Performance Optimization

Keep CastellanAI running smoothly with minimal impact on your systems.

Quick Wins

Most performance issues can be resolved with simple configuration changes. Start with the quick checks below.

---

Quick Performance Checks

Symptom	Quick Fix
Dashboard loading slowly	Narrow the time range filter
Agent using too much CPU	Enable Smart Filtering
Events appearing delayed	Check agent connectivity status

---

Dashboard Performance

🐌 Slow Loading

Slow Page Loading

Symptom: Dashboard pages take more than 5 seconds to load.

Solution	Description
Shorter Time Ranges	Select "Last 1 Hour" instead of longer ranges
Apply Filters	Filter by severity or event type
Clear Browser Cache	Press Ctrl+F5 to refresh
Reduce Auto-Refresh	Change from 5 seconds to 30 seconds

Configure auto-refresh:

1. Go to Settings → Display
2. Change auto-refresh to 30 seconds or manual

🔍 Slow Search

Search Taking Too Long

Symptom: Event searches take more than 10 seconds.

Solution	Description
Narrow Criteria	Add more specific filters
Shorter Date Ranges	Search within last 24 hours first
Off-Peak Hours	Run large searches when load is lower

---

Agent Performance

⚡ High CPU

Agent Using Too Much CPU

Symptom: Agent process consuming more than 15% CPU consistently.

Solution:

1. Go to Devices → Agents in the Portal
2. Select the affected agent
3. Open the Settings tab
4. Apply these changes:

Setting	Recommended Value
Smart Filtering	Enabled
Monitoring Mode	Balanced

💾 High Memory

Agent Using Too Much Memory

Symptom: Agent using more than 500 MB of RAM.

Solution	Description
Update Agent	Go to Devices → Updates
Restart Service	Clears accumulated memory
Reduce Scope	Disable unneeded event channels

⏱️ Event Delays

Events Taking Too Long to Appear

Symptom: Events take more than 30 seconds to show in dashboard.

Check	Action
Agent Status	Verify agent shows "Online" (green)
Network	Check for latency or packet loss
Smart Filtering	Low-priority events are batched

Critical Events

Critical events should appear within seconds. Only low-priority events are batched.

---

Environment Optimization

🏢 Production Servers

Production Servers

For servers running critical applications.

Recommendation	Why
Enable Smart Filtering	Reduces CPU usage significantly
Focus on Security channel	Other channels may be noisy
Review during maintenance	Check settings when load is low

💻 Workstations

Workstations

For end-user devices.

Recommendation	Why
Use "Balanced" mode	Less impact on user experience
Monitor Security only	Reduces data volume
Schedule updates off-hours	Avoid interrupting users

📊 High Volume

High-Volume Environments

For systems generating many events.

Recommendation	Why
Increase batch interval	Reduces network overhead
Enable aggressive filtering	Drops low-value events early
Consider Enterprise tier	Higher rate limits and retention

---

System Health Monitoring

Check overall system performance from the dashboard.

Navigate to: Settings → System Status

Metric	Healthy	Warning	Critical
Agent CPU Usage	Under 5%	5-15%	Over 15%
Event Processing Delay	Under 10 sec	10-30 sec	Over 30 sec
Agent Memory	Under 200 MB	200-500 MB	Over 500 MB

---

Performance Best Practices

Practice	Description
Enable Smart Filtering	Reduces processing load by 50-70%
Use Appropriate Mode	Match monitoring mode to system criticality
Keep Agents Updated	Updates include performance improvements
Monitor System Health	Check metrics regularly
Optimize Filters	Apply filters in dashboard to reduce data

📝 Performance Optimization Checklist

• Enable Smart Filtering on all agents
• Set appropriate monitoring mode (Balanced for most)
• Update agents to latest version
• Configure reasonable auto-refresh intervals
• Apply dashboard filters as default
• Review system health metrics weekly
• Document baseline performance
• Set up alerts for performance degradation

---

What's Next?

Guide	Description
Agent Health Monitoring	Monitor agent status and performance
Agent Settings	Configure agent behavior
Connectivity Issues	Resolve connection problems