I'm currently evaluating EOC to see if it would be beneficial to add to our current deployment and wanted to get some feedback. Right now I have 4 servers running a DB, 1 Orion SLX (Netflow & APM), 2 Pollers and Cirrus. I have a few WAN sites that are less than an hour away and no large enough to warrant their own Orion server. There is no real structure as to what switch/node is monitored on each server. My current thoughts are to break things up based on locations and importance. I work for a university so I'm thinking about having 1 Orion server monitor our Core routers and servers (this server would include netflow and apm). 1 server to monitor the admin and acedemic buildings and 1 server to monitor residential buildings. I would like to add 2 more servers 1 being for EOC and another just for Cirrus (although I'm cosindering leaving it on one of the Orion boxes). And the last server would be for the DB. Would this be benefical from my current deployment? Would this improve performance? One current goal would be to elimnate the use of Nagios, but right now it reponds faster than Orion is some cases. Anyone from SW or current users with opinions would be appreciated.
