Cisco Cisco Web Security Appliance S370 사용자 가이드
70
S A W M I L L F O R I R O N P O R T 7 . 3 . 2 U S E R G U I D E
C H O O S I N G H A R DWA R E R E S O U R C E S
Run Sawmill for IronPort on a dedicated machine when possible. Sawmill needs a lot of CPU
power and RAM to analyze the log data, and a lot of hard drive space to store the data.
power and RAM to analyze the log data, and a lot of hard drive space to store the data.
One way to speed up building or updating of the database is to use multiple processors.
Sawmill for IronPort has the ability to split database builds across multiple processes, building
a separate database with each processor from part of the dataset, and then merging the
results. This can provide a significant increase in speed. A 65% increase in speed is typical
when using two processors.
Sawmill for IronPort has the ability to split database builds across multiple processes, building
a separate database with each processor from part of the dataset, and then merging the
results. This can provide a significant increase in speed. A 65% increase in speed is typical
when using two processors.
When the machine hosting Sawmill for IronPort has multiple processors, you must configure
Sawmill for IronPort to use them. For more information, see “Log Processing Options” on
page 64.
Sawmill for IronPort to use them. For more information, see “Log Processing Options” on
page 64.
Increasing the speed of your processor is also a very good way to increase the speed of
database building. Database builds are primarily CPU-bound, so disk speed, memory speed,
and other factors are not as important as the speed of the processor.
database building. Database builds are primarily CPU-bound, so disk speed, memory speed,
and other factors are not as important as the speed of the processor.
Note — The IronPort Support Portal contains a sizing calculator to help estimate CPU, RAM,
and disk space requirements based on the average number of access log lines per day and the
number of days of log data your organization requires to process.
and disk space requirements based on the average number of access log lines per day and the
number of days of log data your organization requires to process.
WSA_Sawmill.book Page 70 Monday, March 15, 2010 10:31 AM