Greetings, friends,

there is an idea to monitor high-volume event flows (per rules or log
files, e.g. in bytes per time unit) from dump files from *periodic dumping*.

The question is, if this is recommended for *production use* - answer
depends at least on if dump creation somehow slows down or stops SEC
processing, or it has not significant overhead (also for thousands of
rules, complex configurations).

Are there some best practises for (or experiences with) performance
self-monitoring and tuning of SEC?

Thank you.

Richard
_______________________________________________
Simple-evcorr-users mailing list
Simple-evcorr-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/simple-evcorr-users

Reply via email to