[hobbit] MSGS from BBWin client goes purple

Etienne Grignon etienne.grignon at gmail.com
Wed Jun 11 13:36:52 CEST 2008


Hi Ricardo,

2008/4/25 Ricardo Alberto Schutz <ricardo at redix.com.br>:
> Well, I surely can't count on my fingers how many events are generated every
> minute. But I can say it gets close to 200 security events per second. What
> would result in something about 360k events every 30 minutes.
>
> Hobbit client shouldn't analyze these events and return to the server only
> the matching ones?
>

If you have rules for the security event log, BBWin will parse every
event from the last 30 minutes. So, 360k events takes some time to be
parsed every 5 minutes.

Regards,

-- 
Etienne GRIGNON



More information about the Xymon mailing list