Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
jose.diaz@conne1 Absent Member.
Absent Member.
565 views

How big is your ArcSight enviroment?

Hello

I was wondering how big is our enviroment compare to others. I think it would be useful to everybody to have kind of a summary like this

OS: AIX 5.2

Database: Oracle 10g r2

ESM: 5.0

Events Daily: 60M

Connectors: around 67

Final devices: slightly over 1000

It would be great to have this information of several people

Labels (2)
0 Likes
Reply
8 Replies
Acclaimed Contributor.. lless Acclaimed Contributor..
Acclaimed Contributor..

Re: How big is your ArcSight enviroment?

8 connector appliance

4 logger appliance

4 express 3.0 appliance

Planned EPS to express: 7000

Event Devices: more 2000

0 Likes
Reply
bondarets Absent Member.
Absent Member.

Re: How big is your ArcSight enviroment?

Biggest from EPS perspective:

2 Express Appliances,

2 Connector Appliances

8000-9000 peak EPS, 2000-3000 EPS average

~100 devices reporting

Biggest from sources count perspective:

1 ESM 6.5c server

1 Connector appliance

~ 2500 devices reporting

~ 3000-4000 peak EPS

Biggest from flexconnectors amount/effort:

1 Express

1 ConApp

1 Logger

16 flexconnectors

25 connectors in total.

0 Likes
Reply
Highlighted
Codefire1 Absent Member.
Absent Member.

Re: How big is your ArcSight enviroment?

In general:

5 ESMs

11 Loggers
12 ConApps

3 Virtual ConApps

30+ Smart Agents

~ 6,000 devices (down from 11k)

~ 40k total eps across the environment

0 Likes
Reply
balahasan.v1 Acclaimed Contributor.
Acclaimed Contributor.

Re: How big is your ArcSight enviroment?

Here's ours:

ESM 6.5C                          : 1

Connector Appliance v6.4    : 1

Loggers v5.3                       : 6

Connectors v6.x                  : 72

Devices                              : 3300~

Avg EPS on ESM               : 2750 ~

Max EPS on ESM              :10,600 ~

Avg EPS on Logger             : 2,700 ~

Max EPS on Logger            : 27,000 ~

0 Likes
Reply
thomas.chan@hp. Absent Member.
Absent Member.

Re: How big is your ArcSight enviroment?

Hello Balahasan,

If you are running Logger v5.3, please make sure that you have upgraded to the latest version (v5.3.1)  to fix a known issue in v5.3. For more information, please click the link to the KB below.  Thanks.

GSP issue in v5.3 KB-

http://support.openview.hp.com/selfsolve/document/KM00301166

0 Likes
Reply
balahasan.v1 Acclaimed Contributor.
Acclaimed Contributor.

Re: How big is your ArcSight enviroment?

Hi Thomas,

Thanks dude.. Anyway we have 5.3.1.6838 version only.... I forgot to mention the Full version last time...

This info will be helpful for others in the Community.

0 Likes
Reply
Trusted Contributor.. prasadeapen Trusted Contributor..
Trusted Contributor..

Re: How big is your ArcSight enviroment?

Hi All,

ESM 5.0                      : 1
Connectors v6.x/7.x   :80 +
Devices                      :14,000~
Avg EPS on ESM       :3,500~
Max EPS on ESM      :5,000~

0 Likes
Reply
neeraj.singh1 Frequent Contributor.
Frequent Contributor.

Re: How big is your ArcSight enviroment?

Two environment Test and Production.

Test Environment:

Express-1

Logger-1

ConnApp-1(For SC Management only)

SmartConnector Windows server - 4

Production Environment: Active/Standby Failover setup Perhaps biggest setup all high end devices.

Express -4

Logger- 5

ConnApp-2 (Management)

SmartConnector Servers: 8

Events Daily: 70M

Connectors: 150 approx

Final devices:  2000 approx

0 Likes
Reply
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.