cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
ams
Level 9
Report Inappropriate Content
Message 1 of 9

Content Security Reporter <-> EPO Performance Issues

Jump to solution

Has anyone noticed significant performance issues while attempting to use Content Security Reporter with ePO? It was working just fine when the sole log source was the cloud proxy but after we added our on prem web gateway log sources (~23 proxies) we noticed that it took a very long time to generate reports (5-10 minutes) and it took about the same amount of time just to load the dashboard for CSR in ePO. We know it isn't ideal for ad hoc reporting but we'd at least expect better performance. 

Labels (1)
1 Solution

Accepted Solutions
McAfee Employee aloksard
McAfee Employee
Report Inappropriate Content
Message 6 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Hi,

Hope you are doing well.

The partitioning option will be available only on Enterprise edition. Make sure DB server has enough space

Go to Report server Settings - database tab - edit -  Advance  -- Check whether partition option is available ?

 

Regards

Alok Sarda

8 Replies
McAfee Employee aloksard
McAfee Employee
Report Inappropriate Content
Message 2 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Hi,

Hope you are doing well.

What is the CSR version? Is database partition done?

What is the size of DB? retention period?  Also are you using internal database or external database?

 

Are you using  directory configuration ,have you integrated directory with log sources, then you can disable it and check?

 

Also You can check this if log parsing is slow.

 

Also you can check below links for some performance options:-

 

https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/27000/PD27279/en_US/...

 

Page 21

 

 

Regards

Alok Sarda

 

 

McAfee Employee aloksard
McAfee Employee
Report Inappropriate Content
Message 3 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Hi,

Also if report generation is slow then we consider below parameters:-

 

check whether database partion is done. we do data partition by per day so that reports are fetched fast.

check database indexing

check whether rebuild index and db maintaince is running fine

 

Regards

Alok Sarda

ams
Level 9
Report Inappropriate Content
Message 4 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Also, is there a setting for CSR to make sure tables would use partitioning when they're created?

Tags (1)
ams
Level 9
Report Inappropriate Content
Message 5 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Hi Alok, 

We are using an external mariadb database on a linux box. Looks like it isn't using any data partitioning. There's about a 1T of space allocated to the DB. The CSR version is 2.5.0. I can try looking into the data partitioning or ask one of our DBAs about it

Tags (1)
McAfee Employee aloksard
McAfee Employee
Report Inappropriate Content
Message 6 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Hi,

Hope you are doing well.

The partitioning option will be available only on Enterprise edition. Make sure DB server has enough space

Go to Report server Settings - database tab - edit -  Advance  -- Check whether partition option is available ?

 

Regards

Alok Sarda

ams
Level 9
Report Inappropriate Content
Message 7 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Thank you! It is available. I'm letting it run now. Will update when it's complete. Fingers crossed.

Tags (1)
McAfee Employee aloksard
McAfee Employee
Report Inappropriate Content
Message 8 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Hi,

Hope you are doing well.

Just checking if any update on this ?  Was it successful?

 

Regards

Alok Sarda

 

ams
Level 9
Report Inappropriate Content
Message 9 of 9

Re: Content Security Reporter <-> EPO Performance Issues

Jump to solution

Yes. This was helpful! Thank you. 

Tags (1)