What is the max number of Cisco IPS devices/sensors we can add?
I have added 40+ devices, and system became bit slow.
Can we know which thread IPS sensor/Device thread is consuming more resources?
What is the Max log storage supported per Cisco IPS device?
I would add them until collection slows down, and then add a second forwarder. We don't have several dozen Cisco IPS's, but in other API-based data collection tasks the slow-down point is somewhere between 10 and 30 devices.
I'd use a search like this to find your connections, then pipe it through transaction, then use stats. You might have to eval to find elapsed time.