TT38: Shedding Light on Side Tables

Document created by beleslie on Aug 29, 2011Last modified by beleslie on Jul 8, 2014
Version 2Show Document
  • View in full screen mode

Shedding Light on Side Tables
Gagan Taneja, Senior Software Engineer, HP ArcSight
This talk covers how ArcSight ESM stores security events in an Oracle database, how event table schema is normalized, and the significance of different caches used by the ArcSight ESM manager to achieve a very high read/write performance. We will also cover some of the precautions and care you must take to avoid a large number of entries in supporting event tables and caches.