11 Jun
2008
11 Jun
'08
11:36 a.m.
Hi Ricardo,
2008/4/25 Ricardo Alberto Schutz <ricardo at redix.com.br>:
Well, I surely can't count on my fingers how many events are generated every minute. But I can say it gets close to 200 security events per second. What would result in something about 360k events every 30 minutes.
Hobbit client shouldn't analyze these events and return to the server only the matching ones?
If you have rules for the security event log, BBWin will parse every event from the last 30 minutes. So, 360k events takes some time to be parsed every 5 minutes.
Regards,
-- Etienne GRIGNON