Anonymous_User Absent Member.
Absent Member.
193 views

schedule indexing in SLM/Sentinel possible ?


SLM ver 1.2.1

df -hT>
> /dev/cciss/c0d0p6 ext3 227G 144G 83G 64%
> /var/opt/novell/sentinel_log_mgr/data
> /dev/mpath-slm-network ext3 1.1T 114G 930G 11% /slm_archive
> /dev/loop0 squashfs 384K 384K 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121014_6E1CCA35-4BD4-102D-91D3-000C2907C76D/index
> /dev/loop1 squashfs 128K 128K 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121011_6E1CCA35-4BD4-102D-91D3-000C2907C76D/index
> /dev/loop2 squashfs 128K 128K 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121011_6E1CCA35-4BD4-102D-91CD-000C2907C76D/index
> /dev/loop3 squashfs 128K 128K 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121010_6E1CCA35-4BD4-102D-91D3-000C2907C76D/index
> /dev/loop4 squashfs 384K 384K 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121009_6E1CCA35-4BD4-102D-91CD-000C2907C76D/index
> /dev/loop5 squashfs 128K 128K 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121012_6E1CCA35-4BD4-102D-91CD-000C2907C76D/index
> /dev/loop6 squashfs 1.2M 1.2M 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121012_408E7E50-C02E-4325-B7C5-2B9FE4853476/index
> /dev/loop7 squashfs 1.3M 1.3M 0 100%
> /slm_archive/9D120730-7B2D-102F-8E4E-002481E92648/eventdata_archive/20121011_408E7E50-C02E-4325-B7C5-2B9FE4853476/index
>

once this situation happens, i.e when SLM starts indexing and
compressing the events on secondary/network storage, SLM webui response
becomes slow, esp time to complete a report become too high
comparitively.

is it some how possible to configure slm to only perform inedexing on
secondary/network storage after hours ? is it possible to schedule it ?


--
sharfuddin
------------------------------------------------------------------------
sharfuddin's Profile: https://forums.netiq.com/member.php?userid=1016
View this thread: https://forums.netiq.com/showthread.php?t=50118

0 Likes
1 Reply
Anonymous_User Absent Member.
Absent Member.

Re: schedule indexing in SLM/Sentinel possible ?

I do not believe this is an option currently. The indexing happens when
events are first retrieved. Compression happens when moving to secondary
storage as I recall, and the squashfs process can use its own processors,
so perhaps ensure you have enough processing power and I/O to handle that,
though that's what you're trying to work around. I think I've seen an
enhancement/bug along these lines, but do not recall the resolution so it
may be something to take to NetIQ to find out if there are options via
support.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.