topic Yes, they are stored locally in Network Security

sensor can't reach DC

mahmoud.awney1 — Sun, 10 Mar 2019 13:25:52 GMT

in sourcefire if sensor can't reach to Defence center. Are events are stored on sensor ? and i want to know the limit the sensor can stored events ?

Yes, they are stored locally

Marvin Rhoads — Mon, 10 Aug 2015 13:14:49 GMT

Yes, they are stored locally.

You can see and manage the local storage space by following the steps in this TAC article.

The events get queue on the

Ed Padilla Jr — Thu, 13 Aug 2015 23:56:22 GMT

The events get queue on the sensor, for some period, and then proceeds to purge them. It may store for several days, depending on the amount of events and size of storage on the sensor.