Question

LogPoint SIEM HDFS support and configuration

  • 23 August 2022
  • 1 reply
  • 20 views

Userlevel 1

Hi,

 

does Logpoint support HDFS do store data e.g. on an DELL ECS object storage?

If yes, how must this be configured in best practice?

Thanks.

Best Regards,

Johann


1 reply

Userlevel 3
Badge +7

Unfortunately, Logpoint does not support object storage - Log data and indexes are stored in flat files on block storage, and we do a lot of deletions and compressions on that too, so it’s not trivial to translate into object storage.

Sometimes, there are methods of exposing object storage through things like NFS and mount on a Logpoint server, but almost always the performance was not sufficient.

We have an S3 plugin in the works to use as a method of “archiving” data - but that’s for cold data, and there would be manual steps involved before that data can be made accessible and searchable again.

 

Reply