Please let me know how to find the max limit and the existing EPS in my VLC
EPS count is measured at Log Decoder Level. Below link will give you idea on that;
000026857 - How to find out the EPS on RSA NetWitness Platform Log Decoder
This can be done for a Decoder
I wanted it for VLC. I have a virtual log collector configured.
EPS is not calculated/captured on VLC.
The VLC you configured must be added to upstream component ( Log Decoder)
can you help me out to work on this
how will find the maximum capacity of the VLC then
thanks that helps
how to find the live eps of the VLC
This may be what you are looking for. Go to explore on your VLC. logcollection/syslog/stats/eventsources/syslog-tcp/tcp514 you will see an events rate. also you can choose any of the different event types under logcollection. hope that helps
There is no quick and easy way to find the Live EPS on a VLC. All you can do is what Matthew suggests. You have to manually look up the stats and add them together. Currently there is nothing in the UI that will provide you an easy way to find out this information.
The only other way I can think of that may be a little easier would be to go to Investigation. Go to the meta group button and add the lc.id (Collector ID) meta to your Investigation. Once that is done you can then click on the blue collector name and then look at the Timeline at the top of the Investigation window. each point in the Timeline Visualization should represent a minute of capture. You would need to divide that result by 60 seconds to get your EPS for that log collector at that minute.
I hope this helps.
Retrieving data ...