IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Sizing impact on incident creation and processing througput

  • 1.  Sizing impact on incident creation and processing througput

    Posted Tue January 18, 2022 10:02 AM
    Hi. I have a doubt about the sizing of SOAR (CPU/Mem/etc) and its performance.

    I was running some very basic tests here, using jmeter, to create incidents via REST and processing a simple python script for each one.

    My feeling is that increasing memory and cpu does not play much difference in this scenario (I believe sizing seems to make more sense when we're talking about several simultaneous users working on incidents at the same time).

    I am looking for some tuning tips to improve the incident creation and processing throughtput.

    Is there such an information somewhere?

    All I could find was an old document     https://www.ibm.com/support/pages/system/files/inline-images/resilient/article_attachments/360000561045/Resilient_Systems_Sizing_Guidelines.pdf


    TIA

    ------------------------------
    []

    Leonardo Kenji Shikida
    ------------------------------