Hi All,

I have deploy remote correlation engine 7.4, but during peak hour and
eps around 600. The correlation engine stop function, and status change
from establish to syn close_wait for port 61616. Is there any workaround
for this?

Remote correlation engine spect
ram : 8gb
hdd : 200gb
core : 4

Is this issue because of correlation rule not really optimize or log is
to much?

409

Also what is the meaning of eps utilization? Usually during peak hour
the eps is 100% utilize.
408

Regards&Thanks


+----------------------------------------------------------------------+
|Filename: Untitled.png |
|Download: https://forums.netiq.com/attachment....tachmentid=408 |
+----------------------------------------------------------------------+

--
hareez_12
------------------------------------------------------------------------
hareez_12's Profile: https://forums.netiq.com/member.php?userid=10292
View this thread: https://forums.netiq.com/showthread.php?t=55280