> Source: [sk102007](https://support.checkpoint.com/results/sk/sk102007)

# sk102007 - New events are not shown in SmartEvent; CPSEMD daemon consumes CPU and randomly crashes with core dump files

| Property | Value |
|----------|-------|
| Solution ID | sk102007 |
| Date Created | 2014-08-11 |
| Last Modified | 2017-10-08 |
| Technical Level | Advanced |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * New events are not shown in SmartEvent GUI.

* Output of "*top*" command shows that 'cpsemd' process consumes CPU at high level.

* After enabling generation of core dump files per [sk92764](http://supportcontent.checkpoint.com/solutions?id=sk92764) / [sk53363](http://supportcontent.checkpoint.com/solutions?id=sk53363), core dump files for '*CPSEMD* ' process are randomly generated in the */var/log/dump/usermode/* directory.

* *$RTDIR/log/cpsemd.elg* file on SmartEvent Server repeatedly shows:

  ```
  
  [CPSEMD PID ...]@HostName[Date Time] failed query:
  	query = "INSERT INTO Source ( ... )  RETURNING rowid ; "
  	error message = "ERROR:  value too long for type character varying(255)
  
  [CPSEMD PID ...]@HostName[Date Time] failed query:
  	query = "INSERT INTO Users ( ... )  VALUES  ( ... )  RETURNING rowid ; "
  	error message = "ERROR:  current transaction is aborted, commands ignored until end of transaction block
  
  [CPSEMD PID ...]@HostName[Date Time] Failed to execute query! (query: ...)
  ... ... ...
  [CPSEMD PID ...]@HostName[Date Time] Error: Failed to insert/update event in database. 
  [CPSEMD PID ...]@HostName[Date Time] Failed event data is:
  ```

## Cause

The values that are being inserted into '`user_group`' fields exceed the limit of 255 characters.

This error is most likely to occur for Identity Awareness events where user belongs to several large AD groups.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content