Re: performance testing
ScottO <[email protected]>
| Newsgroups | gmane.comp.security.ids.prelude.user |
|---|---|
| Message-ID | <[email protected]> |
For sure, having loads of searchable data for incident response is huge. On Thu, Jan 15, 2009 at 1:16 PM, LC Bruzenak <[email protected]> wrote: > On Thu, 2009-01-15 at 13:08 -0500, ScottO wrote: > > Not exactly what you are looking for, but we quickly needed to move off > of > > the open source prelude db, as prewikka was getting sluggish to refresh > > pages, etc. We had < 50 sensors, and under a million total alerts, maybe > > 10k/day. Default page refreshes would take some time to refresh on > > occassion. > > > > On the XLR plugin we have noticed no problems now with almost 7million > > alerts and ~75-100 sensors, this being data collected over the last ~18 > > months. > > > > Wow. Did/do you still find the alerts useful with so many hits/day? > > LCB. > > -- > LC (Lenny) Bruzenak > [email protected] > > _______________________________________________ Prelude-user site list [email protected] http://lists.prelude-ids.org/mailman/listinfo/prelude-user