...
Info | ||
---|---|---|
| ||
This configuration may also be appropriate for sites with a medium to large number of source systems, that just want to use the Snare Central for the reflector functionality, and do not require any local reporting or data analysis. Reflector-only sites with high volumes of incoming data, or a count of source agents that is in the upper quarter of the 'larger configuration maximum, may need to increase the CPU and memory capacity to cope with the additional load. |
...
Info | ||
---|---|---|
| ||
Moderate environment up to 2,000 systems (<= 5,000 EPS)
For large to very large environments please contact your Snare Sales representative. |
...
Info | ||
---|---|---|
| ||
Where Snare Central is used just for Agent Management then the disk space requirements can be reduced as the system is not collecting any logs
Note if : If there is less than 300GB of disk allocated to the system, it will default to a single partition AMC configuration. Only environments using 300GB or more will use the new disk layouts as per Appendix B. |
Note | ||
---|---|---|
| ||
In order to make compatibility research simpler, the Snare Central uses a Linux kernel from the Ubuntu 14.04 LTS 'Trusty' release. Hardware that is identified as compatible with the first release of Ubuntu 14.04 LTS 'Trusty' will also be accepted by the Snare Central. |
...