CyberSense analyze performance issues and jobs running longer than 24 hours

Symptoms:

CyberSense analyze performance issues 
Subsequent scans are still taking over 24 hours to complete

Explanation:

Include/Exclude List

       a. The include/Exclude list is what CyberSense uses to know which specific files and folders to scan
       b. Currently the included list will be empty as when setup the whole mtree is included by default
       c. Excluded can be used to target no critical data from being scanned

Full Indexing operation can take longer for various reasons, like

1. Few data sets are too big to analyze and taking more than acceptable time, consult with customer to understand if that data set is critical to scan. If not that particular directory / data can be excluded.
2. The Indexing operation may be accessing the non-critical data to finish the job and taking time – customer may agree to exclude those data as well.

Resolution:

1. Verify GSAN, DELETED, STAGING, VALIDATED are excluded from Avamar related backup scanning. These should have been included in the initial install.
     a. In IE GUI navigate to Index, FileServers, select the Avamar policy, and click edit.  Select Advanced and verify the above directories are listed in the Files/Directories to Exclude list.
     b. If not listed you will need to add them on individual lines under Files/Directories to exclude.
          GSAN/
          STAGING/
          DELETED/
          VALIDATED/
Please reference Exclude Avamar Directories from Scanning of the CyberSense installation guide.

2. The first scan of a client is expected to take longer than subsequent scans. Identify clients that cause the scan to take more than 24 hours on subsequent scans of that client.

1. This can be because the client itself takes a long time. Candidates are typically VMDKS that are larger than 1TB or have more than 1M files.
   • Determine candidates from an inventory of the clients that are to be scanned
   • Download a backup set report and evaluate client “Total Size” and “Total Objects” from the first pass
2. This can be because indexing of that client starts late and does not finish within the 24 hour window.  

• Download a backup set report.
• Determine the earliest Index Start Time for  a given policy.
• Find clients who’s backups in that policy execution have Index End times are more than 24 hours later.

   
The customer can choose to exclude any clients taking over 24 hours.

• In IE GUI navigate to Index, File Servers. Select the appropriate policy and click to edit.  Select “Advanced” and add any clients IDs that you want to exclude to the Files/Directories to Exclude list.
  • Use the format cur/Avamar ID/
• Please reference Include/Exclude Filters of the CyberSense User Guide