Hi Ricardo,
2008/4/25 Ricardo Alberto Schutz <user-14341ee58574@xymon.invalid>:
Well, I surely can't count on my fingers how many events are generated every
minute. But I can say it gets close to 200 security events per second. What
would result in something about 360k events every 30 minutes.
Hobbit client shouldn't analyze these events and return to the server only
the matching ones?
If you have rules for the security event log, BBWin will parse every
event from the last 30 minutes. So, 360k events takes some time to be
parsed every 5 minutes.
Regards,
--
Etienne GRIGNON