Issue
- You are having performance issues on your system and need to check the performance status
- Server status
- Additional reasons for performance issues
Solution
Server status
Log in to ESET Inspect On-Prem.
Click Dashboard → Server Status. Inspect the following event statistics:
- Events processed per second—higher numbers are better
- Event Packet Queue Length—lower numbers are better
If the server has a low number of Events processed per second and a high number of Event Packet Queue Length, it is too busy. For example, if the packet queue is at around 500 most of the time, this means there is a performance issue. Events cannot be processed fast enough by the database, and the data is placed in a queue on the disk. View the queue by navigating to %PROGRAMDATA%\ESET\Inspect Server\UnprocessedEvents
.
If the content size of this folder is larger than 10% of available system RAM, the server stops accepting new events.
Warnings about insufficient disk space are displayed in the Questions section. To prevent running out of disk space monitor the estimated ESET Inspect Database size in Dashboard → Events load.
Additional reasons for performance issues
- Disk containing the database has less than 5% of free space remaining
- Disk containing the Temp folder has less than 10% of free space remaining
This can cause clients running the ESET Inspect Connector to have connection issues. Users may receive warning messages in ESET PROTECT On-Prem such as, “Can't connect to Enterprise Inspector Server”. Not all events will be available, and detections will be triggered with a delay. The clients will start caching events locally in their own temporary folders. If this folder grows above 1GB in size, the events will start getting discarded and never be received by the ESET Inspect Server.