Virtualised SA Aggregation is very slow
For our POC environment, we have a virtualised installation (Vmware ESX). On this installation, log aggregation is very slow : I need to stop and start nwconcentrator for the logs being aggregated and displayed in the meta on the investigation view.
On our prod environment (physical appliance), we don't have this issue : the logs are quicky aggregated and displayed in the meta on the investigation view
Any suggestion on this issue ?
Thanks for your help !
- Community Thread
- Forum Thread
- RSA NetWitness
- RSA NetWitness Platform