Apologies in advance for the long post, but I’d like to provide full context as I’m a bit stuck on what might be causing this.
Over the past two weeks we’ve noticed a general performance drop in IdentityIQ 8.4, but the main issue is that certain drop-down boxes in Advanced Analytics and Reports fail to populate.
When selecting the drop-down, it shows “Loading” for exactly 30 seconds, then returns zero results (almost like a timeout).
Some drop-downs load instantly, but others never return results.
Examples: the ‘Email Recipients’ and ‘Entitlement’ drop-downs in the Roles by Entitlement form never populate. The same occurs with the ‘Attribute’ box when running entitlement-based Role searches in Advanced Analytics.
This behaviour is consistent across all servers (UI and task).
Specific reports are taking a long time to open (2+ minutes). Specifically the Roles by Entitlement report.
All other tasks are running perfectly fine and we are still able to process access requests etc.
Troubleshooting so far:
Monitored CPU, RAM, I/O on app/UI, task and DB servers – no anomalies compared to historical usage.
Ran DB performance tests – results within normal range.
Rebooted all servers and databases.
No environmental changes in the last two weeks except adding a new WebServices connector. When duplicating this connector, the schema IDs were retained and inadvertently deleted the original connector schema. That said, I’m not convinced this is linked to the drop-down issue.
Has anyone experienced similar behaviour or can suggest where else to look? At this point I’m running out of ideas.
It could depends of the size of report. More or less, about how many lines have your reports?
In every case, the performaces depends on many factors, on first the number of lines returned, the state of db(index fragmentations, pagination, etc…), the resoources of server(bd server too), the configuration of JVM(Xmx, xms).
Thanks for your reply. The database admins said they run regular maintenance on the database which includes re-indexing but we will try rebuilding the indexes. Are there any specific indexes to target, or is it best to rebuild them all?
As for the report, the Roles by Entitlement report is an OOTB report. For this specific report, we’re unable to even configure email recipients as the drop down never populates.
I’ve also noticed entitlements in the entitlement catalog are taking much longer to open. I’ve got a hunch that it’s something to do with the BundleProfilesRelation objects but I could be wrong… I’m currently running the Refresh Role–Entitlement Associations task to see if that brings any joy.
The deployment is approx 11,000 identities and we’re using a ‘medium’ size SQL servers in an AAG.
I’ve managed to resolve the issue by running the Refresh Role-Entitlement task. I believe when we incorrectly duplicated the connector by not removing all the ID’s (specifically the schema ID’s), it corrupted some BundleProfileRelationship objects and thus any queries relating to role entitlement relationships failed.