what is relation between hardware requirements and EPS/FPS in qradar appliances.

For instance, Like got to ingest 50-60.000 EPS/FPS because required from my appliance and my doubt is what hardware will get to have? Which should I buy to be okay to them?




------------------------------
THROUGH
------------------------------

for 60K sustained EPS especially, a physical appliance in the xx48
category would be preferred, or a virtual deployment with hardware
equivalent or superior to the appliance spec. Data node might be
required depending on storage need for retention time.
Splitting between two xx29s is a possible option for having larger
drive arrays and having more event processor service redundancy.

https://www.ibm.com/support/knowledgecenter/en/SS42VS_7.2.8/com.ibm.qradar.doc/c_m5_xx48.html


Original Message------

what is relation between hardware requirements and EPS/FPS in qradar appliances.

For instance, Like got to ingest 50-60.000 EPS/FPS because required from my appliance and my doubt is what hardware will get to have? Which should I buy to be okay to them?




------------------------------
THROUGH
------------------------------