Operational (Call) Timing Collection

Access Governance Suite provides functionality to gather call timinig statistics, which can be useful in Access Governance Suite operational analysis.

Consider the following fictional scenario:

QUESTION:

• When we execute our "Active Directory Account Aggregation" task, it is taking 8 hours to complete in our TEST environment. We would like to know what is happening during that time.

ANSWER:

• Navigate to the debug pages (identityiq/debug)
• Choose 'TaskDefinition' from the drop-down menu on the left and click 'List' from right.
• Locate the "Active Directory Account Aggregation" name and click on its link.
• Edit the object, locate the Attributes section and add the profile attribute, set to true, like so:
    <Attributes>
      <Map>
        <entry key="applications" value="Active Directory - Corporate"/>
        <entry key="profile" value="true"/>
      </Map>
    </Attributes>
• Click Save
• While still on the debug page, go to Debug->Call Timings from the Access Governance Suite menu.
• Click the "Reset Meters" button to clear any pre-existing data.
• Execute the "Active Directory Account Aggregation task from the Montor->Tasks page.
• When the aggregation has completed, navigate back to the Debug->Call Timings page.
• You'll have something similar to the following in both the UI and STDOUT after the aggregation, which you can use to determine how long the aggregation spent in each "phase". For example, aggregation might have spent a large portion of time in the correlation phase. This might lead you to examine a custom correlation rule that was written and is causing performance issues.