Highlighted
blroberts90 Absent Member.
Absent Member.
202 views

Best query to run a report on a Destination IP address lookback for 90 days? Memory Issues and Requirements.

     I'm trying to figure out what the fastest way to run a report that does a 90 day lookback on and IP address.  This could be source or destination.  The lookback needs to go across most connectors.  We receive approx 130 million events per day.  We are running 6c with latest patch.  The query right now takes between 35 - 45 minutes.  I'm trying to determine what is a normal report time for this.  Any ideas, thoughts or help would be greatly appreciated.

On a side note my ESM box is only using 16GB of ram out of 128GB of ram.  I would really like to know if there is a reason it is not using all of the memory.  How much affect does RAM usage have on query and report running times?

Thanks,

- Brandon

Labels (3)
0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.