Enforce Performance Degradation Post API Integration
search cancel

Enforce Performance Degradation Post API Integration

book

Article ID: 433842

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent

Issue/Introduction

After integrating APIs with the Enforce Server, users may experience a significant drop in system performance.

Symptoms include slow UI response times and high CPU/Disk I/O utilization on the Enforce server.

Environment

16.0 +

Cause

The performance degradation can be typically driven by two factors:

  • Excessive Finest level logging is enabled on the Enforce Server. This generates an overwhelming volume of data in the localhost logs for every API call processed.
  • The integration is not utilizing JSESSIONID. Without a session ID, each API request is treated as a new login, forcing the system to re-authenticate and re-log the entire initialization process repeatedly.

Resolution

  1. Disable Finest Logging

    In the DLP ManagerLogging.properties file, revert FINEST to INFO and restart manager service.
    org.apache.juli.FileHandler.level = FINEST
    org.apache.juli.FileHandler.directory = /var/log/Symantec/DataLossPrevention/EnforceServer/<version>/tomcat
    org.apache.juli.FileHandler.prefix = localhost.
    org.apache.juli.FileHandler.formatter = com.vontu.logging.JuliNonLocalizingThreadLoggingFormatter

  2. Implement JSESSIONID in API Calls 

    See 'Best Practices for Using the API' from below documentation.
    Introduction to the Data Loss Prevention (DLP) API content
Powered by Wolken Software