RiskFabric Processing and RiskFabric Intraday Processing durations impacted by anomalous event volume
Article ID: 251404
Updated On:
Products
Issue/Introduction
The duration of both the RiskFabric Processing and RiskFabric Intraday Processing jobs significantly increases due to an unusually large number of events created in a source system. Is there any way to configure Information Centric Analytics (ICA) to detect when this occurs and take steps to mitigate the negative performance impact?
Environment
Release : 6.x
Component : Symantec DLP Integration Pack
Resolution
ICA stages active incidents and events prior to parsing the data set during pre-processing and processing into core tables. Because of this order of operations, anomalously large sets of source data will impact the duration of the nightly and intraday processing jobs during staging before any steps can be taken to determine why this is occurring and remediate the cause.
The underlying condition(s) that led to the generation of unusually large numbers of incidents or events should be identified and addressed in the source system.
Feedback
