Azure: VM Configuration Recommendations

Document created by RSA Information Design and Development on Aug 4, 2017
Version 1Show Document
  • View in full screen mode
  

Note: For a description of terms and abbreviations used in this topic, refer to Abbreviations and Other Terminology Used in this Guide.

This topic contains the minimum Azure VM configuration settings recommended for the Security Analytics (SA) virtual stack components.

  • VM:
    • The recommended settings in the SA component VM tables below were calculated under the following conditions.
      • Ingestion rates of 15,000 EPS were used.
      • All the components were integrated.
      • The Log stream included a Log Decoder, Concentrator, and Archiver.
      • Incident Management was receiving alerts from the Reporting Engine and Event Stream Analysis.
      • The background load included reports, charts, alerts, investigation, and incident management.
  • VHD (Storage)
    Contact RSA Customer Support (https://community.rsa.com/docs/DOC-1294) for assistance on how to increase the number of volumes based on your the storage requirements using the RSA Sizing & Scoping Calculator.

    Note: For higher EPS rates, the Concentrator index volume must be allocated SSDs.

Archiver

                     
VM Sizing
EPSComputeVM Size
15,000

No of CPU: 16

Memory: 112 GB

Standard D14 v2

Broker

                     
VM Sizing
EPSComputeVM Size
15,000

No of CPU: 4

Memory: 14 GB

Standard DS3 v2

Concentrator

                     
VM Sizing
EPSComputeVM Size
15,000

No of CPU: 16

Memory: 112 GB

Standard DS14 v2

ESA and Context Hub

                     
VM Sizing
EPSComputeVM Size
15,000

No of CPU: 20

Memory: 140 GB

Standard D15 v2

Log Collector

                     
VM Sizing
EPSComputeVM Size

15,000 NON SSL

No of CPU: 8

Memory: 16 GB

Standard F8

Log Decoder

                     
VM Sizing
EPSComputeVM Size
15,000

No of CPU: 16

Memory: 112 GB

Standard D14 v2

Security Analytics Server, Reporting Engine, Incident Management and Health & Wellness

                     
VM Sizing
EPSComputeVM Size
15,000

No of CPU: 16

Memory: 112 GB

Standard D14 v2

Previous Topic:Azure Deployment
You are here
Table of Contents > Recommended Settings

Attachments

    Outcomes