Hello.
We have a management server with included blades:
- Network and endpoint policy management
- Log management
- SmartEvent (for 1 year)
Used hardware:
- Open server - ProLiant DL360 Gen9
- CPU - Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
- MEM - 32 Gb
- HDD - Raid 1+0 1TBx4
Current state of equipment
Average CPU utilization - 20%
CPU Idle User Kernel Total
1 88% 11% 1% 12%
2 84% 16% 0% 16%
3 86% 14% 0% 14%
4 78% 21% 1% 22%
5 85% 14% 1% 15%
6 87% 12% 1% 13%
7 83% 16% 1% 17%
8 84% 13% 2% 16%
Disk
/ 31.50 GB 23.91 GB 7.58 GB
/boot 0.28 GB 0.06 GB 0.22 GB
/var/log 1453.03 GB 940.63 GB 512.39 GB
Memory
Name Value
Total Virtual Memory 66742.87 MB
Active Virtual Memory 18395.19 MB
Total Real Memory 31914.46 MB
Active Real Memory 18394.18 MB
Free Real Memory 13520.27 MB
Logs Configurations
Log indexing - enabled
Delete index files older than 90 days
The question is what can be done to increase the speed of reporting. Now the report for 3 months is built 5-10 minutes, the report for all the time even longer. Maybe I need to upgrade the hardware or create a dedicated server for the logs or smartevent?
