ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

RiskFabric processing performance factors

book

Article ID: 238796

calendar_today

Updated On:

Products

Information Centric Analytics

Issue/Introduction

Information Centric Analytics' (ICA) RiskFabric Processing and RiskFabric Intraday Processing jobs can take only a few minutes to complete or run for a day or more, depending upon several factors, including:

  1. ICA's topology (single-tier, multi-tier)
  2. Whether the servers hosting ICA components are dedicated or shared with other services
  3. The processing, memory, and storage resources allocated to ICA's servers
  4. Network throughput and latency between ICA's servers
  5. Network throughput and latency between ICA's servers and upstream data sources
  6. The query performance of upstream data sources
  7. Database table index fragmentation
  8. The number of data sources integrated with ICA
  9. The volume of events ingested from the data sources integrated with ICA
  10. The number of Risk Models and Event Scenarios configured and enabled in ICA

Cause

Processing times are largely a function of hardware resources and the volume of data to be processed. While processing times will vary from day to day, large deviations from the mean can be accounted for by resource constraints and the volume of data being processed.

Environment

Release : 6.5.x

Component : Microsoft SQL Server

Resolution

Due to the complexity and unique characteristics of each ICA deployment, a prescriptive configuration is beyond the scope of a knowledgebase article. To investigate the cause(s) of an increase in processing times, review the items in this list, with a particular focus on items 7, 8, 9, and 10 if investigating a mature environment that has seen an abrupt change in processing times:

  1. ICA's topology (single-tier, multi-tier)
  2. Whether the servers hosting ICA components are dedicated or shared with other services
  3. The processing, memory, and storage resources allocated to ICA's servers
  4. Network throughput and latency between ICA's servers
  5. Network throughput and latency between ICA's servers and upstream data sources
  6. The query performance of upstream data sources
  7. Database table index fragmentation
  8. The number of data sources integrated with ICA
  9. The volume of events ingested from the data sources integrated with ICA
  10. The number of Risk Models and Event Scenarios configured and enabled in ICA

Additional Information

Symantec Information Centric Analytics Administrator Guide: Prerequisites and Privileges for Installing and Administering Symantec ICA