The Database Maintenance Report tends to be the definitive answer on events per day. It should be tracking the events per day by Insertion Time where as you may be seeing events in nDepth by Detection Time. This can manifest itself if you're already having latency issues with the LEM and processing your events per day. I would suggest setting the higher reservations if you have the resources available and waiting for a day or two in order to see if the discrepancy and performance normalize at that point.
↧