...
Info | ||
---|---|---|
| ||
This configuration may also be appropriate for sites with a medium number of source systems, that just want to use Snare Central for the reflector functionality, and do not require any local reporting or data analysis. Reflector-only sites with high volumes of incoming data, or a count of source agents that is in the upper quarter of the 'larger configuration' maximum, may need to increase the CPU, disk and memory capacity to cope with the additional load. |
...
Info | ||
---|---|---|
| ||
Small environment up to 500 systems (<= 1,000 EPS)
For large to very large environments please contact your Snare Sales representative. |
...
Info | ||
---|---|---|
| ||
Moderate environment up to 2,000 systems (<= 5,000 EPS)
For large to very large environments please contact your Snare Sales representative. |
...
Info | ||
---|---|---|
| ||
Larger environment up to 5,000 systems (<= 10,000 EPS)
For large to very large environments please contact your Snare Sales representative. |
...
Info | ||
---|---|---|
| ||
Where Snare Central is used just for Agent Management then the disk space requirements can be reduced as the system is not collecting significant numbers of logs
Note: If there is less than 350GB of disk allocated to the system, it will default to a single partition AMC configuration. Only environments using 350GB or more will use the new disk layouts as per Appendix B. |
...