Welcome to the IBM Community, a place to collaborate, share knowledge, & support one another in everyday challenges. Connect with your fellow members through forums, blogs, files, & face-to-face networking.
Log in
Search Options
Search Options
Skip to main content (Press Enter).
Sign in
Skip auxiliary navigation (Press Enter).
Security
Topic groups
IBM Security Cloud Pak for Security
IBM Security Global Forum
IBM Security Guardium
IBM Security MaaS360
IBM Security QRadar
IBM Security QRadar SOAR
IBM Security Trusteer
IBM Security Verify
IBM Security Z Security
IBM Security Skills & Learning
User groups
Events
Upcoming Security Events
On Demand Webinars
IBM Expert TV
Virtual Community Events
All IBM Community Events
Participate
Gamification Program
Getting Started
Community Managers' Welcome
Post to Forum
Share a Resource
Share Your Expertise
Blogging on the Community
Connect with Security Users
All IBM Community Users
Resources
Community Front Porch
IBM Champions
IBM Cloud Support
IBM Documentation
IBM Support
IBM Technology Zone
IBM Training
Security Blogs
IBM Security Experts
Security Learning Academy
Request for Enhancements
IBM Community Partner Program
Marketplace
Marketplace
IBM Security Community
In this user community of over 13,000 members, we work together to overcome the toughest challenges of cybersecurity.
Join the Community
Skip main navigation (Press Enter).
Toggle navigation
Search Options
User Groups
User Group Tag Test
IBM Security QRadar SOAR
View Only
Group Home
Discussion
3.9K
Library
158
Blogs
69
Events
0
Members
1.5K
Expand all
|
Collapse all
Sizing impact on incident creation and processing througput
1.
Sizing impact on incident creation and processing througput
0
Like
Leonardo Kenji Shikida
Posted Tue January 18, 2022 10:02 AM
Reply
Reply Privately
Options Dropdown
Hi. I have a doubt about the sizing of SOAR (CPU/Mem/etc) and its performance.
I was running some very basic tests here, using jmeter, to create incidents via REST and processing a simple python script for each one.
My feeling is that increasing memory and cpu does not play much difference in this scenario (I believe sizing seems to make more sense when we're talking about several simultaneous users working on incidents at the same time).
I am looking for some tuning tips to improve the incident creation and processing throughtput.
Is there such an information somewhere?
All I could find was an old document
https://www.ibm.com/support/pages/system/files/inline-images/resilient/article_attachments/360000561045/Resilient_Systems_Sizing_Guidelines.pdf
TIA
------------------------------
[]
Leonardo Kenji Shikida
------------------------------
×
New Best Answer
This thread already has a best answer. Would you like to mark this message as the new best answer?
Security
Topic groups
IBM Security Cloud Pak for Security
IBM Security Global Forum
IBM Security Guardium
IBM Security MaaS360
IBM Security QRadar
IBM Security QRadar SOAR
IBM Security Trusteer
IBM Security Verify
IBM Security Z Security
IBM Security Skills & Learning
User groups
Events
Upcoming Security Events
On Demand Webinars
IBM Expert TV
Virtual Community Events
All IBM Community Events
Participate
Gamification Program
Getting Started
Community Managers' Welcome
Post to Forum
Share a Resource
Share Your Expertise
Blogging on the Community
Connect with Security Users
All IBM Community Users
Resources
Community Front Porch
IBM Champions
IBM Cloud Support
IBM Documentation
IBM Support
IBM Technology Zone
IBM Training
Security Blogs
IBM Security Experts
Security Learning Academy
Request for Enhancements
IBM Community Partner Program
Marketplace
Marketplace
Copyright © 2020 IBM Corporation. All rights reserved.
Powered by Higher Logic