Connector Appliance web UI
I have just taken over duties as manager of our company's Arcsight architecture and am currently reviewing all connectors through the ConnApp web user interface.
I cannot help but notice a quite long delay whenever I click on a connector. The info will appear after 1-2 minutes, sometimes more. The CPU of the machine is well below 10% so I am wondering what could be causing this delay.
Or is this normal? If not has anyone ever experienced this?
One note about the high memory usage compared to the lower CPU usage... We have a couple of older appliances (Logger 7100, ConnApp 3400) that don't have much load on them either, but use high levels of memory ~50%. We also have newer appliances (L7500 and C6500) that have much higher loads, but rarely utilize 50% memory.
Also, if you have DNS resolution on for your connectors that can contribute to high levels of memory utilization, especially if they are constantly trying to resolve an IP that isn't in DNS. Most of our systems aren't in DNS so we have DNS resolution turned off. Otherwise the ConnApp will do nothing but try to resolve thousands of IPs.