Troubleshooting Guide › Troubleshooting and Maintenance Procedures › How to Troubleshoot Performance Problems

How to Troubleshoot Performance Problems

The following process helps you identify the cause of performance problems.

Note: For assistance, contact CA Support at http://ca.com/support.

1. Identify when the performance problem occurs. Does performance degrade:
   • When the OS starts?
   • When CA Access Control starts?
   • When CA Access Control has been running for some time?
   • When CA Access Control or the OS run a scheduled process?
   • (UNIX) When the CA Access Control kernel extension is loaded?
   • When CA Access Control daemons or services are loaded?
2. If you have determined that CA Access Control causes the performance problem, investigate the following questions:
   • What processes are using the most resources when performance degrades?
   • Are the CA Access Control processes keeping the same process ID throughout their lifecycle?
   • Are there any third-party filter drivers installed on the computer?
   • Are there any system monitoring applications installed on the computer?
3. Check the CA Access Control database:
   1. Stop CA Access Control.
   2. Check the database:

      dbmgr -util -all
      

   3. Reindex the database.
   4. Rebuild the database.
   5. Restart CA Access Control and check if the problem still exists.
4. (Windows) Disable driver interception:
   1. Stop CA Access Control.
   2. Change the value of the UseFsiDrv registry entry to 0. The UseFsiDrv registry entry is in the following registry key:

      HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\AccessControl\AccessControl
      

   3. Restart CA Access Control and check if the problem still exists.
5. Run a trace and recreate the problem. Review the trace file for the following:
   • Repeated events in a small period of time, for example, many file accesses in several seconds.
   • Processes that have been killed.
   • Either of the following values:
     • ACEEH = -1
     • U = a negative value

     These values may specify that CA Access Control cannot resolve a user name or assign a value to a resource.

Note: For more information about improving CA Access Control performance on your UNIX computer, see the Endpoint Administration Guide for UNIX.