Security Compliance

Reports and searches take a long time due to low reservations or extreme numbers of events in SEM

Slow reports in the directory may be related to either low reservations or extreme number of events. SEM processes all reports. This action requires not only allocated resources, but the time and space to run them.

First published date

10/18/2018 3:38 PM

Last published date

5/14/2019 2:14 PM

Overview

Slow reports in the directory may be related to either low reservations or extreme number of events. Security Event Manager (formerly Log & Event Manager) processes all reports. This action requires not only allocated resources, but the time and space to run them.

Product section

Security Event Manager

Cause

The reports will run slowly If SEM is overloaded by processes and is not given adequate resources in vSphere or Hyper-V.

Resolution

The minimum resources for the SEM appliance should be set to at least:

  • 2 CPUs
  • 8 GB of RAM
  • 250 GB HD


To fix this issue, the user must increase the reservations of the SEM appliance by following the reservation settings of the supported hypervisors.  


Note: Links provided below give information on how to adjust your SEM reservations. If you find that the links are no longer functional, please contact the specific vendor of the hypervisor to view their current products. 


CPU and Memory Reservations:


vSphere:

  • vSphere Resource Management 
https://pubs.vmware.com/vsphere-51/topic/com.vmware.ICbase/PDF/vsphere-esxi-vcenter-server-51-resource-management-guide.pdf (© 2018 VMware, available at https://www.vmware.com/, obtained on December 6, 2018).
  • Allocate CPU Resources in vSphere Client 
https://pubs.vmware.com/vsphere-50/topic/com.vmware.vsphere.vm_admin.doc_50/GUID-3CDA4DEF-3DE0-4A64-89C7-F31BB77222CB.html (© 2018 VMware, available at https://www.vmware.com/, obtained on December 6, 2018).
  • Allocate Memory Resources in vSphere Client 
https://pubs.vmware.com/vsphere-50/index.jsp?topic=%2Fcom.vmware.vsphere.vm_admin.doc_50%2FGUID-74F2F7BC-9505-4F6D-9C83-6890CFE1E2D1.html (© 2018 VMware, available at https://www.vmware.com/, obtained on December 6, 2018).



Hyper-V:



Disclaimer: Please note, any content posted here is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment.  You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.