Endpoint Protection

  • Private Community
 View Only

  • 1.  DB dimension

    Posted Sep 27, 2011 03:25 PM

    Now i have installed a SEP with internal DB i need to mantain all events, for 250 days.

    How dimension of DB could obtain a the end of this period?



  • 2.  RE: DB dimension

    Posted Sep 27, 2011 03:36 PM

    Depends on how many Clients you have.



  • 3.  RE: DB dimension

    Posted Sep 27, 2011 03:44 PM

    The size of your database is going to depend on many factors (# of clients, heartbeat interval, what logs the clients forward to SEPM etc, etc)

    Below is documentation that has an attachment that you can use to estimate the size of your database. The tool is a non-supported tool that is provided for convenience.

    http://www.symantec.com/docs/TECH105256



  • 4.  RE: DB dimension

    Posted Sep 27, 2011 03:55 PM

    If its 50,000 Clients and all components installed and logging the DB should go about 100GB.



  • 5.  RE: DB dimension
    Best Answer

    Posted Sep 27, 2011 04:03 PM

    You could also forward logs to a Syslog server, if you have one of those available:

    Exporting data to a Syslog server
    http://www.symantec.com/docs/HOWTO55417

    sandra



  • 6.  RE: DB dimension

    Posted Sep 27, 2011 04:39 PM

    I have about 100 client and i have activated antivirus/antispyware

    Thanks Vikram, Cameron_W, Sandra.g. now i read and i use this for extimate.

     

    I have used a tool and a resul is about 13GB, is possible to use a internal DB motor?

     

    Thanks!



  • 7.  RE: DB dimension

    Posted Sep 28, 2011 11:41 AM

    I think if you expect 50,000 or more clients you will want to use a SQL DB.

    See "Sizing and Scalability Recommendations for Symantec Endpoint Protection", a PDF which is linked through this page:

    Getting up and running on Symantec Endpoint Protection for the first time
    http://www.symantec.com/docs/HOWTO55274

    sandra



  • 8.  RE: DB dimension

    Posted Sep 29, 2011 01:44 AM

    Thanks for support