> Source: [sk180451](https://support.checkpoint.com/results/sk/sk180451)

# sk180451 - High CPU remains after removing from the rulebase custom applications with signatures causing high CPU

| Property | Value |
|----------|-------|
| Solution ID | sk180451 |
| Date Created | 2022-12-26 |
| Last Modified | 2023-01-04 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * High CPU remains after removing custom applications with signatures causing high CPU from the rulebase.

* PM Stats / HCP report still includes the removed signatures in the alerts.

## Cause

When you create a custom application, the Security Gateway match it for logging purposes even if you do not use it in the rule base.  
If the Security Gateway does not match other application, the log uses the custom application.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content