KB Article #176104

Sentinel takes too long to start with log lines having keyword Max(EVENTID) spanning long time periods

Problem

Sentinel takes too long to start with log lines having keyword Max(EVENTID) spanning long time periods per the example below.

2014-03-23 04:26:42 [FrontEndServer ] WARN  L197  EventIdGeneratorImpl.getLastId - Table HISTORIC_742936568: empty
2014-03-23 05:11:00 [FrontEndServer ] WARN  L203  EventIdGeneratorImpl.getLastId - Table CURRENT_ARHIVED06: Max(EVENTID) = 1934690105215
2014-03-23 06:11:07 [FrontEndServer ] WARN  L203  EventIdGeneratorImpl.getLastId - Table HISTORIC_ARHIVED03: Max(EVENTID) = 7670146983311

Resolution

Avoid use of custom tables starting with prefixes CURRENT or HISTORIC from Sentinel's database schema.

The above resolution brought down the Sentinel startup time for a customer from 14 hours to 2 minutes.