When I generate an Audit Snapshot with just IBM as publisher, BFI takes over 4-8 hours to generate the report. Sometimes it is much longer. Our environment is 15k workstations and 3500 servers. I understand there are many variables but does 4+ hours seem reasonable?
There could be many reasons for it to take such amount of time, but it’s hard to tell without additional information.
Periodical database maintenance is highly recommended, as a re-indexing might significantly reduce the required amount of time.
Also please make sure to have BFI, with the scanner and catalog, updated to latest release, with more bug fixes and improved performance.
If still a significant improvement hasn’t been detected, a support case could be opened for further analysis, attaching the debug logs for the audit snapshot generation:
- Enable debug logs by changing the logging level to DEBUG in installation_directory\wlp\usr\servers\server1\config\log4j.properties
- generate the audit snapshot
- gather the logs and attach them to the case
- Afterwards the logs settings can be reverted back to INFO logging level.
Thank you.
I have a case open with HCL for the same issue (CS0091878 ) I’m running BFI 9.2.17 with 100k endpoints. Audit Snapshot takes hours and often doesn’t finish before it times out. We recently enabled weekly DB reindexing and that helped to allow 1 product snapshot to finish (in 4 minutes) but still can’t perform a complete audit snapshot.
Please kindly follow up with the support team.
With the mentioned logs it should be possible to identify where is it failing.