Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: How to tell if you are setup to use raw logs in LEM

$
0
0

It doesn't sound like you are using nDepth (the RAW database) then.  Not to be confused with nDepth, the graphical search tool.

 

If you are having performance issues than likely it's a reservations or rule configuration issue.

 

I would run the reports suggested in the performance article and check vs your reservations.  Specifically, at a minimum, run the Database Maintenance Report and compare to your reservations using the table I highlighted.  If your resources aren't in the same band as your events per day, then increase the reservations.  Beyond that, Support will best be able to help you check if there are other configuration issues (over active rules, misconfiguration, etc).


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>