High CPU and Lag using ACC

[migration]

We have PA-4020 running 3.1.9 in HA

Every time I need to use ACC to run traffic report for week/30 days or so …. It just freezes up for several minutes with up to 98% CPU that remains long after I cancel the report. The more granular I get with my report (filter on app) the more lag I get. Usually if I chose only one filter after the initial report run just to get more granular view of sources and destination the ACC  counters stuck on “ please wait”. I use the ACC on low traffic hours early morning when almost no one is yet working. Support just told me “well its just how it is and they are aware of the situation and can’t do nothing about it. Was wondering if any of you guys encountered this issue?

[jleung]

Hi,

Depends on the amount of information the ACC can take long time to generate detailed info based on 30 days, as PA box needs to do a lot of queries for that. In future release we will create some summary data so that the mgmt plane doesn't need to do so much query. This should help to improve the situation.

[pkruse]

As stated in the first response the sheer volume of data that must be queried will have a major impact on the speed by which the report is generated. Utilizing the Panorama product will allow you to offload this function to our remote managment/reporting platform. You could also offload to a syslog server and use your favorite SQL quiry tools to generate custom reports as granualr as you require.

~Phil