Hello,
I am in the process to deploy stealthwatch VMs for one customer. Initially the plan was to deploy Management Console, Flow Collector and Flow Sensor VMs. But I could see that there is a new type of VM called data node.I have the below queries.
1. What are the advantages and disadvantages of data node VM.
2. The customer has 25K flows per second license and do we really require the data node in a such scenario?.
3. Does the Data Node provide any new features other than longer data retention?.