What are the optimum values of the Symantec Security Event Agent

Article:TECH123075  |  Created: 2010-01-08  |  Updated: 2011-02-15  |  Article URL http://www.symantec.com/docs/TECH123075
Article Type
Technical Solution


Issue





 


Solution



To improve performances, it is mandatory to change some settings in the way the SSIM Agent behaves concerning the flushing of its event queues:




Set the following value:
Event queue flush time = 1
Event queue flush size = 768
Event queue flush count = 256

This will help the agent to flush the queue more often and avoid event bursting on the Event Service.




 




Legacy ID



2010020814344554


Article URL http://www.symantec.com/docs/TECH123075


Terms of use for this information are found in Legal Notices