KB 340105

KB 340105: ACS Query and Report performance is slow

ACS query and report performance can be degraded by a variety of factors.

Issue: Queries and Reports ran against the Online ACS Audit Database timeout or take considerably long to run and may cause performance spikes on database

Symptoms: Query and Report response time is degraded after initial installation or over time.

Cause: There can be multiple causes associated with poor query and report performance

Scope: Any ACS environment

Product/s: Security Auditing

Resolution

Confirm ACS is healthy and database accessible then investigate and resolve underlying performance constraints

  1. ACS Partitions not being Indexed properly, see Microsoft KB 949969 Unindexed partitions play a huge role on the performance of queries ran against the audit database and is commonly seen on environments using SQL Standard or Shared Resources.

  2. Insufficient Memory on Database Server, we recommend 16-32GB

  3. Insufficient filter policy or grooming practices

  4. Running SSRS on Database Server, always recommend Remote SSRS over Local install

  5. Using a 32-bit vs 64-bit SQL Engine

  6. Excessive # of Partitions in DB or overall Size of DB

  7. Query to generic or targeted at inproper view; only use the view you need: dvAll, dvAll5, dvHeader

  8. Underlying ACS health issues

For assistance investigating performance issues please contact support at support@securevantage.com

News & Events

Press Release 08/04/2009: Secure Vantage Releases Security Auditing SP2 for the Audit Collection Services (ACS)


Online Webcasts 06/08/2009: Download the ACS Master Class Series for free real world expert training on the Audit Collection Services.


Read more