[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[ISSForum] need recommendation on Log with Raw Responce....


I need to know the best practice for applying responses to sensors.
One of the response is to 'log with raw data'. Is it recommended to
keep this enabled for all signatures? Will the data not be humongous
and create performance issues? Will privacy be an issue? It's a
financial institution.

Appreciate if someone could share there experience with me.

Thanks and regards

Gijo Thomas
ISSForum mailing list

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.