Skip to content

Commit ffe534b

Browse files
Update performance improvement instructions for Linux Defender
Resolving comments
1 parent 0f2bba8 commit ffe534b

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

defender-endpoint/linux-support-perf.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -268,12 +268,12 @@ Output on the console;
268268
6 /opt/microsoft/mdatp/sbin/wdavdaemonclient
269269
4 /usr/bin/sleep
270270
```
271-
To improve this performance, locate the path with the highest number in `count` row and add a process exclusion (in case of executable) or a file/folder exclusion (in case of file) for it. For more information, see [Configure and validate exclusions for Defender for Endpoint on Linux](linux-exclusions.md).
271+
To improve the performance of Defender for Endpoint on Linux, locate the path with the highest number in `count` row and add a global process exclusion (in case of executable) or a global file/folder exclusion (in case of file) for it. For more information, see [Configure and validate exclusions for Defender for Endpoint on Linux](linux-exclusions.md).
272272

273273
## Troubleshoot performance issues using eBPF Statistics
274274

275275
**Applies to:**
276-
- All file/ process events, specifically for syscall based performance issues.
276+
- All file/ process events, including for syscall based performance issues.
277277

278278
eBPF (extended Berkeley Packet Filter) statistics command gives insights into the top event/process that's generating the most file events, along with their syscall ids.
279279

@@ -305,7 +305,7 @@ To collect current statistics using eBPF statistics, run:
305305
41 : 15
306306
```
307307

308-
To improve this performance, locate the one with the highest `count` in the `Top initiator path` row and add an exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint on Linux](linux-exclusions.md).
308+
To improve the performance of Defender for Endpoint on Linux, locate the one with the highest `count` in the `Top initiator path` row and add a global process exclusion for it. For more information, see [Configure and validate exclusions for Defender for Endpoint on Linux](linux-exclusions.md).
309309

310310
## Troubleshoot performance issues using Microsoft Defender for Endpoint Client Analyzer
311311

@@ -316,7 +316,7 @@ The Microsoft Defender for Endpoint Client Analyzer (MDECA) can collect traces,
316316

317317
> [!NOTE]
318318
> - The Microsoft Defender for Endpoint Client Analyzer tool is regularly used by Microsoft Customer Support Services (CSS) to collect information such as (but not limited to) IP addresses, PC names that will help troubleshoot issues you may be experiencing with Microsoft Defender for Endpoint. For more information about our privacy statement, see [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement).
319-
> - As a general best practice, it is recommended to update the [Microsoft Defender for Endpoint agent to latest available version](mac-whatsnew.md) and confirming that the issue still persists before investigating further.
319+
> - As a general best practice, it is recommended to update the [Microsoft Defender for Endpoint agent to latest available version](linux-whatsnew.md) and confirming that the issue still persists before investigating further.
320320
321321
To run the client analyzer for troubleshooting performance issues, see [Run the client analyzer on macOS and Linux](run-analyzer-macos-linux.md).
322322

0 commit comments

Comments
 (0)