Hi All,

I have deploy remote correlation engine 7.4, but during peak hour and
eps around 600. The correlation engine stop function, and status change
from establish to syn close_wait for port 61616. Is there any workaround
for this?

Remote correlation engine spect
ram : 8gb
hdd : 200gb
core : 4

Is this issue because of correlation rule not really optimize or log is
to much?


Also what is the meaning of eps utilization? Usually during peak hour
the eps is 100% utilize.


|Filename: Untitled.png |
|Download: https://forums.netiq.com/attachment....tachmentid=408 |

hareez_12's Profile: https://forums.netiq.com/member.php?userid=10292
View this thread: https://forums.netiq.com/showthread.php?t=55280