IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Performance boost with Retention Buckets?

  • 1.  Performance boost with Retention Buckets?

    Posted Tue February 18, 2020 10:24 AM
    We would like to use the Event Retention/Retention Buckets for performance increase. 

    The documentation of this functionality only describes the storage time etc, but does this feature also increase performance when searching in this bucket?

    The end idea is to send some bulk log source to a dedicated bucket to increase search performance when searching certain log sources.

    ------------------------------
    Nigel Landwehr
    ------------------------------


Related Content