AnsweredAssumed Answered

What can be done to increase the speed of reporting?

Question asked by Andrey Korobko on Dec 15, 2017
Latest reply on Dec 15, 2017 by Dameon Welch Abernathy


Hello.
We have a management server with included blades:
- Network and endpoint policy management
- Log management
- SmartEvent (for 1 year)

 

Used hardware:
- Open server - ProLiant DL360 Gen9
- CPU - Intel(R) Xeon(R) CPU E5-2620 v4 @ 2.10GHz
- MEM - 32 Gb
- HDD - Raid 1+0 1TBx4

 

Current state of equipment

Average CPU utilization - 20%

CPU Idle User Kernel Total
1 88% 11% 1% 12%
2 84% 16% 0% 16%
3 86% 14% 0% 14%
4 78% 21% 1% 22%
5 85% 14% 1% 15%
6 87% 12% 1% 13%
7 83% 16% 1% 17%
8 84% 13% 2% 16%

Disk
/ 31.50 GB 23.91 GB 7.58 GB
/boot 0.28 GB 0.06 GB 0.22 GB
/var/log 1453.03 GB 940.63 GB 512.39 GB

 

Memory
Name Value
Total Virtual Memory 66742.87 MB
Active Virtual Memory 18395.19 MB
Total Real Memory 31914.46 MB
Active Real Memory 18394.18 MB
Free Real Memory 13520.27 MB

 

Logs Configurations
Log indexing - enabled
Delete index files older than 90 days


The question is what can be done to increase the speed of reporting. Now the report for 3 months is built 5-10 minutes, the report for all the time even longer. Maybe I need to upgrade the hardware or create a dedicated server for the logs or smartevent?

Outcomes