Customer enabled OS monitoring on 3 different servers. His IT department noticed that more than 1800+ pids belonging to the remote monitoring account, are spawned on one server and causing nproc alerts.
When collecting volume metrics for an hp/ux host, The OS user credential (that monitors the OS) must have been using the "vgdisplay" hp/ux command to list the volume information on the HP/UX host. However, the vgdisplay seems to stay active even after the remote monitoring session terminates.
Turning off the native collection (Setting native collection property in the respective hp/ux unix agent property to false - Default is True )- helped in resolving this issue.