Server Backlog Health Indicator Triggered

Products

• Carbon Black App Control

Issue/Introduction

• Health Indicator triggered stating:

  Your backlog size is currently <BacklogSize>; which is greater than or equal to the recommended safe size of <BacklogThreshold>.  Information on the Carbon Black App Control console may no longer be current. It is recommended that you check whether there have been changes to your Carbon Black App Control server or its database server that have impaired performance. 

• This Health Indicator monitors the server backlog of file information received from agents and triggers when an excessive server backlog is generated

Environment

• App Control Console: All Supported Versions

Cause

• Influx of file activity such as Windows Patching, OS upgrades, or other software deployments.

• Poor App Control Server/DB performance

Resolution

Review the Troubleshooting Agent/Server Backlog KB articles

Additional Information

• Normally this health indicator is invisible. When the backlog starts growing and is more than 10% of the safe threshold, this Health Indicator becomes visible. When the backlog goes over the threshold, it turns Red.
  

  Severity	Logic
  Invisible	Server backlog history is less than 3 days old or non-existent (The intent of this is to avoid going red during initialization). OR The current backlog size is less than 10% of the calculated threshold below (The intent of this is to hide awkward graphs when the backlog is always low on the x axis and the deployment is safe)
  Red	Calculated Red Threshold = # of Active Agents * Average Cache Size * 10% Final Red Threshold = Min(Calculated Red Threshold, 35000000) ←(The minimum of the calculated threshold and 35,000,000). If the current backlog size is greater than or equal to the Final Red Threshold, this health indicator will display red severity.
  Green	All other cases