The log files being uploaded from the SpanVA to the CloudSOC are being very slowly processed. This is causing the files to backup in SpanVA.
The Processing Status showed over 200 GBs compressed in queue. The Currently Processing line would occasionally go above 0 B for a short time.
The customer added an additional data source just before this issue started. And they left the "UPLOAD_COMPLETED" option selected in the SpanVA. This caused the SpanVA to send so many small files that our back end could not keep up.
Deselect the "UPLOAD_COMPLETED" option to allow the SpanVA to concatenate the small files into larger ones. We also added additional processing capacity for the tenant.
Subscribing will provide email updates when this Article is updated. Login is required.