IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Sizing impact on incident creation and processing througput

  • 1.  Sizing impact on incident creation and processing througput

    Posted Tue January 18, 2022 10:02 AM
    Hi. I have a doubt about the sizing of SOAR (CPU/Mem/etc) and its performance.

    I was running some very basic tests here, using jmeter, to create incidents via REST and processing a simple python script for each one.

    My feeling is that increasing memory and cpu does not play much difference in this scenario (I believe sizing seems to make more sense when we're talking about several simultaneous users working on incidents at the same time).

    I am looking for some tuning tips to improve the incident creation and processing throughtput.

    Is there such an information somewhere?

    All I could find was an old document     https://www.ibm.com/support/pages/system/files/inline-images/resilient/article_attachments/360000561045/Resilient_Systems_Sizing_Guidelines.pdf


    TIA

    ------------------------------
    []

    Leonardo Kenji Shikida
    ------------------------------