We upgraded to 9.3 and i'm liking some of the changes it's brought like moving bypass code generation from the policy editor etc.
The one thing i do NOT like is moving the DLP Monitor into ePO itself.
I'm finding that the replacement to the dlp monitor, dlp incident manager is incredibly slow.
Is anyone else finding this?
It takes a good minute for the intial list to load, then if i click into something, and come back out again, it has to load it all again which then takes another minute.
I'd rather not go back to 9.2 but the slowness is making 9.3 unuseable for us.
Yes we have faced with the same problem. We use ePO 4.6.6 and DLPE 9.3 (after upgrading from 9.2.2). But we have approximately 7 000 000 events on 410 000 pages. Because of this we have to wait half an hour while this dashboard loading.
I had an issue with the 9.3 server being very slow to open.
1. Make sure you database is not to large.
2. Setup a purge for say 90 or 180 days.
3. Uninstall DLP Management tools (make sure all browsers are closed) add-rem programs remove - reboot login to console and select dlp monitor and or incident manager and the new version will come down also make sure your client is 9.3
Now we have January 2014, upgraded DLP extention from 9.2 to 9.3.1 and still have performance issue.
We have db with about 4 000 000 DLP events.
Upgrade proccess was very painful, we did 2 times rollback. Finally succeeded.
... global admin opens Incident Manager with about 20 sec every time you need to go to the page.
DLP events reviewer gets error after 45 secs.
Posted it here.
Also waiting response from support.
First off, try clearing out some events you don't need or know are not relevant. The 'Incident Purge' works good for this.
DLP logs a lot of extra data you likely don't need, such as 'policy applied' etc.
Thnx for tip keithdrone. Yes, there are some type of events that could be purged.
When analysing events in db I discovered that there is massive amount of events from old times when we used DLP 3.0.
Could be I havent discovered those before because those do not show up with ePO thread and client events, but only with DLP events (under "other" queries).
Seems that after DLP upgrade from ver 3 to ver 9, this is changed. All the ePO purge tasks stopped to see those ...
And now it seems to me that this is not possible to remove those 3.0 events with simple way ... , at least admininstrative events ...
You can create the Incident Purge tasks via the incident manager (and use the EPO server tasks to schedule them), For 'Operational Events' use the 'Database Administration' via the DLP Policy page (bottom left, I think).
If you still can't delete them, but can access them via the incident manager, try assigning labels then creating tasks to delete them based on that. Otherwise check with support, we had a similar issue when we went from 9.1 to 9.2 then 9.2.2 now 9.3...... discovered all sorts of items we thought were 'gone'. Took me a while to get them purged, some had to be done by treating them as 'Operational Events'.
so the only way to purge "Operational Events" is through the Policy interface...this can be done via the "Incident Tasks" or a Server task?
I was looking for a way from the epo console to delete these...