Issue
- You are having performance issues on your system, and you need to check the performance status
- Check server status
- View additional reasons for performance issues
Solution
Check server status
-
Click Dashboard → Server Status. Inspect the following event statistics:
- Events processed per second—higher numbers are better
- Event Packet Queue Length—lower numbers are better
If the server has a low number of Events processed per second and a high Event Packet Queue Length, it indicates that the server is overloaded.
For example, if the packet queue consistently stays around 500, this suggests a performance issue: events are not being processed quickly enough by the database and are instead being temporarily queued on disk.
You can monitor the queue by navigating to the following folder on the server: %PROGRAMDATA%\ESET\Inspect Server\UnprocessedEvents. This location contains unprocessed event packets waiting to be handled by the server.
If the total size of the content in this folder exceeds 10% of the available system RAM, the server will stop accepting new events, potentially leading to data loss and delayed detections.
Warnings about insufficient disk space are displayed in the Notifications section. To avoid disk space exhaustion, monitor the estimated ESET Inspect Database size in Dashboard → Events load.
View additional reasons for performance issues
Additional reasons for ESET Inspect performance issues may include the following:
- The disk containing the database has less than 5% of free space remaining
- The disk containing the Temp folder has less than 10% of free space remaining
These issues can cause connection issues for clients running the ESET Inspect Connector. You may receive warning messages in ESET PROTECT On-Prem, such as "Can't connect to Enterprise Inspector Server". As a result, some events may not be available, and detections may be delayed.
When the connection is interrupted, clients begin caching events locally in their temporary folders. If the temporary folder exceeds 1 GB in size, events will start being discarded and will never reach the ESET Inspect Server.