Processing Statistics

1. Log in to Strata Cloud Manager.
2. Select ConfigurationSaaS SecurityData SecurityDashboard and choose Email DLP.
3. Select Processing Statistics.
4. Choose a time window to scope the performance metrics on the dashboard.

   Available time windows range from Last 5 min to Last 90 days. Shorter windows support active troubleshooting; longer windows support trend analysis and capacity planning.
5. Review the Scan Latency widget to assess Enterprise DLP inspection performance.

   Scan latency is the time from when Enterprise DLP receives a message to when it produces a policy verdict. Average scan latency reflects typical inspection speed. P95 scan latency shows the upper bound for 95 percent of messages and identifies whether outlier scans are affecting the pipeline.
6. Review the Total Latency widget to assess end-to-end pipeline performance.

   Total latency is the time from message receipt to delivery to the next-hop mail server. It includes both scan time and any delivery queue wait time. If total latency is significantly higher than scan latency, retry attempts or slow next-hop connectivity are contributing to the overall delay.
7. Review the throughput counters to see how many messages Enterprise DLP processed in the selected time window.

   The dashboard shows two counters: Delivered counts messages successfully delivered to the next hop, and Not Delivered counts messages for which Enterprise DLP sent a Non-Delivery Report (NDR) to the sender after exhausting delivery retries.
8. Review the DLP Processing Time by Message Size and Delivery Time by Message Size charts to determine whether attachment size is driving latency increases.

   Each chart plots average and P95 time (in seconds) across eight size bins:

   • Less than 10 KB
   • 10 KB to 100 KB
   • 100 KB to 250 KB
   • 250 KB to 500 KB
   • 500 KB to 1 MB
   • 1 MB to 10 MB
   • 10 MB to 50 MB
   • 50 MB to 150 MB

   If only the larger bins show elevated latency, attachment size is the cause rather than overall service load. If all bins show elevated latency, service capacity or downstream connectivity is more likely the cause.

   Below the charts, the Processing & Delivery Metrics by Message Size table shows the same data in tabular form with four columns: DLP Scan Avg (s), DLP Scan P95 (s), Delivery Avg (s), and Delivery P95 (s). Size bins with no messages in the selected time window show a dash.