LogBlog

« At the SANS Log Management Summit | Main | eWeek on LogLogic 3 - "Divine" »

Five To One...

The vendor panels at conferences are usually quite entertaining and yesterday's at SANS was no exception. Someone posed a question for Anton on how many appliances would it take to handle 100,000 messages per second. Anton responded correctly with two - two LogLogic ST Appliances.

Alan (moderating) then went on to ask Network Intelligence the same question. Well, they said, they have one appliance that can handle five thousand messages and another that can handle ten thousand. And, then, they said LogLogic couldn't handle 50,000 messages. Now, normally we'd duke it out on the stage with a little "I can, you can't... Can so, can not...".

But then a little yellow note appeared from the audience - Alan read it and it went something like this: "We've tested LogLogic in our Labs, they can handle 50,000 messages per second". So, what could be better than us saying it than an end-user!

So in answering the original question: In this scenario, for every LogLogic system you would need five times more NI appliances. That's two LogLogic ST appliances at 50,000 messages per second, or, ten Network Intelligence systems running at 10,000 messages per second. I know what solution I'm picking...

And if you are in any doubt, here are testing results from SANs on our LX2000 appliances. Note that unlike many players in the market, our specified loads are not peak loads - so the systems will deliver even more "bang for the buck" than stated.

Couple of other observations from the day... It is clear that most enterprises are using a mix of solutions. This places an increasing priority on selecting vendors who can deliver services oriented architecture and Open Log Services. You want to be able to share data between your SIEM and your Log Management Solution. And, the time is right of log standards - this needs to be a community effort.

Technorati : , ,

Posted July 13, 2006 in LogMatters | Permalink


TrackBack

TrackBack URL for this entry:
http://www.loglogic.com/mt/mt-tb.cgi/63

Visit loglogic.com

I ♥ Logs

Subscribe to this blog’s feed RSS

November 2007
Sun Mon Tue Wed Thu Fri Sat
        1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 21 22 23 24
25 26 27 28 29 30  
Categories
Archives
Blogroll
Blogroll
Compliance
Good Reading
LogLogic
LogLogic Partners
Sites We Watch