Deployment Guide › iConsole Standard Searches, Reports and Policies › Dashboard Data Aggregation › Default Configuration for Aggregation Jobs

Default Configuration for Aggregation Jobs

For smaller aggregation jobs (less than 100,000 events), CA DLP aggregates all events as soon as possible after the dashboard is installed or upgraded. By default, aggregation jobs run as background tasks every hour. CA DLP performs the initial aggregation when this task runs for the first time after installation or upgrade. Depending on the system configuration, typical aggregation speeds can be up to a 200,000 events in 5 minutes.

For larger aggregation jobs (over 100,000 events), events less than two months old are aggregated as soon as possible. Specifically, this applies to events captured during the current month, plus events captured during the previous full calendar month. The initial aggregation for events older than two months runs during a nightly off-peak processing window. By default, this runs at midnight for 300 minutes but you can reconfigure it to run when you want.

More information:

Reschedule Initial Aggregation For Older Events