Hi guys.
I've implemented MIM for a Customer with about 80.000 Metaverse objects and 160.000 objects in the MIM Portal. We have never experienced any performance issues even though we have hundreds of changes and workflows running each day.
This week I implemented synchronization of computer objects from AD to MIM, this in order to create dynamic security groups with AD computers based on OS version. I created a custom object type in the MIM Portal (Computer) and have set it up to work correctly.
After importing 18.000 AD computer objects to the MIM Portal, only with DisplayName as sAMAccountName (stripping $), OperatingSystem and OperatingSystemVersion values, I see that doing a query for "All Computers" times out with the following error: Your search has timed out. It is possible that your search has too many results. Please narrow your search and try again". Of course, searching for a specific Computer name, or a partial Computer name that returns ~2.000 objects works altough seems slow - but I need to be able to create a set/group with ALL Computer objects which I am currently not able to do.
Please note that we have other custom object types in the same MIM Portal, like "AccountNameHistory" that has about 70.000 objects, or Users that contain about 20.000 objects filled with attributes, and quering for all those objects return the results within seconds. So it's like only the Computer objects are not indexed in the database for some reason.
I can mention that we have a MIM Dev/Test server where I implemented import of AD Computers too, and I don't see the same issues there. The same 18.000 objects are returned within seconds.
Now, how would I go about and fix this? I see mentions of rebuilding the database index in the MIM Service database (https://docs.microsoft.com/en-us/microsoft-identity-manager/mim-best-practices#sql-setup). Has anyone here tried to do so in a rather large MIM environment? Anything to think about before doing so (e.g. stopping sync tasks and making sure no updates are being done in the MIM Portal while the rebuild completes)? Any ideas how long time it would take to rebuild? Do we need to perform database backups first?
Anything else I could check or do?
Many thanks!
~Stian
I've implemented MIM for a Customer with about 80.000 Metaverse objects and 160.000 objects in the MIM Portal. We have never experienced any performance issues even though we have hundreds of changes and workflows running each day.
This week I implemented synchronization of computer objects from AD to MIM, this in order to create dynamic security groups with AD computers based on OS version. I created a custom object type in the MIM Portal (Computer) and have set it up to work correctly.
After importing 18.000 AD computer objects to the MIM Portal, only with DisplayName as sAMAccountName (stripping $), OperatingSystem and OperatingSystemVersion values, I see that doing a query for "All Computers" times out with the following error: Your search has timed out. It is possible that your search has too many results. Please narrow your search and try again". Of course, searching for a specific Computer name, or a partial Computer name that returns ~2.000 objects works altough seems slow - but I need to be able to create a set/group with ALL Computer objects which I am currently not able to do.
Please note that we have other custom object types in the same MIM Portal, like "AccountNameHistory" that has about 70.000 objects, or Users that contain about 20.000 objects filled with attributes, and quering for all those objects return the results within seconds. So it's like only the Computer objects are not indexed in the database for some reason.
I can mention that we have a MIM Dev/Test server where I implemented import of AD Computers too, and I don't see the same issues there. The same 18.000 objects are returned within seconds.
Now, how would I go about and fix this? I see mentions of rebuilding the database index in the MIM Service database (https://docs.microsoft.com/en-us/microsoft-identity-manager/mim-best-practices#sql-setup). Has anyone here tried to do so in a rather large MIM environment? Anything to think about before doing so (e.g. stopping sync tasks and making sure no updates are being done in the MIM Portal while the rebuild completes)? Any ideas how long time it would take to rebuild? Do we need to perform database backups first?
Anything else I could check or do?
Many thanks!
~Stian