Multiple smartdashboard users

[meirh]

Hello 

In our organization, multiple users has read only access to our management server in order to view logs via smartlog.

What is the impact on the management server when multiple concurrent users always in connected stat and searching for logs?.

CPU utilization? Memory?.

Our Sms server is very slow and we are trying to identify why (the server is very strong, 16 cores and 64G memory).

SMS Version is 80.10.

Thank you!. 

[PhoneBoy]

What processes are taking up the most RAM/CPU?
That might be a good starting point.
See also the Super Seven performance commands
(not all of which will be relevant on management): https://community.checkpoint.com/t5/General-Topics/Super-Seven-Performance-Assessment-Commands-s7pac...

[meirh]

Thanks for the reply but my question is a general question, I'm trying to understand what is the overhead on the SMS server when multiple users are using the smartlog ?.

for example, when user is using smartdashboard to change some rule, as far as he didn't click on the publish button, all the compute process is local on the user PC, so no overhead on the SMS server, but when multiple users trying to search for logs on the smartlog, all the process is running on the SMS server, am I right?.

Thank you. 

[Chris_Atkinson]

The following guide might assist you further in the absence of specifics:
Check Point R80.10 Security Management Performance Tuning Guide

Note in R80.20 and above there are also file-system related performance improvements (xfs).

[Dror_Aharony]

Generally speaking, Multiple SmartLog queries (via multi admins or same) loads all 3 HW components: CPU, Memory & Disk I/O.

the bottleneck could be each/all.

If you like, you could specify log-rate/size per sec/day and amount & type of queries (how many days do you usually query) and perhaps someone would be able to consult & assist.

It would probably require a deeper TAC ticket/investigation.

*Upgrading to latest version (R80.30) is always recommended.