https://community.splunk.com/t5/Getting-Data-In/Secure-Firewall-syslog-receiving-thruput-on-quot-Cisco-Security/m-p/695494#M115477 <P>Hello Cisco Security team,</P><P>Firstly I'd like to say thank you for creating such a great splunk app!</P><P>Now I am playing with this and found this app directly receive syslog on Splunk combined instance itself.<BR />I would like to install this in the test network where FMC generates approx. 300-500MB syslog per hour. Assuming 700 bytes per event, it could be reaching to 200 Events per sec .<BR /><A href="https://community.cisco.com/t5/network-security/fmc-connection-events-log-size-and-location/td-p/4769765" target="_blank" rel="noopener">https://community.cisco.com/t5/network-security/fmc-connection-events-log-size-and-location/td-p/4769765</A></P><P>What number of events is this application designed to handle? Any advice on performance such as utilizing multiple sockets, modifying receiving buffer size, and etc. would be appreciated.<BR /><BR />Thank you,<BR />Urikura</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 07 Aug 2024 05:01:07 GMT urikura 2024-08-07T05:01:07Z https://community.splunk.com/t5/Getting-Data-In/Secure-Firewall-syslog-receiving-thruput-on-quot-Cisco-Security/m-p/695494#M115477 <P>Hello Cisco Security team,</P><P>Firstly I'd like to say thank you for creating such a great splunk app!</P><P>Now I am playing with this and found this app directly receive syslog on Splunk combined instance itself.<BR />I would like to install this in the test network where FMC generates approx. 300-500MB syslog per hour. Assuming 700 bytes per event, it could be reaching to 200 Events per sec .<BR /><A href="https://community.cisco.com/t5/network-security/fmc-connection-events-log-size-and-location/td-p/4769765" target="_blank" rel="noopener">https://community.cisco.com/t5/network-security/fmc-connection-events-log-size-and-location/td-p/4769765</A></P><P>What number of events is this application designed to handle? Any advice on performance such as utilizing multiple sockets, modifying receiving buffer size, and etc. would be appreciated.<BR /><BR />Thank you,<BR />Urikura</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Wed, 07 Aug 2024 05:01:07 GMT https://community.splunk.com/t5/Getting-Data-In/Secure-Firewall-syslog-receiving-thruput-on-quot-Cisco-Security/m-p/695494#M115477 urikura 2024-08-07T05:01:07Z