System Performance Settings

System performance settings are as follows:
  • Remove PIX Active IP Connections—Select the duration of time the appliances retains messages for IP connections. Connections that do not terminate properly are stored in the database until the expiration time is reached. This relates to the Real-Time, Active Connections report. To free more space on the appliance, set this threshold low.
  • Concurrent Regular Expression Searches— (applies only to appliance models over the 1000 series) Select the number of concurrent searches to perform. The default and maximum number of concurrent searches possible are specified in the following table.

    The more the number of regex searches that are concurrently running, the longer it takes to execute them because they share the same resources.

      Model Name Default Searches Maximum Searches
    MXVirtual(LogLogic EVA)   1 2
    H4 R1 Models LX1025R1 1 2
    LX4025R1 12 12
    ST4025R1 12 12
    ST2025-SANR1 12 12
    H4 R2 Models LX1025R2 1 2
    LX4025R2 12 12
    ST2025-SANR2 12 12
    ST4025R2 12 12
    H5 Models LX1035 1 2
    LX4035 12 12
    ST2035-SAN 12 12
    ST4035 12 12
  • System Maintenance Start Time—Select the time to start system maintenance. The default is 2:00 AM. This activity is logged in the General Syslog.
  • Refresh Auto-Identified Device Interval—Select the refresh time, in days, that the appliance checks for new auto-identified log sources that you add.
  • Enable Daily AD User Cleanup Task—Select this check box and specify the time when the daily task of cleaning up Active Directory (AD) users must run. When an AD user account is used to login to LogLogic LMI, a corresponding user is created in LogLogic LMI. The task runs if this check box is selected and if the user credentials are specified under the Administration > System Settings > Remote Servers > Setting up Active Directory section, and deletes these corresponding LogLogic LMI users from the Management > Users tab in any of the following scenarios:
    • The AD user is disabled or deleted on the AD server
    • The AD user is removed from all associated roles or groups on the AD server
  • Sort the Management Station Status by—Select the default sort order for displaying remote appliances (RAs) in the Management Station on the Dashboards > Management Station Status page. The default sort order is ID. Other options are:
    • Model
    • IP Address
  • Optimize Device Selection List—Show all Source Devices is the default. If the appliance has more than 4,000 devices, selecting Show Only Device Groups improves display performance on many GUI pages. Show Only Device Groups limits device selection lists to device groups; individual devices do not appear in the device selection lists. This selection affects:
    • All LogLogic LX Appliance or LogLogic MX Appliance Real-Time and Summary report filter pages
    • Search Archived Data, Real-Time and Scheduled Search tabs
    • Devices tab for Alerts
    • Devices tab for Manage Users
    • Message Routing
    • Import/Export
Related concepts
Related reference