Skip to content

Commit 6e650ec

Browse files
committed
Update linux-support-perf.md
1 parent 5ddaae6 commit 6e650ec

File tree

1 file changed

+6
-5
lines changed

1 file changed

+6
-5
lines changed

defender-endpoint/linux-support-perf.md

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.author: deniseb
66
author: deniseb
77
ms.reviewer: gopkr
88
ms.localizationpriority: medium
9-
ms.date: 12/04/2024
9+
ms.date: 02/04/2025
1010
manager: deniseb
1111
audience: ITPro
1212
ms.collection:
@@ -29,17 +29,18 @@ search.appverid: met150
2929

3030
> Want to experience Defender for Endpoint? [Sign up for a free trial.](https://signup.microsoft.com/create-account/signup?products=7f379fee-c4f9-4278-b0a1-e4c8c2fcdf7e&ru=https://aka.ms/MDEp2OpenTrial?ocid=docs-wdatp-investigateip-abovefoldlink)
3131
32-
This document provides instructions on how to narrow down performance issues related to Defender for Endpoint on Linux using the available diagnostic tools to be able to understand and mitigate the existing resource shortages and the processes that are making the system into such situations. These diagnostic tools can be utilized to enhance visibility within the portal as well. Bottlenecks in one or more hardware subsystems mainly cause performance problems, depending on the profile of resource utilization on the system. Sometimes applications are sensitive to disk I/O resources and may need more CPU capacity, and sometimes some configurations are not sustainable, and may trigger too many new processes, and open too many file descriptors.
32+
This article describes how to narrow down performance issues related to Defender for Endpoint on Linux. Diagnostic tools are available to help you understand and mitigate existing resource shortages and processes that are affecting performance. These diagnostic tools can be utilized to enhance visibility within the Microsoft Defender portal as well. Bottlenecks in one or more hardware subsystems mainly cause performance problems, depending on the profile of resource utilization on the system. Sometimes applications are sensitive to disk I/O resources and may need more CPU capacity, and sometimes some configurations are not sustainable, and may trigger too many new processes, and open too many file descriptors.
3333

3434
Depending on the applications that you are running and your device characteristics, you may experience suboptimal performance when running Defender for Endpoint on Linux. In particular, applications or system processes that access many resources such as CPU, Disk, and Memory over a short timespan can lead to performance issues in Defender for Endpoint on Linux.
3535

3636
> [!WARNING]
3737
> Before starting, **make sure that other security products are not currently running on the device**. Multiple security products may conflict and impact the host performance.
3838
3939
There are three distinct ways to troubleshoot noisy processes and directories using the Diagnostic tools from Microsoft Defender for Endpoint on Linux:
40-
1. Using Real-time Protection Statistics
41-
2. Using Hot Event Sources
42-
3. Using eBPF Statistics
40+
41+
- Using Real-time Protection Statistics
42+
- Using Hot Event Sources
43+
- Using eBPF Statistics
4344

4445
## Troubleshoot performance issues using Real-time Protection Statistics
4546

0 commit comments

Comments
 (0)