Just Published! Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

6.1.0 Slow Process Analysis Page Performance

6.1.0 Slow Process Analysis Page Performance

Version

Cb Response 6.1.0

Issue

Process Analysis page is slow to load when expanding the time window on noisy processes such as chrome

Symptoms

Spinning wheel remains for over a minute after adjusting the timeline

Cause

In 5.2.x, a new segment (event container) is created for every 10K events with long-lived processes. The UI did not give the user the ability to scroll back and forth between multiple segments of a process. So, if the search landed you on one particular segment of that process, that’s all you got. It was more performant even though it really did not give you the entire visibility.

In 6.x, we are rendering the timeline from the entire set of segments of a process, which may mean days and especially if the user extends the slider to a wider timeframe, rendering of 10000s of events become sluggish, especially if the user is also asking Threat Intel Cloud for additional information.

Solution

Workaround

Avoid expanding the timeline beyond four hours

Resolution

In the next Server Release 6.1.1 we will be limiting the time window and query additional information from the Threat Intel Cloud more efficiently. You can look for CB-13662 in the release notes for more information.

Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎05-02-2017
Views:
895
Contributors