u00a0<\/p>\n

Resolution:<\/h3>\n

By default, Elements agent will run the vulnerability scan every 4 hours. You can change the vulnerability data refresh schedule on the endpoints to either 6 hours, 12 hours or 24 hours. This way any performance issues wouldn't happen as often.,<\/p>\n

To change the setting on how often the Elements Agent scans for vulnerabilities:<\/p>\n

    \n
  1. Log in to the Elements Security Center portal<\/li>\n
  2. Navigate to the Management > Vulnerability Settings <\/strong>page<\/li>\n
  3. Go to teh General settings <\/strong>tab<\/li>\n
  4. Expand the Miscellaneous <\/strong>section<\/li>\n
  5. Select the desired time from the Vulnerability data refresh schedule on endpoints <\/strong>drop-down menu<\/li>\n<\/ol>\n

    Note: this setting affects all installed WithSecure Elements Agents, but it will not apply to the ones installed in future.<\/p>\n

    \u00a0<\/p>\n

    WithSecure Elements Agent is installed on the client device to scan for vulnerabilities. The first scan happens right after you enable scanning on a device in the management portal. Next scans happen after any major change on the list of installed software or in time interval chosen from the Vulnerability data refresh schedule on endpoints<\/strong>.\u00a0<\/p>\n

    If there are no changes in the scan results, the scan report is postponed to avoid processing the same results again. Regardless of the changes, a scan report with the up-to-date vulnerability status is sent to the management portal after 7 days.\u00a0<\/p>\n","protected":false},"excerpt":{"rendered":"

    \u00a0High CPU usage when Elements Vulnerability Management agent is scanning.\u00a0<\/p>\n","protected":false},"template":"","support_article_product":[108],"class_list":["post-8061","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000006147","source_version":1,"source_system":"salesforce","source_date_updated":"2026-10-18 07:43:45","import_hash":"55bc1649e32680162ad15e0b026b2df7d73b46bd","vanilla_article_id":"","vanilla_url":"","vanilla_kb_id":"","vanilla_category_id":"","machine_translated":false,"reactions_helpful_yes":"","reactions_helpful_no":""},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article\/8061","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/media?parent=8061"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/fi\/wp-json\/wp\/v2\/support_article_product?post=8061"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}