Cisco MARS

[Kamnab Keo <kkeo () VCU EDU>]

Is anyone using Cisco MARS to do network and system monitoring?   If so,
how are you using it (rules, reports,quires) and how is the
performance?  We are experiencing what seems to be slow batch reports
and queries (1 to 4 hours for a 1 day report on 1 event).  Is it normal
for reports and queries to take this long?

Thanks,


--
Kamnab Keo
IT Risk Management Analyst
Virginia Commonwealth University
VCU Information Security - http://infosecurity.vcu.edu/
News, Tips&  More - http://www.twitter.com/vcuinfosec
Best Practices - http://infosecurity.vcu.edu/docs/infosecbp.pdf