RiskFabric processing performance factors

Products

• Information Centric Analytics

Issue/Introduction

Information Centric Analytics' (ICA) RiskFabric Processing and RiskFabric Intraday Processing jobs can take only a few minutes to complete or run for a day or more, depending upon several factors, including:

1. ICA's topology (single-tier, multi-tier)
2. Whether the servers hosting ICA components are dedicated or shared with other services
3. The processing, memory, and storage resources allocated to ICA's servers
4. Network throughput and latency between ICA's servers
5. Network throughput and latency between ICA's servers and upstream data sources
6. The query performance of upstream data sources
7. Database table index fragmentation
8. The number of data sources integrated with ICA
9. The volume of events ingested from the data sources integrated with ICA
10. The number of Risk Models and Event Scenarios configured and enabled in ICA

Environment

Release : 6.5.x

Component : Microsoft SQL Server

Cause

Processing times are largely a function of hardware resources and the volume of data to be processed. While processing times will vary from day to day, large deviations from the mean can be accounted for by resource constraints and the volume of data being processed.

Resolution

Due to the complexity and unique characteristics of each ICA deployment, a prescriptive configuration is beyond the scope of a knowledgebase article. To investigate the cause(s) of an increase in processing times, review the items in this list, with a particular focus on items 7, 8, 9, and 10 if investigating a mature environment that has seen an abrupt change in processing times:

1. ICA's topology (single-tier, multi-tier)
2. Whether the servers hosting ICA components are dedicated or shared with other services
3. The processing, memory, and storage resources allocated to ICA's servers
4. Network throughput and latency between ICA's servers
5. Network throughput and latency between ICA's servers and upstream data sources
6. The query performance of upstream data sources
7. Database table index fragmentation
8. The number of data sources integrated with ICA
9. The volume of events ingested from the data sources integrated with ICA
10. The number of Risk Models and Event Scenarios configured and enabled in ICA

Additional Information

Symantec ICA Administrator Guide: Prerequisites and Privileges for the Installation and Administration of Symantec ICA