We have NPM 11.5.2 and we are thinking of integrating our Cisco Syslogs into our monitoring. We have about 170 devices we want to pull logs from and keep up to 3 months (most likely more) of logs to monitor from. We are using several SW products (SAM,WPM,NTA, etc) so our NOC is constantly in the console checking and fine tuning.
My question is this:
1. How much resource allocation should we plan for with the devices and time we want to keep?
2. Should we expect a performance hit in terms of using the products?
3. Could we have a separate DB for Syslog?
