How to monitor SPE performance in a "Core" only install?
Article ID: 237889
Updated On:
Products
Issue/Introduction
What suggestions for monitoring SPE performance can you recommend in a "Core" only install?
Environment
Release : 8.2.2
Component : Default-Sym
Resolution
Symantec Protection Engine (SPE) 8.x records details for resource consumption in Resources Consumption Logs (RCL's). These files have a filename extension of .rcl and are in the same folder as .log and .dat files. By default, this location on Linux is /opt/SYMCScan/logs and on Windows is "C:\Program Files\Symantec\Scan Engine\logs"
The details tracked by .rcl files are documented here:
https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/symantec-protection-engine/8-2-2/Configuring-and-Monitoring/about-resource-consumption-log-files-v128533017-d4995e11886.html#v128533017_v128533051
For SPE instances in the scanning pool of the VSCAN feature of one or more NetApp Filers, the ActiveThreads can be monitored.
https://knowledge.broadcom.com/external/article?articleNumber=278291
In addition to the monitoring built into SPE itself, you can also monitor using the resource monitoring tools of each operating system. On Linux, these are tools such as sar, top, and vmstat. On Windows, perfmon is widely accepted as a way to record and review performance counters.
Additional Information
The central console of SPE reached the end of Life milestone on 2023-DEC-31. To give customers time to export settings and migrate CWP for Storage instances to SPE for Cloud Services, BROADCOM is leaving CWP for Storage and the central console for SPE in place until March of 2024. The online help for SPE 8.2.2 still includes information on how to use the central web console to monitor resource usage of SPE instances:
Feedback
