Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: LEM - search performance

$
0
0

I know that the database makes heavy use of compression to make it very space efficient. My current alert database is 389.27 GB and has 7.8 Billion alerts stored in it. I average between 4 Million and 5 Million alerts a day and the system has no issues keeping up with that part of it. I can't help but wonder if the compression is being overzealous and sacrificing search performance in return for storage capacity. I have no real evidence of any of this in reality, but that is my speculation. I have just learned how to work around the limitations of the search functions for the most part. While they are annoying, I am able to work around them. I can see that being a massive deal breaker for other people though.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>