Re: performance testing
"G Ramon Gomez" <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <1C7B96053DD7814496A0D1E71661B683025BCC@SMF-ENTXM-001.sac.ragingwire.net> |
Prelude-correlator can make almost any event load usable... - Ramon -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of LC Bruzenak Sent: Thursday, January 15, 2009 10:16 AM To: ScottO Cc: [email protected] Subject: Re: [prelude-user] performance testing On Thu, 2009-01-15 at 13:08 -0500, ScottO wrote: > Not exactly what you are looking for, but we quickly needed to move > off of the open source prelude db, as prewikka was getting sluggish to > refresh pages, etc. We had < 50 sensors, and under a million total > alerts, maybe 10k/day. Default page refreshes would take some time to > refresh on occassion. > > On the XLR plugin we have noticed no problems now with almost 7million > alerts and ~75-100 sensors, this being data collected over the last > ~18 months. > Wow. Did/do you still find the alerts useful with so many hits/day? LCB. -- LC (Lenny) Bruzenak [email protected] _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user