External Storage

Question

Read this on the data sheet...

That means you can store the massive amounts of data required for regulatory compliance while eliminating the need for external storage

So does that mean all this log data is going to be sitting in the Orion database? Or does LEM have its own? Does it dump the files in some proproetary format? Can we point it to cifs in external storage if we so want?

-b

FormerMember · Accepted Answer

LEM has it's own self-contained database within the virtual appliance. It's optimized for the volume and features that we need for log data. While it operates self-contained, if you need longer term storage or archival ("just in case") you can archive the database to a CIFS share. It is still a proprietary format, so that we could directly re-attach to it (generally, after re-copying it to the appliance). You can't directly attach the primary database to any external storage today because of the low-latency requirements of accessing and storing this volume of data, but as technology and quality in the datacenter reliably changes, that could change.

A related tip, almost all customers run and schedule reports (daily, weekly depending on reporting requirements) to export effectively the same data that's in the database, just organized into functional areas (Authentication, Network, Security, etc).