Showing results for 
Show  only  | Search instead for 
Did you mean: 

DSB redundancy/HA

Is there redundancy and/or HA option available for the Data Streaming Bus (DSB) appliance, so it is not a single point of failure in entire SIEM setup?

May second DSB be activated automatically or manually to keep data flowing between ERCs, ESMs and ACEs?

If not, are there plans to introduce such mechanics, and is there a chance it will be done before version 10.x end of life?

Thank you.

2 Replies

Re: DSB redundancy/HA

You can deploy multiple DSBs and add them to the ESM to create a cluster.

The Data Streaming Bus is an optional component though, you can also cluster ESM's if you don't need the DSB functionality.

Re: DSB redundancy/HA

I don't see an option to add second DSB device (the Add button is disabled once you have first DSB setup) in version 11.3.0.

Running a geographically distributed setup (ESMs, ACEs in a central location and ERCs in different regions of the World) without DSB introduces heavy bandwidth requirements, as the same data would have to be transferred multiple times (between ERCs and ESM, and ERCs and ACE).
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community