000032756 - How long would an RSA Security Analytics concentrator reindex take

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000032756
Applies ToRSA Product Set: RSA Security Analytics
RSA Product/Service Type: Concentrator Appliance
RSA Version/Condition: 10.3.x and above
IssueWhen a concentrator is being re-indexed, it will become offline and will only be accessible once the re-index is over.
This can take anywhere from minutes to days, depending on the size of session database (DB) in the concentrator
ResolutionIndex would reset at ~ 100,000 sessions/second on a normal concentrator, so the formula to obtain an estimated downtime is:
ETA of downtime in Hours =  (number of sessions in session DB/100,000)/3600
NOTE: The number of sessions in session DB can be obtained from:  Concentrator > Explore >  database > stats > session.total