topic Re: IPS event store in Network Security https://community.cisco.com/t5/network-security/ips-event-store/m-p/1108442#M78299 <HTML><HEAD></HEAD><BODY><P>Have you been watching the log to see how often it rotates? A default Cisco signature set is extremely noisy and on a busy sensor I've seen the eventstore rotate every 60-90 seconds. At those rates, RDEP/SDEE can only retrieve 500 or 1000 events per pull and it may not be fast enough.</P></BODY></HTML> Thu, 20 Nov 2008 18:05:13 GMT attmidsteam 2008-11-20T18:05:13Z IPS event store https://community.cisco.com/t5/network-security/ips-event-store/m-p/1108441#M78298 <P>Hi Netpros</P><P></P><P>I have upgraded an IPS to version 6.2(1)E3, I am now having issues with being able to retrieve events from my unit via RDEP, the problem is with the amount of data I am getting, I know after 5.0 the eventStore was fixed to about 30MB but I am not getting anywere near that. Does anybody know of any issues with this release.</P><P></P><P>Regards MJ</P> Sun, 10 Mar 2019 11:23:05 GMT https://community.cisco.com/t5/network-security/ips-event-store/m-p/1108441#M78298 mj11 2019-03-10T11:23:05Z Re: IPS event store https://community.cisco.com/t5/network-security/ips-event-store/m-p/1108442#M78299 <HTML><HEAD></HEAD><BODY><P>Have you been watching the log to see how often it rotates? A default Cisco signature set is extremely noisy and on a busy sensor I've seen the eventstore rotate every 60-90 seconds. At those rates, RDEP/SDEE can only retrieve 500 or 1000 events per pull and it may not be fast enough.</P></BODY></HTML> Thu, 20 Nov 2008 18:05:13 GMT https://community.cisco.com/t5/network-security/ips-event-store/m-p/1108442#M78299 attmidsteam 2008-11-20T18:05:13Z