Symantec IGA

• Application: CA Identity Manager R12.6 SP4 (CORP=PROV)
• Middleware: JBoss 5.1.0.GA
• Database: Microsoft SQL Server 2008 R2
• OS Platform: Windows Server 2008 SP2

I've noticed a marked increase in CPU, memory, and network utilization on our IM application and SQL database servers recently.  There doesn't seem to be any noticeable change on the directory/provisioning servers, though.  I don't see any unusual warnings or errors in the server.log files to account for this.  What else can I look at to troubleshoot the performance of our IM system?  Thanks in advance for your time and help!

Ralph

Is anyone able to assist with the above question?

Thank you!

Ralph Thomas wrote:

 

• Application: CA Identity Manager R12.6 SP4 (CORP=PROV)
• Middleware: JBoss 5.1.0.GA
• Database: Microsoft SQL Server 2008 R2
• OS Platform: Windows Server 2008 SP2

 

I've noticed a marked increase in CPU, memory, and network utilization on our IM application and SQL database servers recently.  There doesn't seem to be any noticeable change on the directory/provisioning servers, though.  I don't see any unusual warnings or errors in the server.log files to account for this.  What else can I look at to troubleshoot the performance of our IM system?  Thanks in advance for your time and help!

 

Ralph

There are a few ways to approach this. The best place to get started is to get a heapdump from the Java JVM that IM is running. JSTACK is a pretty good tool to get this output. Basically, you'll end up with a snapshot of all of the memory and threads in your application server.

Then use the IBM Memory Analyzer Tool to examine the heap. What you're looking for is high memory usage by specific IM classes, and then you can focus on what the bottleneck may be.

JSTACK tips and tricks are here:

How to take Thread Dumps from a JVM

IBM Memory Analyzer Tool is here:

developerWorks : IBM Monitoring and Diagnostic Tools for Java - Memory Analyzer Version 1.4

CA Support is happy to help you analyze the heap dumps.

There are two common types of IM performance issues.

The first is due to poor role rule evaluations. This will be the case if the logins take a very long time before displaying a user's tasks in the IM User Console. This is the link for our documentation on optimizing role evaluations.

Performance and Optimization - CA Identity Manager - 12.6.5 - CA Wiki

The second type is due to an enormous number of users in the task persistence database tables. To avoid this, garbage collection should scheduled on a regular basis.

Cleanup Submitted Tasks - CA Identity Manager - 12.6.5 - CA Wiki

Please let me know if this sheds any light on the issue and don't hesitate to open a new support ticket to address this.

W.

Thanks, William.  I have been looking through the CA Wiki, and have already started working on some of the items discussed there.  I'll look into JSTACK and the IBM MAT, too.