How do I fix Analyzer error "backed-up - High queue size"?

MikeV

I recently installed Analyzer and it is giving me an error, "backed-up - High queue size" and no longer displays the reporting data.

Andrew

If the Reports Summarizer service stops processing syslogs, the following message may be received:

Warning: Backed-Up Syslog Files Status on Monday, October 21, 2019 11:37:42 AM UTC (2019-10-21 11:37:42 UTC)

summarizer: backed-up - High queue size

Summarizer at X.X.X.X has 1417 syslog files in queue.

Please see Console > Help > Tips and Tutorials for more information on how to optimize summarizer performance.

Possible cause:

There a couple reasons that syslog processing can get backed up and result in the error message:

1. Optimization is in process. This can be verified on the Console>Diagnostics>Summarizer Status page of GMS/Analyzer. Look for the Optimization Info listed under the Summarizer Details. During certain times of the optimization process syslogs are not summarized. If you see an import in process, allow a few hours for this to finish and verify that your syslog count starts to drop.

2. The Reports Summarizer service was interrupted or stopped unexpectedly.

Resolution:

1. If optimization is still running, this is a daily process that needs to be allowed to finish. Check on the status of the optimization and backed-up syslogs every couple hours to verify Optimization State becomes IDLE and that the number of syslogs in queue starts decreasing. 
2. Any issues with the Reports Summarizer will require the service be restarted. After approx. 5 mins, verify that the amount of syslogs in queue starts decreasing.

https://www.sonicwall.com/support/knowledge-base/how-to-restart-analyzer-host-services/170502647794268/