cancel
Showing results for 
Search instead for 
Did you mean: 
marios
Level 7
Report Inappropriate Content
Message 1 of 8

DLP Incident query is extremely slow

Jump to solution

Hi to all,

We are experiencing an extremely slow performance while generating DLP incident queries the last couple of days.

The behaviour of our ePO 4.6 server is normal and all other functions including reporting/querying are working properly.

Just to note that we have recently shrunk the db in order to save some space on the server's disk.

The set-up is:

Windows 2008 R2 (on vmware)

ePo 4.6

SQL Server 2008 R2 .

Do you have any ideas how can I resolve the issue?

Thanks

Marios

1 Solution

Accepted Solutions
McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 4 of 8

Re: DLP Incident query is extremely slow

Jump to solution

I would check the index fragmentation on the database and, if necessary, rebuild or reorganise the indexes. This can have a massive effect on database performance.

HTH -

Joe

7 Replies

Re: DLP Incident query is extremely slow

Jump to solution

I don't know how to resolve it, but I do know that shrinking the DB can impact the performance.

Shrink Database and why it is NOT recommended:

Shrinking the ePO database should be avoided as much as possible. Shrinking a production SQL Server database would introduce logical fragmentation (physical order of the pages in the leaf level of an Index is not the same as the logical order of the pages). Effectively, the disk head has to go back and forth in reading the pages, thus performing more I/O operations and degrading performance.

Source: https://kc.mcafee.com/corporate/index?page=content&id=KB67184

Highlighted
marios
Level 7
Report Inappropriate Content
Message 3 of 8

Re: DLP Incident query is extremely slow

Jump to solution

Thanks for your reply, but I have already read this document (unfortunately after I shrunk the DB).

regards,

Marios

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 4 of 8

Re: DLP Incident query is extremely slow

Jump to solution

I would check the index fragmentation on the database and, if necessary, rebuild or reorganise the indexes. This can have a massive effect on database performance.

HTH -

Joe

marios
Level 7
Report Inappropriate Content
Message 5 of 8

Re: DLP Incident query is extremely slow

Jump to solution

I rebuilt the indexes of DLP tables and problem resolved.

Thanks !!!!

McAfee Employee JoeBidgood
McAfee Employee
Report Inappropriate Content
Message 6 of 8

Re: DLP Incident query is extremely slow

Jump to solution

Good to hear

If you haven't already done so, I would strongly recommend including the indexes in your regular database maintenance plan - this way it should be looked after automatically for you.

Regards -

Joe

marios
Level 7
Report Inappropriate Content
Message 7 of 8

Re: DLP Incident query is extremely slow

Jump to solution

Yes I ave already created a maintenance plan to rebuild indexes

thanks for your reply

Re: DLP Incident query is extremely slow

Jump to solution

Here's some info on "Reorganizing and Rebuilding Indexes" on SQL 2008 R2: http://technet.microsoft.com/en-us/library/ms189858(v=sql.105).aspx

More McAfee Tools to Help You

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community