Request performance report

Requirements: Windows, macOS, or Linux.

Agent performance reports help diagnose and resolve high CPU and memory on managed nodes. The report indicates possible causes of spikes and troubleshooting tips, so you can quickly restore performance.

For example, the report could identify performance issues caused by: high transient event activity, which you could resolve by using process exclusion. interoperability problems with third-party software, which you could resolve by using process exclusion. misconfigured policy rules, which you could resolve by amending policy templates. multiple actions being executed simultaneously or a single action being executed repeatedly, which you could resolve by amending policy templates and/or Agent configuration groups.

Supported for all OSs, the request performance report action prompts the FortiDLP Agent to upload its performance report to the FortiDLP Infrastructure. It is then made available for download from the Node profile page and the Action details panel. A standard and advanced version of the report is available, with the advanced version containing additional debugging information.

The instructions below outline how to generate a performance report using the FortiDLP Console. Performance reports can also be generated locally, as well as automatically when CPU or memory usage exceeds a threshold. For details, see Agent performance reports.

How to request a performance report for a managed node

1. In the FortiDLP Console, on the left-hand sidebar, click .
   
2. Filter for the relevant node. For guidance on this, see Nodes.
3. In the Table tab, select the row of the node.
   
4. On the Node profile page, click Perform action.
5. In the Actions dialog box, do the following:
   1. Click Request performance report.
   2. Do one of the following:
      • To generate a standard report:
        1. Optionally, alter the request timeout period.
        2. Click Request performance report.
      • To generate an advanced report:
        1. Select the Collect an advanced report containing debug data checkbox. An advanced report contains more information and takes longer to compile.
        2. Optionally, alter the request timeout period.
        3. Click Request performance report.
           The performance report is generated.
6. To view the report, do the following:
   1. Click Close to exit the dialog box.
   2. In the Bundles and reports widget, for the relevant report, click .
      
      A ZIP file is downloaded to your device.

      Pending action requests for performance reports will display with a "Requested" badge. You can check for pending actions by sending a GET request to the FortiDLP API's /api/v1/actions/{agent_uuid}/in-flight endpoint.

   3. Extract the ZIP file.
   4. Double-click the performance-report folder.
   5. Double-click the index.html file.

You can also download the report from the Action details panel, accessible from the Action (New) or Action (Legacy) event stream (depending on the Agent version). In the Investigate module, just enter the action = performance_report search query and then open the panel for the relevant action event. For detailed information about the Investigate module, see Investigate.