[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [ISSForum] EventCollector is overloaded
Hello, I think that the problem is in the lack of memory in the equipment,
you must verify the amount of resources that conume the maquina and copmo I
deal of your network adapters.
----- Original Message -----
From: "Sergey V Soldatov" <SVSoldatov@xxxxxx>
Sent: Friday, January 23, 2004 6:03 AM
Subject: [ISSForum] EventCollector is overloaded
> Hi, All!
> I find great number of events such as:
> (EventCollector_RSSPSQL) - Started throttling event rate (due to large
> backlog of events waiting to be stored in the database). If this happens
> often, this may be an indication that your Event Collector is overloaded.
> (EventCollector_RSSPSQL) - Stopped throttling event rate.
> But I don't think that it is true, because I have only 5 network sensors,
> server sensors, 1 internet scanner and fusion module. In ISS documentation
> noted 1 EC can support up to 100 sensors!
> What the problem is?
> I'd installed additional EC and assign it to some sensors, but it didn't
> make me happy.
> Best regards, Sergey V. Soldatov
> Department of information security,
> ISSForum mailing list
> TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
ISSForum mailing list
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo