What can be done to increase the speed of reporting?

[Andrey_Korobko]

Hello.
We have a management server with included blades:
- Network and endpoint policy management
- Log management
- SmartEvent (for 1 year)

Used hardware:
- Open server - ProLiant DL360 Gen9
- CPU - Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
- MEM - 32 Gb
- HDD - Raid 1+0 1TBx4

Current state of equipment

Average CPU utilization - 20%

CPU Idle User Kernel Total
1 88% 11% 1% 12%
2 84% 16% 0% 16%
3 86% 14% 0% 14%
4 78% 21% 1% 22%
5 85% 14% 1% 15%
6 87% 12% 1% 13%
7 83% 16% 1% 17%
8 84% 13% 2% 16%

Disk
/ 31.50 GB 23.91 GB 7.58 GB
/boot 0.28 GB 0.06 GB 0.22 GB
/var/log 1453.03 GB 940.63 GB 512.39 GB

Memory
Name Value
Total Virtual Memory 66742.87 MB
Active Virtual Memory 18395.19 MB
Total Real Memory 31914.46 MB
Active Real Memory 18394.18 MB
Free Real Memory 13520.27 MB

Logs Configurations
Log indexing - enabled
Delete index files older than 90 days

The question is what can be done to increase the speed of reporting. Now the report for 3 months is built 5-10 minutes, the report for all the time even longer. Maybe I need to upgrade the hardware or create a dedicated server for the logs or smartevent?

[PhoneBoy]

What release of code are you running?

And are you running all the functions you listed on the same appliance?

Dedicated hardware for SmartEvent will definitely improve performance as will additional memory.