Virtualised SA Aggregation is very slow

[xavierferrier]

Hi everybody,

For our POC environment, we have a virtualised installation (Vmware ESX). On this installation, log aggregation is very slow : I need to stop and start nwconcentrator for the logs being aggregated and displayed in the meta on the investigation view.

On our prod environment (physical appliance), we don't have this issue : the logs are quicky aggregated and displayed in the meta on the investigation view

Any suggestion on this issue ?

Thanks for your help !

[Anonymous]

What type of physical box are you running?  Big box with solid states? If so, that is likely what you are seeing, we had this issue with hybrids and upgraded due to that. 

[xavierferrier]

Issue is on the virtualised appliance.

For our prod environment (phsical appliance) I don't think we have solid sates