Is VLC only for Remote collection site

[PavanMishra2]

Hello ,

Is VLC only for Remote collection? I could see 4 Log Decoder and 2 #vlc at the same site(DC), why these additional VLC here?

[AnujShrivastava · Accepted solution]

Hello ,

 VLC is for collecting Logs it depends on your DC Architecture and your requirement, you can use VLC as a Log collector where ever u want to collect logs from couple of different devices

I could see 4 Log Decoder  --> Log Decoder also has a Log collection service which you can use to collect logs from  local Domain/Local site. 

  --and 2 vlc at the same site(DC),-> I think you have started working in an environment which is already been deployed before. The reason behind deploying Multiple VLC at the same site (DC) can be "If you want to collect logs from different event sources and want to increase the performance of your setup by categorizing different vlc for different event source"

For better understanding why their are multiple VLC :

VLC1 = Event source (Windows servers, Linux Serves)

VLC2 = Event source (Proxy Devices, Firewall devices, network devices)

VLC3 = Event Source (Mainframe, ETC) 

why these additional VLC here? for different Event sources in a same DC Might be the reason.

Hope you finds it Helpfull.  

[SravanKoneti1]

Hi Pavan,

If you have three locations(Bangalore, Mumbai, Noida) to collect logs and you have 1 Logdecoder and 2 VLC's, your SA deployment in Mumbai where Logdecoder can be deployed to collect logs and remaining two (Bangalore,Noida) locations send logs via 2 VLC's.

In your case, your throughput may demand more logdecoders and you are collecting two remote locations.

In local site deployment also, you can send logs from VLC to Logdecoder.

[PavanMishra2]

Thanks Anuj. Really useful as i am new and going through only documentation.

Sent from IBM Verse

Anuj Shrivastava --- Re: - Re: Is VLC only for Remote collection site ---

From:"Anuj Shrivastava" <no-reply@rsa.com>To:"Pavan Mishra" <pavan.mishra@in.ibm.com>Date:Fri, 5 May 2017 5:05 p.m.Subject:Re: - Re: Is VLC only for Remote collection site

Re: Is VLC only for Remote collection site

reply from Anuj Shrivastava in RSA NetWitness Suite - View the full discussion

Hello ,

VLC is for collecting Logs it depends on your DC Architecture and your requirement, you can use VLC as a Log collector where ever u want to collect logs from couple of different devices

I could see 4 Log Decoder --> Log Decoder also has a Log collection service which you can use to collect logs from local Domain/Local site.

--and 2 vlc at the same site(DC),-> I think you have started working in an environment which is already been deployed before. The reason behind deploying Multiple VLC at the same site (DC) can be "If you want to collect logs from different event sources and want to increase the performance of your setup by categorizing different vlc for different event source"

For better understanding why their are multiple VLC :

VLC1 = Event source (Windows servers, Linux Serves)

VLC2 = Event source (Proxy Devices, Firewall devices, network devices)

VLC3 = Event Source (Mainframe, ETC)

why these additional VLC here? for different Event sources in a same DC Might be the reason.

Hope you finds it Helpfull.

Reply to this message by replying to this email, or go to the message on RSA Link Start a new discussion in RSA NetWitness Suite by email or at RSA Link Following Re: Is VLC only for Remote collection site in these streams: Inbox

This email was sent by RSA Link because you are a registered user. You may unsubscribe instantly from RSA Link, or adjust email frequency in your email preferences