I would like to know, regarding McAfee ePO integration via ODBC for Netwitness, the answer to the next questions:
1. What are the specific SQL tables consulted by the Event Source configuration?.
2. Is there any reports, metrics or evidence showing what is the increase of consumption in the related SQL Database due the Netwitness ODBC integration?.
3. Regarding the polling interval (default 180 seconds), what is the minimum value that can be set?
Thanks in advance for the help.