Can anyone please help me with the following questions:
1.how it is calculated the EPS performance for the ERC-2600 appliance. In datasheet it says that the receiver can handle 12.000 EPS in "typical network environments using average event and flow aggregation." What is the aggregation factor?
2.How many unique events is this model capable to parse and store? It is capable to process(parse) 12.000 EPS and then apply aggregation, because aggregation is done after the information is extracted from the logs. So the aggregation factor will affect only the standalone ESM device?(because the ESM will pull only the aggregated events)