Re: Prewikka performance

Paul Robert Marino <[email protected]> Sat, 07 Aug 2010 04:26:47 -0400
Newsgroups gmane.comp.security.ids.prelude.user
Message-ID <[email protected]>
Well the answer is you probably need to tune your database and use 
preludedbadmin to clean it regularly.
a properly tuned database server will preform significantly better than 
the default install, generally the default configuration is tuned for a 
low end desk top from 10 years ago. second the queries that prelude uses 
to query the database are complex due to the structure of the database 
(if they weren't the storage requirements would be astronomical ) and as 
a result of this there is a finite limit to the number of alerts that 
the database can contain before you experience performance degradation 
especially if the database is not tuned correctly to utilize your 
hardware or the hardware in question is not up to the task.
That being said I built a prelude infastructure using a Postgresql 
server that could handle well over 100,000,000 ( yes  100 million ) 
alerts in the database before there was any noticeable performance 
degradation on a HP DL 380 dual core (4 cores total ) with 8GB of ram. 
It took me a few months of playing with tuneing of the database and the 
timing of the croned cleanups before I got it fully optimized but it is 
possible.


On 8/6/2010 7:17 PM, Russell Fulton wrote:
> dering, if anyone could give me some information regarding
> >  Prewikka performance.
> >  
> >  I have recently installed Prelude on Debian Lenny system and connected
> >  some heavy sensors we have. After the weekend, the MySQL database
> >  contained about 6 million entries and the Prewikka interface was
> >  absolutely unusable - it could not even render the page after tens of
> >  minutes.
>    

_______________________________________________
Prelude-user site list
[email protected]
http://lists.prelude-technologies.com/mailman/listinfo/prelude-user