just want to know about my Concentrator capacity i.e CPU, RAM, HDD .
For ex if am observing logs count b/w 5-6 lacs within 30 min.
what should be my Concentrator specification as per above log flow as iam facing slow processing issue while doing investigation on concentrator logs
A good starting point for Concentrator sizing will be the Virtual Host Installation Guide for Version 11.2 - https://community.rsa.com/docs/DOC-96472
Review the sections for a virtual Concentrator which provides guides for CPU, RAM, HDD for various EPS (log events per second) or Mbps (packet) rates. The recommendation will depend on the type of Concentrator, and the other appliances in your environment.