Телеграмм чат группы MPSIEMChat страница 755

Size: a a a

MaxPatrol SIEM

979 membersпожаловаться на группу

2020 February 23

Balqess Odat in MaxPatrol SIEM

well , thank you

источник

16:48пожаловаться #1

2020 February 24

Balqess Odat in MaxPatrol SIEM

good afternoon , Hope all are doing well today ,

is there a blog or lab for MAXpatrol SIEM or technical Scenarios??
more resources ?? to clarify more ??

источник

12:58пожаловаться #2

Mohammed Houssani in MaxPatrol SIEM

hi everyone im tring to install meduim load SIEM , everything went well but we faced this msg

источник

15:02пожаловаться #3

Mohammed Houssani in MaxPatrol SIEM

SIEM Server Events Storage on the host 192.168.0.6 is responding with delay or is unavailable. Messages from all agents will be paused.
From Core Watchdog
on the host MAX_WIN (192.168.0.6)

источник

15:02пожаловаться #4

Капибара in MaxPatrol SIEM

Mohammed Houssani

SIEM Server Events Storage on the host 192.168.0.6 is responding with delay or is unavailable. Messages from all agents will be paused.
From Core Watchdog
on the host MAX_WIN (192.168.0.6)

Apparently something happened with Storage component. You've got to check its status as well as availability from the Core server.

I bet there is a problem with configuration during the installation. Perhaps, too much memory allocated for ES heap sizes.

источник

15:26пожаловаться #5

Mohammed Houssani in MaxPatrol SIEM

How can we change ES heap size ?

источник

15:26пожаловаться #6

Mohammed Houssani in MaxPatrol SIEM

источник

15:27пожаловаться #7

Капибара in MaxPatrol SIEM

Mohammed Houssani

How can we change ES heap size ?

Try to look for it in the Implementation Guide. The sum of all the heaps must be at max half of the total RAM amount.

I.e. if you have 64GB of RAM you'll need something around 10+10+8+4 (data1+data2+master+client)=32GB of RAM dedicated to heaps.

источник

15:29пожаловаться #8

Mohammed Houssani in MaxPatrol SIEM

i have 164 G

источник

15:30пожаловаться #9

Mohammed Houssani in MaxPatrol SIEM

and the heap size is the defualt

источник

15:30пожаловаться #10

Mohammed Houssani in MaxPatrol SIEM

but still the same problem

источник

15:30пожаловаться #11

Капибара in MaxPatrol SIEM

Default heap sizes, as far as I remember, are set for 196GB RAM. But I'm not sure about it.

The easiest way so far is to reach the logs and to see what's in there. I would start from master logs.

источник

15:32пожаловаться #12

Mohammed Houssani in MaxPatrol SIEM

thanks will do

источник

15:33пожаловаться #13

Balqess Odat in MaxPatrol SIEM

I have been installed a medium load SIEM » core SIEM on 192.168.0.6 (windows) && server SIEM + Events storage on 192.168.0.9 (Debian)

источник

17:15пожаловаться #14

Balqess Odat in MaxPatrol SIEM

i got this message