App Control: How To Troubleshoot Agent / Server Backlog
search cancel

App Control: How To Troubleshoot Agent / Server Backlog

book

Article ID: 286122

calendar_today

Updated On:

Products

Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

To troubleshoot and correct agent and server backlog

Environment

  • App Control Server: All Supported Versions

Resolution

  1. Ensure the App Control Server is on the latest version. We are constantly improving the efficiency of the product and being on the latest version ensures you are not running into something that has already been addressed.
  2. Ensure the App Control Server is meeting OER.
  3. Determine if there are particular processes/paths that are in need of tuning.
    • Navigate to Reports > Events > Saved Views > New Files (All). Use the " Group by" (File Name, File Path, Process, Source) > (Descending by count) to gain an understanding of what's making a lot of noise in the environment.
    • https://community.carbonblack.com/t5/Best-Practices/Cb-Protection-Custom-Rules-Best-Practices-Tips-and-Tricks-pdf/gpm-p/42339
  4. Consider excluding Microsoft Support files:
    • https://community.carbonblack.com/t5/Knowledge-Base/App-Control-How-To-Disable-Tracking-of-Support-Files-Signed-by/ta-p/75085
    • Microsoft files may account for more than half and in some cases three-quarters of all of the files found in your inventory for Windows computers.
  5. If the issue persists, collect Database Logs For Performance Issues